Skip to content

Instantly share code, notes, and snippets.

View jpluimers's full-sized avatar

Jeroen Wiert Pluimers jpluimers

  • wiert.me
  • Amsterdam, The Netherlands
View GitHub Profile
@jpluimers
jpluimers / README.md
Created November 8, 2026 12:38 — forked from Pablohn26/README.md
How to get ssh public key for a given Gitlab or Github user

Better SSH Authorized Keys Management

A seemingly common problem that people encounter is how to handle all of your users authorized_keys file.

People struggle over management, ensuring that users only have specific keys in the authorized_keys file or even a method for expiring keys. A centralized key management system could help provide all of this functionality with a little scripting.

One piece of functionality overlooked in OpenSSH is the AuthorizedKeysCommand configuration keyword. This configuration allows you to specify a command that will run during login to retrieve a users public key file from a remote source and perform validation just as if the authorized_keys file was local.

Here is an example directory structure for a set of users with SSH public keys that can be shared out via a web server:

  1. image

    This material was developed with funding from the National Science Foundation under Grant # DUE 1601612

  2. Introduction image

    The McCumber Cube is a model framework created by John McCumber in 1991 used to establish and evaluate information security programs. This security model has three dimensions and looks like a Rubik’s cube.

  • Information Security Properties
@jpluimers
jpluimers / query.js
Created October 30, 2026 20:47 — forked from nenadom/query.js
A convenience wrapper around querySelector/querySelectorAll, with a transform function to turn NodeLists into arrays.
/* jshint -W033, -W097 */
/* globals document, Element */
(function() {
"use strict";
function query(es, s) {
return _q(es, s, "querySelector")
}
@jpluimers
jpluimers / Reference
Created October 27, 2026 12:30 — forked from Fluepke/Reference
C=US, O=eMudhra Inc, CN=EM OV TLS CA - G3C
https://xkcd.com/221/
openssl rand -hex 16 | sed -E "s/(........)(....)(....)(....)(............)/\1-\2-\3-\4-\5/g"
powershell [guid]::NewGuid()
@jpluimers
jpluimers / installsword.c
Created August 7, 2026 15:42 — forked from whitequark/installsword.c
installsword.exe "My Installer Title" "Cool Title in the Background"
#define WIN32_LEAN_AND_MEAN
#include <tchar.h>
#include <stdint.h>
#include <windows.h>
#include <shellapi.h>
COLORREF rgbText = 0xffffff;
LPTSTR pchFontName = _T("Times New Roman");
INT iFontSizePt = 24;
LPTSTR pchText = _T("InstallSword Wizard");
@jpluimers
jpluimers / star.svg
Last active June 21, 2026 15:16
The Google AI star as displayed in Google Search as an in-line SVG https://en.wikipedia.org/wiki/Google_AI https://en.wikipedia.org/wiki/SVG
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
@jpluimers
jpluimers / archive-dns-issue.md
Created June 15, 2026 11:10 — forked from ardislu/archive-dns-issue.md
Reference note about archive.today and Cloudflare DNS.

Problem

If you use Cloudflare's DNS (1.1.1.1), then the popular web archive archive.today (and the related sites archive.ph, archive.is, archive.li, archive.vn, archive.md, and archive.fo) will either fail to resolve, or show an infinite CAPTCHA loop. If it does resolve when you're on Cloudflare's DNS, you may have the domain locally cached.

Solution

Fix this problem by:

  • Configuring dnsmasq on your local DNS server to use an alternate DNS server for archive.today (see comment from @joshenders below), or
  • Connecting to a VPN before connecting to archive.today (only works if the VPN uses different DNS servers), or