Meta tags:

Headings (most frequently used words):

and, with, ssh, terminal, port, again, cve, 2025, over, dns, your, you, using, haproxy, to, cves, in, nat, the, make, dgl, cx, knocking, openbsd, bash, newline, exploiting, via, proxycommand, 61984, switchable, dark, mode, lines, of, javascript, images, 48384, breaking, git, carriage, return, cloning, rce, can, do, emojis, how, big, blink, ll, miss, it, url, handler, surprise, protect, me, from, scrapers, déjà, vu, ghostly, my, title, restrict, sftp, linux, user, namespaces, ansi, security, 2023, finding, 10, irc, helper, flaws, ip, wtf, showing, actual, http, request, wordle, introducing, redisircd, microsoft, net, sdk, is, violating, gdpr, object, now, sqlite, as, document, database, vim, blowfish, encryption, tips, for, xrandr, dtrace, perl, openssh, require, keys, selectively, ssl, available, on, same,

Text of the page (most frequently used words):
more (24), code (17), ssh (10), and (10), the (9), for (9), security (9), 2025 (9), you (8), with (7), this (6), #terminal (6), haproxy (5), that (5), june (5), other (4), port (4), but (4), talk (4), perl (4), october (4), your (4), irc (4), nat (4), how (4), git (4), than (3), one (3), simple (3), many (3), using (3), dtrace (3), support (3), linux (3), 2022 (3), way (3), september (3), could (3), cves (3), can (3), openbsd (3), dgl (3), david (2), leadbeater (2), january (2), places (2), ports (2), common (2), make (2), 2011 (2), read (2), not (2), openssh (2), february (2), powerful (2), user (2), august (2), 2014 (2), why (2), 2020 (2), sqlite (2), had (2), allows (2), like (2), document (2), database (2), net (2), sdk (2), now (2), wordle (2), over (2), dns (2), april (2), bug (2), again (2), 2023 (2), execution (2), emulators (2), platforms (2), 2024 (2), restrict (2), sftp (2), some (2), control (2), blink (2), url (2), handler (2), terminals (2), big (2), cve (2), rce (2), newline (2), proxycommand (2), knocking (2), keep (2), 2010, certain, firewall, tcp, most, there, are, such, approach, run, daemon, 443, however, downside, need, dedicate, address, service, restrictions, bypassing, techniques, ssl, available, same, those, things, been, doing, ages, easy, find, online, seem, suggest, fine, manual, require, keys, selectively, provides, tracing, abilities, combined, defined, trace, points, gives, insight, into, help, doesn, projector, work, under, tips, xrandr, shouldn, roll, own, crypto, vim, blowfish, encryption, has, json, while, recently, added, generated, columns, feature, treat, collects, telemetry, was, claimed, anonymous, microsoft, violating, gdpr, object, 2021, custom, server, backs, redis, introducing, redisircd, adding, another, implement, pile, strange, ways, wtf, showing, actual, http, request, kernel, unencrypted, sessions, abused, access, resources, behind, drop, connections, switch, tls, right, helper, flaws, paper, detailing, unescaped, output, result, unexpected, research, found, around, across, client, ansi, finding, script, directories, without, needing, chroot, privileged, configuration, namespaces, december, exploring, ghostty, eerily, familiar, déjà, ghostly, title, anti, scraper, solution, goal, possible, implemented, alongside, rules, traffic, protect, from, scrapers, mobile, shell, ios, handled, expected, miss, surprise, ancient, history, meets, modern, looking, varying, decdhl, emojis, july, unix, use, clone, recursive, untrusted, repo, achieve, remote, update, fixed, version, software, embeds, including, github, desktop, 48384, breaking, carriage, return, cloning, answering, question, txt, record, images, meta, progress, progressive, enhancement, new, css, features, switchable, dark, mode, lines, javascript, look, character, usernames, confuse, leading, command, injection, potential, bash, exploiting, via, 61984, 2026, mostly, bad, idea, people, wanting, false, sense, don, consider, garbage, out, logs, might, valid, here, about, projects, 31m, https,

Text of the page (random words):
2k g 31m 8 https dgl cx this is dgl cx 0 david leadbeater dgl cx projects about ️ ️ ssh port knocking with openbsd 7 9 port knocking is mostly a bad idea but people keep wanting to do it for some false sense of security if you don t consider it a security control but a way to keep garbage out of your logs it might be valid here s one way to do it with openbsd s pf more 18 th june 2026 in openbsd ssh bash a newline exploiting ssh via proxycommand again cve 2025 61984 a look at how a newline character in ssh usernames could confuse proxycommand in openssh leading to command injection and potential rce more 7 th october 2025 in security switchable dark mode with 5 lines of javascript progress on progressive enhancement with new css features more 28 th september 2025 in code meta images over dns answering the question of how big a txt record can be more 20 th september 2025 cve 2025 48384 breaking git with a carriage return and cloning rce tl dr on unix like platforms if you use git clone recursive on an untrusted repo it could achieve remote code execution update to a fixed version of git and other software that embeds git including github desktop more 9 th july 2025 in security can your terminal do emojis how big ancient history meets modern terminals looking at varying support for decdhl in terminals more 24 th june 2025 in code blink and you ll miss it a url handler surprise blink the mobile shell for ios had a url handler that handled more than expected more 18 th june 2025 in security using haproxy to protect me from scrapers a simple anti scraper solution for haproxy the goal is to be as simple as possible so this can be implemented alongside other haproxy rules to control traffic more 28 th april 2025 in code security déjà vu ghostly cves in my terminal title exploring a security bug in ghostty that is eerily familiar more 31 st december 2024 in security restrict sftp with linux user namespaces a script to restrict sftp to some directories without needing chroot or other privileged configuration more 26 th october 2024 in code ssh ansi terminal security in 2023 and finding 10 cves a paper detailing how unescaped output to a terminal could result in unexpected code execution on many terminal emulators this research found around 10 cves in terminal emulators across common client platforms more 5 th october 2023 in code talk nat again irc nat helper flaws a linux kernel bug allows unencrypted nat d irc sessions to be abused to access resources behind nat or drop connections switch to tls right now or read on more 1 st september 2022 in code ip wtf and showing you your actual http request using haproxy in strange ways more 29 th april 2022 in code wordle over dns adding another way to implement wordle to the pile more 19 th february 2022 in code introducing redisircd a custom irc server that backs to redis more 29 th june 2021 in code irc microsoft net sdk is violating the gdpr object now net sdk collects more telemetry than was claimed and it is not anonymous more 23 rd august 2020 in code sqlite as a document database sqlite has had json support for a while but the recently added generated columns feature allows you to treat it like a document database more 17 th june 2020 in code vim blowfish encryption or why you shouldn t roll your own crypto more 4 th october 2014 in code talk tips for xrandr or help why doesn t my projector work under linux more 24 th august 2014 in code talk dtrace and perl dtrace provides powerful tracing abilities combined with perl s support for user defined trace points gives powerful insight into perl more 6 th february 2011 in dtrace perl code talk make openssh require keys selectively this is one of those things that i ve been doing for ages and is easy to find if you read the fine manual but not many places online seem to suggest it more 24 th january 2011 in ssh using haproxy to make ssh and ssl available on the same port certain places firewall tcp ports other than the most common ports there are many techniques for bypassing such restrictions one simple approach is to run a ssh daemon on port 443 however a downside of this is you need to dedicate an ip address to this ssh service more 19 th january 2010 in code ssh by david leadbeater 8