DOCSEARCHbyAlgolia
Submit Docs

Obliviate Homes Knowledge Base

website·Indexed 30 days ago

https://obliviate.homes/

A personal knowledge base covering a wide range of technical and lifestyle topics. Technical content includes web development concepts (CDN, SSO, MFA, FIDO2, Reverse Proxy, Load Balancing), Java application configuration, LDAP trust chains, and MkDocs customization. Additional sections cover SRE roles, learning strategies, fitness and sports (Niko Niko Running), and general information on financial flows and health.

Tokens
61.8K
Snippets
271
Records
372
Agent score
50%

What's inside Obliviate Homes

  1. Overview of PGP and Asymmetric Encryption

    PGP (Pretty Good Privacy) is an application used for encrypting and verifying messages to ensure data confidentiality and integrity. It utilizes asymmetric encryption, which employs a pair of keys: a Public Key (shared with others to encrypt messages) and a Private Key (kept secret by the owner to decrypt messages).

    Key functions include:

    1. Encryption: Data is encrypted with the recipient's public key; only the corresponding private key can decrypt it.
    2. Digital Signatures: A sender signs a message with their private key, allowing anyone with the public key to verify the source and integrity.
    3. Hybrid Encryption: For efficiency, PGP generates a temporary symmetric session key to encrypt the message, then encrypts that session key with the recipient's public key.

  2. Overview of Amazon S3 (Simple Storage Service)

    Amazon S3 (Simple Storage Service) is an object storage service designed for high availability and large-scale storage. It is used to store and manage data such as files, images, and videos, functioning similarly to a cloud-based hard drive for application data.

  3. Overview of FIDO2 (Fast Identity Online 2) Authentication

    FIDO2 (Fast Identity Online 2) is an authentication standard that allows users to log into websites and applications without passwords. Instead of relying on shared secrets (passwords) that can be stolen, FIDO2 uses public-key cryptography to verify identity. Users authenticate using local gestures such as fingerprints, facial recognition, or physical security keys, significantly reducing the risk of account takeover by hackers.

  4. Understand the relationship between Active Directory and LDAP

    Active Directory (AD) is the directory service (the 'management system') that stores information about users, computers, and permissions within a corporate network. LDAP (Lightweight Directory Access Protocol) is the standard communication protocol used to query and manage the data stored within that directory service.

  5. Understand the purpose and behavior of AWS Elastic IP

    An Elastic IP is a static, public IPv4 address designed for EC2 instances. Unlike standard public IPs, which change when an instance is stopped and restarted, an Elastic IP remains constant across restarts.

    Key benefits include:

    • Persistence: The IP address does not change even if the instance is stopped or rebooted.
    • Flexibility: An Elastic IP can be rapidly remapped from one instance to another, which is useful for failover or upgrades.
    • External Connectivity: Essential for services requiring a stable IP for DNS configuration, allow-listing (white-listing), or external application connections (e.g., DBeaver).

    Constraints and Costs:

    • AWS accounts have a default limit of 5 Elastic IPs per region (this limit can be increased via request).
    • To avoid unnecessary costs, ensure Elastic IPs are associated with a running instance; unassociated Elastic IPs incur a small hourly charge.

  6. Identify Cross-Origin (CORS) scenarios

    A cross-origin request occurs when a web application attempts to request a resource from a different origin. An origin is defined by the combination of protocol, domain, and port. Common cross-origin scenarios include:

    1. Different Domains: Requesting from http://chicken.com to http://drink.com.
    2. Different Subdomains: Requesting from http://chicken.com to http://api.chicken.com.
    3. Different Ports: Requesting from http://localhost:3000 to http://localhost:5000.

  7. Understand the structure of a PEM-formatted certificate

    A PEM-formatted certificate begins with -----BEGIN CERTIFICATE----- and contains a Base64-encoded string. When decoded into structured information, it consists of the following key sections:

    • Subject Information: Details about the entity that owns the certificate, including Common Name (CN), Organization (O), Organizational Unit (OU), Locality (L), State (ST), and Country (C).
    • Issuer Information: Details about the Certificate Authority (CA) that issued the certificate (e.g., DigiCert, Let's Encrypt, GlobalSign).
    • Validity Period: Includes the 'Not Before' date (when the certificate becomes active) and the 'Not After' date (when the certificate expires).
    • Public Key & Algorithms: Contains the Public Key (typically RSA or ECDSA), the Signature Algorithm used to sign the certificate (e.g., sha256WithRSAEncryption), and the Key Size (e.g., 2048-bit or 4096-bit).
    • Extensions: Additional metadata including:
      • Subject Alternative Name (SAN): Additional domains protected by the certificate.
      • Key Usage: Defined purposes of the certificate (e.g., digital signature, key encipherment).
      • Authority Key Identifier: Used to track the certificate chain to the issuing CA.
      • CRL/OCSP Points: URLs to check if the certificate has been revoked.

  8. Understand gambling platform fraud and fund depletion tactics

    Gambling platforms often use a combination of behavioral data analysis and psychological manipulation to defraud users. Key strategies include:

    • Baiting (Big Fish Strategy): Using high initial win rates to encourage large deposits, then adjusting win rates downward once the user is committed.
    • Psychological Manipulation: Offering small rebates or fake player data to create a false sense of security and prosperity.
    • Fund Depletion: Delaying withdrawals to prevent users from recovering funds or using technical backdoors to empty accounts via unregulated private payment gateways.

  9. Understand Multi-threading (Multi-thread) concepts

    Multi-threading allows a program to execute multiple threads (smaller units of a process) concurrently. This enables a system to handle multiple tasks at the same time, significantly increasing throughput and responsiveness.

    • Pros: Increased efficiency and the ability to process multiple requests or tasks simultaneously.
    • Cons: Increased complexity in management and coordination. Developers must handle synchronization to prevent race conditions (e.g., ensuring a task is completed before a dependent task begins).

  10. Understand the difference between Synchronous and Asynchronous execution

    The fundamental difference between synchronous and asynchronous operations is whether the system waits for the previous task to complete before proceeding.

    • Synchronous (同步): The next step must wait for the current step to finish before it can start. Execution is sequential and blocking.
    • Asynchronous (異步): The system does not need to wait for a task to complete. It can perform other operations and will be notified once the result of the asynchronous task is ready. Execution is non-blocking.

  11. Use AWS CloudShell for browser-based AWS management

    AWS CloudShell is a cloud-based command-line environment accessible directly from the AWS Management Console. It comes with the AWS CLI pre-installed and pre-authenticated, meaning you do not need to install the CLI locally or run aws configure to start executing commands.

  12. Grant EC2 instance access to S3 using IAM Roles

    To allow an EC2 instance to interact with an S3 bucket without hardcoding credentials, use an IAM Role (Instance Profile). The architecture follows the Principle of Least Privilege: an IAM Policy defines specific actions, which is attached to an IAM Role, which is then assigned to the EC2 instance.

    Workflow:

    1. Create an IAM Policy defining the allowed S3 actions.
    2. Create an IAM Role for the 'EC2' service and attach the policy.
    3. Assign the IAM Role to the EC2 instance via the EC2 Console (Actions → Security → Modify IAM role).