Linux system hardening thanks to systemd (& 2018 update)
I gave a talk about Linux system hardening using systemd features at SSTIC 2017 (in French) and at RMLL 2017 (in English, in the security track). Frenc...
Posts by Year
2018
2016
systemd and the crashing tweet
By now you have probably read all about how systemd is so easy to “crash” that one can make it fit in a tweet (How to Crash Systemd in One Tweet). This post...
Let’s Encrypt, automated, but please not as root
I made the switch today to Let’s Encrypt for all the certificates used by services hosted at siosm.fr. The official setup instructions are well written and ...
Give bus1 a try on Arch Linux
I’ve packaged the bus1 kernel module and the related projects hosted on GitHub for Arch Linux.
2014
Ubuntu 14.04 LTS: Why you should not use it, at all
Ubuntu 14.04 LTS (Trusty Tahr) has been released on April 17th 2014, thus this Long Term Support (LTS) version is brand new. So why am I already telling you ...
Get rid of syslog (or a journald log filter in ~100 lines of Python)
We’ve recently switched the host behind the siosm.fr domain and thus decided it was time we dropped syslog logging entirely and use journald only. We used to...
My first program in Rust and an update on my RSS reading habits
I’ve finally found the time to make my first program in Rust and I definitely enjoyed it!
Comments on EWONTFIX: Broken by design: systemd
This post is a reply to the latest article on the EWONTFIX blog: Broken by design: systemd. Update (2014-04-26): I rewrote part of this article to include m...
2013
Leselys, a web based, self-hosted RSS reader not written in PHP
I must confess: I’ve almost never used Google Reader as I’ve only been using Akregator as far as I remember. I didn’t want to rely on anyone to host my feeds...
2012
Setup a Firefox Sync Server with nginx and systemd
I needed a way to synchronize my bookmarks in Firefox across three computers, and doing it manually wasn’t an option anymore, so I turned to sync-like extens...
siosm.fr now with comments thanks to Wt Comments!
Update: Comments are now handled by a custom webapp written in Rust. I have disabled new comments until I find the time to complete it. This blog now has in...
XDC 2012 - Recap on X.org security, from X11 to Wayland/Weston
Martin Peres and I gave a long talk about the X.org security at XDC 2012 in Nuremberg. Michael Kerrisk wrote a really good article for LWN summarizing the ta...
Give Wayland/Weston a try on Arch Linux
Important note: Wayland and Weston have been moved to community/extra! Thus this How to is no longer necessary. I’m just keeping it here for reference. I may...
How to use Powertop to reduce power consumption
Update: Using rc.local is not the good way to do thing and may not work at all. Use the recommendations from the Power saving page on the Arch Wiki instead. ...
Setup cgit with nginx on Arch Linux
I recently had to setup cgit with nginx on Arch Linux for https://siosm.fr/git and it took me quite some time as I was not familiar with cgi, fcgi, fcgiwrap,...
Everything you need to install Arch Linux
Here is a list of all the thing you should read while installing Arch Linux if you ran into troubles. This post will be updated as often as possible. If you ...
Nokia N9
I just received my Nokia N9 and I’m starting to learn Qt Quick/QML to design some applications for it. You can find some useful applications on websites such...
Build KDE on Arch Linux using kdesrc-build
To build KDE on Arch Linux with the nice kdesrc-build script, you need the packages listed on this page: KDE TechBase plus this package: perl-libwww. I didn’...
2011
PHD CTF Quals
I took part in the PHD CTF Quals on the 10-11th December 2011, with two friends (Alkino and PO). For more information, see siosm.fr/public.
First entry on this blog!
Update (2012-03): I switched to Octopress, which is extremely simple to use and secure by design (no databases, no scripting languages, pure static content)....