Automatically update linux systems

Keeping your computer systems up to date has always been important. But now that word has gotten out that big brother is scanning whole countries networks and actively probes their ports keeping systems up to date is the least should do. Who knows if they are not installing backdoors as well, as a precautionary measure of course 🙂 So at least make it harder for them by keeping your system patched, it can be as easy as installing and running unattended-upgrade:

Now edit /etc/apt/apt.conf.d/10periodic:

and add/edit the following lines:

APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Download-Upgradeable-Packages "1";
APT::Periodic::Unattended-Upgrade "1";

Now you can select which updates to run by uncommenting some lines in /etc/apt/apt.conf.d/50unattended-upgrades:

I usually allow security and normal updates but reject proposed and backports.

Spoof wifi MAC address on OSX

Install spoof-mac via pip:

Set a random MAC address for wifi interface:

or set to something specific:

The MAC address should be reset to its burnt in value after a restart or you can reset it manually without restart:

Securing your Mac

You think securing your Mac with FileVault 2 is enough? Think again as due to a security flaw your volume encryption key is stored in your ram, which can be dumped over firewire.

Frameloss gives a more detailed overview here

The gist:

1. Disable „Fast User Switching“, by selecting “Users and Groups”, clicking on “Login Options”, and unselecting the “Show fast User switching menu as” check box.

2. Keep the volume encryption key out of ram in standby mode by running this command in console