Linux system hardening thanks to systemd (& 2018 update)
I gave a talk about Linux system hardening using systemd features at SSTIC 2017 (in French) and at RMLL 2017 (in English, in the security track). Frenc...
Recent Posts
systemd and the crashing tweet
By now you have probably read all about how systemd is so easy to “crash” that one can make it fit in a tweet (How to Crash Systemd in One Tweet). This post...
Let’s Encrypt, automated, but please not as root
I made the switch today to Let’s Encrypt for all the certificates used by services hosted at siosm.fr. The official setup instructions are well written and ...
Give bus1 a try on Arch Linux
I’ve packaged the bus1 kernel module and the related projects hosted on GitHub for Arch Linux.
Ubuntu 14.04 LTS: Why you should not use it, at all
Ubuntu 14.04 LTS (Trusty Tahr) has been released on April 17th 2014, thus this Long Term Support (LTS) version is brand new. So why am I already telling you ...
Get rid of syslog (or a journald log filter in ~100 lines of Python)
We’ve recently switched the host behind the siosm.fr domain and thus decided it was time we dropped syslog logging entirely and use journald only. We used to...
My first program in Rust and an update on my RSS reading habits
I’ve finally found the time to make my first program in Rust and I definitely enjoyed it!
Comments on EWONTFIX: Broken by design: systemd
This post is a reply to the latest article on the EWONTFIX blog: Broken by design: systemd. Update (2014-04-26): I rewrote part of this article to include m...
Leselys, a web based, self-hosted RSS reader not written in PHP
I must confess: I’ve almost never used Google Reader as I’ve only been using Akregator as far as I remember. I didn’t want to rely on anyone to host my feeds...
Setup a Firefox Sync Server with nginx and systemd
I needed a way to synchronize my bookmarks in Firefox across three computers, and doing it manually wasn’t an option anymore, so I turned to sync-like extens...