platform-compat
dotfiles
| platform-compat | dotfiles | |
|---|---|---|
| 23 | 3 | |
| 249 | 153 | |
| - | - | |
| 1.2 | 5.6 | |
| over 3 years ago | about 2 months ago | |
| C# | Shell | |
| MIT License | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
platform-compat
-
KeePass flaw allows retrieval of master password
DotNet offers the SecureString class to keep a string encrypted in Memory, but as long as the OS does not natively support this concept, the only advantage is that it resides in memory for a shorter time, the disadvantage is that SecureStrings are easier to search for.
- System.Net.Mail.SmtpClient is not recommended anymore; what is the alternative?
-
Bitwarden PINs can be brute-forced
Note the KeePass's resistance to the attack mentioned depends on the security of .NET's secure string, which, here's what Microsoft has to say about it (https://github.com/dotnet/platform-compat/blob/master/docs/D...)
As for KeePassXC, last I checked it didn't even bother.
-
Ever Find A Dead Man's Switch On A Network/Domain?
TIL. Looks like the deprecation note recommends MailKit.
-
Disabilities and Windows Passwords
Well of course, but it does have to be passed to the module that generates the hashes AD uses in the first place. And as I said, the standard password reset screen is bound to store the password in plain text somewhere as well.
-
Embedded logo in HTML email sent from PowerShell
This won’t help you with your question, but I figured I should warn against using send-mailmessage.
-
Alternative to PowerShell cmdlet 'send-mailmessage'
points you here.
-
API pagination help?
Some of the reasons for not using Hashtable or other non-generic collection types are outlined here. That's why Microsoft doesn't recommend their usage in new implementations across all of its API documentation.
- How to deal with credentials in automated scripts?
-
pfSense configuration backup
And if you really want to be secure you need to something better than a SecureString: https://github.com/dotnet/platform-compat/blob/master/docs/DE0001.md
dotfiles
- kaihendry/dotfiles: Home directory with an absurd amount of tweaks
-
Use Multiple WM without DM
Kai Hendry has a prompt that asks him on login to start Xorg/DWM or not, in case he wants to run Sway, it's clever. dotfiles.
-
How to Handle Secrets on the Command Line
I defer to using AWS SSM to retrieve secrets https://github.com/kaihendry/dotfiles/blob/master/bin/ssm
But yeah, reading secrets of env or ps or the clipboard is a real issue, so I focus on making sure that doesn't leak.
I've made terrible mistakes leading /proc accidentally in my Web app https://github.com/securego/gosec/issues/569
What are some alternatives?
envchain - Environment variables meet macOS Keychain and gnome-keyring <3
zsh-secrets - Storing GPG encrypted environment variables
ImportExcel - PowerShell module to import/export Excel spreadsheets, without Excel
envconsul - Launch a subprocess with environment variables using data from @HashiCorp Consul and Vault.
encpass.sh - Lightweight solution for using encrypted passwords in shell scripts
MailKit - A cross-platform .NET library for IMAP, POP3, and SMTP.
distrobuilder - System container image builder for LXC and Incus
dotfiles - Dotfiles are the customization files in GNU/Linux. This repository assembly together all my others github config repos to one union. You can choose this global conf for your system or check other repos.
AngleSharp - :angel: The ultimate angle brackets parser library parsing HTML5, MathML, SVG and CSS to construct a DOM based on the official W3C specifications.
gosec - Go security checker