[[[ Physical & Vicinity ]]]

# Physical

http://www.reddit.com/r/linux/comments/1zi10c/laptop_security_best_practices_what_do_you_do/

http://www.reddit.com/r/netsec/comments/l91d5/physical_laptop_security/

# Radio attack

# BadUSB

https://www.reddit.com/r/netsec/comments/2c9otm/badusb/

https://www.reddit.com/r/netsec/comments/2i6vvh/badusb_the_unpatchable_malware_that_infects_usbs/

https://www.reddit.com/r/netsec/comments/2s1gb2/opensource_usb_exploitation_library_teensyduino/

[[[ Theory ]]]

# ECC Primer

http://blog.cloudflare.com/a-relatively-easy-to-understand-primer-on-elliptic-curve-cryptography

[ GPG / PGP ]

http://www.gnupg.org/documentation/index.html

http://www.thedrinkingrecord.com/pgpgpg-guide/

http://www.dewinter.com/gnupg_howto/english/GPGMiniHowto.html

# Intro tutorial blogpost

# Key security

# Best practice

https://alexcabal.com/creating-the-perfect-gpg-keypair/

[[[ Wikipedia ]]]

https://en.wikipedia.org/wiki/Data_remanence

http://en.wikipedia.org/wiki/PA-DSS

[[[ WebSec ]]]

# SSL easy copy pasta

http://www.reddit.com/r/sysadmin/comments/271g4m/cipherlist_strong_copypaste_ssl_configuration_for/

# Strong SSL Security on Apache2 (raymii.org)

https://www.reddit.com/r/linux/comments/2urhmt/strong_ssl_security_on_apache2/

# Want to use my wifi? (cookie spoofing, MITM etc.)

http://thejh.net/written-stuff/want-to-use-my-wifi?

http://www.amanhardikar.com/mindmaps/Practice.html

# The Web Application Vulnerability Scanners Benchmark

http://sectooladdict.blogspot.se/2014/02/wavsep-web-application-scanner.html?m=1

# Bypassing WAF's

# Hardening WordPress

http://codex.wordpress.org/Hardening_WordPress

# A seemingly innocent PHP vuln

http://danuxx.blogspot.de/2013/03/unauthorized-access-bypassing-php-strcmp.html

# JS crypto / sec

# Mega.co.nz weakness (MegaPWN)

---

http://www.danielmiessler.com/study/infosec_interview_questions/

[[[ CryptoLocker ]]]

[[[ Talks & Other videos ]]]

---

[[[ Reddit ]]]

# How to sign kernel for UEFI Secure Boot.

http://www.reddit.com/r/linux/comments/1mw1xb/state_of_securely_booting_linux/

# SSL/TLS Deployment Best Practices

http://www.reddit.com/r/netsec/comments/1mn2nk/ssltls_deployment_best_practices/

[ SSH hardening ]

http://www.reddit.com/r/linux/comments/1yfvm9/hardening_ssh_servers/

http://www.reddit.com/r/linux/comments/2cwakx/the_ultimate_guide_to_hardening_ssh_with_ssh/

# Linux sec

http://www.reddit.com/r/linux/comments/1oobkf/what_kind_of_antimalware_exists_for_linux/

# How does the Shellshock exploit work?

http://fedoramagazine.org/shellshock-how-does-it-actually-work/

# OS under a OS

http://www.reddit.com/r/linux/comments/1qib6u/the_second_proprietary_operating_system_hiding_in/

# grsec patches explained

http://www.reddit.com/r/netsec/comments/renu4/grsecurity_pax_configuration_options_explained/

# 4 HTTP security headers you should always be using (ibuildings.nl)

http://www.reddit.com/r/netsec/comments/1vztlh/4_http_security_headers_you_should_always_be_using/

# Show r/netsec: reveal your true IP address behind proxy/NATs using WebRTC (Firefox/Chrome) (jsfiddle.net)

http://www.reddit.com/r/netsec/comments/1vzsnn/show_rnetsec_reveal_your_true_ip_address_behind/

https://www.reddit.com/r/netsec/comments/2ts3qm/get_local_and_public_ip_addresses_in_javascript/

# How I got root with Sudo (securusglobal.com)

http://www.reddit.com/r/netsec/comments/20mftq/how_i_got_root_with_sudo/

# Hardening a Linux server (self.linux)

http://www.reddit.com/r/linux/comments/1xxpap/hardening_a_linux_server/

# Security of Debian?

http://www.reddit.com/r/linux/comments/1xfuqb/debian_74_relased/cfbwunr

# Sidestep Wireless Logins by Routing All Traffic Through Measly Little Ping Packets (getpostdelete.com)

http://www.reddit.com/r/linux/comments/22tsil/sidestep_wireless_logins_by_routing_all_traffic/

# Why Linux is better for infosec?

http://www.reddit.com/r/linux/comments/22xece/why_is_linux_better_for_infosecsysadmins/

# Wayland is NOT immune to keyloggers (self.linux)

http://www.reddit.com/r/linux/comments/23mj49/wayland_is_not_immune_to_keyloggers/

# What routines have you in place to keep your linux server secure and up to date? (self.linux)

http://www.reddit.com/r/linux/comments/24j290/what_routines_have_you_in_place_to_keep_your/

# The world's first operating-system kernel with an end-to-end proof of implementation correctness and security enforcement is now open source. (sel4.systems)

http://www.reddit.com/r/netsec/comments/2c0yxh/the_worlds_first_operatingsystem_kernel_with_an/

# Deanonymizing Facebook Users By CSP Bruteforcing (myseosolution.de)

http://www.reddit.com/r/netsec/comments/2djtkt/deanonymizing_facebook_users_by_csp_bruteforcing/

# Monitoring & log overview.

# How To Install OSSEC on Ubuntu 14.04 (linuxlove.eu)

http://www.reddit.com/r/linux/comments/2f72j4/how_to_install_ossec_on_ubuntu_1404/

# Password MGMT

http://www.reddit.com/r/linux/comments/2fnget/what_is_your_password_management_strategy/

# Metasploit Resource Portal Data [collection of the most helpful videos, blog posts, podcasts, and other helpful resources, produced mainly by community contributors] (metasploit.github.io)

https://www.reddit.com/r/netsec/comments/2pstkf/metasploit_resource_portal_data_collection_of_the/

# Silently owning modems and routers

https://www.reddit.com/r/netsec/comments/2syoge/silently_owning_modems_and_routers/

# Directory of machines

http://www.shodanhq.com/help