Tech Notebook by Lucas

1.0 Attacks, Threats, and Vulnerabilities 1.1 Social engineering techniques Credential harvesting: transfer of password files and authentication information. Invoice scam: fake invoices. Spear phishing: directed attack aiming to obtain private/personal information. Watering hole attack: users visit a central website or location. 1... Read More

App Service Within Azure Architecture The architecture for App Service is called Antares. The Control Plane API requests start from ARM (Azure Resource Manager) to Antares’ Geomaster. The Geomaster is a component that serves as a load balancer keeping track of state of App Service’s stamps (scale units) around the world and directing... Read More

Basics & Concepts VNet & DNS The VNet uses Azure DNS by default. NIC’s inside a VNet use the VNet DNS configuration by default. An internal DNS private zone called IDNS is created automatically inside every VNet. Any NIC added to the VNet gets registered within IDNS The domain name for the pri... Read More

Compute and Networking Amazon EC2 (Elastic Compute Cloud) Secure, resizable compute capacity in the cloud. It is designed to make web-scale computing easier for developers. It offers the broadest choice of processor, storage, networking, OS, and purchase model. Pricing: $ Spot Instances. $$ Savings Plan. $$$ Res... Read More

Presentation Video Characteristics of Automotive Ecosystem Connectivity: on-demand services Autonomous Driving: push towards full autonomy. Lots of sensors, camera readers, up to 25TB/day of data Multimodal Mobility: point A to point B Marketplace: whole list of contextual, local, location-based services like food ordering & pay... Read More

References The Kubernetes Handbook GitHub - fhsinchy/kubernetes-handbook-projects Useful Code Snippets # Create 'pod/<pod_name>' # Run <image_name> inside pod kubectl run <pod_name> \ --image=<image_name> \ --port=80 # 'ls -la' for k8s kubectl get pod/service # Create 'service/<pod_name>' # Run load balanc... Read More

Basics Commands terraform init creates the Remote State: configures your local settings, downloads provider requirements, similar to activating a Python virtualenv terraform plan compares current state with desired state terraform apply makes the necessary API calls to create/delete/update the resources as needed, then polls them peri... Read More

API Gateway Error codes: 403: Access denied (authentication or authorization issues) 429: Limit exceeded or too many requests (throttling) 502: Incompatible output 504: INTEGRATION_FAILURE or INTEGRATION_TIMEOUT (default = 29s for all integration types) Lambda authorizers: an API Gateway fe... Read More

There are many articles on how to host a static website using S3. Many more explain how to enable https, and plenty of them lay out how to use your own domain to host them. AWS’ documentation alone covers all of it. In fact, the base for this article is in the documentation pages. What makes this article worth writing (and hopefully reading) ... Read More