rhenning

EE Notes

Math and Equations

Math

Engineering Notation

Scientific notation where exponents are multiples of three: https://en.wikipedia.org/wiki/Engineering_notation

rhenning

Equifax Credit Reporting Agency Compromise of 2017

Overview

Credit histories of 143 million Americans were stolen from Equifax by hackers in May 2017 due to compromise of an unpatched Apache Struts software vulnerability (CVE-2017-5638). Equifax disclosed the breach in early September 2017.

rhenning

The Phoenix Project

Chapters 1-5

• Bill goes out of his way during his conversation with Dick to understand the real business impact of the payroll outage.
• IT Operations is frequently viewed as a business cost/liability rather than a valued asset, as evidenced by language used to discuss infrastructure. Steve says "IT ... should be like the toilet ... I don't ever

rhenning

i = 5381
k = 33

out = ARGF.read.each_char.inject(i) do |h, c|
  h * k + c.ord
end

puts out

rhenning

Argument for why you shouldn't build private clouds for < 200K nodes: https://m.subbu.org/dont-build-private-clouds-9a54b3d30c8b#.hxdkjwtix

Main talk: Managing secrets in AWS w/ Hashicorp Vault

Why Vault?

• Platform independent
• Active development

rhenning

require 'netaddr'
require 'open-uri'

MAXCDN_IPS =
  open('https://www.maxcdn.com/one/assets/ips.txt').map(&:chomp).map do |range|
    NetAddr::CIDR.create(range).enumerate
  end.flatten

puts MAXCDN_IPS.include?(ARGV.first)

rhenning

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKS2e39w/BrCkcxlpnTpiKY7jmHxMIpxHUp9LJByfznPmdd9Nm/LGsFqE0QvECACNE55N4hFDmm/xU9TofjPbT6D8swh20o1WijNf6qNdxfC2zLyKUaUzECzgba4pm1T7uzCUADI/+aiEEo52Hdz1gVV68dn3XIB8+Jycq4mAXcHAWr9ca2JrcUBAO/mQee54Y/a83kragbEz1HLfCepomZPqoBflqdKep3IaV2ayel3KP7uN0QquAejbiaM0Ry45PGbLw7DRva4yiZqGvlsAPokCfFkrHM52rkVteiouer85HTFcH6DIkNQsBCI5/OqNkrTuVJ8u8bbqdHk5RlgYn rhenning2

rhenning

require 'r509'

csr = R509::CSR.new(csr: File.read(ARGV[0]))

ca_csr = R509::CSR.new(
  subject: {
    CN: 'www.weblinc.com',
    O: 'WebLinc Corp',
    C: 'US',
    ST: 'Pennsylvania',

rhenning

https://www.youtube.com/watch?v=-XARG9W2bGc

• SAML federation at scale
  • Automate onboarding
    • Allow a cross-account trust to create SAML providers w/ MFA from master/payer acct (15:47)
      • This allows bootstrapping new accounts by a small group of admins w/ real IAM accts or root acct
    • automate integrating each subaccount's SAML ID provider
    • automate deployment of subaccount IAM role & policies
    • automate deployment of central directory groups/structure
• keep role definitions consistent across subaccounts

rhenning

class FlatHash
  def self.flatten_hval(pre, val)
    out = {}
    val.each do |k, v|
      out["#{pre}_#{k}"] = v
    end
    flatten(out)
  end

  def self.flatten_aval(pre, val)