certutil -d sql:$HOME/.pki/nssdb -A -t "TCu,Cu,Tuw" -n "CACert Class 1 Root Certificate" -i root.crt
certutil -d sql:$HOME/.pki/nssdb -A -t "TCu,Cu,Tuw" -n "CACert Class 3 Root Certificate" -i class3.crt

#!/usr/bin/env python
from random import seed, choice
from datetime import datetime
from string import letters

__string = 'abcdef0123456789'
__aes_size = 32
__priv_size = 12
__pub_size = 6


__hexHexChars = '0123456789abcdef'
__modHexChars = 'cbdefghijklnrtuv'

__hex2ModDict = dict(zip(__hexHexChars, __modHexChars))
__mod2HexDict = dict(zip(__modHexChars, __hexHexChars))

def __modhex_encode(s):
    return ''.join(
        [ __hex2ModDict[c] for c in s.encode('hex') ]
    )
# end def modhex_encode

def __modhex_decode(m):
    return ''.join(
        [ __mod2HexDict[c] for c in m ]
    ).decode('hex')
# end def modhex_decode

def __rand(size,array):
  seed(datetime.now())
  return ''.join([choice(array) for x in xrange(size)])

__aes  =  __rand(__aes_size, __string)
__priv = __rand(__priv_size, __string)
__pub  = __modhex_encode(__rand(__pub_size, letters))

print '''ykpersonalize -a%s -ouid=%s -ofixed=%s''' % (__aes, __priv, __pub)

#!/usr/bin/env python

import sys
from yubikey import decrypt

__aes = raw_input(Please enter your AES Key)

__otp = raw_input('Please enter your OTP: ')


try:
  yubikey = decrypt.YubikeyToken(__otp, __aes)
except decrypt.InvalidAESKey:
  print 'Wrong AES'
  sys.exit(1)
except decrypt.InvalidToken:
  print 'Wrong Token'
  sys.exit(2)

for d in dir(yubikey):
  print d, eval("yubikey.%s"%d)

def yubilogin(otp):
  api_key = 'create your one'
  s = u'id=%s&otp=%s'%('your id',otp)
  args = hmac.new(base64.decodestring(api_key), s, digestmod=sha1) #,hashlib.sha1)
  sign = urllib2.quote(base64.b64encode(args.digest()))
  yubi_url = '[url]https://api.yubico.com/wsapi/verify?id=3131&otp=%s&h=%s[/url]' % (otp,sign)
  yubi = urllib2.urlopen(yubi_url).readlines()
  hash = {}
  for line in yubi:
    if '=' in line:
      t = line.strip().split('=')
      hash[t[0]] = t[1]
  if hash['status'] == 'OK':
    return [True, hash]
  else:
    return [False, hash['status']]

def login(self):
    if 'login' not in request.params:
      return redirect_to(action='index')
    if len(request.params['login']) == 0 or len(request.params['pwd']) == 0 or len(request.params['yubi']) == 0:
      return redirect_to(action='index')
    login = yubilogin(request.params['yubi'])
    if login[0] and request.params['yubi'][:-32] == 'your pub_id':
      # check what you want and do what you want

//borrowed from jQuery easing plugin
//[url]http://gsgd.co.uk/sandbox/jquery.easing.php[/url]
$.easing.elasout = function(x, t, b, c, d) {
  var s=1.70158;var p=0;var a=c;
  if (t==0) return b;  if ((t/=d)==1) return b+c;  if (!p) p=d*.3;
  if (a < Math.abs(c)) { a=c; var s=p/4; }
  else var s = p/(2*Math.PI) * Math.asin (c/a);
  return a*Math.pow(2,-10*t) * Math.sin( (t*d-s)*(2*Math.PI)/p ) + c + b;
};
$(document).ready(function() {
  $('#mini').css('overflow','hidden');
  $('#mini').mousewheel(function(event, delta) {
    var mv;
    if (delta > 0) {
      mv = '-='+offset+'px';
    } else {
      mv = '+='+offset+'px';
    }
    $('#mini').scrollTo(mv,500, {easing:'elasout'});
    return false;
  });
  $('#bottom_lnk').click(function() {
    $('#mini').scrollTo('+='+offset+'px',1000, {easing:'elasout'});
  });
  $('#top_lnk').click(function() {
    $('#mini').scrollTo('-='+offset+'px', 1000, {easing:'elasout'});
  });
});

$(document).ready(function() {
  $('.mini_lnk').click(function() {
    path = String(this);
    img = basename(path.replace('^http:\/',''));
    $('#big_img_lnk').attr( {href: '/imager/Munich 20.09.2008/'+img+'/full', title: 'Open '+img+' in 1024x px' } );
    $.get('/getExif/Munich 20.09.2008/'+img,{}, function(data) { $('#exifs').html(data);});
    // if we rotated the previous image, it's now a "canvas" element.. have to remove canvas, ans put "img" instead
    $('#big_img_lnk').html('<img id="big_img" src="/imager/Munich 20.09.2008/'+img+'/750" alt="'+img+'" />');
    $('#quickurl').val('[url]http://gallery.internux.ch/gallery/Munich+20.09.2008/[/url]'+img);

    return false;
  });
}

GPSDPID="/var/run/gpsd.pid"
CONTROL_DEVICE="/dev/ttyACM1"
GPS_DEVICE="/dev/ttyACM2"
PIN=""
APN="gprs.swisscom.ch"

powerup_F3507g () {
  echo -n "Powering up F3507g card.."
  echo 1 > /sys/devices/platform/thinkpad_acpi/wwan_enable
  while [ ! -c $CONTROL_DEVICE ]; do sleep 0.5; echo -n "."; done
  echo "done"
  echo -n "Turning on F3507g card..."
  sleep 3
  if [ -n "$PIN" ]; then
      /usr/sbin/chat -v "" "AT+CPIN?" "SIM PIN" "AT" "OK" "AT+CPIN=\"$PIN\"" "OK" > $CONTROL_DEVICE < $CONTROL_DEVICE
  fi
  /usr/sbin/chat -v "" "AT+CPIN?" "READY" "AT+CFUN=1" "+PACSP0" "AT" "OK" > $CONTROL_DEVICE < $CONTROL_DEVICE
  echo "done"
}

powerdown_F3507g () {
  echo -n "Turning off F3507g card..."
  /usr/sbin/chat -v "" "AT+CFUN=4" "OK" > $CONTROL_DEVICE < $CONTROL_DEVICE
  echo "done"
  echo -n "Powering down F3507g card.."
  echo 0 > /sys/devices/platform/thinkpad_acpi/wwan_enable
  while [ -c $CONTROL_DEVICE ]; do sleep 0.5; echo -n "."; done
  echo "done"
}

configure_GPS () {
  /usr/sbin/chat -v "" "AT*E2GPSCTL=$1,$2,$3" "OK" > $CONTROL_DEVICE < $CONTROL_DEVICE
}

turnon_GPS () {
  echo -n "Starting NMEA stream on $GPS_DEVICE..."
  configure_GPS 1 1 1
  sleep 1
  /usr/sbin/chat -v "" "AT*E2GPSNPD" "GPGGA" > $GPS_DEVICE < $GPS_DEVICE
  start-stop-daemon --start --exec /usr/sbin/gpsd -- -P $GPSDPID $GPS_DEVICE
  echo "done"
}

turnoff_GPS () {
  echo -n "Stopping NMEA stream on $GPS_DEVICE..."
  start-stop-daemon --stop --pidfile $GPSDPID
  configure_GPS 0 1 0
  echo "done"
  turnoff_F3507g
}

turnon_usbnet () {
  echo -n "Starting usbnet connection..."
  /usr/sbin/chat -v "" "AT+CGDCONT=1,\"IP\",\"$APN\"" "OK" "AT*ENAP=1,1" "OK" > $CONTROL_DEVICE < $CONTROL_DEVICE
  echo "done"
}

turnoff_usbnet () {
  echo -n "Stopping usbnet connection..."
  /usr/sbin/chat -v "" "AT*ENAP=0" "OK" > $CONTROL_DEVICE < $CONTROL_DEVICE
  echo "done"
  turnoff_F3507g
}

turnoff_F3507g () {
  ifdown_F3507g
}

ifdown_F3507g () {
  powerdown_F3507g
}

usage () {
  echo "$0 <action>"
  echo "  start-wwan: start your modem"
  echo "  stop-wwan:  stop your modem"
  echo "  start-gps:  start your GPS and gpsd"
  echo "  stop-gps:   stop xour GPS and gpsd"
}

if [ $# -eq 1 ]; then
  case $1 in
  'start-wwan')
    powerup_F3507g
    turnon_usbnet
    dhclient usb0 &>/dev/null
  ;;
  'start-gps')
    powerup_F3507g
    turnon_GPS
  ;;
  'stop-wwan')
    turnoff_usbnet
  ;;
  'stop-gps')
    turnoff_GPS
  ;;
  *)
    usage
  ;;
  esac
else
  usage
fi
exit 0

\documentclass[french,10pt]{article}
\usepackage{babel}
\usepackage[T1]{fontenc}
\usepackage[utf8]{inputenc}
\usepackage{invoice}
\usepackage[a4paper]{geometry}
\usepackage{units}
\usepackage{moreverb}
\usepackage{bera}
\usepackage{graphicx}
\usepackage{wrapfig}
\usepackage{fancyhdr}

\geometry{verbose,tmargin=4em,bmargin=8em,lmargin=6em,rmargin=6em}
\setlength{\parindent}{0pt}
\setlength{\parskip}{1ex plus 0.5ex minus 0.2ex}

\thispagestyle{fancy}
\pagestyle{fancy}
\setlength{\parindent}{0pt}

\renewcommand{\headrulewidth}{0pt}
\cfoot{Tel: <censored> - Email: <censored> - CCP: <censored> - facture payable dans les \textbf{10 jours} }

\begin{document}
  \begin{wrapfigure}{l}{15mm}
    \includegraphics[width=15mm]{Logo_Internux.png}
  \end{wrapfigure}
  Jeanneret Internux\\
  Av. des Alpes 123\\
  1814 La Tour-de-Peilz\\
  <censored>\\
  Fact. ###\\


  {\addtolength{\leftskip}{10.5cm} %in ERT
    la super\\
    adresse \\
    de votre débiteur\\

  } %in ERT


  \hspace*{10.5cm}
    La Tour, le \today


  \paragraph{Concerne : facture ``<project name>''\\}
  \bigskip
  \paragraph{\noindent
  \textnormal{
  blah,\\
  blablablibliblubla
  }
  }

  \begin{invoice}{CHF}{0}
    \ProjectTitle{}
    \Fee{le job fait} {300} {1}
    \Fee{un autre truc} {100} {1}
  \end{invoice}


  Merci d'avoir fait appel à nos services.\\

  \par

  \hspace*{10.5cm}
    Pour Jeanneret Internux\\

  \hspace*{10.5cm}
    C. Jeanneret

\end{document}

#!/bin/bash

BACKUP_DIR="/where/you/want"

function pg_backup_database
{
  DB=$1
  /usr/bin/pg_dump -f ${BACKUP_DIR}/${DB} -Fc ${DB}
  tar jcfp ${BACKUP_DIR}/$(date +%d)-${DB}.tar.bz2 ${BACKUP_DIR}/${DB}
  rm ${BACKUP_DIR}/${DB}
}

if [ -n "$1" ]; then
  pg_backup_database $1
else
  DB_LIST=`/usr/bin/psql -l -t | awk '{print $1}' | egrep -v '^template'`
  for DB in ${DB_LIST}
  do
      pg_backup_database ${DB}
  done
fi

Device Drivers 
  ---> USB Support 
    ---> OHCI HCD support
Device Drivers  
  ---> USB Support 
    ---> [M] USB Serial Converter support 
      ---> [*] USB Generic Serial Driver

SUBSYSTEM=="usb", SYSFS{idProduct}=="1003", SYSFS{idVendor}=="12d1", RUN+="/sbin/modprobe usbserial vendor=0x12d1 product=0x1003"

$ lsubs -v | less

#Set this to the device allocated to the Datacard
/dev/ttyUSB0
#Baudrate -- Note that setting this to 384000 yields an error message
# about this speed not being supported!
460800
#Idle time for closing connection
idle   7200
#Lock the device for this PPPD process use only
lock
#Use normal handshaking
crtscts
#Assume it is a modem device and force modem control methods
modem
#Any user can start the connection
noauth
#If a default route exists replace it with the ppp link
#You get an error if this command is not supported
#by your version of PPPD
#replacedefaultroute
#Make the ppp link the default root
defaultroute
#Username and Password for computer/GlobeTrotter ppp link
#Normally ignored. Change if GSM Operator requires it
user               gprs
password           gprs
#Change the path to chat if required for your version of Linux
connect "/usr/sbin/chat -V -f /etc/ppp/vodafone-chat"
#Accept IP address provided by network
noipdefault
#Detach PPPD from console used to run the program {optional}
#updetach
#Get DNS addresses from operator
usepeerdns
#Don't use VJ compression for ppp link
novj

ABORT BUSY 
ABORT 'NO CARRIER'
ABORT ERROR
REPORT CONNECT
TIMEOUT 120
"" "AT&F"
OK "ATZ"
OK "ATQ0 V1 E0 S0=0 &C1 &D2 +FCLASS=0"
OK 'AT+CGDCONT=1,"IP","gprs.swisscom.ch"'
SAY "Calling Vodafone GPRSn"
TIMEOUT 60
OK "ATD*99***1#"
CONNECT c

AT+CPIN="xxxx"
AT+CLCK="SC",0,"xxxx"

user nginx nginx;
worker_processes 1;
error_log /var/log/nginx/error_log info;
events {
  worker_connections  8192;
  use epoll;
}

http {
  include         /etc/nginx/mime.types;
  default_type    application/octet-stream;
# snip-snip
  server {
    listen 80;
    server_name nimo.internux.ch illyasviel.internux.ch;
    access_log /var/log/nginx/nimo.access main;
    error_log /var/log/nginx/nimo.error info;
    location / {
      proxy_pass h ttp://localhost:9090;
    }
  }
# snip-snip
}

#!/bin/bash

ipt=$(which iptables)

#### on commence par cleaner complètement les règles existantes
$ipt -F
$ipt -X
$ipt -P INPUT ACCEPT
$ipt -P OUTPUT ACCEPT

#### On laisse les connexions établies
$ipt -A INPUT -m state --state established,related -j ACCEPT

#### On va être cool et mettre 2-3 trucs en whitelist
$ipt -N SCAN_WHITELIST
$ipt -A SCAN_WHITELIST -m iprange --src-range xx.xx.xx.xx-yy.yy.yy.yy -j ACCEPT
$ipt -A SCAN_WHITELIST -s zz.zz.zz.zz -j ACCEPT

#### Filtre des packets : on veut du propre uniquement
$ipt -N badPacks
## on fait passer dans la whitelist...
$ipt -A badPacks -j SCAN_WHITELIST
$ipt -A badPacks -p tcp -m state --state NEW -m tcp ! --tcp-flags \
SYN,RST,ACK SYN -j REJECT --reject-with tcp-reset
$ipt -A badPacks -m state --state invalid -j REJECT
$ipt -A badPacks -j RETURN

#### De quoi ralentir les scan 
#### (radical contre la majorité des scriptkiddies)
$ipt -N scanning
## on fait passer dans la whitelist...
$ipt -A scanning -j SCAN_WHITELIST
$ipt -A scanning -i eth0 -m state --state NEW -m recent --set --name SCAN1
$ipt -A scanning -i eth0 -m state --state NEW -m recent --update \
--seconds 90 --hitcount 10 --rttl --name SCAN1 -j REJECT
$ipt -A scanning -i eth0 -m state --state NEW -m recent --set --name SCAN2
$ipt -A scanning -i eth0 -m state --state NEW -m recent --update \
--seconds 180 --hitcount 10 --rttl --name SCAN2 -j REJECT
$ipt -A scanning -j RETURN

#### Et on applique
$ipt -A INPUT -j scanning
$ipt -A INPUT -j badPacks

#### Tout ce qui vient de localhost : Ok
$ipt -A INPUT -i lo -j ACCEPT
$ipt -A OUTPUT -o lo -j ACCEPT
$ipt -A INPUT -i 127.0.0.1 -j ACCEPT
$ipt -A OUTPUT -o 127.0.0.1 -j ACCEPT

#### On ouvre quelques ports
$ipt -A INPUT -p tcp --dport 22 -j ACCEPT
$ipt -A INPUT -p tcp --dport 53 -j ACCEPT
$ipt -A INPUT -p tcp --dport 80 -j ACCEPT

#!/usr/bin/perl -w
use strict;

use DBI;
use Compress::Zlib;
use Time::Local;

my $dbh = DBI->connect( "dbi:Pg:dbname=rtdb;host=HOST","USER","PASS", { RaiseError => 1 } );

my $sth = $dbh->prepare("select ti.id,ti.subject,at.content,at.created from 
tickets ti, transactions tr, attachments at where ti.status <> 'deleted' and 
tr.objectid=ti.id and at.transactionid=tr.id and at.contenttype like 'text/%' and
 (tr.type= 'Comment' or tr.type = 'CommentEmailRecord' or tr.type = 'Create')");

$sth->execute();

while ( my( $id, $title,$ticket,$date) = $sth->fetchrow_array ) {

  my $uncompressed = uncompress( $ticket );
  my $unix_date = unixtime( $date );
  my $content = <<EOF;
        warn $unix_date;
        <html>
          <head>
            <title>
              RT - $title
            </title>
          </head>
          <body>
            $ticket
          </body>
        </html>
EOF
  my $length = length $content;
  print <<EOF;
Content-Length: $length
Last-Mtime: $unix_date
Path-Name: [url]http://myhost.com/Ticket/Display.html?id=$id[/url]
Document-Type: HTML

EOF
  print $content;

}

sub unixtime {
  my ( $y, $m, $dh ) = split /-/, shift;
  my ($d, $hms) = split / /, $dh;
  my ($h,$i,$s) = split /:/,$hms;
  return timelocal($s,$i,$h,$d,$m-1,$y-1900);
};

swish-e -c swish.conf -S prog -i rt_spider.pl

IndexFile ./indexes/rt.swish-e
DefaultContents HTML
StoreDescription HTML <body> 200000
MetaNames swishdocpath swishtitle
MinWordLimit 3

# replace /var/local/fileserver/commun with file://
ReplaceRules regex #/var/local/fileserver/commun/#/mnt/mountpoint/commun/#ig

IndexOnly .txt .htm .html .pdf .ods .odt .doc .xls .ppt .pps .sxw .sxc .sxg .xml
IndexDir /var/local/fileserver/commun/

FileRules filename contains /.$/
IndexFile /var/local/fileserver/search_engine/fileserver.swish-e
MinWordLimit 3


# XML files and associated
FileFilterMatch "/usr/bin/unzip" "-p %p content.xml" /.(sxw|sxc|sxg|ods|odt)$/i

IndexContents XML* .sxw .sxc .sxg .ods .odt .xml
StoreDescription XML* <text> 20000

IndexContents TXT* .xls .doc .pps .ppt .txt .pdf
StoreDescription TXT* 20000

IndexContents HTML* .html .htm
StoreDescription HTML* <body> 20000

# DOC files
FileFilterMatch "/usr/bin/catdoc" "-8 -a -b %p " /.(doc)$/i
# XLS files
FileFilterMatch "/usr/bin/xls2csv" "-x %p " /.(xls)$/i
# PPT/PPS
FileFilterMatch "/usr/bin/catppt" " %p " /.(ppt|pps)$/i
# PDF files
FileFilterMatch "/usr/bin/pdftotext" "-q %p - " /.(pdf)$/i

hardstatus alwayslastline "%{= kg}[%{+b kM}%d/%m/%Y,%c:%s%{-b kg}]-[%{+b kY}%l%{-b kg}] \
%{-b kG}%-Lw%{+b rY}%50>%n%f* %t%{-b kG}%+Lw%< %=%{-b kg}[%{+b kB}%H %{-b kg}]"
encoding UTF-8
log on
vbell off
screen zsh
screen zsh