Skip to content
Snippets Groups Projects
Commit ce4f211d authored by Vincent Mazenod's avatar Vincent Mazenod
Browse files

add browsers prez

parent 43293028
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 186 additions and 42 deletions
content/package.json deleted 100644 → 0
+ 0
− 15
View file @ 43293028
{
"name": "*",
"version": "1.0.0",
"description": "",
"main": "index.js",
"scripts": {
"test": "echo \"Error: no test specified\" && exit 1"
},
"author": "",
"license": "ISC",
"dependencies": {
"font-awesome": "^4.7.0",
"reveal.js": "^3.5.0"
}
}
content/slides/cri/md/stack.md
+ 22
− 27
View file @ ce4f211d
......@@ -17,38 +17,33 @@ et sur les produits [HashiCorp](https://github.com/hashicorp)
## Directory Layout
[Directory Layout (ansible best practice)](https://docs.ansible.com/ansible/latest/user_guide/playbooks_best_practices.html#directory-layout)
```shell
+ ansible/
- inventory.ini # inventory file for staging environment
+ group_vars/
- group1.yml # here we assign variables to particular groups
- group2.yml
+ host_vars/
- service1.yml # here we assign variables to particular systems
- service2.yml
+ library/ # if any custom modules, put them here (optional)
+ module_utils/ # if any custom module_utils to support modules, put them here (optional)
+ filter_plugins/ # if any custom filter plugins, put them here (optional)
+ playbooks/
+ cluster/
- service1.yml # master playbook
- service2.yml # playbook for dbserver tier
+ roles/ # empty folder remotes roles only
# inherited from ansible-boiler-plate
+ plugins/ # utilisé pour le callback anstomlog <3
+ roles/ # roles ansible (commun)
+ bin/ # toutes les commandes de la stack
+ docs/ # documentation
+ packer/ # préparation des templates pve
+ workspaces/ # répertoire pour les workspaces
+ wk/ # répertoire du workspace wk
+ ansible/ # vars et playbooks ansible de wk
+ terraform/ # ressources terraform de wk
- config.yml # config de wk
- ssh_config # config ssh de wk
```
# GROUND0
## How to
## PRA
[https://gitlab.isima.fr/cri/stack](https://gitlab.isima.fr/cri/stack)
Après la catastrophe on a remnté
- un réseau opérationnel
- des noeuds proxomox non configurés (fresh install)
- un serveur vault restauré
- une copie du repo de la stack et des rôles minimaux nécessaires
- pve
- gitlab
- backuppc
- la sauvegarde de tous les services à restaurer avec backuppc
## PCA / PRA
content/slides/index.html
+ 1
− 0
View file @ ce4f211d
......@@ -25,6 +25,7 @@
</ul>
</li>
<li><a href="privacy/surfer_couvert.html">surfer couvert (en bref)</a></li>
<li><a href="privacy/browser.html">s&eacute;curit&eacute; et navigateur</a></li>
</ul>
......
content/slides/privacy/browser.html 0 → 100644
+ 59
− 0
View file @ ce4f211d
<!doctype html>
<html>
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
<title>Sécurité / Navigateurs</title>
<link rel="stylesheet" href="../../node_modules/reveal.js/css/reveal.css">
<link rel="stylesheet" href="../../node_modules/reveal.js/css/theme/white.css">
<!-- Theme used for syntax highlighting of code -->
<link rel="stylesheet" href="../../node_modules/reveal.js/lib/css/zenburn.css">
<link rel="stylesheet" href="../../node_modules/font-awesome/css/font-awesome.min.css">
<link rel="stylesheet" href="../main.css">
<!-- Printing and PDF exports -->
<script>
var link = document.createElement( 'link' );
link.rel = 'stylesheet';
link.type = 'text/css';
link.href = window.location.search.match( /print-pdf/gi ) ? '../../node_modules/reveal.js/css/print/pdf.css' : '../../node_modules/reveal.js/css/print/paper.css';
document.getElementsByTagName( 'head' )[0].appendChild( link );
</script>
</head>
<body>
<div class="reveal">
<div class="slides">
<section data-markdown="md/browser.md"
data-separator="^\n\n\n"
data-separator-vertical="^\n\n"
data-separator-notes="^Note:"
data-charset="utf-8">
</section>
</div>
</div>
<script src="../../node_modules/reveal.js/lib/js/head.min.js"></script>
<script src="../../node_modules/reveal.js/js/reveal.js"></script>
<script>
// More info about config & dependencies:
// - https://github.com/hakimel/reveal.js#configuration
// - https://github.com/hakimel/reveal.js#dependencies
Reveal.initialize({
controls: true,
progress: true,
history: true,
center: false,
dependencies: [
{ src: '../../node_modules/reveal.js/plugin/markdown/marked.js' },
{ src: '../../node_modules/reveal.js/plugin/markdown/markdown.js' },
{ src: '../../node_modules/reveal.js/plugin/notes/notes.js', async: true },
{ src: '../../node_modules/reveal.js/plugin/highlight/highlight.js', async: true, callback: function() { hljs.initHighlightingOnLoad(); } }
]
});
</script>
</body>
</html>
content/slides/privacy/images/browsers/browsers.jpg 0 → 100644
+ 0
− 0
View file @ ce4f211d
content/slides/privacy/images/browsers/browsers.jpg

19.4 KiB

content/slides/privacy/images/browsers/https.png 0 → 100644
+ 0
− 0
View file @ ce4f211d
content/slides/privacy/images/browsers/https.png

12.2 KiB

content/slides/privacy/images/browsers/pernaud.jpg 0 → 100644
+ 0
− 0
View file @ ce4f211d
content/slides/privacy/images/browsers/pernaud.jpg

78.5 KiB

content/slides/privacy/images/browsers/phishing_login.png 0 → 100644
+ 0
− 0
View file @ ce4f211d
content/slides/privacy/images/browsers/phishing_login.png

443 KiB

content/slides/privacy/images/browsers/previews.png 0 → 100644
+ 0
− 0
View file @ ce4f211d
content/slides/privacy/images/browsers/previews.png

199 KiB

content/slides/privacy/md/browser.md 0 → 100644
+ 104
− 0
View file @ ce4f211d
# Sécurité du navigateur
![browsers](images/browsers/browsers.jpg)
## Les mots de passes
1. ça ne se prête pas
2. ça ne se laisse pas traîner à la vue de tous
3. ça ne s'utilise qu'une fois
4. si ça casse on remplace immédiatement
5. un peu d'originalité ne nuit pas
6. la taille compte
7. il y a une date de péremption
8. mieux vaut les avoir avec soi
### Question d'hygiène!
![preservatif](images/passwords/preservatif-darvador.jpg)<!-- .element width="30%" -->
[CNIL / Authentification par mot de passe : les mesures de sécurité élémentaires](https://www.cnil.fr/fr/authentification-par-mot-de-passe-les-mesures-de-securite-elementaires)
## [<i class="fa fa-firefox" aria-hidden="true"></i> Firefox](https://www.mozilla.org/fr/firefox/new/)
* Stocke les mots de passes en clair
* *Préférences > Sécurité > Identifiants enregistrés*
![/o\](images/passwords/password.firefox.png)<!-- .element style="width: 500px" -->
## [<i class="fa fa-firefox" aria-hidden="true"></i> Firefox](https://www.mozilla.org/fr/firefox/new/)
* Propose un "mot de passe principal"
* *Préférences > Sécurité > Utiliser un mot de passe principal*
* [Vulnérable](https://www.raymond.cc/blog/how-to-find-hidden-passwords-in-firefox/)
## [<i class="fa fa-chrome" aria-hidden="true"></i> Chrome](https://www.google.fr/chrome/browser/desktop/)
* Stocke les [mots de passe en ligne](https://passwords.google.com/settings/passwords)
* non [souverain](sovereignty.html)
* comme [LastPass](https://www.lastpass.com/fr), [Dashlane](https://www.dashlane.com/), [iCloud](https://www.icloud.com/), ...
![/o\](images/passwords/password.google.png)
## [KeePassXC](https://keepassxc.org/) <i class="fa fa-thumbs-o-up" aria-hidden="true"></i>
* Portage officieux de keepass
* [KeepassXC – A cross-platform community fork of KeepassX](https://news.ycombinator.com/item?id=13468261)
* cross-platform (<i class="fa fa-windows" aria-hidden="true"></i> [Windows](http://slides/slides/privacy/passwords.html#/0/11), <i class="fa fa-apple" aria-hidden="true"></i> [Mac OS X](http://slides/slides/privacy/passwords.html#/0/11), <i class="fa fa-linux" aria-hidden="true"></i> [Linux](http://slides/slides/privacy/passwords.html#/0/11), <i class="fa fa-android" aria-hidden="true"></i> [Android](http://slides/slides/privacy/passwords.html#/0/14))
### [<i class="fa fa-firefox" aria-hidden="true"></i> <i class="fa fa-chrome" aria-hidden="true"></i> KeePassXC-Browser Migration](https://keepassxc.org/docs/keepassxc-browser-migration/)
* pré-requis
* [KeePassXC](https://keepassxc.org/) avec l'intégration aux bon navigateurs activée
* cherche un couple login mot de passe dans [KeePassXC](https://keepassxc.org/) à partir de l'url consultée
* sauvegarde les nouvelles entrées dans [KeePassXC](https://keepassxc.org/)
## communication sur le web
![images/crypto/scytale.png](images/tor/en-clair.png)
## communication chiffrée sur le web
![images/tor/en-clair.png](images/tor/chiffrement-symetrique.png)
![images/borwsers/pernaud.jpg](images/browsers/pernaud.jpg)
![images/borwsers/phishing_login.png](images/browsers/phishing_login.png)<!-- .element style="width: 80%" -->
## Schéma d'url
![schéma d'url](../1337/images/http/urls.png "schéma d'url")<!-- .element style="width: 100%" -->
## urls trompeuses
* <a href="http://33.32.323.22:8080/cart?add=1345">pay with paypal</a>
* https://www.visa.com:1337@33.32.323.22:8080/cart?add=1345
* https://visa.com:UserSession=56858&useroption=879@42.216.64.464
* https://www.visa.com@33.32.323.22
* https://www.v-i-s-a.com
## prévisualisation des urls
![images/browsers/previews.png](images/browsers/previews.png)
## se préserver
* bien gérer ses mots de passes
* n'utiliser que des services [S] (https,imaps, smtps, ...)
* vérifier le nom de domaine du service
* prévisualiser les liens
\ No newline at end of file
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment