Thoughts on security, privacy, and building software.
31 May 2015
Cygwin doesn’t automatically update itself, and doesn’t provide a command line utility to do so. In order to get updates, and install or remove software, you need to run the installer again. Occasionally, you will also need to get an updated copy of the installer. Fortunately, all this can be automated:
25 May 2015
As one might expect, taking a voluntary redundancy, job hunting, and getting up to speed in a new role leaves very little time for blogging. Now that I’m able to do so again, I’ve decided that instead of focusing on new programs for a while, I’m going to go through and update previous guides. Cygwin is a moving target, and there have been changes to how windows and cygwin usernames are mapped to each other, and other updates. So first off, installing cygwin…
01 March 2015
19 February 2015
As part of pentesting your site, or that of a client, you will need to find all as much detail out about a domain and it’s IP ranges as possible, or at least demonstrate what can be found via automated tools. Typically this is done through dig, or a bruteforcing tool like dnsenum or fierce.pl. Dig is installed with the bind-utils cygwin package, and it straightforward to use (type ‘dig any domainname.com’, or look at man dig to get started).
15 February 2015
This is a quick note to share a useful tool by Vidar ‘koala_man’ Holen, www.shellcheck.net. ShellCheck is a site that allows you to paste in your bash scripts and receive automated feed back on common errors and security holes.
15 February 2015
After 10 months of running the http://cygwin.rafaelhart.com sub-domain, I’m now getting about 500 hits a month on what is largely an SEO-un-optimized site, and with the other professional sites I’ve worked on, I’ve largely come to the conclusion that there are only two rules that matter for driving traffic to sites.