Tag: security

GnuPG PIN cache, Smartcards, YubiKeys and notifications

I am still obsessed with the OpenPGP smartcard. I know, it is definitely far inferior to YubiKey. It has far, far less features and it's GnuPG implementation is even riddled with serious bugs that can take days to work around. It definitely has it's peak years behind. But no matt…

OpenPGP Smartcard KDF issue: Bad PIN

Both YubiKey and GnuPG are able to do many things. The difference one might point out is, that GnuPG probably does neither of them particularly well, resembling a Swiss army knife. No matter how well either of the tools handles tasks it is able to perform, both tools had became a…

Using electronic ID on Arch in Slovakia pt.2

A few days prior I have finally received my electronic ID or eID that can be used to streamline the communication with various official bureaus in the country. Since it is Java based, it has a support for multiple OSes by default, including Linux. Although, as I stated in the pre…

I have finally configured DMARC today

A time ago I got contacted by a white-hat hacker with an inquiry about the security of one of my emails. Specifically, that my DMARC record was not set up. I immediately contacted my email provider, since I did not know if the whole thing was even legit, but I did not get a very …

Using electronic ID on Arch in Slovakia

Some months ago I wrote an article about the smartcard and shown a possible way to initialize communication with it on Arch Linux and the notebook equipped with smartcard reader, in my case a trusty T470. The basis for making the smartcard reader work is to install the required p…

Fighting Docker iptables on Arch

A strange issue I could not find a meaningful explanation anywhere regarding running docker-compose script and iptables firewall on Arch Linux. Steps to reproduce assume bare iptables, Docker and docker-compose available. Step 1. Start Docker Start the docker.service via systemct…

GnuPG security token has arrived

I have started learning more about the GnuPG security tokens fairly recently in the post about GitHub automatic commit signing. Links in that post provide for some great read too, go check it out if you are interested. GnuPG security token is a device that stores the keys on the …