vagelim

Make it real

Ideas are cheap. Make a prototype, sketch a CLI session, draw a wireframe. Discuss around concrete examples, not hand-waving abstractions. Don't say you did something, provide a URL that proves it.

Ship it

Nothing is real until it's being used by a real user. This doesn't mean you make a prototype in the morning and blog about it in the evening. It means you find one person you believe your product will help and try to get them to use it.

Do it with style

vagelim

data "aws_ami" "latest" {
most_recent = true
owners = ["591542846629"]

  filter {
      name   = "name"
      values = ["*amazon-ecs-optimized"]
  }

  filter {

vagelim

complete -W "\`grep -oE '^[a-zA-Z0-9_-]+:([^=]|$)' Makefile | sed 's/[^a-zA-Z0-9_-]*$//'\`" make

vagelim

#!/bin/bash
# Requires pip
pip install virtualenv
virtualenv listener
listener/bin/pip install kombu
listener/bin/python openstackEvents.py

vagelim

-- show running queries (pre 9.2)
SELECT procpid, age(query_start, clock_timestamp()), usename, current_query 
FROM pg_stat_activity 
WHERE current_query != '<IDLE>' AND current_query NOT ILIKE '%pg_stat_activity%' 
ORDER BY query_start desc;

-- show running queries (9.2)
SELECT pid, age(query_start, clock_timestamp()), usename, query 
FROM pg_stat_activity 
WHERE query != '<IDLE>' AND query NOT ILIKE '%pg_stat_activity%' 

vagelim

resource "digitalocean_droplet" "kafka" {
    image = "ubuntu-14-04-x64"
    name = "${var.machine_name}"
    region = "nyc2"
    size = "4gb"
    private_networking = true
    ssh_keys = [
      "${var.ssh_fingerprint}"
    ]

vagelim

#
# read/write access to python's memory, using a custom bytearray.
# some code taken from: http://tinyurl.com/q7duzxj
#
# tested on:
# Python 2.7.10, ubuntu 32bit
# Python 2.7.8, win32
#
# example of correct output:
# inspecting int=0x41424344, at 0x0228f898

vagelim

docker network inspect bridge | jq '.[].Containers[] | "\(.Name)", "\(.IPv4Address)"' | sed -e '$!N;s/\n/ /' -e 's/"//g' -e 's,/16,,g'

vagelim

# Ensure you have `jq` installed - http://stedolan.github.io/jq/
$ brew install jq
...
  /usr/local/Cellar/jq/1.4: 15 files, 748K, built in 9 seconds

# Grab your API_KEY and create an APPLICATION_KEY from https://app.datadoghq.com/account/settings#api
$ export API_KEY=aaabbbccc
$ export APPLICATION_KEY=111222333

$ curl -s "https://app.datadoghq.com/reports/v2/overview?with_meta=true&api_key=$DD_API&application_key=$DD_APP" \

vagelim

/*
GID inconsistency bruteforcer
This can be used to detect LD_PRELOAD rootkit that hide fds, procs and files based on GID
Since GID is an unsigned int, it is finite and thus bruteforceable, however it might take a while.
This took less than 20mins on my system, this may vary based on your setup.

NOTE: the rkit could detect it is under GID bruteforce attack and switch GIDs, however this is not easy to perform.

This will detect Umbreon and other GID based rkits