Viewing profile — richadams

There are some good additional resources referenced in the docs here: https://response.pagerduty.com/resources/reading/ Specifically, Google's SRE books are particularly useful ( h…

https://spectreattack.com/ Information site with some more information, and links to papers on the two vulnerabilities, called "Meltdown" and "Spectre" (with logos, of course). ( h…

A fiber cut in Oregon could be responsible ( https://puck.nether.net/pipermail/outages/2015-June/007906.h... ). I've been seeing connectivity issues with us-west-2 for most of the …

They're currently beta testing a new (more modern) site: https://beta.united.com/ual/en/us/

"Bugs that are eligible for submission: ... The ability to brute-force reservations, MileagePlus numbers, PINs or passwords" "Do not attempt: ... Brute-force attacks" This seems co…

Someone else pointed this out too. The goal of the tip is really to stop users SSHing in just to fix that one little thing, so you could still allow your automation frameworks SSH …

Doh, I feel stupid now. I only looked at bandwidth costs, not the request prices. That's what I get for editing my post late at night based on reading, instead of based on personal…

Yup, this was the intention. You could still allow your automation processes SSH access, just disable it for your users. The idea is that if a user can't SSH in (at least not witho…

Ah, I wasn't aware of that, very good point! The goal of the tip is really to stop users SSHing in just to fix that one little thing, so you could still allow your automation frame…

Perfectly valid. This particular tip certainly seems to have caused some great discussion! It worked for my particular case, but I can definitely see it not working for everyone. I…

I'll admit I hadn't really look at this in depth, using S3 without a CDN solved a particular use case I had a while ago, and it just seemed unnecessary to add a CDN in front of it.…

Just disabling inbound SSH connections, the servers can still SSH out to other systems to pull in files, configurations, clone git repos, etc. It's just a way to stop yourself from…

I think the problem is that I've made it seem like a strict rule in the article; "You must disable SSH or everything will go wrong!!!". It's really just about quickly highlighting …

Wow, didn't know about pre-signed URLs, very useful. I've added this info to my article, thanks!

Thanks, fixed.

Great point with regards to IAM roles. The applications I've worked on don't download things from user-defined URLs, so this never even occurred to me. Is the purpose of blocking 1…

Great post, I had no idea you could do this with ELB. I've added your link to the additional reading list in my post, thanks for sharing!

Absolutely, great point! AWS isn't for everyone, and there can be lots of cases where it's cheaper to use dedicated hardware. Shop around before jumping in. I've added this as a ne…

This is correct. The tip about disabling SSH isn't about security, it's just about quickly highlighting areas where you're not automated. When developing an application for example…

Thanks for the tip! CSS updated.

Oops, sorry about that. Should be fixed now.

I encourage anyone who's avoiding taking part because they don't know assembly or reverse engineering to at least give the tutorial a try, you might just surprise yourself! Having …