About on fahmi's website

Correlation beta and yield curve inversion monitor

Sun, 19 Dec 2021 00:00:00 +0000

tradingview indicators:

yield curve inversion monitor

Identifies when the US Treasury Yield Curve inverts (2 and 10 year bond rates).

When they ‘invert’ long-term bonds have a lower interest rate than short-term bonds. In other words, the bond market is pricing in a significant drop in future interest rates (which might be caused by the US Fed fighting off a recession in the future).

Articles, crypto, inflation

Thu, 11 Nov 2021 00:00:00 +0000

source: tradingeconomics.com

inflation is getting worse, gold (good as a hedge against inflation) rises.

so, I sold some crypto that rose a lot and move my money to underperformed coins.

What's inside this .xhtml file

Thu, 21 Oct 2021 00:00:00 +0000

Recently, I got a spam email from Afinei Kosminski. I’m curious what’s inside the .xhtml in the attachment.

So, if I click the attachment, it will change the current tab on my browser to the url that’s base64-encoded.

😲

Inflation & articles

Wed, 13 Oct 2021 00:00:00 +0000

Inflation

It lingers…

source: tradingeconomics.com

U.S. Bureau of Labor Statistics – Consumer Price Index Summary

Articles

Stashing the cash: from Ramses II to Imelda Marcos

Notes...

Sun, 26 Sep 2021 00:00:00 +0000

Python 3 http.server

Quickly sharing files via web browser

$ python -m http.server
$ python -m http.server 1234
$ python -m http.server 1234 --bind 127.0.0.1

Knocking Ports, to open SSH session (Port Knocking was setup with iptables)

#!/bin/bash
HOST=$1
shift
for ARG in "$@"
do
nmap -Pn --host_timeout 15 --max-retries 0 -p $ARG $HOST
done

Usage:

$ sh knock.sh 172.16.0.81 8881 7777 9991

Warrior of The Net

https://www.youtube.com/watch?v=PBWhzz_Gn10

Upgrading Linux Kernel on Gentoo

$ ssh -l fahmi 172.16.0.66
$ tmux new -s upgrade
# eselect kernel list
# eselect kernel set 3 (set to the newest kernel, in my case linux-4.1.4-hardened is on the 3rd list)
# cp /boot/config-3.18.9-hardened /usr/src/linux/.config
# cd /usr/src/linux
# make olddefconfig
# uname -a
Linux gentoo 3.18.9-hardened #1 SMP Tue Aug 18 13:01:38 WIB 2015 x86_64 Intel(R) Core(TM)2 Duo CPU T8100 @ 2.10GHz GenuineIntel GNU/Linux
# make -j3
# make modules_install
# make install
# genkernel --install initramfs
# cd /boot
# mkdir ~/oldkernel
# mv config-3.18.9-hardened initramfs-genkernel-x86_64-3.18.9-hardened vmlinuz-3.18.9-hardened kernel-genkernel-x86_64-3.18.9-hardened ~/oldkernel/
# grub2-mkconfig -o /boot/grub/grub.cfg
# reboot

$ ssh -l fahmi 172.16.0.66
$ su -
# cd /usr/src/linux
# rm -r linux-3.18.9-hardened/ linux-4.0.8-hardened/
# rm /boot/System.map-3.18.9-hardened /boot/System.map-genkernel-x86_64-3.18.9-hardened
# rm -r /lib/modules/3.18.9-hardened/

https://wiki.gentoo.org/wiki/Kernel/Removal

Optimize requirejs

Wed, 22 Sep 2021 00:00:00 +0000

qiscus:

Plutus Pioneer Program - Week 4

Sat, 31 Jul 2021 00:00:00 +0000

start week 4 cabal repl

1
2
3
4
5
6
7
8


[fahmad@ryzen cardano]$ ls
haskel-for-imperative-programmers haskell-and-crypto plutus
haskell notes plutus-pioneer-program
[fahmad@ryzen cardano]$ cd plutus
[fahmad@ryzen plutus]$ nix-shell
[nix-shell:/cardano/plutus]$ cd ../plutus-pioneer-program/code/week04/
[nix-shell:/cardano/plutus-pioneer-program/code/week04]$
 cabal repl plutus-pioneer-program-week04

run hello app

change app/hello.hs to

1
2


main :: IO ()
main = putStrLn "Hello, world!"

1
2


[nix-shell:/cardano/plutus-pioneer-program/code/week04]$
 cabal run hello

Plutus Pioneer Program - Week 1

Sat, 24 Jul 2021 00:00:00 +0000

Tasks

Clone the The Plutus repository, check out the correct commit as specified in cabal.project.
Set-up IOHK binary caches How to set up the IOHK binary caches. “If you do not do this, you will end up building GHC, which takes several hours. If you find yourself building GHC, STOP and fix the cache.”
Enter a nix-shell.
Build the English Auction contract with cabal build (you may need to run cabal update first).
Go to the plutus-playground-client folder.
Start the Playground server with plutus-playground-server.
Start the Playground client (in another nix-shell) with npm run start.
Copy-paste the auction contract into the Playground editor.
Compile.
Simulate various auction scenarios.

Solution

change dir to cardano

Markdown Syntax Guide

Tue, 09 Jun 2020 00:00:00 +0000

This article offers a sample of basic Markdown syntax that can be used in Hugo content files, also it shows whether basic HTML elements are decorated with CSS in MDX.

Headings

The following HTML <h1>—<h6> elements represent six levels of section headings. <h1> is the highest section level while <h6> is the lowest.

H1

H2

H3

H4

H5

H6

Paragraph

Xerum, quo qui aut unt expliquam qui dolut labo. Aque venitatiusda cum, voluptionse latur sitiae dolessi aut parist aut dollo enim qui voluptate ma dolestendit peritin re plis aut quas inctum laceat est volestemque commosa as cus endigna tectur, offic to cor sequas etum rerum idem sintibus eiur? Quianimin porecus evelectur, cum que nis nust voloribus ratem aut omnimi, sitatur? Quiatem. Nam, omnis sum am facea corem alique molestrunt et eos evelece arcillit ut aut eos eos nus, sin conecerem erum fuga. Ri oditatquam, ad quibus unda veliamenimin cusam et facea ipsamus es exerum sitate dolores editium rerore eost, temped molorro ratiae volorro te reribus dolorer sperchicium faceata tiustia prat.

References

Mon, 08 Jun 2020 00:00:00 +0000

Grsecurity on Debian Jessie (Linux 4.1.7)

Thu, 24 Sep 2015 00:00:00 +0000

The preferred version of Grsecurity for server is the stable patches. But, you need subscription to get them (for kernel 3.2.71 and 3.14.53). Here’s the link to the announcement https://grsecurity.net/announce.php
For this documentation, i’m going to use the test version.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29



$ cat arch-grsec.txt
https://www.kernel.org/pub/linux/kernel/v4.x/linux-4.1.tar.xz
https://www.kernel.org/pub/linux/kernel/v4.x/linux-4.1.tar.sign
https://www.kernel.org/pub/linux/kernel/v4.x/patch-4.1.7.xz
https://www.kernel.org/pub/linux/kernel/v4.x/patch-4.1.7.sign
https://grsecurity.net/test/grsecurity-3.1-4.1.7-201509201149.patch
https://grsecurity.net/test/grsecurity-3.1-4.1.7-201509201149.patch.sig
https://grsecurity.net/spender-gpg-key.asc
$ cat arch-grsec.txt | xargs wget
$ sudo apt-get install fakeroot kernel-package linux-source-2.6 build-essential
$ gpg --import spender-gpg-key.asc
$ gpg --verify grsecurity-3.1-4.1.7-201509201149.patch.sig
$ gpg --keyserver hkp://keys.gnupg.net --recv-keys 6092693E
$ gpg --verify linux-4.1.tar.sign
$ tar xvf linux-4.1.tar.xz
$ xz -d patch-4.1.7.xz
$ cd linux-4.1
$ patch -p1 < ../patch-4.1.7
$ patch -p1 < ../grsecurity-3.1-4.1.7-201509201149.patch
$ cp /boot/config-3.16.0-4-amd64 ./.config
$ make olddefconfig
$ make menuconfig
###enable Grsecurity, Either automatic or manual.
# fakeroot make -j3 deb-pkg
###My Mini-ITX board is dual-core (2+1)
###wait for compiling to finish
$ cd ..
# dpkg -i *.deb

###Done, now reboot.

Linux From Scratch 7.7 Systemd

Tue, 15 Sep 2015 00:00:00 +0000

Downloading the book (HTML version or PDF)

$ wget http://www.linuxfromscratch.org/lfs/downloads/stable-systemd/LFS-BOOK-7.7-systemd.pdf

Host System
Thinkpad X61, 2GB of RAM, Core2 Duo T8100 2.10GHz
Hardened-Gentoo x86_64
GPT Partition
172.16.0.66
Separate partition /dev/sda4, for LFS

Host Partition:
Device          Start          End              Sectors        Size    Type
/dev/sda1      2048          6143            4096            2M      BIOS boot
/dev/sda2      6144          268287        262144        128M Linux filesystem
/dev/sda3      268288      8656895      8388608      4G       Linux filesystem
/dev/sda4      8656896    29628415    20971520    10G     Linux filesystem
/dev/sda5      29628416 234439599 204811184 97.7G Linux filesystem

Current Devices at My Home Lab

Thu, 10 Sep 2015 00:00:00 +0000

Raspberry Pi 2 B+ (running ArchLinuxARM)
Thinkpad X61 with Ultrabase Docking (A server to mess up with, compile server. Running Hardened-Gentoo)
Mini ITX, Ivy Bridge Dual-core, (A torrent server, samba server, and http server. Running Hardened-Gentoo)
Cisco Catalyst 2950
Cisco 2621XM
Cisco 2501 (missing power cable, so it’s just collecting dust in my room.)

Grsecurity + PaX on laptop

Wed, 13 May 2015 00:00:00 +0000

About 2 weeks ago I decided to install linux-grsec on my laptop, followed the archwiki and boot the kernel. These are several things I experienced:

can’t open palemoon
successfully opened gns3, but Cisco IOS won’t boot.
you need to install virtualbox-host-dkms and starting guest OS makes computer hang.
QEMU got no issue so far.

here’s the output of dmesg that i got:
grsec: denied RWX mmap of <anonymous mapping> by /usr/bin/dynamips[dynamips:2864] uid/euid:1000/1000 gid/egid:100/100, parent /usr/bin/gns3server[gns3server:28267] uid/euid:1000/1000 gid/egid:100/100

Boot System on my Cisco 2621XM Router

Fri, 13 Mar 2015 00:00:00 +0000

This is just a basic configuration, but handy. Especially when the router fails to load the cisco IOS.

(config)# boot system flash c2600-ipbase-mz.123-9.bin
(config)# boot system flash c2600-io3-mz.121-7.bin
(config)# boot system tftp c2600-io3-mz.121-7.bin 172.16.0.30
(config)# boot system rom

Configuring TFTP Server on CentOS 6.6 & Archlinux ARM

Fri, 23 Jan 2015 00:00:00 +0000

In this tutorial, I’m using a Raspberry Pi and old dead-battery ThinkPad X61+docking. I installed ArchLinux ARM on Raspberry Pi and Centos 6.6 on X61. They’re gonna be used to remotely back up Cisco’s flash, startup-configuration and perform upgrade if needed. Cisco devices I’m using are Cisco Switch 2950 and Cisco Router 2621xm.

X61’s IP address = 172.16.0.66/26

Raspberry PI’s IP address = 172.16.0.67/26

Raspberry PI configuration

Install tftp-hpa

[veroke@T430 ~]$ ssh fahmi@172.16.0.67
fahmi@172.16.0.67's password:
[fahmi@alarmpi ~]$ sudo pacman -S tftp-hpa

tftpd.service

Refer to Archwiki https://wiki.archlinux.org/index.php/Tftpd_server, we should create a copy of the tftpd.service and modify ExecStart with the appropriate directory to use as the tftp root.

snort, psad, fwsnort, and fwknop on Arch Linux ARM (Raspberry Pi)

Fri, 23 Jan 2015 00:00:00 +0000

ssh to your raspberry pi server

ssh fahmi@172.16.0.27

screen session

make new screen session, named snort. compiling snort, fwknop, and fwknop using Raspberry Pi is gonna take long. So, you can just leave it over night and reattach to screen session in the morning with “screen -r”. Another advantage of using screen is when you lost connection to the server, you can just reattach to the session and continue working from where you left off. Or you can just use tmux as an alternative to screen.