Cloud Security Orienteering: Checklist
by Rami McCarthy
via TL;DR sec
How to orienteer in a cloud environment, dig in to identify the risks that matter, and put together actionable plans that address short, medium, and long term goals.
Based on the Cloud Security Orienteering methodology.
| # How to install the latests version of ruby | |
| # 1. clone ruby/ruby | |
| # 2. autoconf | |
| # 3. ./configure | |
| # 4. cd ext/openssl && ruby extconf.rb --with-openssl-dir=<openssl_root>; make; make install | |
| # 5. cd ../../ | |
| # 6. make | |
| # 7. make install-nodoc | |
| # You should be ready ti run this script!!!! |
If you're encountering ping github.com failing inside WSL with a Temporary failure in name resolution, you're not alone — this has been a long-standing issue, especially when using VPNs or corporate networks.
This issue is now fixed robustly with DNS tunneling, which preserves dynamic DNS behavior and avoids limitations like WSL’s former hard cap of 3 DNS servers in /etc/resolv.conf.
DNS tunneling is enabled by default in WSL version 2.2.1 and later, meaning that if you're still seeing DNS resolution issues, the first and most effective fix is simply to upgrade WSL. Upgrading WSL updates the WSL platform itself, but does not affect your installed Linux distributions, apps, or files.
To upgrade WSL, follow these steps,
| class ActiveRecord::Relation | |
| # Preload one level a chained association whose name is specified in attribute. | |
| def preload_chain(attribute, collection: nil) | |
| preloader = ActiveRecord::Associations::Preloader.new | |
| preloader.preload(collection || records, attribute.to_sym) | |
| self | |
| end | |
| # Preload all levels of a chained association specified in attribute. Will cause infinite loops if there are cycles. | |
| def deep_preload_chain(attribute, collection: nil) |
| gulp.task('build', gulpsync.sync(['unlock', 'compress']), function () { | |
| var endpoint = '/apps/' + config.phoneGap.appId; | |
| var env = config.ensure.environment(argv.env, argv.debugmode); | |
| pgBuild.auth({ token: config.phoneGap.authToken }, function (e, api) { | |
| gulp.src('tmp/*.zip').pipe(tap(function (file, t) { | |
| var options = { | |
| form: { | |
| data: { |
| # maybe.py - a Pythonic implementation of the Maybe monad | |
| # Copyright (C) 2014. Senko Rasic <[email protected]> | |
| # | |
| # Permission is hereby granted, free of charge, to any person obtaining a copy | |
| # of this software and associated documentation files (the "Software"), to deal | |
| # in the Software without restriction, including without limitation the rights | |
| # to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | |
| # copies of the Software, and to permit persons to whom the Software is | |
| # furnished to do so, subject to the following conditions: | |
| # |
| /* somewhere in your Core.CQRS */ | |
| // Base class for all ES-based aggregate command handling components; | |
| // | |
| // NOTE: "Component" is a logical grouping of message handlers by function | |
| // They provide good place to encapsulate chaining of cross-cutting concerns | |
| // into a pipeline, providing simplified helper methods for registration of message handlers | |
| // | |
| // Components are similar to Services, thus they only contain handlers of single type (ie Command Handlers only) | |
| // Components operate on envelope (infrastructure) level |
| (function () { | |
| var arr = ["(function () {", "var arr = [", "arr[1] += arr.map(function(x) { return String.fromCharCode(0x22) + x + String.fromCharCode(0x22); }).join(', ') + '];';", "arr.forEach(function(x) { console.log(x); });", "}())"]; | |
| arr[1] += arr.map(function(x) { return String.fromCharCode(0x22) + x + String.fromCharCode(0x22); }).join(', ') + '];'; | |
| arr.forEach(function(x) { console.log(x); }); | |
| }()) |
