Статический анализатор кода для облачных сред “инфраструткура как код”
Построенных при помощи различных инструментов (см далее по тексту). Сканирует облачную инфраструктуру, подготовленную с использованием шаблонов Terraform, Cloudformation, Kubernetes, Serverless или ARM, и обнаруживает неправильные конфигурации безопасности и несоответствия требованиям:
https://github.com/bridgecrewio/checkov/
Построенных при помощи различных инструментов (см далее по тексту). Сканирует облачную инфраструктуру, подготовленную с использованием шаблонов Terraform, Cloudformation, Kubernetes, Serverless или ARM, и обнаруживает неправильные конфигурации безопасности и несоответствия требованиям:
https://github.com/bridgecrewio/checkov/
GitHub
GitHub - bridgecrewio/checkov: Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as…
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew. - bridgecrewio/checkov
RDP на CentOS 8
Рассматриваются варианты с GNOME и Xfce:
https://sys-adm.in/systadm/nix/925-centos-8-nastrojka-rdp-xrdp.html
Рассматриваются варианты с GNOME и Xfce:
https://sys-adm.in/systadm/nix/925-centos-8-nastrojka-rdp-xrdp.html
sys-adm.in
CentOS 8 - Настройка RDP (XRDP) - Для сисадминов и не только
Sys-Adm.in - Сайт для сисадминов и не только. Здесь собраны различные материалы основанные на личной практике. Блог Евгения Гончарова.
GitHub Action That Automates Portfolio Generation | by Kaustubh | Oct, 2020 | Towards Data Science
https://towardsdatascience.com/github-action-that-automates-portfolio-generation-bc15835862dc
https://towardsdatascience.com/github-action-that-automates-portfolio-generation-bc15835862dc
Medium
GitHub Action That Automates Portfolio Generation
Dockerized GitHub Action using Python and Basic Front-end.
Presenting v7.0.0 of the npm CLI - The GitHub Blog
https://github.blog/2020-10-13-presenting-v7-0-0-of-the-npm-cli/
https://github.blog/2020-10-13-presenting-v7-0-0-of-the-npm-cli/
The GitHub Blog
Presenting v7.0.0 of the npm CLI
We’re releasing v7.0.0 of the npm CLI, which includes exciting new features such as Workspaces, automatically installed peer deps, and more!
Announcing Consul Terraform Sync Tech Preview
https://www.hashicorp.com/blog/announcing-consul-terraform-sync-tech-preview
https://www.hashicorp.com/blog/announcing-consul-terraform-sync-tech-preview
HashiCorp
Announcing Consul-Terraform-Sync Tech Preview
We are pleased to introduce Consul-Terraform-Sync: a new tool for automating network infrastructure, powered by our robust Terraform provider ecosystem.
Let's Create Our Own Authentication API with Nodejs and GraphQL | CSS-Tricks
https://css-tricks.com/lets-create-our-own-authentication-api-with-nodejs-and-graphql/
https://css-tricks.com/lets-create-our-own-authentication-api-with-nodejs-and-graphql/
CSS-Tricks
Let’s Create Our Own Authentication API with Nodejs and GraphQL
Authentication is one of the most challenging tasks for developers just starting with GraphQL. There are a lot of technical considerations, including what
Docker Announces Open Source Compose for AWS ECS & Microsoft ACI
https://www.infoq.com/news/2020/10/docker-announces-compose-ecs-aci/
https://www.infoq.com/news/2020/10/docker-announces-compose-ecs-aci/
InfoQ
Docker Announces Open Source Compose for AWS ECS & Microsoft ACI
Docker announced that they are open-sourcing the code for the beta implementations of the Amazon ECS and Microsoft Azure Container Instances (ACI) Compose integrations. This is the first time Docker has made Compose available for the cloud.
Apple's T2 chip has an unfixable vulnerability that could allow root access | AppleInsider
https://appleinsider.com/articles/20/10/05/apples-mac-t2-chip-has-an-unfixable-vulnerability-that-could-allow-root-access
https://appleinsider.com/articles/20/10/05/apples-mac-t2-chip-has-an-unfixable-vulnerability-that-could-allow-root-access
AppleInsider
Apple's T2 chip has an unfixable vulnerability that could allow root access
Apple macOS devices with Intel processors and a T2 chip are vulnerable to an unfixable exploit that could give attackers root access, a cybersecurity researcher claims.
Breaking Serverless on Purpose with Chaos Engineering – The New Stack
https://thenewstack.io/breaking-serverless-on-purpose-with-chaos-engineering/
https://thenewstack.io/breaking-serverless-on-purpose-with-chaos-engineering/
The New Stack
Breaking Serverless on Purpose with Chaos Engineering
As chaos engineering becomes a more mainstream way of proactively seeking out your system’s weaknesses, we see it applied to increasingly complicated circumstances and with teams of all sizes. One such area is serverless. After all, serverless computing is…
Ubuntu 20.10: What's New?
https://www.youtube.com/watch?v=r1cHQ9uMbDY
https://www.youtube.com/watch?v=r1cHQ9uMbDY
YouTube
Ubuntu 20.10: What's New?
The Ubuntu 20.10 release features a number of modest changes and improvements. In this video review we look at what's new in Ubuntu 20.10, from the latest GNOME 3.38 desktop to a powerful new Linux kernel.
As always, leave your thoughts about this release…
As always, leave your thoughts about this release…
Анонс HashiCorp Waypoint
Open Source инструмент, который обеспечивает рабочий процесс разработчика в разрезе создания, развертывания и выпуска приложений на любой платформе (большое количество поддерживаемых платформ):
https://www.hashicorp.com/blog/announcing-waypoint
up
https://www.hashicorp.com/resources/hashicorp-waypoint-a-whiteboard-video-with-armon-dadgar
Open Source инструмент, который обеспечивает рабочий процесс разработчика в разрезе создания, развертывания и выпуска приложений на любой платформе (большое количество поддерживаемых платформ):
https://www.hashicorp.com/blog/announcing-waypoint
up
https://www.hashicorp.com/resources/hashicorp-waypoint-a-whiteboard-video-with-armon-dadgar
yogeshojha/rengine: reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.
https://github.com/yogeshojha/rengine
https://github.com/yogeshojha/rengine
GitHub
GitHub - yogeshojha/rengine: reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable…
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous ...
Announcing HashiCorp Boundary
Open Source единый менеджер удаленных подключений (ssh, vpn и тп):
https://www.hashicorp.com/blog/hashicorp-boundary
Open Source единый менеджер удаленных подключений (ssh, vpn и тп):
https://www.hashicorp.com/blog/hashicorp-boundary
I Built a Raspberry Pi Music Server - raspberry_pi
https://www.reddit.com/r/raspberry_pi/comments/j8y9f0/i_built_a_raspberry_pi_music_server/
https://www.reddit.com/r/raspberry_pi/comments/j8y9f0/i_built_a_raspberry_pi_music_server/
reddit
I Built a Raspberry Pi Music Server
Posted in r/raspberry_pi by u/plazman30 • 2,632 points and 112 comments
How Long Does It Take To Learn Terraform
Оказывается не долго. Точка входа достаточно проста. Мало того этот инструмент можно использовать локально в своей тестовой лаборатории, которая например базируется на KVM:
https://www.thedevcoach.co.uk/how-long-to-learn-terraform/
Оказывается не долго. Точка входа достаточно проста. Мало того этот инструмент можно использовать локально в своей тестовой лаборатории, которая например базируется на KVM:
https://www.thedevcoach.co.uk/how-long-to-learn-terraform/
The Dev Coach
How Long Does It Take To Learn Terraform? And How To Speed Up Your Learning.
Learning Terraform can be easy and could take as little as 1 week to master the basics, and as little as 3 months to really master.
Дамп NTLM хэшей Windows с расшифровкой / дальнейшим использованием
Получаем хэши юзеров (несколько способов) и потом или используем или расшифровываем:
https://sys-adm.in/systadm/windows/926-kak-sdelat-damp-ntlm-kheshej-windows.html
Получаем хэши юзеров (несколько способов) и потом или используем или расшифровываем:
https://sys-adm.in/systadm/windows/926-kak-sdelat-damp-ntlm-kheshej-windows.html
lab.sys-adm.in
Sys-Admin Laboratory
Open Sys-Admin BLD DNS - Focus on information for free with adblocking and implicit cybersecurity threat prevention.
Наткнулся на tech talk от Digital Ocean по поводу "HTTP/3 и QUIC" по ссылке https://www.digitalocean.com/community/tech_talks/quic-http-3-open-standards-and-open-source-code
Может быть интересным (en)
За пост и ссылку спасибо @progxaker
Может быть интересным (en)
За пост и ссылку спасибо @progxaker
Digitalocean
QUIC & HTTP/3: Open Standards and Open Source Code | DigitalOcean
This talk is intended to help jumpstart anyone with an interest in Web or Internet communications on the exciting new protocols QUIC and HTTP/3. It attempts …
Part 8. External Caching in Node.js with Redis | by Alex Losikov | Sep, 2020 | Medium
https://medium.com/@losikov/part-8-external-caching-in-node-js-with-redis-2f12607c995
https://medium.com/@losikov/part-8-external-caching-in-node-js-with-redis-2f12607c995
Medium
Part 8. External Caching in Node.js with Redis
Caching with redis, how to use in Node.js, run redis server with docker, and mock redis for unin tests…