<glossary>

Account SID
Unique account identifier required for authenticating API requests to Twilio services. posts →
ACME
Automated Certificate Management Environment protocol used by Let's Encrypt for automated TLS certificate issuance and renewal. posts →
Active Directory groups
Windows directory service mechanism for organizing users and computers, enabling centralized permission management through group membership assignments. posts →
Active Response
Automated capability that executes scripts or commands on endpoints in reaction to specific security alerts. posts →
ad hoc analysis
On-demand data analysis performed to answer specific questions without pre-planned reporting structure. posts →
AdministratorAccess
AWS IAM policy granting unrestricted administrative permissions; overly broad for most operational tasks and violates least privilege. posts →
Advanced Audit Policy
Windows feature enabling detailed success and failure auditing across system categories for security event logging. posts →
Agentless monitoring
Monitoring approach that collects data without installing agents, using protocols like SNMP or WMI instead. posts →
AI Agent node
An n8n component that processes natural language input, makes decisions about required actions, and orchestrates tool calls like database queries. posts →
AI Task
Home Assistant service that leverages vision models to handle complex tasks beyond simple automations. posts →
Alarmo
Home Assistant integration for managing alarm system states and sensor-based security automation. posts →
analogRead
Arduino function that reads analog voltage values from specified pins, typically used for sensors or random seed generation. posts →
APIPA
Automatic Private IP Addressing; a mechanism that automatically assigns self-configured IP addresses when DHCP is unavailable. posts →
API token
Unique credential string used to authenticate requests to an API, replacing username/password for programmatic access. posts →
Applicant Tracking System
Software that manages the recruitment process, including job postings, applicant screening, and hiring workflows. posts →
app password
A unique password generated for third-party applications to access Gmail accounts securely without exposing the main account password. posts →
App-Token
Authentication token used by GLPI API to authorize application requests without user session involvement. posts →
Arduino_CO5300
Display driver library for CO5300 AMOLED display controllers, handling low-level display initialization and frame buffering. posts →
Arduino_GFX
Arduino graphics library providing hardware-accelerated drawing functions for displays with various driver support. posts →
Arduino IDE
Integrated development environment for writing, compiling, and uploading code to Arduino-compatible microcontroller boards. posts →
A-record
A DNS record that maps a domain name to its corresponding IPv4 address. posts →
Argon2
Modern password hashing algorithm that is memory-hard and resistant to GPU-based brute-force attacks. posts →
argon2id
A modern password hashing algorithm resistant to GPU and side-channel attacks, used for secure password storage. posts →
ARM
Advanced RISC Machine; a family of reduced instruction set computing architectures for processors, known for power efficiency and extensive use in mobile devices. posts →
ARPA
Address and Routing Parameter Area; a special domain used for reverse DNS lookups to map IP addresses to domain names. posts →
ARPA addresses
Special DNS zones used for reverse DNS lookups, converting IP addresses back to domain names. posts →
arp-scan
Network scanning tool that discovers ARP-responding hosts on a local network segment. posts →
ARP Scanning
Network scanning technique using Address Resolution Protocol to discover active devices on local network. posts →
Asset Management
System for tracking, monitoring, and managing IT hardware, software, and physical components throughout their lifecycle. posts →
AsyncTCP
Arduino library enabling asynchronous TCP socket communication for ESP32, allowing non-blocking network operations. posts →
Attestation object
A data structure returned during passkey registration containing the public key, credential ID, and attestation statement for server validation. posts →
Authelia
Open-source authentication and authorization server providing multi-factor authentication and single sign-on for web applications. posts →
authorized_keys
File storing public SSH keys that are permitted to authenticate as a specific user on a remote system without password. posts →
Auth Token
Secret API key used alongside Account SID for securing authentication to Twilio API endpoints. posts →
Auto Discovery
Automatic detection and identification of network devices and services without manual configuration. posts →
automated telephony service
System that programmatically initiates real phone calls with text-to-speech messages explaining events or alerts. posts →
autoregressive
A model architecture where each generated token depends on all previously generated tokens, requiring sequential generation. posts →
AXP2101
Power management unit IC that handles battery charging, voltage regulation, and power distribution in portable devices. posts →
Backblaze
Cloud backup service providing scalable, off-site storage for automated data backup and protection. posts →
BadUSB
A technique exploiting USB devices to execute unauthorized commands on a computer, treating the device as a trusted peripheral like a keyboard. posts →
BalenaEtcher
A tool used to flash operating system images onto SD cards and USB drives reliably and securely. posts →
Base64
Encoding scheme that converts binary data into ASCII text format for transmission. posts →
Bazarr
Self-hosted application that manages subtitles for media content, automatically pulling subtitles based on language profiles. posts →
Benefits Administration
Management of employee benefits programs including health insurance, retirement plans, and other compensation packages. posts →
BGP hijacking
Routing-level attack redirecting traffic by announcing false BGP routes, used to intercept DNS traffic. posts →
Bicubic upsampling
Image interpolation method that resizes depth maps back to original resolution using smooth cubic polynomial curves. posts →
bind to
Network configuration parameter specifying which IP address or interface a service listens on for incoming connections. posts →
BLAKE2s
A cryptographic hash function that produces a 256-bit hash output, designed for high performance and security. posts →
blast radius
The scope and extent of systems or data affected by a security breach or compromise, minimized through access controls. posts →
Block Common Exploits
Security feature that filters HTTP requests containing common web attack patterns and malicious payloads. posts →
blocking strategy
Sablier strategy that waits until services are fully ready before allowing traffic. posts →
blocklist
A curated list of domains or IP addresses designated as unwanted, malicious, or ad-serving that should be blocked. posts →
Block Lists
Curated lists of domains or IP addresses used to block access to unwanted content like advertisements or malware. posts →
Board Manager URL
A web link in Arduino IDE that points to a repository containing board definitions and drivers for installing support for third-party microcontroller boards. posts →
Browserless
Headless Chrome service for automating web interactions, text extraction, and screenshot capture via HTTP API. posts →
BSSID
Basic Service Set Identifier; the unique MAC address assigned to a Wi-Fi access point for identification purposes. posts →
buildingid
Unique identifier assigned to a physical building or location in Google Workspace organizational settings. posts →
Build Payload
n8n node that transforms and maps data into the format required by an API, resolving references and building request structures. posts →
business intelligence
Technology and processes for analyzing business data to inform strategic decision-making and insights. posts →
C2 server
Command and Control server used by attackers to send instructions to and receive data from compromised systems. posts →
callback function
Function automatically executed each time new audio data arrives, allowing real-time processing of microphone samples. posts →
CAM table
Content Addressable Memory table in switches that maps MAC addresses to physical ports for frame forwarding. posts →
captive portal
Web page automatically displayed when connecting to a network, typically for login or terms acceptance. posts →
CASB
Cloud Access Security Broker; a security tool that monitors and controls access to cloud applications and enforces security policies. posts →
CCD
Chromebook Certified Device; a state that controls security features and must be opened to enable certain developer capabilities like USB boot. posts →
CDN provider
Content Delivery Network service that distributes content across geographically dispersed servers for faster access. posts →
Celery
Distributed task queue library for Python that handles asynchronous job processing and scheduling in web applications. posts →
Certbot
A tool that automates obtaining and renewing SSL certificates from Let's Encrypt certificate authority. posts →
CGNAT
Carrier-grade Network Address Translation that assigns private IP addresses to users, requiring Dynamic DNS for VPN access. posts →
cgroup v2
Linux control group version 2; modern resource limiting and accounting framework for CPU, memory, PIDs, and I/O per service. posts →
ChaCha20
Stream cipher algorithm used for data encryption in WireGuard's cryptographic suite. posts →
Chat Message Trigger
An n8n node that initiates workflows based on incoming chat messages, enabling real-time chat-based automation. posts →
Checkmk
Open-source monitoring tool for IT infrastructure visibility across servers, networks, applications, and cloud environments. posts →
Chirp Spread Spectrum
A modulation technique that varies radio wave frequency for transmission, enabling long-range communication with minimal power consumption. posts →
CIFS
Common Internet File System protocol used for sharing files and printers over a network, commonly used for NAS mounts. posts →
CISC
Complex Instruction Set Computing; a processor architecture using a larger set of complex instructions, commonly found in desktop and server processors. posts →
clearnet
The standard public internet outside of Tor, accessible through normal DNS and direct TCP connections. posts →
Client-side scanning
Technology that inspects data on a user's device before encryption, allowing surveillance of messages before they're secured end-to-end. posts →
Cloudflare Tunnel
A service that creates secure, encrypted connections from your infrastructure to Cloudflare's network without exposing ports publicly. posts →
Code Injection
A Ghost feature allowing administrators to insert custom HTML, CSS, or JavaScript into page headers or footers site-wide. posts →
Conditional access rules
Policies that grant or deny access to resources based on user identity, device status, location, and other contextual factors. posts →
conntrack
Kernel module tracking stateful NAT/firewall connection state; memory-bound and prone to exhaustion from connection flooding. posts →
containerized virtual desktop platform
A system delivering ephemeral workspaces via web browsers using Docker containers instead of traditional VMs. posts →
coordination server
A server that facilitates network setup and key exchange without routing actual traffic between VPN nodes. posts →
Coqui TTS
Open-source text-to-speech engine that converts text to natural-sounding speech with GPU acceleration support. posts →
corosync
A distributed clustering middleware that maintains consensus and state consistency across Proxmox cluster nodes using quorum mechanisms. posts →
CORS
Cross-Origin Resource Sharing; a security protocol allowing requests from specified domains to access resources from different origins. posts →
Cowrie
An SSH/Telnet honeypot that simulates a working login prompt and fake shell environment to log attacker interactions safely. posts →
Cr50
A secure microcontroller embedded in some Chromebooks that runs firmware controlling write protection and allows secure device debugging without physical opening. posts →
cron
Unix time-based job scheduler that automatically executes scripts or commands at specified intervals. posts →
crontab
Unix utility for scheduling tasks to run automatically at specified times using cron expressions. posts →
CrowdSec
Open-source security tool that provides threat detection and IP reputation management for hardening server infrastructure. posts →
Cryptomator
Client-side encryption tool that encrypts files before uploading them to cloud storage for added security. posts →
CSAR
Chat Control on Submitted And Received (messages); a proposed EU regulation requiring client-side scanning of messages before encryption. posts →
CSV Import/Export
Feature enabling data transfer between applications using Comma-Separated Values file format for quick data management. posts →
CTAP
Client to Authenticator Protocol; the device-side protocol enabling browsers to communicate with authenticators holding private keys. posts →
CUDA
NVIDIA's parallel computing platform enabling GPU acceleration for computationally intensive tasks like LLM inference. posts →
curl
Command-line tool for transferring data using URLs, commonly used to make HTTP requests and post data to web services. posts →
Curve25519
Elliptic curve cryptography algorithm used for key exchange in WireGuard's encryption. posts →
daemon-reexec
Systemd command that reexecutes the systemd manager process, reloading its binary and state. posts →
Dahua
A manufacturer of IP cameras and surveillance equipment commonly used with Frigate for CCTV systems. posts →
dashboard
Visual interface displaying key metrics, charts, and data visualizations for monitoring and analysis. posts →
Data Encryption
Process of converting information into code to prevent unauthorized access to sensitive organizational data. posts →
data mining
Process of discovering patterns and extracting useful information from large datasets. posts →
DB_POSTGRESDB_SSL_ENABLED
n8n environment variable that enables SSL/TLS encryption when connecting to PostgreSQL databases. posts →
DDL/DML
Data Definition Language and Data Manipulation Language; SQL commands for schema creation and data modification, respectively. posts →
DDNS
Dynamic Domain Name System; automatically updates DNS records when an IP address changes, useful for maintaining remote access. posts →
Dead drop
Covert communication method using a shared physical or digital location for exchanging information without direct contact between parties. posts →
dearmor
Process of converting ASCII-armored GPG keys to binary format for use in system key storage files. posts →
Deauthentication frames
Network packets sent to disconnect specific devices from a WiFi network without disrupting the entire network. posts →
Debian Bookworm
The stable release version of the Debian Linux distribution, used as the OS for this Orange Pi project. posts →
debounce
A technique that filters out unintended rapid button press signals by adding a delay before recognizing state changes. posts →
Debounce delay
A programmatic pause used to prevent unintended multiple registrations of a button press due to electrical noise. posts →
DEBOUNCE_SECONDS
Time interval that prevents rapid successive QR code scans from being processed, reducing false positives from continuous reading. posts →
Deduplication
Technology that eliminates redundant data by storing only unique information, reducing storage space requirements for backups. posts →
Deep Packet Inspection
Network technique that examines data packets in detail to identify, filter, or block specific traffic patterns and encrypted protocols. posts →
DeepStack
AI-powered application that processes images for facial recognition and person detection without cloud services. posts →
Defender for Cloud Apps
Microsoft 365 security tool that identifies unsanctioned SaaS usage by analyzing sign-ins and traffic patterns. posts →
Denial of Service (DoS) Attacks
Overwhelming a network with traffic to disrupt its normal operation and prevent legitimate users from accessing services. posts →
Denial of Wallet (DoW)
Resource exhaustion attack targeting cloud bills by abusing auto-scaling and elasticity rather than causing service outages. posts →
DenseCRF
Probabilistic post-processing technique that sharpens transitions between foreground and background in depth maps. posts →
Dense Prediction Transformer
State-of-the-art neural network family for monocular depth estimation, optimized for predicting pixel-wise distance from 2D images. posts →
deprovisioning
Process of removing or disabling user accounts and associated access rights when they leave an organization. posts →
derogation
Official exemption or suspension of a regulation, allowing specific activities to continue beyond normal expiration dates. posts →
Destination Dataset Read-Only
A protection setting that prevents writes to replicated backup datasets, ensuring data integrity and maintaining replication chain consistency. posts →
Developer Mode
A special operating mode on Chromebooks that unlocks the ability to modify the system and access the shell for advanced configuration. posts →
DHCP
Dynamic Host Configuration Protocol; a network protocol that assigns IP addresses and network configuration to devices automatically. posts →
dhcp-identifier
Netplan parameter that specifies which identifier to use for DHCP requests; using 'mac' ensures each cloned VM receives a unique IP address. posts →
DietPi
Lightweight, optimized Debian-based operating system designed for single-board computers with minimal installation and pre-configured software options. posts →
dietpi-software
DietPi utility providing a collection of pre-configured software options for quick installation and deployment on single-board computers. posts →
dietpi-update
DietPi command utility for updating the operating system and its components to the latest available versions. posts →
DigiKeyboard library
A software library that provides functions to send keyboard strokes and text from a Digispark microcontroller to a connected computer. posts →
Digispark ATtiny85
A tiny, low-cost microcontroller board capable of USB HID emulation, allowing it to behave like a keyboard or other USB device. posts →
digistump avr boards
Arduino board package providing support and USB HID drivers for Digispark ATtiny85 microcontroller development and programming. posts →
digitalRead
Arduino function that reads the digital state (HIGH or LOW) of a specified pin, commonly used for button input detection. posts →
Discord embed
Rich formatted message structure in Discord containing formatted text, colors, and metadata for improved message presentation. posts →
Discord webhook URL
Unique endpoint that allows external applications to send messages directly to a Discord channel without a bot account. posts →
Discoverable credentials
Passkeys that can be selected without pre-identifying the user, allowing authentication without providing a credential ID list. posts →
DISM
Deployment Image Servicing and Management tool that captures, modifies, and deploys Windows system images for customized OS installations. posts →
DKIM
DomainKeys Identified Mail protocol using cryptographic signatures to authenticate email message origins. posts →
DMARC
Domain-based Message Authentication, Reporting and Conformance; email authentication protocol that prevents domain spoofing and phishing. posts →
dmesg
A command-line utility that displays kernel log messages, useful for troubleshooting hardware detection and system events. posts →
DNS-01
ACME certificate validation method that proves domain ownership by creating a DNS TXT record containing a challenge token. posts →
DNS challenge
A validation method for SSL certificate issuance where domain ownership is proved by creating specific DNS records rather than HTTP requests. posts →
DNS Hijacking
Intercepting DNS requests and redirecting them to attacker-controlled servers, commonly used to force users to phishing pages. posts →
DNS over HTTPS
A protocol that encrypts DNS requests and sends them over HTTPS, protecting DNS queries from interception and manipulation. posts →
DNS-over-HTTPS
Protocol encrypting DNS queries by sending them as HTTPS requests over port 443 instead of plaintext UDP/TCP on port 53. posts →
DNS over QUIC
A newer DNS protocol using QUIC transport that offers improved performance and resilience compared to TCP-based DNS encryption methods. posts →
DNSSEC
DNS Security Extensions; a protocol that adds cryptographic signatures to DNS records to verify their authenticity and integrity. posts →
dnstap
Passive DNS telemetry framework for capturing and analyzing DNS query and response traffic at scale. posts →
dnsutils
Package containing DNS query and diagnostic tools like dig and nslookup for DNS troubleshooting. posts →
DNS zones
Administrative divisions of the DNS namespace allowing management of specific domains and their associated records. posts →
Docker
A containerization platform that packages applications and dependencies into isolated containers for consistent deployment. posts →
docker compose
Tool for defining and running multi-container Docker applications using YAML configuration files. posts →
docker-compose
A tool for defining and running multi-container Docker applications using a YAML configuration file. posts →
docker save
Docker command that exports container images to a tar archive file for backup and transfer purposes. posts →
Docker Swarm
Docker's built-in container orchestration system that distributes containers across multiple machines using Compose-style YAML configuration. posts →
docker volume
A Docker storage mechanism that persists data independently of container lifecycle, mounted into containers for data persistence. posts →
DoH
DNS over HTTPS; a protocol that encrypts DNS queries using the HTTPS protocol for enhanced privacy and security. posts →
domain fronting
Technique using a legitimate domain's DNS and SNI while routing traffic to a hidden backend server to evade censorship. posts →
domcontentloaded
A browser event that fires when the HTML document has been parsed and the DOM is ready, before external resources fully load. posts →
DoT
DNS over TLS; a protocol that encrypts DNS queries using Transport Layer Security for secure DNS resolution. posts →
double decoder consistency
A Tacotron2 variant improvement that enhances robustness and naturalness in speech generation by using two decoders for consistency verification. posts →
Double-Take
Front-end tool that integrates with DeepStack and Frigate to reduce false positives in facial recognition. posts →
dpkg
Debian package manager tool for installing, removing, and querying software packages on Linux systems. posts →
drill down
Interactive feature allowing users to navigate from summary data to detailed underlying information. posts →
Dropbear
Lightweight SSH server implementation commonly used on embedded systems and resource-constrained devices as a minimal alternative to OpenSSH. posts →
Dropper/Loader
A small executable or script that downloads and executes additional malware stages on a victim system. posts →
dummy HDMI plug
Fake HDMI connector that tricks a GPU into thinking a monitor is connected for headless operation. posts →
Duplicacy
Automated backup software that simplifies backup management and helps implement backup strategies without manual intervention. posts →
E2EE
End-to-End Encryption; a security method where messages are encrypted on the sender's device and only decrypted by the intended recipient. posts →
edge
Distributed computing infrastructure closest to end users, used for rate limiting and filtering before traffic reaches expensive backend systems. posts →
edge-based object detection
Machine learning inference performed locally on devices rather than sending data to cloud servers for processing. posts →
Edgecore ECS4120-28Fv2
A network switch model that may share CLI similarities with the Nimbra 230, manufactured by Edgecore. posts →
ei.cfg
Configuration file in Windows installation media that controls edition selection and bypasses product key prompts during OS deployment. posts →
ElevenLabs
Premium text-to-speech service providing highly realistic and natural-sounding voices for voice assistant applications. posts →
Embedded Web UI
A user interface integrated directly into an application rather than served separately, typically bundled within the application binary. posts →
eMMC
Embedded MultiMediaCard; a type of internal storage used in Chromebooks that requires write protection bypass for permanent Linux installation. posts →
encryption_key
A cryptographic key used to encrypt and decrypt sensitive data stored in the application database. posts →
entity
A distinct node in Maltego representing a person, domain, email, IP address, or other investigable object. posts →
Entity Palette
Left panel in Maltego's interface containing a library of entity types that can be dragged onto the investigation canvas. posts →
EOS Utility
Canon's software utility that receives images and videos from Canon EOS cameras over WiFi and writes them to a specified folder on the network. posts →
Ephemeral
Temporary or short-lived; in computing, refers to workspaces or data that exist briefly and are discarded after use. posts →
ERP
Enterprise Resource Planning system that integrates business processes like finance, supply chain, and HR across an organization. posts →
ESP32-C3
A compact 32-bit microcontroller with built-in Wi-Fi and Bluetooth capabilities, based on RISC-V architecture. posts →
esp32_camera
ESPHome component for controlling a camera module connected to an ESP32 microcontroller, enabling video streaming configuration. posts →
ESP32-S3
A microcontroller chip with WiFi and Bluetooth connectivity, used in LoRa32 V3 boards for IoT applications. posts →
ESPAsyncWebServer
Arduino library providing asynchronous HTTP web server functionality for ESP32 microcontrollers with non-blocking request handling. posts →
ESPHome
Open-source framework for building custom firmware for microcontrollers like ESP32, enabling easy integration with Home Assistant. posts →
ESP-IDF
Espressif IoT Development Framework - the official SDK for programming ESP32 and related microcontrollers with toolchain, drivers, and RTOS support. posts →
esptool
Python-based command-line utility for flashing firmware and interacting with ESP32 and ESP8266 microcontroller boards. posts →
ESP-WROOM-32
A compact ESP32 module variant featuring integrated WiFi and Bluetooth capabilities with USB connectivity. posts →
Etcher
A tool for flashing operating system images onto microSD cards and USB drives reliably. posts →
ETL jobs
Extract, Transform, Load operations that pull data from sources, modify it, and write to destinations. posts →
Event ID 4769
A Windows event logged when a Kerberos service ticket is requested, useful for detecting Kerberoasting reconnaissance activity. posts →
evil twin AP
A rogue access point that broadcasts the same SSID as a legitimate network to deceive users into connecting and stealing credentials. posts →
EXECUTIONS_DATA_PRUNE
n8n configuration option that automatically deletes old workflow execution history records based on age and count limits. posts →
EXIF
Exchangeable Image File Format; metadata standard for storing information like camera settings in image files that can be abused for steganography. posts →
exit nodes
Designated nodes that route all traffic through themselves, allowing other nodes to appear as if they're on that node's network. posts →
Exit relay
The final Tor server that decrypts traffic and connects to the regular internet, seeing destination but not origin. posts →
expiration date
Set date after which a user account becomes inactive and cannot be used for login or authentication. posts →
export:entities
n8n CLI command that exports database entities (workflows, credentials, variables) to files for migration or backup purposes. posts →
external library
A folder or storage location outside Immich's main directory that Immich can scan and import photos and videos from. posts →
Extract From File
n8n node that parses structured data from uploaded files into individual items or rows for processing. posts →
Facial recognition
Technology that identifies individuals by analyzing and comparing facial features in images or video. posts →
Fail2Ban
An open-source security tool that monitors logs and blocks IP addresses attempting multiple failed authentication attempts. posts →
FastAPI
Python web framework for building APIs with automatic documentation and fast performance. posts →
FAT32
File allocation table filesystem format supporting files up to 4GB, commonly used on SD cards and storage devices. posts →
FFmpeg
Command-line multimedia framework for processing, converting, and combining audio and video files. posts →
FIDO2
An authentication standard combining WebAuthn (browser API) and CTAP (device protocol) for passwordless public key credential authentication. posts →
File Integrity Monitoring (FIM)
Security feature that detects unauthorized changes to files and Windows registry keys by monitoring their integrity status. posts →
File System
The method of organizing and storing data files on a computer or server, determining where and how files are accessed and managed. posts →
FILE_WRITE
File opening mode constant that allows writing data to a file on storage media. posts →
FIM
File Integrity Monitoring; detects unauthorized changes to files and system registry keys on endpoints. posts →
fine-tuning
Adapting pre-trained models to specific tasks or datasets by adjusting parameters using limited labeled data. posts →
first-factor authentication (1FA)
Authentication using a single method, typically username and password, as the initial layer of security. posts →
flake
A NixOS configuration format that describes reproducible system and environment state in a single declarative expression. posts →
Flask
Lightweight Python web framework for building web applications and APIs with minimal overhead. posts →
flat-file CMS
A content management system that stores data in files rather than a database, eliminating the need for database software. posts →
FLOPS
Floating-point operations per second; a measure of computational speed for processing numerical calculations. posts →
Focalboard
Open-source project management and collaboration tool offering Kanban boards, galleries, and databases for team productivity. posts →
FQDN
Fully Qualified Domain Name; complete domain name including subdomain, domain, and top-level domain (e.g., npm.example.com). posts →
FreeRTOS task
A concurrent execution unit in FreeRTOS, allowing multiple operations to run independently on embedded systems without blocking. posts →
Frigate NVR
Open-source edge-based object detection system that processes CCTV footage locally in real-time without cloud services. posts →
fstab
Linux configuration file that defines how storage devices and partitions are mounted automatically at system startup. posts →
FT3168
Capacitive touch controller IC that manages touch input and coordinate conversion for touchscreen displays via I2C protocol. posts →
Full Clone
A complete independent copy of a virtual machine template, including all disk data and configuration separate from the original. posts →
gal
Global Address List; a directory of all email addresses and contacts available within an organization's email system. posts →
GAM
Command-line tool for Google Workspace administrators to manage domain and user settings quickly and efficiently. posts →
Gantt chart
Horizontal bar chart displaying project tasks, timelines, and dependencies over time for schedule visualization. posts →
garbage collection
Automated process that removes unused or obsolete data blocks to free up storage space. posts →
gateway account
A privileged SSH user account on a server used as an intermediary to access other systems securely. posts →
GenAI
Generative AI integration that enables automatic content creation and analysis tasks in applications. posts →
geocaching
An outdoor treasure hunting activity using GPS coordinates to locate hidden containers called caches. posts →
Gerbil
Pangolin component running on the VPS that coordinates tunnel endpoints and relays traffic between users and upstream services. posts →
gevent
Python library providing lightweight concurrency through coroutines, enabling efficient async I/O operations. posts →
GGUF
An ecosystem and format for storing and distributing quantized language models with various precision levels. posts →
ghcr.io
GitHub Container Registry; a container image repository hosted by GitHub for storing and distributing Docker images. posts →
Ghost CMS
A lightweight, open-source content management system designed for blogging with minimal hardware requirements. posts →
GitOps
A pattern where a Git repository serves as the single source of truth for infrastructure and application state, applied via automation. posts →
GLPI
Free and open-source IT Service Management software for managing assets, tickets, and incidents in enterprise environments. posts →
Go
A compiled, statically-typed programming language designed for simplicity, concurrency, and fast execution with minimal resource overhead. posts →
Google Cloud Console
Web-based interface for managing Google Cloud Platform resources, services, and API projects. posts →
Google Coral USB TPU
A USB-based hardware accelerator that performs machine learning inference for real-time object detection on edge devices without cloud processing. posts →
Google Workspace
Google's suite of cloud-based productivity tools including Gmail, Drive, Docs, and other business applications. posts →
GoPhish
Open-source phishing simulation framework for security awareness training and red team exercises. posts →
GPG key
A cryptographic key used to verify the authenticity and integrity of software packages from trusted repositories. posts →
GPIO
General-Purpose Input/Output pins on a microcontroller that can be individually programmed to read or write digital signals. posts →
GPIO pin
General-Purpose Input/Output pin on microcontroller used to interface with hardware buttons and sensors. posts →
GPU pass-through
Virtualization technique that grants a VM direct access to physical GPU hardware, bypassing the hypervisor for better performance. posts →
GrapheneOS
A privacy-focused Android operating system that replaces the default Google Android with enhanced security and user control over permissions and data. posts →
Grav CMS
An open-source, flat-file content management system designed for speed, flexibility, and ease of customization without requiring a database. posts →
Gravity
Pi-hole's configuration synchronization system that manages gravity.db across multiple Pi-hole instances. posts →
Gravity Sync
A tool that synchronizes blocklists between multiple Pi-hole instances to ensure consistent ad and tracker blocking across instances. posts →
Group Managed Service Accounts
Active Directory accounts with automatically generated and rotated 240-character passwords managed by AD, reducing password compromise risk. posts →
GRUB bootloader
Boot loader program that loads the Linux kernel and initializes the operating system at startup. posts →
GStreamer
Multimedia framework for creating applications that handle audio, video, and media streaming across different platforms. posts →
GstRtspServer
GStreamer component that creates and manages RTSP protocol servers for streaming multimedia content over networks. posts →
Guided filter
Image processing technique that smooths flat regions while preserving sharp boundaries using color edge information from a reference image. posts →
gunicorn
Python WSGI HTTP server for running web applications, handling concurrent requests with worker processes. posts →
H2
Lightweight embedded database engine often used as default storage for applications like Metabase. posts →
H264
Video compression codec that reduces file size while maintaining quality, widely used in professional streaming and CCTV systems. posts →
hairpin/NAT loopback
Internal clients resolving a public IP and routing traffic outbound to reach a service located on the same internal network instead of using a direct local path. posts →
hardware RAID
Redundant Array of Independent Disks configured at the hardware level for data protection and improved performance. posts →
HCCAPX
File format for storing captured WPA/WPA2 handshakes, used with Hashcat for offline password cracking. posts →
Headless browser
Browser without graphical user interface, automated via code for web scraping, testing, and screenshot generation. posts →
headless browsers
Automated browser instances without graphical user interface, often used for web scraping or testing without user interaction. posts →
healthcheck
Automated test that verifies a running container is functioning and ready to accept traffic. posts →
Healthchecks.io
A monitoring service that tracks script and job execution via heartbeat pings to detect failures and missed runs. posts →
heartbeat call
Periodic HTTP request sent by an application to confirm it is still running and healthy to a monitoring service. posts →
Helm
Package manager for Kubernetes that simplifies application deployment and management using pre-configured charts. posts →
helpdesk platform
Software designed to manage customer or user support requests, tickets, and service issues from initial submission to resolution. posts →
HID
Human Interface Device; a protocol that allows computer peripherals like keyboards and mice to communicate with a host computer. posts →
HiddenServiceDir
Tor configuration parameter specifying the directory where private keys and hostname files for onion services are stored. posts →
HiddenServicePort
Tor configuration parameter mapping a virtual port on an onion service to a local address and port on the server. posts →
HiFi-GAN
Neural vocoder that converts spectrograms to high-fidelity audio waveforms in real-time with fast inference. posts →
HKDF
HMAC-based Key Derivation Function used to derive cryptographic keys from input key material in a secure manner. posts →
HMC5883
3-axis digital magnetometer that functions as a compass to determine drone heading relative to magnetic north. posts →
HomeBox
Open-source inventory and organization system designed for home users, built in Go with SQLite and embedded web UI for simplicity. posts →
honeypot
A security mechanism that deliberately exposes fake or emulated services to attract attackers and record their behavior for analysis. posts →
Hosted chat mode
An n8n feature providing a shareable chat endpoint with configurable CORS settings and response handling modes. posts →
html5-qrcode
JavaScript library that enables QR code scanning directly from a web browser using the device's camera without additional dependencies. posts →
HTTP-01
ACME certificate validation method that proves domain ownership by serving a challenge response over HTTP on port 80. posts →
HTTPAdapter
Python requests library component for managing HTTP connections and configuring retry logic. posts →
HTTP POST request
Network communication method that sends data to a server to trigger an action or update, commonly used for API interactions. posts →
Hysteria 2
Next-generation QUIC-based proxy tunnel designed to evade DPI and censorship by mimicking legitimate HTTPS traffic. posts →
I2C
Inter-Integrated Circuit bus protocol for low-speed communication between devices on short distances. posts →
IAM
Identity and Access Management; systems for managing user identities and controlling access to resources and services. posts →
ID3 metadata tags
Information tags embedded in MP3 files containing song metadata like artist, title, and album that can be exploited for data hiding. posts →
immutable virtual machines
VMs that cannot be permanently modified; they revert to a clean state after each session or use. posts →
import:entities
n8n CLI command that imports previously exported database entities into a new n8n instance or different database. posts →
Incident sampling
Statistical technique of selecting a random subset of incidents for review to identify patterns, trends, and systemic issues without selection bias. posts →
Incoming Webhook
A URL endpoint in Microsoft Teams that receives HTTP POST requests to send messages to a specific channel programmatically. posts →
Incremental backups
Backup method that only saves changes made since the last backup, reducing time and storage compared to full backups. posts →
Indexer management
Administrative interface in Wazuh Dashboard for managing the OpenSearch indexer, including security settings and internal users. posts →
inference
The process of using a trained model to generate predictions or output from input prompts, as opposed to training. posts →
ingress routing mesh
A mechanism that forwards traffic arriving on any Swarm node to the correct container running the service. posts →
InputStream
Audio stream object that continuously captures microphone input data with specified parameters like sample rate and block size. posts →
Inventory
A file listing all managed nodes (servers) that Ansible will connect to and manage. posts →
InvenTree
Open-source inventory management system for tracking parts, stock levels, and asset organization. posts →
IOMMU
Input/Output Memory Management Unit; hardware feature that manages direct memory access between devices, enabling secure PCI device pass-through in virtual machines. posts →
IP-KVM
A network-based keyboard-video-mouse device allowing remote control of a computer over an IP network connection. posts →
iptables
Linux firewall tool for managing network rules, packet filtering, and network address translation (NAT). posts →
iptables-save
A command that saves the current iptables firewall rules to a file for persistence across system reboots. posts →
itemtype
Parameter specifying the type of asset or object in GLPI to be created or modified, such as Computer or Phone. posts →
ITSM
IT Service Management; a comprehensive system for managing IT infrastructure, services, and operations within an organization. posts →
iwgetid
Linux command-line utility that retrieves the SSID of the currently connected WiFi network. posts →
Jellyseerr
A web-based interface for requesting and managing media additions to a Jellyfin library. posts →
joiner–mover–leaver workflows
Automated processes managing access provisioning for new hires, role changes, and access removal when employees leave an organization. posts →
jq
A command-line tool for parsing, filtering, and transforming JSON data in shell scripts and terminal operations. posts →
jwt_secret
A secret key used to sign and verify JSON Web Tokens (JWT) for secure session management and token validation. posts →
K3S
Lightweight Kubernetes distribution by Rancher Labs designed for resource-constrained environments like edge devices and IoT appliances. posts →
Kaminsky Attack
DNS poisoning technique that floods resolvers with forged responses for random subdomains to corrupt cache at scale. posts →
Kanban
Visual project management method using columns to represent workflow stages, with cards moving across columns as tasks progress. posts →
Kasm
Containerized virtual desktop platform providing on-demand, secure, ephemeral workspaces accessible through a web browser. posts →
KDC
Key Distribution Center; the Kerberos server that issues tickets for authentication and access to services. posts →
KEY_ENTER
Keyboard key constant representing the Enter/Return key, used to simulate pressing Enter in HID keyboard emulation. posts →
keyring
System file that stores and manages cryptographic keys and certificates for package authentication and verification. posts →
Kill Session
n8n node that closes or terminates an authenticated session with an API or service. posts →
Kiwix
Offline knowledge library that stores and serves resources like Wikipedia without internet access. posts →
Kokoro Web TTS
Lightweight open-source text-to-speech server that generates natural-sounding speech audio from text input. posts →
kubectl
Command-line tool for controlling and managing Kubernetes clusters, used to deploy and inspect applications. posts →
KV cache
Memory storing key-value pairs of intermediate states for each token to avoid recomputing the entire context history. posts →
KVM Virtualisation
Kernel-based Virtual Machine technology that enables hardware-accelerated virtualization on Linux systems. posts →
LACP
Link Aggregation Control Protocol; a standard protocol for bonding multiple physical network interfaces into a single logical link with automatic failover. posts →
LAGG
A logical aggregated network interface created by bonding multiple physical network interfaces together for redundancy and increased throughput. posts →
Layer-2 bridge
A network device that forwards frames at the data link layer without inspecting or modifying IP addresses or routing. posts →
Layer 2/Layer 3 switches
Network switches operating at data link layer (2) for MAC-based forwarding or network layer (3) for IP-based routing. posts →
LDAP
Lightweight Directory Access Protocol; a protocol for accessing and managing directory information services like user accounts and permissions. posts →
Least privilege
Security principle of granting users and services only the minimum access rights necessary to perform their required functions, limiting potential breach impact. posts →
Let's Encrypt
A free, automated certificate authority that issues SSL/TLS certificates for securing websites and services. posts →
libhidapi
Cross-platform C library for communicating with USB and Bluetooth HID (Human Interface Device) devices. posts →
libusb
C library providing userspace access to USB devices on Linux, macOS, Windows, and other systems. posts →
LicheeRV Nano
A small embedded Linux device serving as the hardware basis for the NanoKVM Lite IP-KVM. posts →
Light-field technology
Display technology that projects multiple slightly different perspectives simultaneously, allowing eyes to perceive depth without special glasses or headsets. posts →
LoadBalancer
Kubernetes service type that distributes incoming traffic across multiple pods and assigns an external IP address. posts →
LoRa32
A long-range wireless communication device using LoRa technology, enabling long-distance text communication without infrastructure. posts →
Lovelace card
Home Assistant UI component used to display information or control devices on the dashboard in a customizable visual format. posts →
LowEndBox
A community-driven marketplace and forum for low-cost VPS and hosting deals and reviews. posts →
lshw
Hardware lister utility that displays detailed information about the system's hardware configuration and drivers. posts →
lspci
Command-line utility that lists and displays information about PCI devices connected to a system. posts →
LTE dongle
A USB device that provides mobile broadband connectivity via LTE/4G cellular networks, functioning as a modem. posts →
LuCI
Web-based interface for OpenWrt that allows users to configure router settings and manage network configuration graphically. posts →
LVGL
Light and Versatile Graphics Library; an open-source embedded GUI library for creating user interfaces on microcontroller displays. posts →
Magic DNS
An automatic DNS naming system that assigns human-readable DNS names to nodes in a network without manual configuration. posts →
Maltego
Data mining and link analysis tool used for open source intelligence investigations to visualize connections between entities like people, domains, and infrastructure. posts →
MariaDB
Open-source relational database management system, a drop-in replacement for MySQL with enhanced features and performance. posts →
MASQUERADE
An iptables NAT rule that rewrites source IP addresses to appear as the VPN server's IP. posts →
MDM mode
Modem mode for LTE devices where the modem operates as a raw network device without integrated router capabilities. posts →
MDM network
Mobile Device Management network infrastructure used to manage, monitor, and secure networked devices with centralized control policies. posts →
Media Access Network
Network switches designed for high-performance multimedia transport and streaming, typically used by ISPs and broadcasters. posts →
MediaTek SoC
A system-on-chip processor by MediaTek used in embedded devices like routers and IoT hardware. posts →
MeshCentral
Remote desktop and device management software that allows secure access and control of computers over the internet. posts →
Mesh network
A network where devices relay data through each other, allowing communication over longer distances without central infrastructure. posts →
Meshtastic LoRa32
Long-range radio device enabling text communication over LoRa protocol without infrastructure. posts →
mesh VPN
A VPN architecture where each node connects directly to others it needs to communicate with, eliminating central routing points. posts →
Message routing
The process of determining and forwarding messages through network nodes to reach their intended destination. posts →
microSD card
Small flash memory card used for data storage in devices like single board computers and embedded systems. posts →
Middle relay
An intermediate Tor server that passes encrypted traffic between relays without knowing sender or destination. posts →
Mirai
An IoT botnet malware that infects devices like routers and cameras, often scanning ports 22 and 23 for vulnerable systems to compromise. posts →
MJPEG
Motion JPEG video format that streams individual JPEG frames sequentially, commonly used in IP cameras and streaming applications. posts →
MJPEG format
Motion JPEG video format that streams individual JPEG images in sequence to create video; widely supported but less efficient than H264. posts →
Modern Format
ESPHome binary image file format (.bin) optimized for efficient flashing onto ESP32 devices. posts →
MOD_GUI_LEFT
Keyboard modifier constant representing the left Windows/Super key, used with DigiKeyboard for sending keyboard shortcuts. posts →
Module
Predefined units of work in Ansible that perform specific tasks, such as package installation or file management. posts →
monocular depth estimation
Process of predicting the distance of every pixel in a single 2D image without knowing actual 3D geometry. posts →
Moonlight
Open-source game streaming client that receives video/audio streams from host PC and allows remote gameplay from various devices. posts →
motion vectors
Directional data in video encoding that describes pixel movement between frames, usable as a steganography channel. posts →
moving average filter
Signal processing technique that smooths data by averaging a fixed window of recent values to reduce noise and fluctuations. posts →
MQTT
Lightweight message broker protocol for communication between IoT devices and applications on local networks. posts →
MS5611
High-resolution barometric pressure sensor used to measure altitude and maintain consistent flight height. posts →
multipart/form-data
HTTP content type encoding used for file uploads and form submissions containing multiple data types. posts →
mutagen
Python library for reading and writing metadata in audio files, including MP3 duration information. posts →
MX record
DNS mail exchange record specifying mail servers responsible for receiving email for a domain. posts →
n8n
A workflow automation tool that connects different services and applications using node-based logic to automate data processing and transfer tasks. posts →
NanoKVM Lite
A cheap RISC-V IP-KVM device based on LicheeRV Nano that captures HDMI output and presents as USB keyboard/mouse for remote machine control. posts →
NAS
Network Attached Storage; a dedicated device or server that provides centralized data storage accessible over a network. posts →
NAT traversal
A technique enabling devices behind NAT firewalls to establish direct connections by discovering and communicating through their public addresses. posts →
NetAlertX
Network monitoring tool with distributed master-slave architecture for tracking devices on local networks with historical analysis capabilities. posts →
NetBackup
Default rsync target directory created by Synology NAS devices for receiving backup data from remote sources. posts →
Netdata
Real-time monitoring tool providing live graphs and detailed insights into system performance, CPU, memory, disk usage, and network activity. posts →
NetFlow
A network protocol that collects and reports IP traffic flow data for monitoring and analysis of network usage patterns. posts →
Netplan
Ubuntu's network configuration abstraction tool used to manage network interfaces and settings through YAML files. posts →
Newt
Pangolin component running in private networks that establishes WireGuard tunnels and handles TCP/UDP proxying without manual interface configuration. posts →
NextCloud
Open-source file hosting and collaboration platform providing cloud storage, calendar, contacts, and productivity applications. posts →
Nginx Proxy Manager
A reverse proxy service that manages SSL certificates and routes traffic to backend containers using domain names and subdomains. posts →
Nimbra 230
A carrier-grade Media Access Network switch manufactured by Edgecore and rebranded by Net Insight, used for high-performance multimedia transport. posts →
NixOS
A Linux distribution where the entire system configuration is declared in code and reproducibly deployed via Nix expressions. posts →
Nmap
Command-line tool for network scanning, mapping, port detection, and OS identification. posts →
nmcli
NetworkManager command-line interface tool for configuring and managing network connections on Linux systems. posts →
nmtui
Text-based user interface for NetworkManager that allows interactive configuration of network settings and WiFi connections. posts →
node-based logical connectors
Visual programming elements in automation tools that represent operations and connect to form workflows without writing code. posts →
node-token
A secure token used to authenticate and join additional nodes to a K3S cluster during installation. posts →
Noise protocol framework
Cryptographic framework used by WireGuard for secure key exchange and authenticated encryption. posts →
nouveau
Open-source NVIDIA graphics driver; often conflicts with proprietary NVIDIA drivers and must be blacklisted for proper GPU passthrough. posts →
NT hash
A Windows password hash format used as the encryption key for RC4-encrypted Kerberos tickets. posts →
NVR
Network Video Recorder; a system that records and stores surveillance footage from IP cameras, typically triggered by motion detection. posts →
Nyx
A terminal-based monitoring tool for displaying real-time Tor relay statistics and connection information. posts →
OAuth
An open standard protocol for secure authorization allowing users to authenticate through third-party services without sharing passwords. posts →
Ofcom
UK's communications regulator responsible for enforcing online safety standards and investigating non-compliant digital services. posts →
OIDC SSO
OpenID Connect Single Sign-On; authentication protocol allowing users to sign into applications using existing identity provider credentials. posts →
Ollama
Open-source framework for deploying large language models locally on personal infrastructure with command-line interface. posts →
Onboarding
Process of integrating and training new employees into an organization, including orientation and role-specific instruction. posts →
on-demand workloads
Services that automatically start when needed and shut down after idle periods to save resources. posts →
on-device scanning
Content inspection performed locally on a user's device before encryption, preventing circumvention through network-layer tools like VPNs. posts →
On Form Submission
n8n node that triggers a workflow when a form is submitted, capturing the submitted data as input. posts →
onion service
A hidden service accessible via Tor using a .onion address derived from its cryptographic public key. posts →
OOB communication
Out-of-band communication that operates independently of standard infrastructure like cellular networks or the internet. posts →
OpenAI Conversation integration
A Home Assistant integration that uses OpenAI's API to provide conversational AI capabilities for voice assistants. posts →
openNextFile
Function that retrieves the next file sequentially from an open directory during file system iteration. posts →
OpenRGB
Open-source software for controlling RGB lighting on PC components like motherboards, GPUs, and peripherals across multiple platforms. posts →
OpenSearch
Open source search and analytics engine used by Wazuh to store and index alerts, states, and metadata for searching and visualization. posts →
OpenSearch Dashboards
Open source dashboard and visualization platform that Wazuh Dashboard is built upon for managing agents, rules, and visualizations. posts →
OpenStreetMap
A free, editable map database created collaboratively by volunteers, used by navigation and mapping applications. posts →
OpenVPN
Open-source VPN protocol providing encrypted network tunnels, often used for secure remote access and backups. posts →
Open vSwitch
A multilayer virtual switch supporting network automation and advanced features like VLANs, used as alternative to Linux bridge in Proxmox. posts →
Open WebUI
Offline-capable web interface for interacting with LLM runners like Ollama using a GPT-like chat interface. posts →
OpenWrt
Open-source firmware for embedded devices like routers, offering extensive customization and package management for optimized resource use. posts →
OrangeHRM
Open-source Human Resource Management software providing employee records, recruitment, performance management, and payroll integration capabilities. posts →
Orange Pi Zero 3
A single-board computer similar to Raspberry Pi, featuring ARM64 architecture for running Linux-based applications. posts →
ORPort
The port that a Tor relay listens on for connections from other Tor relays in the network. posts →
OSINT
Open Source Intelligence; gathering information from publicly available sources for investigative purposes. posts →
OsmAnd
Open-source offline mapping and navigation application using OpenStreetMap data. posts →
OTA updates
Over-the-air updates allow remote firmware installation on devices without physical connection, enabling convenient device maintenance. posts →
OTRS
Open Ticket Request System; comprehensive open-source helpdesk and IT service management platform. posts →
overlay network
A virtual network layer allowing containers on different physical hosts to communicate as if on the same LAN. posts →
Pangolin
A reverse proxy and WireGuard tunnel endpoint used to route HTTPS traffic into the Swarm overlay network. posts →
parseFloat
JavaScript function that converts a string value to a floating-point number for numeric operations. posts →
parted
Command-line disk partitioning tool used to create and modify disk partitions and partition tables. posts →
Passive Handshake Sniffing
Monitoring and capturing WPA/WPA2 handshakes without actively disrupting the network or sending attack packets. posts →
PasswordAuthentication
SSH configuration setting that controls whether password-based authentication is allowed for SSH connections. posts →
PCAP
File format for storing network packet captures, used for analyzing network traffic and security testing. posts →
Performance appraisals
Formal evaluations of employee job performance, productivity, and achievement against established goals and metrics. posts →
PermitRootLogin
An SSH configuration directive that controls whether the root user can log in directly via SSH. posts →
PGID
Process Group ID; an environment variable in Docker that specifies the group ID for running containerized applications with proper permissions. posts →
Pie chart
Circular statistical graphic divided into slices to illustrate numerical proportions. posts →
Pi-hole
A DNS sinkhole that blocks advertisements, tracking systems, and malicious domains at the network level by intercepting DNS requests. posts →
Piper
Default Wyoming text-to-speech engine that converts text responses into spoken words with a functional but robotic voice quality. posts →
PKCS #12
A file format (.pfx) that contains private keys and certificates in an encrypted, password-protected container. posts →
Planka
Lightweight open-source Kanban board application designed for simple project management and team collaboration. posts →
Playbook
A YAML file containing a series of tasks and configurations to be executed on managed nodes in Ansible. posts →
PMKID
Pairwise Master Key Identifier used in WPA/WPA2 authentication, captured for password cracking attempts. posts →
PMW3901
Optical flow sensor that detects motion by analyzing changes in visual patterns to help drones maintain position. posts →
PoE hat
Power over Ethernet adapter that supplies power to a Raspberry Pi through network cables, reducing need for separate power connections. posts →
Poly1305
A cryptographic message authentication code used to verify data integrity and authenticity in encrypted communications. posts →
Pomodoro technique
A time-management method using timed intervals of focused work followed by short breaks to improve productivity. posts →
port 853
The standard dedicated network port used by DNS-over-TLS (DoT) for secure encrypted DNS communication between clients and servers. posts →
Portainer
Web-based container management platform providing GUI interface for managing Docker, Kubernetes, and other container environments. posts →
postgresql
Open-source relational database management system known for reliability, advanced features, and SQL compliance. posts →
Power BI
Microsoft's business intelligence tool for data visualization, analysis, and reporting. posts →
PowerShell
Task automation and configuration management framework from Microsoft using scripting language with command-line shell. posts →
Powerwash
A factory reset function on Chromebooks that erases all data and restores the device to its original state. posts →
PPA
Personal Package Archive; a third-party Ubuntu repository for distributing software packages. posts →
PREBOOT_CHROME
Docker environment variable that pre-loads Chrome instance for faster response times in browserless containers. posts →
Prefill
The initial phase of inference where the model processes input prompt and builds internal state, bound by compute speed. posts →
privilege creep
Gradual accumulation of unnecessary access rights by users over time due to role changes, poor governance, or lack of regular permission reviews. posts →
Privilege escalation
Technique to gain higher-level access rights from a lower-privileged account, often through the enable command in networking devices. posts →
Progress bar
A visual indicator showing the completion percentage or progress of an ongoing task or timer. posts →
promiscuous mode
Network interface setting that captures all frames on the network segment, not just those addressed to the device. posts →
Prompt engineering
Practice of designing and refining text inputs to optimize LLM outputs for specific tasks or contexts. posts →
protocol fingerprinting
Technique to identify encrypted tunnels and network protocols by analyzing their distinctive patterns and signatures on the wire. posts →
Prowlarr
An indexer manager that manages torrent and usenet indexers and integrates with download clients. posts →
Proxmox
Open-source hypervisor platform for managing virtual machines and containers with enterprise features like clustering and backup. posts →
psycopg2
A PostgreSQL adapter for Python that enables database connections and query execution from Python scripts. posts →
PubSubClient
An Arduino library that enables ESP32 devices to connect to and communicate with MQTT brokers for publish-subscribe messaging. posts →
PUID
Process User ID; an environment variable in Docker that specifies the user ID for running containerized applications with proper permissions. posts →
PuTTY
A free SSH and telnet client for Windows that provides secure remote login and key generation capabilities. posts →
PuTTYGen
The key generation tool included with PuTTY used to create and manage SSH keypairs for authentication. posts →
Pydantic
Python library for data validation and parsing using type hints. posts →
pygame.mixer
Python library module for loading and playing sound and music files in applications. posts →
PyInstaller
Python tool that converts Python scripts into standalone executable files that can run without requiring Python installation. posts →
PyMuPDF
Python library for extracting text and rendering content from PDF documents programmatically. posts →
Pyodide
A WebAssembly-based Python interpreter that runs Python in web browsers and JavaScript environments with limited system access. posts →
qBittorrent
A free, open-source BitTorrent client for downloading files via torrent protocol. posts →
qcow image
QEMU copy-on-write disk image format used for virtual machine storage that enables efficient snapshots and backups. posts →
QEMU guest agent
Software that runs inside a virtual machine to improve performance and enable better integration with the hypervisor host. posts →
qemu-nbd
QEMU utility that mounts virtual machine disk images as network block devices, enabling direct filesystem access on Linux hosts. posts →
qmake
Qt build system tool that generates Makefiles from project files for compiling Qt applications. posts →
QMI
Qualcomm MSM Interface; a protocol for managing mobile broadband devices like modems and LTE dongles. posts →
QSPI
Quad Serial Peripheral Interface; a high-speed SPI variant using four data lines for faster data transfer to displays. posts →
qtcreator
IDE and code editor for developing Qt applications, part of the Qt framework for cross-platform GUI development. posts →
QUIC
UDP-based transport protocol underlying HTTP/3 that provides faster, encrypted connections with lower latency than TCP. posts →
Quishing
QR phishing: embedding malicious or deceptive URLs inside QR codes to trick users into scanning fake login pages or malware. posts →
quorum
Minimum number of cluster nodes needed to make valid decisions and prevent split-brain scenarios where nodes disagree on cluster state. posts →
RackNerd
A VPS provider offering affordable virtual private server hosting solutions. posts →
Radarr
An automated movie management application that monitors, organizes, and manages movie collections. posts →
Raft consensus
A distributed consensus algorithm used by Swarm managers to maintain cluster state consistency and fault tolerance. posts →
RAID
Redundant Array of Independent Disks; provides drive redundancy but is not a substitute for backups as it cannot restore deleted or corrupted files. posts →
RAIDZ
ZFS RAID implementation providing data redundancy and fault tolerance, similar to RAID5/6 but with superior data integrity. posts →
RC4 cipher
A legacy encryption algorithm where the key is simply the account's NT hash, enabling faster offline cracking than modern AES. posts →
RDP
Remote Desktop Protocol; network protocol enabling remote connection to and control of computers over a network. posts →
recoveryemail
Backup email address associated with a user account for account recovery and two-factor authentication purposes. posts →
recoveryphone
Backup phone number associated with a user account for account recovery and two-factor authentication purposes. posts →
Recursion Desired flag
DNS header flag (RD) indicating whether a resolver should perform recursive lookups. RD=1 requests recursion; RD=0 requests only cached responses. posts →
Recursive DNS
A DNS server that performs full DNS lookups by querying other nameservers on behalf of clients to resolve domain names. posts →
recursive resolver
A DNS server that performs full domain name lookups by querying root, TLD, and authoritative nameservers on behalf of clients. posts →
ReDoS
Regular expression Denial of Service; crafted input causing regex backtracking explosion, leading to exponential runtime and CPU exhaustion. posts →
Regulatory Bundle
KYC process required by UK law where Twilio verifies identity before provisioning phone numbers for regulatory compliance. posts →
Relying Party ID
A cryptographic domain identifier (rpID) that binds a passkey to a specific service, preventing cross-domain credential reuse. posts →
Remote Path
The destination directory path on a remote system where data will be backed up or synchronized to. posts →
Resolver cache
Memory storage in a recursive DNS resolver that stores previously answered DNS queries for quick retrieval of subsequent lookups. posts →
Response Nodes
n8n workflow nodes that define how the workflow returns data or messages back to the user or calling application. posts →
REST command
Configuration in Home Assistant that makes HTTP requests to external APIs or services. posts →
Restic
Fast, secure backup program supporting multiple backends for automated data backups with deduplication. posts →
Retry
Python requests mechanism for automatically retrying failed HTTP requests with exponential backoff. posts →
Reverse proxy
A server that forwards client requests to backend servers and returns responses, improving security, performance, and load distribution. posts →
RFC1918 space
Private IP address ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) reserved for internal use behind NAT. posts →
RFC1918/ULA
Private IPv4 (RFC1918) and IPv6 Unique Local Address ranges reserved for internal networks, not routable on the public internet. posts →
RFC 882/883
Original DNS protocol specifications published in 1983. Later superseded by RFC 1035. posts →
RGB LED
Light-emitting diode capable of displaying multiple colors by combining red, green, and blue light channels for visual feedback. posts →
ring buffer
Fixed-size circular data structure that overwrites oldest data when full, commonly used for continuous logging. posts →
RISC
Reduced Instruction Set Computing; a processor architecture using a smaller set of simpler instructions for improved efficiency and performance. posts →
RISC-V
An open-source instruction set architecture designed to be simple, modular, and freely available for processor design and implementation. posts →
RJ45
Standard connector for Ethernet cables, commonly used for network connections in computing and telecommunications. posts →
RMS volume
Root Mean Square: a measurement of audio signal strength calculated from the square root of the mean of squared audio samples. posts →
Role
A way to group related tasks, handlers, and variables together for reusability across multiple playbooks. posts →
role-based access control
Security model restricting user access to resources based on assigned organizational roles and permissions. posts →
role creep
Gradual accumulation of excessive access rights as users move between departments or roles without periodic review and removal. posts →
rootfs
The root filesystem containing essential system files, directories, and binaries required for an operating system to function. posts →
RSSI
Received Signal Strength Indicator; a measurement in dBm indicating the power level of a Wi-Fi signal received by a device. posts →
rsync
Network protocol and utility for efficiently transferring and synchronizing files between computers over SSH or other protocols. posts →
RTSP
Real Time Streaming Protocol used for transmitting live video feeds from IP cameras over network connections. posts →
RTSP streaming
Real-Time Streaming Protocol used to transmit video feeds over network from camera sources. posts →
Rufus
A utility for creating bootable USB drives from ISO files, supporting multiple operating systems and bootloader options. posts →
RUM
Real User Monitoring; technique for measuring actual user experience and performance metrics from production applications. posts →
RUM/Synthetic
Real User Monitoring and Synthetic monitoring techniques used to proactively monitor both public and internal DNS resolution and service availability across network planes. posts →
Salamander
Traffic obfuscation mechanism that masks packet patterns to make encrypted tunnels appear as regular HTTPS traffic. posts →
SCA
Security Configuration Assessment; evaluates endpoint configuration against security standards like CIS, NIST, and PCI DSS. posts →
scale-to-zero
Pattern where infrequently used services are stopped and automatically started only when needed, minimizing resource consumption. posts →
SCP
Secure file transfer protocol that copies files between systems using SSH encryption for secure data transmission. posts →
SD_MMC
Arduino library interface for communicating with SD and MMC memory cards on ESP32 using the SDMMC protocol. posts →
second-factor authentication (2FA)
Additional authentication method beyond the initial login, such as one-time passwords or authentication keys, for enhanced security. posts →
Security Configuration Assessment (SCA)
Wazuh feature that evaluates endpoint configuration against security standards like CIS, NIST, and PCI DSS using policy templates. posts →
segment-mode
Configuration parameter controlling how narration is divided: by pages, by LLM decisions, or by text length. posts →
Self-hosted
Software deployed and maintained on your own servers or infrastructure rather than accessed as a cloud service. posts →
semantic matches
Search results based on meaning and context similarity rather than exact keyword matching, typically requiring API calls for embeddings. posts →
Serval Mesh
App creating mesh networks via Wi-Fi for text and voice communication without cellular networks. posts →
Server Name Indication
TLS extension allowing clients to specify which domain they're connecting to, enabling multiple HTTPS sites on one IP address. posts →
service descriptors
Network documents published by Tor containing information about onion services that clients retrieve to establish connections. posts →
ServiceNow API
Application programming interface for programmatically accessing and managing incidents, tickets, and data within ServiceNow's cloud-based IT service management platform. posts →
Service ticket (TGS)
A Kerberos ticket issued by the KDC to allow a user to access a specific service, encrypted with the service account's password-derived key. posts →
session_duration
Configured time period that a container remains running after being started, before automatic shutdown. posts →
sessions
A period of user activity on a website, typically from initial page load until a set timeout or departure. posts →
session token
Temporary credential returned after successful login that authenticates subsequent API requests within a single session. posts →
setup token
Credential generated during Pangolin installation used to authenticate initial configuration and onboard sites or users to the control plane. posts →
SFP interfaces
Small Form-factor Pluggable ports that support hot-swappable optical transceivers for high-speed network connections. posts →
SFTP
Secure File Transfer Protocol for encrypted file transfer over SSH connections. posts →
SFTPGo
A lightweight SFTP server solution that enables secure file transfer protocol access for uploading and downloading files remotely. posts →
SharePoint
Microsoft enterprise content management and collaboration platform for document sharing and team workspaces. posts →
SIEM tools
Security Information and Event Management platforms that aggregate and analyze logs to detect security anomalies and unauthorized access patterns. posts →
Silver Ticket
A forged Kerberos service ticket created by an attacker who has compromised a service account's password hash. posts →
SipHash24
A fast pseudorandom function designed for hashing short messages, commonly used for hash table operations and data integrity. posts →
skeleton
A pre-packaged set of themes, plugins, and sample content providing a ready-to-use foundation for quickly setting up a new site. posts →
SLA
Service Level Agreement; defines the expected level of service performance and response times between provider and customer. posts →
SLA management
Service Level Agreement management; defines and monitors agreed-upon standards for service quality and response times. posts →
SMB environment
Small to Medium Business environment; refers to IT infrastructure serving small to medium-sized organizations. posts →
SMB share
Server Message Block network share protocol enabling file sharing across Windows and Unix systems on a local network. posts →
SMBus Device
System Management Bus device that provides low-speed communication for hardware monitoring and control on motherboards. posts →
SMTP
Simple Mail Transfer Protocol; standard protocol used for sending emails from applications to mail servers. posts →
Snapshot
Point-in-time copy of a system's state, allowing it to be restored to that exact configuration later. posts →
Snapshot Lifetime
Configurable retention period determining how long snapshots are stored on the source system before automatic deletion. posts →
Snapshot Workspaces
Virtual environments configured to automatically revert to a clean initial state after each user session ends. posts →
SNI
Server Name Indication; TLS extension allowing clients to specify hostname during handshake, enabling multiple certificates on one IP address. posts →
SnipeIT
Free and open-source asset and inventory management platform targeting IT departments for tracking hardware, software, licenses, and consumables. posts →
SOCMINT
Social Media Intelligence; gathering and analyzing information from social media platforms for intelligence purposes. posts →
software-properties-common
Ubuntu package providing tools for managing software repositories and PPAs on Debian-based systems. posts →
Sonarr
An automated TV series management application that monitors, organizes, and manages television show collections. posts →
sops-nix
A NixOS tool for managing encrypted secrets that are decrypted at deploy time on each node. posts →
sounddevice
Python library for capturing and playing audio from microphones and speakers in real-time applications. posts →
Source IP/subnet
Network identifier used by DNS resolvers to determine which view or policy applies to a DNS query based on the client's origin address or network range. posts →
SPAN
Switched Port Analyzer; a managed switch feature that mirrors traffic from one port to another for monitoring. posts →
speedtest-cli
Command-line tool that measures internet download and upload speeds by running speed tests against speedtest.net servers. posts →
spend caps
Hard limits on maximum expenditure set on cloud services or APIs to prevent runaway billing from attacks or misconfigurations. posts →
Splash screen
An initial display shown briefly when a device boots up, typically showing branding or status information. posts →
split-brain
A cluster failure scenario where nodes lose communication and disagree about cluster state, potentially causing data corruption or inconsistency. posts →
Split-horizon DNS
A DNS configuration that returns different answers for the same domain based on the client's network location or identity. posts →
SQLAlchemy
Python ORM and SQL toolkit that provides database abstraction across multiple database engines. posts →
SQLite
Lightweight, file-based relational database engine that requires minimal setup and resources for deployment. posts →
SRT
SubRip Text format for storing subtitle timing and content, commonly used for video captions. posts →
SSDP discovery daemon
Simple Service Discovery Protocol service that allows devices to announce and discover each other on a local network automatically. posts →
SSH connection
A secure network protocol connection using public-key cryptography to enable encrypted remote access and file transfer between systems. posts →
sshd_config
The configuration file for the SSH daemon that controls SSH server behavior and security settings. posts →
SSH key
A cryptographic key pair used for secure authentication to servers, replacing password-based login in SSH connections. posts →
SSH key authentication
A secure login method using cryptographic key pairs instead of passwords to authenticate remote access. posts →
ssh-keygen
Command-line utility for generating SSH public and private key pairs for secure authentication. posts →
SSH Keypairs
Asymmetric cryptographic key pairs used for SSH authentication, consisting of a public key and private key for secure remote access. posts →
SSID
Service Set Identifier; the name of a Wi-Fi network that identifies it from other networks in the area. posts →
SSID Spoofing
Configuring a rogue access point to broadcast the same SSID as a legitimate network to deceive users into connecting. posts →
sslmode=require
Postgres connection parameter that enforces encrypted SSL/TLS connections and rejects unencrypted database communication. posts →
SSL Termination
The process of handling SSL/TLS encryption and decryption at a proxy, simplifying backend server security management. posts →
ST7798_DRIVER
Display driver specification for TFT LCD controllers, defining how the ESP32 communicates with the screen hardware. posts →
Statement_timeout
A PostgreSQL setting that limits the maximum duration of a single query execution to prevent expensive or runaway queries. posts →
steganography
The practice of hiding information within seemingly harmless files like images, audio, or video to avoid detection. posts →
stego-malware
Malware that uses steganography to hide commands, payloads, or data within ordinary media files to evade security detection. posts →
strategy.dynamic.timeout
Sablier configuration parameter specifying the default session timeout duration for the dynamic strategy. posts →
stress-ng
Linux utility for controlled CPU, memory, I/O, and resource stress testing to validate system limits and monitoring behavior. posts →
STUN
Session Traversal Utilities for NAT; a protocol that helps devices discover their public IP address and NAT type for peer-to-peer communication. posts →
STZ
Abbreviation for scale-to-zero; a pattern for stopping idle services and restarting them on-demand. posts →
Sub-interface
Virtual interface associated with physical interface for specific VLAN, typically named like eth0.100 for VLAN ID 100. posts →
Subnet routers
Devices that enable machines without Tailscale installed to access the mesh VPN network by routing traffic on their behalf. posts →
Summarize
Aggregate or condense data by applying functions like sum, count, or average to specific columns. posts →
Sunshine
Open-source game streaming server software that captures GPU output and streams games to Moonlight clients with low latency. posts →
SuzyQable
A hardware debugging tool used to connect to Chromebook debug ports and modify security settings like write protection. posts →
SWM
Split WIM file format; Windows image segments created when a WIM file exceeds filesystem size limits, requiring reassembly during deployment. posts →
SX1262
A LoRa transceiver module used in LoRa32 boards for long-range, low-power wireless communication. posts →
Sync Hub
Feature in NetAlertX enabling slave nodes to push monitoring data to a master instance for centralized network visibility. posts →
SYN cookies
Kernel mechanism encoding TCP state in SYN-ACK cookies to handle SYN backlog overflow without storing full connection state. posts →
Synology Hyper Backup
Synology NAS backup tool enabling automated backups to multiple destinations including other NAS devices. posts →
sysparm_display_value
ServiceNow API parameter that returns human-readable display values instead of system IDs for referenced fields. posts →
sysparm_fields
ServiceNow API parameter that specifies which incident table columns to include in the API response. posts →
sysparm_limit
ServiceNow API parameter that restricts the maximum number of records returned in a single API query response. posts →
sysparm_query
ServiceNow API parameter that defines filter conditions for querying records, using operators like STARTSWITH and IN. posts →
systemd
Linux system and service manager that controls startup, shutdown, and monitoring of system services. posts →
systemd service
Linux system service managed by systemd init system for automatic startup and process management. posts →
Tacotron2-DDC
Neural network-based speech synthesis model using double decoder consistency to improve robustness and naturalness of generated speech. posts →
Tagged and Untagged Ports
Tagged ports carry traffic from multiple VLANs; untagged ports belong to a single VLAN. Determines how network interfaces handle VLAN traffic. posts →
tar
Unix archiving tool that compresses and bundles multiple files into a single compressed archive file. posts →
tcpdump
Command-line tool for capturing and analyzing network packets in real-time or from saved files. posts →
Technitium DNS Server
A self-hosted DNS server application that supports recursive DNS resolution and encrypted protocols like DoH and DoT. posts →
Telnet
An older network protocol for remote login, transmitted unencrypted; now largely superseded by SSH but still probed by legacy IoT botnets. posts →
telnetlib
A Python library providing a Telnet client implementation for remote command execution and network administration. posts →
Test-time augmentation
Inference optimization technique where input is processed multiple ways (e.g., flipped), then predictions are averaged for improved accuracy. posts →
TFT_eSPI
Arduino library for controlling TFT LCD displays via SPI interface, enabling graphics and text rendering on small screens. posts →
TFT screen
A thin-film transistor liquid crystal display used for visual output on small embedded devices. posts →
Threadripper 2990WX
High-end AMD HEDT processor with 32 cores designed for workstation and server applications. posts →
Ticketing system
Software system that tracks and manages user requests, incident reports, and service desk interactions as individual tickets. posts →
time to first token
The latency delay before a model produces its first output token in response to an input prompt. posts →
TLS/SSL
Transport Layer Security and Secure Sockets Layer protocols that provide encryption and authentication for secure communication over networks. posts →
tmpfs
A temporary filesystem stored in RAM that provides fast, volatile storage for temporary files during container runtime. posts →
token
The smallest unit of text a language model processes, typically a word or sub-word piece. posts →
torrc
Tor daemon's configuration file located at /etc/tor/torrc containing service definitions and network settings. posts →
TOTP
Time-based One-Time Password; a temporary code generated by an authenticator app for second-factor authentication. posts →
Traefik
A modern reverse proxy and load balancer that automatically discovers services and handles routing with integrated SSL/TLS certificate management. posts →
traffic shaping
Network management technique that controls data flow by prioritizing, delaying, or limiting certain types of traffic. posts →
Transfer learning
Machine learning technique that applies knowledge from pre-trained models to new tasks with limited data. posts →
Transform Hub
Interface in Maltego where individual lookup functions can be installed; each transform takes an entity and queries data sources to return related entities. posts →
transforms
Individual lookup functions in Maltego that query data sources to find related entities from input data. posts →
Transport: SSH
Encrypted network protocol used for secure, authenticated data transfer between TrueNAS systems during replication tasks. posts →
tray icon
A small application icon displayed in the system notification area of the taskbar or menu bar. posts →
Trilogue
A three-party negotiation between the European Parliament, Council, and Commission to reconcile different versions of proposed legislation. posts →
TTL
Time-to-Live; a numeric value indicating how long a DNS record can be cached before expiring and requiring a fresh lookup. posts →
TTS
Text-to-Speech technology that converts written text into audible speech announcements. posts →
TUN/TAP drivers
Kernel-level network interface drivers that create virtual network adapters for VPN and tunneling applications. posts →
Twilio
Cloud communications platform providing APIs for sending SMS, making phone calls, and handling programmatic communication channels. posts →
TwiML
Twilio Markup Language; XML-based format defining call behavior and interactions like text-to-speech responses. posts →
TXID
Transaction ID; a 16-bit value used to match DNS responses to their corresponding queries. posts →
U8g2lib
A monochrome graphics library for embedded systems that simplifies control of small OLED and LCD displays. posts →
UDP
User Datagram Protocol, a connectionless transport protocol commonly used for DNS queries on port 53. posts →
UEFI
Unified Extensible Firmware Interface; a modern firmware standard that replaces BIOS for booting systems and hardware communication. posts →
UFW
Uncomplicated Firewall; a user-friendly firewall management tool for Linux that simplifies configuring firewall rules and policies. posts →
Umami Analytics
Open-source, self-hosted web analytics platform that tracks visitor behavior without cookies or personal profiling. posts →
unattended-upgrades
A Debian/Ubuntu tool that automatically downloads and installs security updates without manual intervention. posts →
Unbound
A validating, recursive DNS resolver that supports DNSSEC validation and can be self-hosted for enhanced security and control. posts →
unbuffered output
Printing output immediately to logs rather than storing in a buffer, ensuring real-time visibility in monitoring systems. posts →
UNC path
Universal Naming Convention path format used to access network resources, typically in the form \\server\share on Windows systems. posts →
Undecided Services
Newly discovered services in Checkmk that have not yet been explicitly selected for monitoring by the administrator. posts →
Unifi UDM Pro
UniFi Dream Machine Pro; prosumer/enterprise network router supporting VLAN configuration and advanced networking features. posts →
unpublish:workflow
n8n CLI command that disables active workflows to prevent triggers from executing during maintenance operations. posts →
urlparse
Python function that breaks down a URL into its components like scheme, netloc, path, and query parameters for analysis. posts →
UsePAM
SSH configuration option that enables or disables Pluggable Authentication Modules for SSH authentication. posts →
UUID
Universally Unique Identifier used to uniquely identify storage devices in mount configurations like fstab. posts →
uvicorn
ASGI web server implementation for running Python async web applications. posts →
Validate Remote Path
A verification process that checks whether the specified destination path exists and is accessible on the remote system. posts →
vars_prompt
Ansible feature that prompts users to interactively input variable values during playbook execution. posts →
VDEV layout
Configuration of how physical disks are organized and grouped within a ZFS storage pool for redundancy and performance. posts →
Veeam
Enterprise backup and disaster recovery software used for automated data protection and system recovery. posts →
VeraCrypt
Encryption software for creating encrypted containers and protecting sensitive data with various cipher algorithms. posts →
VFIO
Virtual Function I/O; Linux framework enabling userspace drivers and direct hardware pass-through to virtual machines via PCI isolation. posts →
vfio-pci
VFIO driver that binds PCI devices to allow direct access from virtual machines, essential for GPU passthrough. posts →
virtiofs
A high-performance file sharing protocol for virtual machines and containers, used for persistent storage access. posts →
Virtual Bridge (vmbr)
A virtual network switch in Proxmox that connects physical and virtual network interfaces, enabling communication between VMs, containers, and physical networks. posts →
VL53L1X
Time-of-flight laser distance sensor that precisely measures height from the ground for altitude tracking. posts →
VLAN
Virtual Local Area Network; a segmented network that isolates traffic and provides controlled access to specific machines or devices. posts →
VLAN-aware Bridge
A special bridge type in Proxmox that handles VLAN tagging internally, allowing VMs on different VLANs without per-interface configuration. posts →
VLAN Tagging
The process of assigning a VLAN ID to network traffic to distinguish and route data between segregated virtual networks. posts →
VNC
Virtual Network Computing; remote desktop protocol allowing users to view and control computers remotely over a network. posts →
vocoder
Neural network that converts spectrograms into realistic audio waveforms for speech synthesis. posts →
Voice API
Twilio service enabling programmatic initiation of outbound phone calls with text-to-speech messages. posts →
Vosk
Open-source speech recognition engine that converts voice input to text, known for speed and responsiveness in voice assistant applications. posts →
VPC peering
Direct network connection between virtual private clouds, allowing resources to communicate privately without traversing the public internet. posts →
WAF
Web Application Firewall; security tool that monitors, filters, and protects web applications from common attacks and malicious traffic. posts →
wait_for_connection
Ansible module that pauses playbook execution until a target host becomes reachable after a reboot or service restart. posts →
Wardriving
Practice of scanning for wireless networks while moving through physical locations to detect and log available networks. posts →
Wasabi
Cloud storage service offering affordable, scalable off-site backup and data storage solutions. posts →
WatchTower
A Docker container automation tool that automatically updates running containers when new images become available. posts →
WatchYourLan
Lightweight, minimal-configuration network monitoring tool for small networks providing real-time device detection via web interface. posts →
Waveshare ESP32 C6 Touch AMOLED 2.06
A watch-style development board featuring ESP32 C6 processor, 2.06-inch capacitive touch AMOLED display at 410x502 resolution with CO5300 driver. posts →
WebAuthn
Browser API allowing websites to register and authenticate users with passkeys instead of passwords. posts →
WebClient
A web-based interface that allows users to interact with services directly through a browser without needing traditional client software. posts →
Webhook
HTTP callback mechanism that sends real-time data from one application to another when specific events occur. posts →
WebRTC
A web-based real-time communication protocol enabling low-latency audio, video, and data transmission directly between browsers. posts →
Wekan
Open-source Kanban board application for team collaboration and project management with customizable themes and features. posts →
wg-easy
A Docker-based WireGuard VPN server with a web UI for easy management and client configuration. posts →
wgpw
A WireGuard utility command that generates secure password hashes for wg-easy authentication. posts →
Whisper
An official speech-to-text solution recommended for Home Assistant voice assistant implementation. posts →
WiFi Jamming
Emitting interference signals to disrupt or block all WiFi communication within a range, illegal in most countries. posts →
WiFi pairing
Process of establishing a wireless connection between a Canon camera and another device to enable photo or video transfer. posts →
Wildcard DNS zone
DNS configuration allowing a single record to match any subdomain, enabling generation of many distinct hostnames that all resolve validly. posts →
WIM
Windows Imaging Format; a file format used to store complete disk images, allowing efficient capture and deployment of Windows installations. posts →
WireGuard
Modern VPN protocol providing simplified, faster, and more secure tunneling compared to older protocols like OpenVPN and IPSec. posts →
wireshark
Network protocol analyzer that captures and inspects packet data in real-time or from saved files. posts →
Wyoming protocol
Integration protocol used in Home Assistant for connecting speech-to-text, text-to-speech, and other voice processing components together. posts →
XDR
Extended Detection and Response platform that combines SIEM and response capabilities to automatically react to security alerts on endpoints. posts →
Xfce
Lightweight desktop environment providing graphical user interface and remote desktop capabilities for Linux systems. posts →
XPowersLib
Arduino library for managing power delivery and battery functions through the AXP2101 power management unit on ESP32 boards. posts →
YAML
Human-readable data serialization format commonly used for configuration files and Ansible playbooks. posts →
Zeek
A network monitoring framework that analyzes traffic and logs network security events for threat detection and investigation. posts →
Zentao
Open-source project management platform designed for software development teams with agile and waterfall methodology support. posts →
Zero Trust
A security model that verifies every user and device before granting access, regardless of network location or previous authorization. posts →
ZFS replication
Snapshot-based block-level backup method that sends full data on first run, then only changed blocks incrementally on subsequent runs. posts →
ZHA
Home Assistant Zigbee Home Automation integration for managing Zigbee device networks and sensors. posts →
Zigbee Mesh Networking
Low-power wireless protocol using self-healing mesh networks to extend range and reliability of IoT devices. posts →
Zone split
DNS configuration strategy that separates internal and external records by assigning different subdomains or zones to each view rather than using policy-based routing. posts →
Zscaler
Cloud-based security platform enforcing Zero Trust policies to control access and block unauthorized applications. posts →