OWASP Top Ten API Risks for 2023

So I wanted to make a cronjob in lambda… I found myself needing to make a cronjob using AWS Lambda. It was fairly complex, used python and JS (both!) inside of one container and needed to be useable anywhere, both from my local machine or inside of Lambda. I knew there were a few different […]

I while back I built a number of pipelines using the docker-build-push action here. This uses buildx and buildkit to do its build/push stuff, and allows if needed for things like multi-arch builds. However what I quickly discovered was that you could not use ECR for the caching part of this, which at the time […]

The Problem: So I tend to get up very early in the morning, maybe 4-5am most days. ‘Sleeping In’ for me is ~6am or later, and that rarely happens. Lately, instead of adding more blog content, I’ve been working on a new site to attach to ShavingTheYak. Its an automated blog feed/aggregator, and its getting […]

The Problem: You have a service already running in EKS and the ingress is going through an ALB which is controlled already by the AWS ALB Controller. The url is company.example.com/api. You are now asked to allow any requests to some other domain, like api.otherexample.com/api to also work on your service, because ‘convenience’. The DNS […]

Maybe. Storage company Cerabyte has released a video documenting the latest on their perpetual storage solution that uses ceramic tech. They are claiming 10,000 Terabyte storage solutions by 2030, and the product lifespan apparently would be more than 5 thousand years. I generally take commercial claims with a grain of salt when I see them, […]