#snippet — Public Fediverse posts

Secure your container data: Mount host directories as read-only using Docker volumes. The `:ro` flag enforces kernel-level write protection, preventing container processes from altering the host filesystem. Essential for security. #docker #snippet #volumes #read-only #ValtersIT

https://www.valtersit.com/vault/mount-host-directory-into-container-with-readonly-volume-15db9f/

Configure iDRAC for encrypted SNMP v3 traps: racadm sets trap destination, enables alerts, and configures auth/privacy protocols. iDRAC firmware generates traps from Dell MIBs on temperature, power, fan events.

#idrac #snippet #snmp

https://www.valtersit.com/vault/monitor-idrac-health-with-snmp-v3-traps-dbd4b1/

Analyze per-process page faults with `ps` and `/proc/[pid]/stat`. Track major faults (disk I/O) vs minor faults (cache) via kernel's `task_struct`. Compute delta over time to spot high-impact processes. Production-ready for Ubuntu 22.04, Debian 12, RHEL 8. #linux #snippet #page-fault #major-fault #ValtersIT

https://www.valtersit.com/vault/perprocess-page-faults-and-major-fault-analysis-84c31f/

Calculate P99 latency from structured logs in Loki using LogQL. This query filters for `duration_ms` fields, then applies `quantile_over_time(0.99, [5m])` via the t-digest algorithm for efficient approximation. Works with Loki v2.6+ and LogQL v2.0+. Full guide at #loki #snippet #latency #p99 #ValtersIT

https://www.valtersit.com/vault/logql-query-for-p99-latency-from-structured-logs-ed74fb/

Monitor USB insertion events to detect data exfiltration. Use wevtutil to query System log for Event ID 20001 from Microsoft-Windows-Kernel-PnP, filtering for 'USB\VID_' hardware IDs. Outputs timestamps, device description, and serial number. #windows #snippet #usb-monitoring #dlp #ValtersIT

https://www.valtersit.com/vault/monitor-usb-device-insertion-events-for-data-exfiltration-274ac0/

Monitor USB insertion events to detect data exfiltration. Use wevtutil to query System log for Event ID 20001 from Microsoft-Windows-Kernel-PnP, filtering for 'USB\VID_' hardware IDs. Outputs timestamps, device description, and serial number. #windows #snippet #usb-monitoring #dlp #ValtersIT

https://www.valtersit.com/vault/monitor-usb-device-insertion-events-for-data-exfiltration-274ac0/

Zero-downtime deployments with Fabric: This snippet implements blue-green swapping by checking a symlink, deploying to the inactive environment, and running health checks via c.run(). Perfect for Ubuntu/Debian. #fabric #snippet #blue-green

https://www.valtersit.com/vault/rolling-deploy-with-bluegreen-strategy-using-fabric-c726d9/

Migrate Terraform state from local to S3 without re-importing resources. Use `terraform state mv` combined with a backend migration to rename and transition state files seamlessly. Works on Linux, macOS, Windows (Terraform 0.12+). Details: #terraform #snippet #state-migration #s3 #ValtersIT

https://www.valtersit.com/vault/migrate-terraform-state-from-local-to-s3-with-state-move-98b64b/

Can't trust a scan from within an infected OS. This snippet triggers Windows Defender Offline Scan via WinRE, booting into a minimal PE environment with updated signatures to catch persistent, hidden malware. Windows 10/11, Server 2016+. #windows #snippet #offline-scan #winre #ValtersIT

https://www.valtersit.com/vault/offline-scan-for-persistent-malware-via-winre-integration-274e03/

Protect your VLAN configs! Backup vlan.dat on Cisco IOS/IOS-XE switches with `copy flash:vlan.dat flash:vlan-backup.dat`. Restore via `copy flash:vlan-backup.dat flash:vlan.dat` and reload. Essential for disaster recovery or cloning setups. #cisco #snippet #ValtersIT

https://www.valtersit.com/vault/vlan-database-backup-and-restore-via-flash-722e21/

Need to route multiple subnets through a single IPSec tunnel on VyOS 1.4? This snippet shows how to configure multiple traffic selectors (TS) with strongSwan and XFRM for efficient site-to-site connections. #vyos #snippet #ipsec #traffic-selector #ValtersIT

https://www.valtersit.com/vault/ipsec-tunnel-with-traffic-selectors-and-multiple-subnets-on--456fe5/

Streamline your LLMNR poisoning workflow: Use Responder's -o and -F flags to output NTLMv1 hashes in Hashcat-compatible format for offline cracking with mode 5500. Works on Kali, Ubuntu, Parrot. #responder #snippet #hashcat #llmnr #ValtersIT

https://www.valtersit.com/vault/llmnr-poisoning-with-hashcatcompatible-output-63742d/

Detect stealth port knocking with NSE. Use knock.nse to analyze packet captures or simulate knocks, probing sequences like 7000,8000 to uncover hidden firewall openings. Works on Linux, macOS. #nmap #snippet #port-knocking #nse #ValtersIT

https://www.valtersit.com/vault/port-knocking-detection-via-nse-ecab3f/

Bridge Tailscale and WireGuard VPNs on a Linux host with dual-stack routing. Use `tailscale up --accept-routes --advertise-routes=10.0.1.0/24` and `wg-quick up`, plus iptables forwarding. Full guide on Ubuntu/Debian. #bridge #snippet #wireguard #interoperability #ValtersIT

https://www.valtersit.com/vault/tailscale-multinode-bridge-with-wireguard-interoperability-93d214/

New YARA rule targets malicious Office macros in OLE2 docs (.doc, .xls). Uses OLE2 module to scan 'Macros' stream for VBA signatures like AutoOpen/AutoExec. Works on YARA 4.0+ across Linux, Windows, macOS. #yara #snippet #ValtersIT

https://www.valtersit.com/vault/yara-rule-for-office-macro-ole2-stream-analysis-12e20d/

Stop brute-force SSH attacks with a custom fail2ban action that temporarily bans IPs via UFW. This script integrates ufw deny rules, auto-removes them after a set time, and works on Ubuntu 22.04 and Debian 12. #ufw #snippet #fail2ban

https://www.valtersit.com/vault/ufw-temporary-ban-for-repeated-failed-ssh-attempts-d722e6/

To search for Google API keys recursively in the current folder and its sub-folders with ripgrep:

rg 'AIza[0-9A-Za-z\-_]{35}' -o

Also shared on Shodan Snippets:

https://snippets.shodan.io/c/FHw2r7wWIFmjVAfG

#Security #OneLiner #Google #GoogleAPIKeys #APIkeys #ripgrep #Regex #BugBounty #Snippet

To search for Google API keys recursively in the current folder and its sub-folders with ripgrep:

rg 'AIza[0-9A-Za-z\-_]{35}' -o

Also shared on Shodan Snippets:

https://snippets.shodan.io/c/FHw2r7wWIFmjVAfG

#Security #OneLiner #Google #GoogleAPIKeys #APIkeys #ripgrep #Regex #BugBounty #Snippet

"Are you insulting me?" Ferguson sounded slightly hostile.

Hilda looked at him sternly. "If you have to ask, I am not insulting you. My insults are not questionable."

#writing #snippet #Hilda #humour #fantasy #Witch

"Are you insulting me?" Ferguson sounded slightly hostile.

Hilda looked at him sternly. "If you have to ask, I am not insulting you. My insults are not questionable."

#writing #snippet #Hilda #humour #fantasy #Witch

Lyrics-Snippet:

Oh über Sternen
Wo die Träume flieh'n
Die Zeit verweilt
Das Herz versteht kein Schmerz
Kein Schatten bleibt besteh'n
Die Liebe ewig mit uns geht

by Peter Delain



#lyrics #snippet #delain #peter

Snippet Saturday; Word to Find is "Demand".

This is very similar to "Find The Word" tag games on tumblr. Search the manuscript for the word, and share a snippet that includes it...

#books #readers #fantasy #bookstodon #reading #contemporaryfantasy #writers #writersofmastodon #writerscoffeeclub #bookclub #writer #indieauthor #fae #fey #vampire #book #writerslife #amwriting #aristaholmes #inspiration #snippet #extract #spoilers #darklingspoilers #fantasyindies #fantasyindiesapril