資料加密

Cryptomator

    https://websetnet.net/zh-TW/encrypt-your-files-before-uploading-it-to-cloud-with-cryptomator/

    https://blog.changyy.org/2022/11/pcloud-cryptomator-pc-app-nas-linux.html

EncFS

    

其它比較：https://www.sohu.com/a/310743207_185201

COVID-19 武漢肺炎

20230604 (日)

可能在晚上開始流鼻水不止開始（家人傳染 20230602 看醫生）

20230605 (一)

只有流鼻水，以為過敏還有去上班，下班回家騎車路途中覺得很累（現現，腰已經有一點酸），睡一下覺起來發現支撐身體的地方都酸痛，腰、小腿與前臂肌肉靠近膝蓋的地方，一測後陽性，睡前一顆吃普拿疼

20230606（二）

起床發燒，以上狀況又多痛一點，加上頭痛眼窩痛（吃普拿疼），晚上看醫生

20230607（三）

一樣發燒，但身體、頭痛眼窩痛比較不酸痛

20230608（四）

只剩 頭痛眼窩痛有一點點微微的頭，所以上班了

202306080755,36.4
202306080038,37.2
202306071424,36.9
202306071322,37.2
202306070827,37.8
202306070721,37.7
202306070105,37.2
202306061325,37.5
202306060900,38.3,普
202306060000,37.6,普

Windows Server 2016 TLS 1.2

 

.NET C# Version: 4.0.30319.42000

SSO AAD 取得 access_token 錯誤

Results:Bad Request {"error":"invalid_request","error_description":"AADSTS1002016: You are using TLS version 1.0, 1.1 and/or 3DES cipher which are deprecated to improve the security posture of Azure AD. 

PowerShell ISE 檢查

https://www.alitajran.com/wp-content/uploads/scripts/Get-TLS.ps1

Function Get-RegValue { [CmdletBinding()] Param ( # Registry Path [Parameter(Mandatory = $true, Position = 0)] [string] $RegPath, # Registry Name [Parameter(Mandatory = $true, Position = 1)] [string] $RegName ) $regItem = Get-ItemProperty -Path $RegPath -Name $RegName -ErrorAction Ignore $output = "" | select Path, Name, Value $output.Path = $RegPath $output.Name = $RegName If ($regItem -eq $null) { $output.Value = "Not Found" } Else { $output.Value = $regItem.$RegName } $output } $regSettings = @() $regKey = 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319' $regSettings += Get-RegValue $regKey 'SystemDefaultTlsVersions' $regSettings += Get-RegValue $regKey 'SchUseStrongCrypto' $regKey = 'HKLM:\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319' $regSettings += Get-RegValue $regKey 'SystemDefaultTlsVersions' $regSettings += Get-RegValue $regKey 'SchUseStrongCrypto' $regKey = 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v2.0.50727' $regSettings += Get-RegValue $regKey 'SystemDefaultTlsVersions' $regSettings += Get-RegValue $regKey 'SchUseStrongCrypto' $regKey = 'HKLM:\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727' $regSettings += Get-RegValue $regKey 'SystemDefaultTlsVersions' $regSettings += Get-RegValue $regKey 'SchUseStrongCrypto' $regKey = 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server' $regSettings += Get-RegValue $regKey 'Enabled' $regSettings += Get-RegValue $regKey 'DisabledByDefault' $regKey = 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client' $regSettings += Get-RegValue $regKey 'Enabled' $regSettings += Get-RegValue $regKey 'DisabledByDefault' $regKey = 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' $regSettings += Get-RegValue $regKey 'Enabled' $regSettings += Get-RegValue $regKey 'DisabledByDefault' $regKey = 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' $regSettings += Get-RegValue $regKey 'Enabled' $regSettings += Get-RegValue $regKey 'DisabledByDefault' $regKey = 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server' $regSettings += Get-RegValue $regKey 'Enabled' $regSettings += Get-RegValue $regKey 'DisabledByDefault' $regKey = 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client' $regSettings += Get-RegValue $regKey 'Enabled' $regSettings += Get-RegValue $regKey 'DisabledByDefault' $regKey = 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server' $regSettings += Get-RegValue $regKey 'Enabled' $regSettings += Get-RegValue $regKey 'DisabledByDefault' $regKey = 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client' $regSettings += Get-RegValue $regKey 'Enabled' $regSettings += Get-RegValue $regKey 'DisabledByDefault' $regSettings

PowerShell ISE 啟用 TLS 1.2 (只啟用 .NET 4.X  和 Server, Client)

https://www.alitajran.com/wp-content/uploads/scripts/Set-ExchangeTLS.ps1

# Enable TLS 1.2 If (-Not (Test-Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server')) { New-Item 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -Force | Out-Null } New-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -Name 'Enabled' -value '1' -PropertyType 'DWord' -Force | Out-Null New-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server' -Name 'DisabledByDefault' -value 0 -PropertyType 'DWord' -Force | Out-Null If (-Not (Test-Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client')) { New-Item 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -Force | Out-Null } New-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -Name 'Enabled' -value '1' -PropertyType 'DWord' -Force | Out-Null New-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client' -Name 'DisabledByDefault' -value 0 -PropertyType 'DWord' -Force | Out-Null Write-Host 'TLS 1.2 has been enabled.' -ForegroundColor Cyan # Enable TLS 1.2 for .NET 4.x If (-Not (Test-Path 'HKLM:\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319')) { New-Item 'HKLM:\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319' -Force | Out-Null } New-ItemProperty -Path 'HKLM:\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319' -Name 'SystemDefaultTlsVersions' -value '1' -PropertyType 'DWord' -Force | Out-Null New-ItemProperty -Path 'HKLM:\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319' -Name 'SchUseStrongCrypto' -value '1' -PropertyType 'DWord' -Force | Out-Null If (-Not (Test-Path 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319')) { New-Item 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319' -Force | Out-Null } New-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319' -Name 'SystemDefaultTlsVersions' -value '1' -PropertyType 'DWord' -Force | Out-Null New-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319' -Name 'SchUseStrongCrypto' -value '1' -PropertyType 'DWord' -Force | Out-Null Write-Host 'TLS 1.2 for .NET 4.x has been enabled.' -ForegroundColor Cyan

參考：https://www.alitajran.com/how-to-enable-tls-on-windows-server/