Blog on t0ul

GittyUp! From Linode+Dev Hackathon

Sun, 12 Feb 2023 00:00:00 +0000

I recently built a project for a hackathon and figured I’d share it here for those interested in managing their GitHub.com repository security.

Gitty Up

Gitty Up Sec.

It’s a web app where a user can create an account and add an admin GitHub.com token so that they can run their GitHub org against security best practices;

secret scanning
static code analysis
dependency scanning
branch protections

For each repo present in the Org. with a single report is generated.

How I got my CISSP

Wed, 25 Jan 2023 00:00:00 +0000

Intro

The Certified Information Systems Security Professional or CISSP is known for its rigorous exam and challenging requirement of needing at least 5 years of experience working in security-related roles.

I’m happy to say I was able to pass on the first attempt and would like to share my experience and study path with others interested in the CISSP.

I. Career Background

DevSecOps engineer for 4 1/2 years building security features for a platform in AWS cloud with Python, Go, and Kubernetes which obtained the ISO 27001 & ISO 27002 type I and Type II. During that time, I also received the AWS security specialty certification. Then moved to a whole security infrastructure security analyst job for about 5 months before attempting the CISSP Exam.

Introducing Automate the Boring Stuff with GO

Fri, 04 Nov 2022 00:00:00 +0000

The beginner-friendly guide to programming with GO/GoLang. No prior experience is required!

Welcome to the Free E-book for Beginner Coders Interested in GO

If you’re new to GO and a Beginner in programming then there are not really books or learning resources for you. Most GO related books expect you to have some programming experience and involve complex topics such as Web Application building.

Ultimate GoLang Beginner's Cheat Sheet

Fri, 28 Oct 2022 00:00:00 +0000

A handy reference guide for GoLang

When I first learned GoLang 5 years ago, I remember constantly looking up its syntax and things like printing, which was much different than Python 3’s way of doing things.

So, I’ve put together the things I looked up the most during my first few months with GoLang in a handy cheat sheet.

But don’t worry, I’ll provide it in text for those who like blog posts.

InfraHamBurglar: a CyberSecurity News Bot built with AWS Lambda, GoLang, and Twitter API v2

Wed, 19 Oct 2022 00:00:00 +0000

InfraHamBurglar a Twitter Bot for sharing CyberSecurity News

Today I am introducing the InfraHamBurglar Twitter Bot, which is reporting on the latest “Robble, Robble” worldwide.

As someone who works in cybersecurity, I thought it would be funny to have a Twitter bot named the “InfraHamBurglar” as a pun on an Infrastructure Burglar that is going Ham. Where Infrastructure loosely means Servers and Databases that exist in the cloud.

DevSecOps Engineer Resume

Mon, 10 Oct 2022 00:00:00 +0000

In this post, I provide my DevSecOps Engineer Resume as an example, and the tool I wield to make it competitive when applying to jobs.

Current DevSecOps Engineer Resume

I use a plain text-style resume when applying online to jobs because of the Applicant Tracking System (ATS), which is a piece of software that scans most people’s resumes whenever they apply online.

How I used Machine Learning with GoLang to get More Followers on TikTok

Tue, 04 Oct 2022 00:00:00 +0000

In this post, I will show how to use machine learning with GoLang to build a model to predict what makes a video follow-worthy on my TikTok based on my posts so far.

The data set was created by going through my videos and manually inputting data into a google sheet. For whatever reason, TikTok doesn’t have an easily accessible API, and paid products are expensive.

GoLang, Svelte, and Wails 2.0: Cross Platform Desktops just got even easier

Tue, 27 Sep 2022 00:00:00 +0000

Intro

In the past building, a desktop app required you to learn a completely different tech stack. However, if you’re a GoLang enthusiast, then you’re in luck. In the many frameworks written, there’s Wails v2. Which has been designed to let users stick with GoLang and their JavaScript (JS) framework choice to build a fully cross-platform desktop application.

Wails works similarly to Electron if you’re familiar with it. If not, here’s the gist: you can build a desktop app without learning anything other than JS, HTML, and CSS.

Most Popular GoLang Frameworks

Wed, 21 Sep 2022 00:00:00 +0000

Intro

A framework is typically an opinionated way of building something that a dev or group of devs have built and shared with the world. Web Dev frameworks are by far the most popular.

A web dev framework is one that provides templates and design patterns for building Web Applications like Google, Yahoo, FaceBook, InstaGram, Twitter, and so on. Some of the most popular web dev ones of all time are Ruby on Rails and Python’s Django, but what if you’re a GoLang programmer?

DevOps Engineer Resume

Sun, 18 Sep 2022 00:00:00 +0000

In this post, I provide my DevOps Engineer Resume as an example, and the tool I wield to make it competitive when applying to jobs.

DevOps is a challenging field to get into and as a consequence, it is even more challenging finding DevOps Engineers in most folk’s immediate network.

In fact, I had never met a DevOps Engineer until my internship in college.

How to use GoLang, Hugo, and Lambda for a Single Page Application

Thu, 15 Sep 2022 00:00:00 +0000

Intro

In this post, I’ll show how I built the website Free Resume Scanner with Hugo and AWS Serverless. The architecture of the app is similar to most Single Page Web applications. But instead of using React.js, or whatever the trendy Javascript framework is at the moment. We’ll use Hugo as our front end. I personally chose this setup with blogging in mind because blogging is one of the best ways to boost a website’s search engine optimization (SEO) to get web traffic aka users.I hope that you use this as a starting point in your dev adventures and even more so consider building small open source tools as well.

Make your Static Netlify Pop with a Newsletter feature

Sat, 03 Sep 2022 00:00:00 +0000

In this post, I’ll show exactly how to create a newsletter for your site and enable users to sign up via a popup as they read the article.

What we’re creating

I’ll show how to create a popup form that will enable users to sign-up for the Newsletter. It’ll activate once the visitor to the site has read a certain amount of the post. In this case, it’ll be the Tech Newsletter, but the code will work for any newsletter.

How to Recover After Seeing Your Start-Up Idea Get Beat

Tue, 19 May 2020 00:00:00 +0000

How to Recover After Seeing Your Start-Up Idea Get Beat

Intro

Hi, I may or may not have spent the last two months creating TraderNooks- An Animal Crossings New Horizons trading platform where users build a wishlist and can find others who have items on their wishlist with the click of a button.

Then, after finding users that owns their items they can select to make an offer. The offer is composed of what the user is offering to trade and their preferred means of contact.

How to beat Animal Crossing New Horizons

Thu, 02 Apr 2020 00:00:00 +0000

Beginning

In the beginning, you awake in a tent without anything to your name, or so you think until you talk to Tom Nook, who will politely inform you that you owe him 5000 Nook Miles.

To pay him, you’ll have to do specific tasks to earn Nook Miles.

Also, he’ll mention to bring him any unique creatures you find to him because he has a ‘friend’.

No-Code Review for Website and Web Application building

Thu, 02 Apr 2020 00:00:00 +0000

Intro

No code is a recent movement of technology designed to allow those who do not know how to program build web applications, websites, and even mobile apps.

nocode.tech is a website that has an assortment of no-code offerings, describing where each tool is used in the process of developing a web app, website, or mobile app. It from this site that I found Carrd.co for building a website.

Dependency injection with GOlang

Sun, 29 Mar 2020 00:00:00 +0000

Intro

Dependency injection is a form of testing that emphasizes testing of the expected behavior of the functions. Whereas, mocking or faking is concerned with testing the implementation of the code. Because it has the assumption that the thing being mocked accurately reflects the real-world use of the thing being mocked.

However, no matter how close a mock gets the the actual thing it is suppose to represent it will never be that thing. Yet, mocking isn’t evil and is a valid means of making progress when stuck on writing tests, and having some tests is better than having 0 tests.

Top 10 tips for Animal Crossing New Horizons

Sun, 29 Mar 2020 00:00:00 +0000

Intro

I joined the Animal Crossing New Horizons wave, and as a new player, here are things I wish I would have known during my first 40+ hours of play.

1.) Do not Sell Wood, Stones, and Iron

I made the mistake of selling everything that I could early on in the game to pay of the loan but ended up wasting nook miles just to go to islands to get wood, stones, and iron.

How to Give Feedback on Pull Requests

Thu, 19 Mar 2020 00:00:00 +0000

Intro

I have a lot of pull requests during my first year of software engineering, and most of them have been for code and documentation. I have learned from feedback from other team members (or lack of response) what works and what does not. So here is how I go about providing feedback.

In general analyzing code changes are easier because one easy way to see if the proposed changes should get the +1 or not is if the system does not break.

How I use Test-Driven Development

Sun, 15 Mar 2020 00:00:00 +0000

How does Test-Driven Development Impact the Software I create?

I remember starting as an entry-level software engineer and hearing senior engineers on my team get into heated debates about Test-Driven Development (TDD).

At the time, I was against it because it seemed like extra work. All I wanted was to finish feature of the week.

However, it all changed after my first feature went into production and caused me and other engineers hours of headaches.

What I learned from working in the industry for one year

Wed, 11 Mar 2020 00:00:00 +0000

Introduction

I’ve learned to do the following as a junior software engineer during my first year in industry.

TL;DR

Write a design document
Document as much as possible
Test-Driven Development but not 100% test coverage
Log as much as possible

1.) I learned to start with a design document

A design document is a way of showing viewers of your software what the intended behavior is. I like to use Draw.io an open-source online piece of software that allows you to save the drawing to your local machine. So, what I like to do is layout the program’s intended logic is with all the possible decision paths, which has helped to find edge cases and write tests.

Why I think Everyone should learn at least one programming language in the U.S.

Wed, 11 Mar 2020 00:00:00 +0000

Intro

The economy has transitioned from industrial to the information age, from physical to digital. Yet, the public education system has not caught up with this shift and is still equipping graduates with an Industrial Age skillset. A skillset that does not enable participation in the Information Age Economy.

Comparison of Skillsets

Before going further, here is a basic comparison of skillsets to keep in mind when thinking about public k-12.

How I became a software engineer

Fri, 06 Mar 2020 00:00:00 +0000

High School

I went to school, where the graduating class was only 200 people, and there were not any programming classes. Neither one of my parents were STEM majors; both were blue-collar workers with zero interest in modern technology.

Because of my parent’s lack of interest in technology, our household did not have a computer until 7th grade, and it was only for homework assignments (MS Word).

How to Use Anchore Inline Docker Image Scan

Wed, 04 Mar 2020 00:00:00 +0000

Introduction

Anchore is a tool that scans Docker images for common vulnerabilities and not so common vulnerabilities if you purchase the paid version. However, the free version is useful and should still be used on your team to avoid common vulnerabilities.

Thankfully, the Anchore team is kind enough to have created an entire shell script to both install the Anchore Database locally and run the Anchore CLI all in one line.

How to use PiNg to Debug Networking Problems

Sun, 01 Mar 2020 00:00:00 +0000

Can’t visit any webpages from your browser?

You’re at home and notice that the internet seems to be out whenever you try to connect to a website on your laptop.

You have already tried turning the wifi router on and off again already, but with no luck.

Now it is time to check other possible causes.

Potential Causes

Local network connection
Internet Service Provider (ISP)
Local router

What to do?

Open a terminal or command prompt if you’re on windows and use PiNg to check if any website is reachable, www.google.com is a common choice.

How to use Kubebench to Add Security to a Kops Provisioned Kubernetes Cluster

Mon, 17 Jun 2019 00:00:00 +0000

Kops is a popular opensource tool that makes it easier to provision and deploy Kubernetes clusters in Cloud Service Providers.

However, the default provisioning may not adhere to the best practices as outlined by Kube-bench for Security, and kops probably cannot achieve a one-size-fits-all security solution as each user’s use of kops may vary.

Yet, one should be aware of what default security choices kops makes on behalf of the user, which are generally well, thanks, kops team!

How to use Regex expressions when working with AWS WAF CloudFormation template

Wed, 01 May 2019 00:00:00 +0000

AWS announced support for using Regex Expressions for their WAF CloudFormation Templates. However, a quick prayer to the lord of IT – Google – reveals that no one has figured it out from a solely CloudFormation solution.

This post tells you what can (and cannot) be done through editing the CloudFormation WAF template, which I discussed earlier in:

How to Add OWASP 10 to a Load Balancer for a Kubernetes Cluster and EC2 Instances

How to use Docker Bench Security for Container and Host Hardening

Wed, 17 Apr 2019 00:00:00 +0000

Docker is the rage now in the field of containerization and, as a consequence, is a target for attack.

Although Docker does have some security benefits out of the box upon installation enabled via the default settings, they may not be enough to prevent attacks. This article will focus on using Docker Bench for Security to aid in tweaking the settings of Docker in line with the standard best practices of using Docker.

Blog on t0ul

GittyUp! From Linode+Dev Hackathon

Gitty Up

How I got my CISSP

Intro

I. Career Background

Introducing Automate the Boring Stuff with GO

Welcome to the Free E-book for Beginner Coders Interested in GO

Ultimate GoLang Beginner's Cheat Sheet

InfraHamBurglar: a CyberSecurity News Bot built with AWS Lambda, GoLang, and Twitter API v2

DevSecOps Engineer Resume

Current DevSecOps Engineer Resume

How I used Machine Learning with GoLang to get More Followers on TikTok

GoLang, Svelte, and Wails 2.0: Cross Platform Desktops just got even easier

Intro

Most Popular GoLang Frameworks

Intro

DevOps Engineer Resume

How to use GoLang, Hugo, and Lambda for a Single Page Application

Intro

Make your Static Netlify Pop with a Newsletter feature

What we’re creating

How to Recover After Seeing Your Start-Up Idea Get Beat

How to Recover After Seeing Your Start-Up Idea Get Beat

Intro

How to beat Animal Crossing New Horizons

Beginning

No-Code Review for Website and Web Application building

Intro

Dependency injection with GOlang

Intro

Top 10 tips for Animal Crossing New Horizons

Intro

1.) Do not Sell Wood, Stones, and Iron

How to Give Feedback on Pull Requests

Intro

How to give feedback on PR’s related to code changes

How I use Test-Driven Development

How does Test-Driven Development Impact the Software I create?

What I learned from working in the industry for one year

Introduction

1.) I learned to start with a design document

Why I think Everyone should learn at least one programming language in the U.S.

Intro

Comparison of Skillsets

How I became a software engineer

High School

How to Use Anchore Inline Docker Image Scan

Introduction

How to use PiNg to Debug Networking Problems

Can’t visit any webpages from your browser?

Potential Causes

What to do?

How to use Kubebench to Add Security to a Kops Provisioned Kubernetes Cluster

How to use Regex expressions when working with AWS WAF CloudFormation template

How to use Docker Bench Security for Container and Host Hardening