Thomas Witt thomaswitt

Blocking Traffic Between VLANs on Unifi Router (UDM, UDM-SE, Dream Router)

Greetings, network enthusiasts! Today, we are set to embark on an essential task: enhancing the security of your network by blocking traffic between VLANs on Unifi routers such as UDM, UDM-SE, and the Dream Router. Join us as we delve into the nuances of RFC1918 IP ranges and configure firewall rules to safeguard your network effectively.

Crafting Effective Gists: A Developer's Handbook

iPad Pro 12.9" (2020) Magic Keyboard Portrait Mode DIY Smart Connector Cable

I wanted my iPad Pro to be able to use the Magic Keyboard in portrait mode, but the current Smart Connector configuration does not allow this. With too much time on my hands, I made a short jumper cable using a section of USB cable, 5-pin POGO connectors (the 5-pin works using pins 1, 3, and 5, and removing pins 2 and 4), a small electrical project box, 3mm N52 magnets, and some epoxy and Sugru to pack everything into place. My cable and connections orientation had more to do with the boxes I found to encase the connector (with holes on the small end) than anything else. Obviously, there will be many ways to do this.

WARNING: Getting any of these steps wrong will probably ruin your iPad.

Note: These measurements are for the 12.9" (2020) model. The magnets did not line up and the polarity was different for my wife's iPad Pro 11" (2021).

![iPad-Pro-MmagicKeyboard-Jumper-Cable-min](https://user-images.githubusercontent.c

Edit: This doesn't work for lists > 20 items, because pagination does not work. Please see here

This script allows extracting name and coordinates for gmaps shared lists. It is incredibly unstable and may break anytime. Good luck figuring out why, because the syntax is extremely confusing and basically makes no sense at all. Thanks to google for not providing an api for this after LITERALLY 12 YEARS

How to use this script:

Share a list and open the link in a browser window. It will redirect. The new link will look like this: google.com/maps/@<your coords>/data=....
Take the data-portion and paste it into the following link: https://google.com/maps/@/data=?ucbcb=1

Using A Yubikey For SSH Authentication

Intro

Why do we need this?

Answer is simple – Security! Alternatives include storing private keys directly on a workstation – which makes them poorly protected in multitude of attacks. A better option is to use encrypted usb key but leaving inserted and unsealed usb key for a long time is insecure, while inserting it and removing it back and forth all the time is tedious.

YubiKey suits much better for this purpose by making your SSH keys much more secure while maintaining a great user experience.

What is Yubikey

YubiKey is a hardware security key which provides Universal 2nd Factor (U2F) cryptographic tokens through a USB and/or NFC interface. This means you have to explicitly authorize a new SSH session by tapping the YubiKey. The private SSH key should be useless to a malicious user who does not have access to the physical YubiKey on which the second private key is stored.

Guide to Using DDRescue to Recover Data

Start command:

ddrescue -d /dev/sda output.img output.mapfile

NOTE: If direct disc access is not available in your system, try raw devices.

Setting up Yubikey with SSH and Git on Windows 10 + Powershell

Based on the following guides:

Install dependencies

Install Gpg4win
Install PuTTY

	#!/Users/samuelkordik/.pyenv/shims/python
	# ReadingListCatcher
	# - A script for exporting Safari Reading List items to Markdown and Pinboard
	# Originally by Brett Terpstra 2015, <https://brettterpstra.com/2015/01/06/reading-list-catcher/>
	# Modifications by Zach Fine made in 2020 to use the original reading list item in the
	# posts to pinboard.
	# Updated 2021-06-21 by Samuel Kordik to fix errors due to deprecated API in plistlib,
	# changes to Pinboard api and Pinboard python lib; added enhanced logging output
	# and error handling to work as a cron job or shell script.
	# Uses code from <https://gist.github.com/robmathers/5995026>

	# edit the login message
	vi /etc/motd

	# switch to usable repos - iSH defaults often failed with EOF errors
	echo https://dl-cdn.alpinelinux.org/alpine/v3.13/main > /etc/apk/repositories
	echo https://dl-cdn.alpinelinux.org/alpine/v3.13/community >> /etc/apk/repositories

	# install some basics
	apk add zsh bash
	apk add sed attr dialog dialog-doc bash bash-doc bash-completion grep grep-doc

	#!/usr/bin/python
	from enum import Enum
	import time
	import requests
	import RPi.GPIO as GPIO

	# For this package see gist: https://gist.github.com/flxkid/2c8af86d51dc3532b6e0a085b8727e48
	from TCS34725 import TCS34725
	from colormath.color_objects import sRGBColor, LabColor
	from colormath.color_conversions import convert_color