-
Continue reading →: Security: OWASP Top Ten (Notes)
The Open Web Application Security Project (OWASP) provides a top ten security risks in web applications at https://owasp.org/www-project-top-ten/ . The ranking of risks can help developers (and organisations) make their applications more secure. The 2021 OWASP Top Ten Broken Access Control Cryptographic Failures Injection Insecure Design Security Misconfiguration Vulnerable and…
-
Continue reading →: Security: Risk Assessment (Notes)
The National Institute of Standards and Technology (NIST) produced the NIST Special Publication (SP) 800-30 to help conduct risk assessments. A risk is where a threat intersects with vulnerability, e.g. where a vulnerability exists and is used by a threat. Threat sources can come in many forms such as: Adversarial…
-
Continue reading →: AWS – EC2 User Data: Preparing Ubuntu Instance For Ansible Management (AWS / Ansible)
I have used previous blog posts to discuss using Ansible to create / manage AWS EC2 instances, and using Terraform with Ansible to create / manage AWS EC2 instances. However, there are people that prefer to use the AWS web console over Infrastructure as Code (IaC). If you find yourself…
-
Continue reading →: AWS Lambda – Stop Instances Outside Office Hours (Python / AWS)
I previously wrote about using some Python to stop AWS EC2 instances that had the tag “office_hours” and indicated that this could be automatically run via AWS Lambda. This blog post is a brief follow up with some notes on creating the Lambda function, using the Python from the previous…
-
Continue reading →: Ansible – SSH and Password Protected Private Keys (Linux)
It is recommended to password protect private SSH keys, so if they do ever end up in the wrong hands then a password is still needed to access them. If you wanted to go really secure Ansible Vault could be used to encrypt the private key alongside the password. This…
-
Continue reading →: Ring Doorbell 3 Fails To Connect To Wi-Fi
At the beginning of 2021 our household invested in a Ring doorbell. It’s a pretty good device but in the early hours of 7th December something happened (possibly related to the AWS outage) and the doorbell decided that it no longer wanted to connect to the wi-fi network it’s been…
-
Continue reading →: TCO: Total Cost of Ownership (Cloud)
The costs of using the cloud are sometimes discussed without taking into affect the Total Cost Of Ownership (TCO). In this blog post I am going to be looking at some of the potential TCO that may have been missed when comparing traditional “on premise” to Cloud services. Note: There…
-
Continue reading →: Storing Data In The Cloud
The cloud offers many services for storing data which can be a double edged sword. In this blog post I am looking at some of the considerations that should be looked at before any data is moved into a cloud environment. Know Your Data The amount of data that you…
-
Continue reading →: Terminal Not Reading Input, C# and Visual Studio Code (C Sharp / C#)
I’m currently refreshing my knowledge skills of C# (C Sharp), starting with a work through of C# Programming (Mike McGrath) to help with my ASP.NET university project. On my desktop computer I’m using Visual Studio instead of Visual Studio Code (my preferred IDE for most languages), but on my ageing…
-
Continue reading →: What Is The Difference Between Scaling Up And Scaling Out (Cloud)
One of the advantages of cloud infrastructure is the ability to scale infrastructure to meet demand. The options for scaling are: Scaling Up / Down Scaling Up / Down can also be referred to as vertical scaling and is when components within a single instance are increased or decreased. For…


