# salt Published articles for salt. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## When security matters: working with Qubes OS at the Guardian DevFeed: [When security matters: working with Qubes OS at the Guardian]() Original publisher: [Read original article]() Author: Philip McMahon Published: 2024-04-04T09:32:30Z Content type: article Language: en Sources: [Guardian]() Topics: [Security](), [saltstack](), [Debian](), [Infrastructure as code](), [configuration]() Tags: [amazon-s3](), [configuration](), [debian](), [infrastructure-as-code](), [os](), [packages](), [salt](), [secrets](), [security](), [workstation]() ### AI overview The Guardian describes its experience configuring Qubes OS for SecureDrop Workstation. The team used SaltStack to set up multiple workstations for safely handling sensitive documents, including an offline Debian 11 virtual machine, managed packages, an amnesic VM, an Amazon S3-hosted private package, a Nautilus extension, and secret configuration values. ### Source excerpt The latest version of the whistleblowing platform SecureDrop runs on the Qubes operating system. At the Guardian we used the Salt management engine to set up a Qubes environment where journalists could safely interrogate sensitive documents. This post was updated on 9th April 2024 following feedback from the Securedrop Workstation/Qubes community If you've ever scrolled through the Guardian homepage, you may have come across the 'Contact the Guardian securely' banner. This links to a page explaining how to share sensitive information with the Guardian in a number of different ways. Of these, the one that offers the best security is SecureDrop. An offline VM based on Debian 11; Some packages installed from the default repositories and a custom repository; The VM should be 'amnesic' - after a restart it should be reset to a consistent state (so any generated files/downloaded data should be deleted); A custom package installed from a private repository hosted in Amazon S3; A Nautilus extension; A configuration file containing secrets that can't be hard-coded. Continue reading... ## Ultimate Go: Advanced Engineering Episode 13 DevFeed: [Ultimate Go: Advanced Engineering Episode 13]() Original publisher: [Read original article]() Published: 2023-01-11T00:00:00Z Content type: tutorial Language: en Sources: [William Kennedy]() Topics: [Blockchain](), [Go Language](), [Algorithm](), [Security](), [Ethereum](), [API](), [Transactions]() Tags: [algorithm](), [bitcoin](), [blockchain](), [data-stamping](), [digital-signature](), [digital-signatures](), [ethereum](), [go](), [go-blockchain](), [hash](), [hexademical](), [how-to](), [keccak256](), [salt](), [security](), [video]() ### AI overview This video tutorial explains how to add a salt value to transaction hashes, implement the keccak256 algorithm in Go, and use transaction stamping in a blockchain. It also discusses digital signatures and related security issues. ### Source excerpt Introduction In episode 12, Bill laid out his strategy to handle data hashing on his blockchain. The first step he took was to create a package to handle the cryptographical aspects of his blockchain. After that, he wrote a hash function that met the requirements outlined in his strategy. This function took transaction data as a parameter and returned a hexadecimal representation of the hash. To implement this function, Bill imported packages from the Go standard library and Ethereum API. ## Configuration management - How to start testing your salt formulas DevFeed: [Configuration management - How to start testing your salt formulas]() Original publisher: [Read original article]() Author: Marc Siebeneicher Follow Published: 2016-10-12T00:00:00Z Content type: tutorial Language: en Sources: [Trivago]() Topics: [configuration-management](), [saltstack](), [Testing](), [test](), [Provisioning](), [YAML](), [pull-requests]() Tags: [also](), [backend](), [configuration-management](), [devops](), [how-to](), [infrastructure](), [provisioning](), [pull-requests](), [salt](), [testing](), [yaml]() ### AI overview This tutorial explains why trivago began testing SaltStack formulas as its configuration repository grew in complexity. It describes common problems, including YAML syntax errors, incorrect conditions, template issues, networking problems, state-order issues, and logical changes, and motivates automated testing for pull requests. ### Source excerpt Configuration management tools have recently gained a lot of popularity. At trivago we use SaltStack to automate our infrastructure. As the complexity of configuration files and formulas is increasing, we need a fast, reliable way to test our changes. ## 3 Wrong Ways to Store a Password DevFeed: [3 Wrong Ways to Store a Password]() Original publisher: [Read original article]() Published: 2013-07-11T00:00:00Z Content type: tutorial Language: en Sources: [Adam Bard]() Topics: [passwords](), [Authentication](), [hashing](), [PHP](), [Web Development](), [Database]() Tags: [authentication](), [database](), [hashing](), [password](), [passwords](), [php](), [salt](), [sha256](), [web-development]() ### AI overview This tutorial explains common unsafe password-storage approaches, including plaintext storage, unsalted hashing, and fast hashing with a salt. It describes how database compromise, dictionary attacks, and rainbow tables can expose passwords, and introduces safer password-storage practices without fully detailing them in the supplied excerpts. ### Source excerpt Sooner or later, in the field of Web Development, you're going to need to store someone's password. This is easy to get wrong, but easy to get right, too. Today, let's take a tour of the wrong ways, and then find out how to do it the (current) right way. Plaintext Alice just learned PHP, and are making an app with user authentication. Her database stores an email and password in a table called users.