Nelson Figueroa

These are some blogs I enjoy.

I came across this article and it hit pretty deep: https://whatever.scalzi.com/2005/09/03/being-poor/ This post is an extension of that link with my own personal experiences.

TL;DR Having get permissions to a Kubernetes object does not imply you have list permissions and vice versa.

If you’ve been around you know I enjoy spamming phishing/scamming sites.

In a Ruby on Rails app I was working on, I wanted to include a link that would download a user’s data (bank statements in this case) as JSON.

Homebrew has a “brew leaves” command that shows all installed packages that are not depended on by other packages.

In AWS, you can use AWS Systems Manager to run commands on any EC2 Instances that have the AWS Systems Manager Agent installed.

Python lets you write optional type hints where you can return either a specified type or None.

Fake Ledger Email I recently received this email claiming to be from Ledger.

The EC2 Instance Metadata Service (IMDS) allows us to make an API call within an EC2 instance to retrieve instance metadata, such as a local IP address.

I have worked for several companies at this point.

You can use docker inspect to determine the entrypoint of a docker image.

I recently discovered canarytokens.org, which helps detect if your infrastructure has been breached through various methods.

I usually don’t need development logs persisted after I’m done with a development session of a Rails app.

We can use the find command to delete a specific directory recursively.

The recent tech layoffs have shown that employees are disposable in the eyes of executives.

Here are my donation earnings for the past year.

Warning: This method is outdated!

With AWS S3, it’s possible to redirect one domain to another.

In Ruby, when a hash is created with keys and values, the keys may or may not retain their type depending on the hash syntax.

Overview Using Amazon Web Services, we can easily set up a static site worldwide without the need to maintain servers and load balancers.

By default, GitHub Actions does not allow you to run a workflow manually.

Sorting Hashes by Key Ascending Order Let’s say we had the following hash: items = { "b": 2, "a": 3, "c": 1 } If we wanted to sort it by keys, we can use the .sort method to sort in ascending order: items = { "b": 2, "a": 3, "c": 1 } # sorting

Generating All Routes for a Model Let’s say we have an item model in a Ruby on Rails application.

In my career, I have only seen Ruby hashes being iterated through by declaring both the key and value.

In Ruby on Rails 7, Webpacker, Turbolinks, and UJS were replaced with Import Maps and Hotwire.

To set the system-wide version of Ruby with rvm run: rvm --default use <version number> For example, to use 3.1.2 as the default version system-wide, run: rvm --default use 3.1.2 Now this version will be used even when a new terminal tab or window is open…

Ignoring files within directories using .dockerignore is a bit different compared to .gitignore.

Environment variables can be set for each individual Serverless function or at the provider level for all functions.

In a previous post I wrote about how it’s possible to scrape emails from GitHub repositories using their API.

Phishing Attempt via Text Message Today, I received this text message that is obviously a phishing attempt: I was curious, so I went ahead and checked out the site.

I recently learned that it is possible to replace an existing ACM SSL certificate on any AWS resource with no downtime.

Finding EC2 Instances by IP Address In the EC2 Console In the AWS EC2 Management Console, you can search for EC2 instances using a private or public IP address.

The difference is that ~ is case-sensitive while ~* is not case-sensitive.

To invoke an Amazon API Gateway with an API Key we need to pass in the API key in an x-api-key header.

Reconnaissance Recently, I received this email: I have never used MetaMask.

Sometimes I need to get information about an EC2 instance within a script but the AWS documentation doesn’t provide many useful examples.

Note: 2022-07-21 update: I discovered a better way to do this and I wrote about it in a separate blog post.

Info: Note that Origin Access Identity has since been deprecated by AWS.

To allow an IAM Role to assume another Role, we need to modify the trust relationship of the role that is to be assumed.

Ruby on Rails allows us to define uniqueness between two database table columns (i.e. two model attributes).

Ruby on Rails allows us to specify how precise we want decimals to be by defining precision and scale in database migrations.

After deleting apps on macOS, they tend to leave behind residual files and directories throughout the system.

In Go, map contents are randomized.

This is a collection of my most used privacy tools and services.

While trying to modify dates in string form, I came across a convenient way to convert months into their numerical values.

When using redirect_to or render twice in one action, we get the AbstractController::DoubleRenderError error.

Warning: 2021-11-08 update: When I first wrote this post I thought this was a better way of writing links, especially after seeing it done this way in a professional setting.

Hack The Box is an online penetration testing platform where users can practice their hacking abilities and test their cybersecurity knowledge.

Warning: I was a scrub when I first wrote this.