Profile

Cover photo
Clint Armstrong
Works at Secant Technologies
Attends Liberty University
56 followers|78,999 views
AboutPostsPhotosVideosReviews

Stream

Clint Armstrong

Shared publicly  - 
1
Add a comment...

Clint Armstrong

Shared publicly  - 
 
If you heard about the following vulnerabilities in McAfee ePolicy Orchestrator version 4.6.5 and earlier: CVE-2013-0140 - Pre-authenticated SQL injection CVE-2013-0141 - Pre-authenticated direc...
1
Add a comment...

Clint Armstrong

Shared publicly  - 
 
Concept / Work in Progress
Remote GELI decryption of NAS4Free from anywhere

After doing much searching, but not seeing good solutions for remotely entering an on-boot passphrase for GELI encryption in FreeBSD, I decided it was time to invent my own.

My Nas4Free lives in an all-in-one ESXi box with the SATA controller passed through to the VM. On this ESXi box also lives my firewall running on PFSense.

If my server goes down, it is pfsense that boots back up first. Followed by Nas4Free. By adding a serial port to each VM, and enabling the serial console in Nas4Free, I can now SSH into my pfsense VM, even from the internet, and connect to the serial port of the Nas4Free VM and supply the GELI password.

This is nice, but kind of a pain in the butt with 12 partitions to decrypt (more on that later). Ideally I'd like one password to enter and have them all decrypted, but I don't really want them to all use the same password.

After considering many options to solve this, originally considering encrypting with keys stored on another GELI image file, I stumbled across a much simpler solution.

Salted hashes. I can develop a secure password  has it using the UUID of the disk as a salt and now I have a unique encryption phrase for each disk but only have to enter one password for it.

Now I just need to make this all easier. My plan is to create a user on PFSense who's shell automatically runs a Expect script that asks for the password, then enters each passphrase derived from the password+UUID hash.

Right now this is all very preliminary, and more of a though exercise than anything, but I'll update as I make progress.
1
Add a comment...

Clint Armstrong

Shared publicly  - 
 
The Google plus app looks terrible on the nexus 7. The forced two column layout shows nothing but over cropped photos and 3 word headlines. The website doesn't split to two columns on a full computer screen, why would I want it that way on a 7 inch tablet? 
1
Nate Walck's profile photo
 
Looks great on an iPad mini and regular iPad. #androidisdoingitwrong
Add a comment...

Clint Armstrong

Shared publicly  - 
 
+VMware ESXi 5.1 purple screens with PCI Passthrough devices. I wonder if I'll learn my lesson and wait a few weeks to upgrade next release... probably not.
1
Nate Walck's profile photoClint Armstrong's profile photo
6 comments
 
No Web console in 5.0u1
Add a comment...

Clint Armstrong

Shared publicly  - 
 
Does there exist yet any good method for dynamic dns on IPV6? Cause I haven't found one yet. In IPV4 having the DHCP server populate DNS is pretty trivial, but in IPV6 without DHCP...
1
Clint Armstrong's profile photoDavid Roe's profile photo
3 comments
 
Most clients are capable of sending a record add request to the DNS server by themselves. There should be no reason that IPv6 shouldn't be able to work the same way, but I'm not sure the servers or clients support it yet. Otherwise the only option I can think of is some kind of discovery protocol, mDNS, zeroconf, etc and bypass DNS
Add a comment...

Clint Armstrong

Shared publicly  - 
 
Folk medal makes even the most boring work feel epic.
1
Add a comment...
Have him in circles
56 people
Dan Baer's profile photo
Steven Crowder's profile photo
Rae Ann Armstrong's profile photo
Lorri Baker's profile photo
Keith Oldham's profile photo
Maria Armstrong's profile photo
Jimmy Graham's profile photo
David Culp's profile photo
Ryan Calderoni's profile photo

Clint Armstrong

Shared publicly  - 
 
 
We invited +Steven Levy to be the very first journalist to get an inside look at our datacenters and Wired just posted his article. 
2
Add a comment...

Clint Armstrong

Shared publicly  - 
 
My sisters, +Victoria Armstrong and Vivien Armstrong will be singing the National Anthem at the Detroit Tigers / Texas Rangers game on Sunday. Very happy for them.
1
Add a comment...

Clint Armstrong

Shared publicly  - 
 
Planning my new home network layout, complete with P2P wireless link to my parents house. Just had wolfram alpha generate some random hex values for my unique local IPV6 subnets. Following RFCs like a boss.
1
Clint Armstrong's profile photoDavid Roe's profile photo
9 comments
 
OK, that makes sense. Just make sure you don't have your VMs running when you back them up. The real VM backup software takes a snapshot of the virtual disk and backs up the snap, but that requires APIs to interface with ESXi. Maybe freeNAS has a snapshot you can do on the volume under the NFS mount and then backup that snap.

I found that the VMXNET3 driver for linux was causing packet loss with TSO on. I didn't look to much into it after figuring out that turning TSO off corrected the problem. I had the processor to burn and haven't seen any performance degradation. I haven't upgraded to ESXi 5 yet. When I do I'll revisit that issue.
Add a comment...
People
Have him in circles
56 people
Dan Baer's profile photo
Steven Crowder's profile photo
Rae Ann Armstrong's profile photo
Lorri Baker's profile photo
Keith Oldham's profile photo
Maria Armstrong's profile photo
Jimmy Graham's profile photo
David Culp's profile photo
Ryan Calderoni's profile photo
Work
Occupation
Systems Engineer
Employment
  • Secant Technologies
    Systems Engineer, 2011 - present
  • Liberty University
    Microsoft Systems Administrator, 2011 - 2011
  • Liberty University
    Desktop Configuration Administrator, 2008 - 2011
  • Liberty University
    On-Site Support Technician, 2008 - 2008
  • Comstock Public Schools
    IT Technician, 2005 - 2007
Basic Information
Gender
Male
Relationship
Married
Other names
Clinton
Story
Introduction
PC and technology enthusiast. IT professional, father or 3 and husband to Maria Armstrong.
Education
  • Liberty University
    Computer Information Systems Management, 2007 - present
They don't accept the punch cards at this BWW. Lame.
Food: GoodDecor: GoodService: Good
Public - 2 years ago
reviewed 2 years ago
1 review
Map
Map
Map