Eslam Hamouda EslaMx7

Native Secure Enclave backed ssh keys on MacOS

It turns out that MacOS Tahoe can generate and use secure-enclave backed SSH keys! This replaces projects like https://github.com/maxgoedjen/secretive

There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!

Update 28 July 2019: An updated version of this guide for Ubuntu Server 18.04 LTS is now available. Feel free to check it out.

Update 23 May 2020: This guide is ALREADY OUTDATED and might no longer work with new versions of Ubuntu and VirtualBox. Please consider switching to the updated guide instead. I will no longer respond to the replies to this gist. Thank you.

Mounting VirtualBox shared folders on Ubuntu Server 16.04 LTS

This guide will walk you through steps on how to setup a VirtualBox shared folder inside your Ubuntu Server guest. Tested on Ubuntu Server 16.04.3 LTS (Xenial Xerus)

Phoenix Nodes

First I created 3 droplets on digital ocean with 4-cores and 8GB of RAM. Login as root to each and run:

sysctl -w fs.file-max=12000500
sysctl -w fs.nr_open=20000500
ulimit -n 4000000
sysctl -w net.ipv4.tcp_mem='10000000 10000000 10000000'

Download videos from egghead

Go to the egghead website, i.e. Building a React.js App

run

$.each($('h4 a'), function(index, video){
  console.log(video.href);
});

	#r "Microsoft.SharePoint.Client.Runtime.dll"
	#r "Microsoft.SharePoint.Client.dll"

	using System;
	using System.Security;
	using System.Configuration;
	using Microsoft.SharePoint.Client;

	public static void Run(TimerInfo myTimer, TraceWriter log)
	{

	<?xml version="1.0"?>
	<!DOCTYPE tsung SYSTEM "/usr/share/tsung/tsung-1.0.dtd">
	<tsung loglevel="notice" version="1.0">

	<!-- Client side setup -->
	<clients>
	<client host="localhost" use_controller_vm="true"/>
	</clients>

	<!-- Server side setup -->

	// make calls against SPO using a user access token passed from ADAL.js
	// credit to Kirk Evans: https://blogs.msdn.microsoft.com/kaevans/2014/04/15/calling-o365-apis-from-your-web-api-on-behalf-of-a-user/

	using System;
	using System.Web.Http;
	using System.Configuration;
	using System.Threading.Tasks;
	using Microsoft.IdentityModel.Clients.ActiveDirectory;
	using System.Globalization;
	using System.Net.Http;

	package main

	import (
	"fmt"
	"os"
	"os/exec"
	"syscall"
	)

	func main() {


	/*
	##Device = Desktops
	##Screen = 1281px to higher resolution desktops
	*/

	@media (min-width: 1281px) {

	/* CSS */

	<!doctype html>
	<html><head><script src="app.js"></script></head><body></body></html>