HN user

cyneox

164 karma

https://blog.dornea.nu

Posts22
Comments27
View on HN
defersec.com 2y ago

Security Monitoring in AWS: Cloudtrail, Cloudwatch and Eventbridge

cyneox
1pts0
blog.dornea.nu 2y ago

Documentation for Cloud Using C4 and Structurizr DSL

cyneox
2pts0
blog.dornea.nu 2y ago

Documentation as Code for Cloud Using PlantUML

cyneox
96pts34
blog.dornea.nu 3y ago

Read HN and Reddit threads in Emacs

cyneox
3pts0
blog.dornea.nu 3y ago

AWS Custom Resources with Lambda and Golang

cyneox
2pts1
gocial.netlify.app 3y ago

Show HN: Gocial – Small PoC for social media interactions

cyneox
2pts0
slides.dornea.nu 3y ago

Hexagonal Architecture in Python

cyneox
2pts1
blog.dornea.nu 3y ago

Migrate Tiddlywiki to org-roam – Part 2: org-roam and hugo

cyneox
2pts3
blog.dornea.nu 3y ago

Migrate from Tiddlywiki to org-roam – Part 1

cyneox
1pts0
blog.dornea.nu 3y ago

Book summary: Building Microservices (2nd edition)

cyneox
2pts0
blog.dornea.nu 4y ago

How to Use Tiddlywiki via REST API in Emacs

cyneox
3pts0
blog.dornea.nu 4y ago

For digital minimalists – RSS/Atom, Emacs and elfeed

cyneox
2pts0
blog.dornea.nu 4y ago

RSS/Atom for Digital Minimalists

cyneox
2pts0
brainfck.org 4y ago

Breath – The New Science of a Lost Art (Summary and Notes)

cyneox
2pts1
slides.dornea.nu 4y ago

Show HN: Presentation as Code – Using Org and Reveal.js

cyneox
2pts0
blog.dornea.nu 4y ago

My 2021 Review

cyneox
8pts4
blog.dornea.nu 4y ago

Book review: Accelerate – The science of Lean software and DevOps

cyneox
2pts0
blog.dornea.nu 4y ago

Inbox Zero Using Getpocket

cyneox
31pts17
blog.dornea.nu 4y ago

Convert pocket-reader.el links to ePub and upload to Dropbox

cyneox
1pts1
blog.dornea.nu 5y ago

Note Taking in 2021

cyneox
249pts205
blog.dornea.nu 11y ago

Validating and pinning X.509 certificates

cyneox
2pts0
github.com 11y ago

Show HN: Smalisca – Static Code Analysis for Smali

cyneox
6pts0

The use of Infrastructure as Code (IaC) has been gaining popularity as a best-practice for automating infrastructure deployment and configuration. It brings numerous benefits such as increased development velocity, less errors and less deployment pain. One of the widely used IaC tools is AWS Cloud Development Kit (CDK), which allows developers to create resources in AWS using their preferred coding language (e.g. TypeScript, Python, Golang etc.). With CDK, developers can leverage language-specific features (for-loops, if-statements, functions, classes) and create and customize most AWS resources easily.

However, sometimes custom resources are needed, which are not directly supported by CDK. And in some cases, extra logic is required whenever a resource gets created. So was my case with AWS Systems Manager Parameter Store (SSM) SecureString parameters. These parameters ensure that sensitive data like passwords, API keys, and other credentials are encrypted using AWS KMS. While CDK supports SSM parameters, it does not allow for the creation of SSM SecureString parameters.

This is where AWS Lambda-baked custom resources come in. They allow developers to define the lifecycle management of resources and implement required logic when resources are created, changed, or deleted. In my latest blog post I've leveraged CDK, TypeScript, and Golang to create a custom resource for SSM SecureString parameters. This custom resource used an internally created lambda to take care of everything.

For me it was definitely Emacs and ORG mode. I use this combo to create presentations (pdf + reveal.js), write notes (org-roam style), do project management (ORG mode at its best), collect small code snippets (literal programming in ORG mode), almost everything...

As for a large code base I found ripgrep + rg.el (the interface in Emacs) to be pure gold!

Nice and thanks for sharing! I recently listened to the "SE Radio Podcast - Episode 531" where you talked about tailscale. I've subscribed to your blog and now I see you again on HN :D

Speaking for myself: For someone who didn't have a software engineering background (for the last decade I was mainly doing offensive Security stuff) probably the main choice would be Python. However, at some point I've felt in love with statically typed languages: The compiler became my biggest friend and I learned about the benefits of having "contracts" (in form of interfaces, strict parameter types for methods etc.) between (software) components.

That's why I've spent the last years learning Go. It taught me how to design bigger projects and how to tackle architectural problems in an easy/comprehensive way. I didn't try Rust yet because I didn't have to. I mainly code software/tools to work in cloud environments and HTTP/gRPC technologies. Under these circumstances Golang performs quite well.

For me it's true that Go "is better for getting things done": You'll get one statically linked binary that can be executed almost everywhere (without further dependencies). I'm a big fan of serverless and I wrote simple applications that currently run in AWS Lambda and Netlify (they also used Lambda under the hood). And more recently I got into web development where Golang is again my main choice (at least for the backend part). For frontend I would rather go for VueJS/React. And that's one reason why I've started to learn TypeScript.

I don't have that much experience in TS but I guess I could easily replace Golang by TS to do simple things (HTTP requests, JSON parsing etc.), especially in a Serverless environment.

While my Golang journey was accompanied by this "Golang vs Rust" debate, I do plan to learn Rust as well. But as I've mentioned before, currently I don't have any needs to do so. My advice would be: Learn both (for backend) and some TypeScript (for frontend).

Just my 2 cents...

I mostyl use PlantUML and C4 Model (by Simon Brown). I have my own collection of PlantUML related resources [1]. I've also recently found these examples [2] which are really nice.

I also do some sketchnoting (using pen & pencil) when I design a system for the first time. I wish I could easily convert those sketches to PlantUML.

[1] https://brainfck.org/#PlantUML [2]: https://skyksit.com/programming/uml/plantuml-samples/

My 2021 Review 5 years ago

My review for this year. Read about my book recommendations, preferred (software) tools, productivity tips and my daily habits.

I'm always in awe of articles like this one where people describe their workflow with the help of mindmaps, flow charts, class diagrams etc. and where they detail meticilous (self-written) extensions or scripts for categorization, readability etc.

Thanks for your kind words. It took me years to find the almost perfect workflow - at least for me (I still have some ideas how to automate several things even more).

I'm a heavy Emacs user but I thought sharing some diagrams might visualize more the described process. Also for non-techies.

I know that when you do the math, you end up with a huge list. The trick is to focus on one little portion of your reading list (the next bucket in my post).

Some months ago I've also realized I had items in my list from 2017. But I didn't read them. You don't have to read everything. Just focus on what currently has your attention: a specific event, a topic, just sth that's interestingly for you now. This way you'll manage to read more.

Again: I think the goal is not to achieve inbox zero. The goal should be to just read/learn more.

Thanks for sharing! I'm somehow in the same situations struggling to find the right time slot (and motivation, because after work + parenting at the end of time I kind of feel tired) to work on my projects. I guess it's also important to keep the right balance between IT related work and non-IT stuff. Being in front of the laptop all day long is also not what I'm aiming for. Working in the garden, doing woodwork (in general using your hands rather than your brain) also helped to keep my inner balance and stay focused.

I'm also using (Doom) Emacs + ORG-Mode. However exporting my notes to the outside world is not that smooth as with Tiddlywiki. I know there is ox-hugo (which BTW I use to write my blog posts) but for a Zettelkasten/knowledge DB I think it's not enough.

Wow! Author of the article here ...

It wasn't my intention to have such a big thread. I couldn't anticipate that "2021" in the title would trigger so many people to share their personal thoughts about apps and note taking techniques.

While the article's main focus was about note taking itself, I didn't want to compare existing solutions or even have some ranking. I also didn't have the time to try everything out (like Roam, Obsidian etc.). It's just that I have a strong preference for Tiddlywiki since I've been using it for years (not only for a Zettelkasten and note taking but also as a great UI for visualizing links between objects).

Nevertheless I'll definitely have a look at your recommendations.

To be honest: I was waiting for this kind of thread for years. I've literally tried to absorbe everything you've put together. I will definitely have a look at "How to read a book".

Now some words about my reading habbits:

- Most of time I read non-fiction books. I read newspapers, interesting articles I've found on the Web and some books.

- I use an E-Reader to read my stuff (for many years I've used a Kindle 3rd Generation which got replaced by a Pocket InkBook 3 [1])

- Everything that I find interesting gets highlighted on the E-Reader. If I'm reading a real (paper) book I'll use my notebook and make some notes in a bullet journal style. [2])

- To organize my highlights I use TiddlyWiki [3] and some really nice plugin [4] to organize books.

Regarding Tiddlywiki: I think this is one of the most underrated tool out there since it can be used for everything. You can filter and tag your content (book highlights, ideas etc.) in a way that fits your needs.

Cheers,

Cyneox

Links:

[1] https://www.pocketbook-int.com/ge/products/pocketbook-inkpad...

[2] https://bulletjournal.com/

[3] https://tiddlywiki.com/

[4] http://inmysocks.tiddlyspot.com/#%24%3A%2Fplugins%2Finmysock...

Security Engineer (m/f)| Scout24 | Berlin/Munich, Germany | Full On-Site

Scout24 Security Team is looking for passionated Security Engineers. What we need from you:

- Proficient with at least one programming language (preferably Python or Go but it's not a must)

- Hands-On experience in AWS Cloud security architecture and development

- Interest in implementing scalable and secure solutions in the AWS cloud environment

- Strong knowledge of attack vectors and defense strategies (e.g. OWASP Top 10)

- Hands-on experience on building secure architectures leveraging open-source solutions

- Enjoy working with command-line tools in Unix environments Deep experience working with software engineers and providing security consultancy in the SDLC process

- Deep understanding of SAST, DAST and their use in development pipelines

- Interest in AI/ML technologies is a plus

For more info send me an e-mail.

BR,

Cyneox (victor.dorneanu ___ähhht___ scout24 DOT com)

Security Engineer | Scout24 | Onsite | Berlin/Munich, Germany | https://boards.greenhouse.io/scout24/jobs/1506569

Scout24 Information Security team is a highly skilled blue team supporting all our teams to build and run secure digital products. We have understood that cyber security is an essential part of our business and including it in all our initiatives is natural. We are looking for Security Experts that really care.

What we need from you:

    * Proficient with at least one programming language (preferably Python or Go but it's not a must)

    * Hands-On experience in AWS Cloud security architecture and development

    * Interest in implementing scalable and secure solutions in the AWS cloud environment

    * Strong knowledge of attack vectors and defense strategies (e.g. OWASP Top 10)

    * Hands-on experience on building secure architectures leveraging open-source solutions

    * Enjoy working with command-line tools in Unix environments

    * Deep experience working with software engineers and providing security consultancy in the SDLC process
 
    * Deep understanding of SAST, DAST and their use in development pipelines

    * Interest in AI/ML technologies is a plus
Technology we’re using:
    * AWS, CloudFormation, ECS

    * ELK stack

    * Docker, Kubernetes

    * different SaaS solutions (e.g. Github, Auth0)

    * Tomcat/JVM based stacks

    * Python/Go based backend tools
For more information please send an email to jobs@scout24.com and refer to this HN thread.

Best regards, Cyneox