typicalrunt.me

In the previous article I showed how a model can be disabled.

When I first started using model concerns I struggled with how I could test the functionality of the concern, without having to replicate the tests across all models.

I am taking the wraps off of my first product ever: Security Awareness for Busy People.

I am working on a new project, Security Awareness for Busy People, and I accidentally found a trick to bypass one of the restrictions when working in the AWS SES sandbox.

Today’s article is going to be a bit different.

I love static websites.

As you can probably tell, the site has been redesigned for 2020.

This post will be a living document that stores all my favourite quotes.

These are the songs I was listening to this year.

I recently tweeted about how people new to programming, or companies that look for candidates and give them programming tests, don’t understand that the first code one writes is just a draft.

UPDATE 2019-10-07: There is a bug in CloudFormation when outputting the LogGroup ARN.

I love using CloudFormation for provisioning AWS services but one of the more annoying aspects about working with it is that setting up the initial CloudFormation stack is an all-or-none endeavour.

I have been writing a lot of code in Go lately and recently I was asked by someone why I write in Go.

Recently I was approached by an internal recruiter looking for someone who dabbles in Cloud, software development, infrastructure and security (so-called “Cloud DevSecOps”).

A common pattern I see used by Engineering teams when I provide security consulting is them creating Lambda function and hosting their code in their own S3 buckets.

When I was starting to dive deeper into the Ops world, I learned an interesting thing about Linux filesystems and moving files around.

A recurring theme in my InfoSec career has been to expose people to how their seemingly-secure practices are actually very insecure.

I am often asked the question at networking events, “What do you do at Unbounce?”

I’m learning how to relax for the first time in my life.

At work I recently had to show our risk profile with Github vulnerability alerts and display them in Domo.

IAM provides a way for users and roles to become another role.

These are the songs I was listening to this year.

I don’t often talk of employer, mainly to keep an arm’s length distance between them and the writing on my blog.

Recently, I was speaking with a company about opportunities they have.

My writing in 2017 and 2018 has been quite sparse, for good reason.

NB: Linebreaks (\) have been added to the CLI commands for readability.

If you program in Go and use it to access AWS resources, you’ll notice that each of the services in the SDK require a region to be explicitly specified.

Use Case While building infrastructure, especially in The Cloud, you often come across the need to manage a subdomain.

I’m currently reading the book, Drive, by Daniel Pink.

These are the songs I was listening to this year.

This article assumes intermediate knowledge of an EC2 instance’s lifecycle and various AWS services.

During beer o’clock at work, I happened upon Roman, who is a software developer on our API and Integrations team.

Recently, the CodeCommit service from AWS became available in Canada (ca-central-1 region).

Secrets management is a constant topic for debate in tech and security circles, even more so for users of cloud providers.

Gitlab CI is amazing.

I have worked for many companies in my career and noticed some basic trends regardless of size, industry, or composition.

This article demonstrates how you can quickly rotate your AWS keys in 2 minutes.

I purchased business cards awhile back but I never wrote anything about it.

For the past few years in the software development world, there has been a push to break-up monolithic applications into microservices.

Update 2016-09-27: The AWS CloudFormation team has just released a new feature that allows you to write your templates in YAML.

A couple months ago I removed the Disqus comment section from this website.

🎵… sitting in a tree…🎵 For both my personal projects, and projects at Unbounce, I use Ansible to create CloudFormation stacks.

A recent development in my life is removing the daily caffeine intake that normally happens.

Recently at Unbounce we have been talking about what it takes to move between the ranks of junior, intermediate, and senior developer 1.

Don’t hate.

Recently I updated the code for this website to use Makefiles and rely less on one-off shell scripts.

Many people I speak with don’t have a security mindset, not because they aren’t aware of security, but rather that it doesn’t play a role in their life.

At Unbounce, we have recently started using Terraform for creating our AWS infrastructure.

I’ll state my bias up front: I do not like interview take-home projects.

I was talking with one of my mentees last week and we happened upon the topic of money and wages.