Andrew Baker's Latest Blog Posts

The newest posts on cloud architecture, AWS, AI and banking technology — most recent first.

Sponsored
AI Writes Your SEO in Seconds
Auto-write meta descriptions · Schema · Redirects · 100% free
Try Free →
Corporate Culture 12 May 2021 👁 67 views

302 Why Least Privilege Security Is a Lie: 3 Root Causes

In technology, there is a tendency to solve a problem badly by using gross simplification, then come up with a catchy one liner and then broadcast this as doctrine or a principle. Nothing ticks more boxes in this regard, than the principle of least privileges. The ensuing enterprise scale deadlocks created by a crippling implementation […]

Read more →
Public Cloud 23 Mar 2021 👁 66 views

303 AWS S3 ETags: Verify File Integrity Using MD5 Hashes

I was playing with S3 the other day an I noticed that a file which I had uploaded twice, in two different locations had an identical ETag. This immediately made me think that this tag was some kind of hash. So I had a quick look AWS documentation and this ETag turns out to be […]

Read more →
Public Cloud 10 Mar 2021 👁 58 views

305 SSH EC2-User Login Fix for WordPress Bitnami Instances

So after getting frustrated (and even recreating my ec2 instances) due to a “Permission denied (publickey)”, I finally released that the worpress builds by default as set up for SSH using the bitnami account (or at least my build was). This means each time I login using ec2-user I get: Being a limited human being, […]

Read more →
Cyber 25 Feb 2021 👁 107 views

308 SYN Flood Testing with hping3: A Practical Guide

Getting an application knocked out with a simple SYN flood is both embarrassing and avoidable. Its also very easy to create a SYN flood and so its something you should design against. Below is the hping3 command line that I use to test my services against SYN floods. I have used quite a few mods, […]

Read more →
Corporate Culture 29 Jan 2021 👁 66 views

309 The Triplication Paradigm: Why Removing Duplication Fails

Introduction In most large corporates technology will typically report into either finance or operations. This means that it will tend to be subject to cultural inheritance, which is not always a good thing. One example of where the cultural default should be challenged is when managing IP duplication. In finance or operations duplication rarely yields any benefits […]

Read more →
Corporate Culture 28 Jan 2021 👁 38 views

310 Public Cloud Migration: Why Lift-and-Shift Strategies Fail

The cloud is hot…. not just a little hot, but smokin hot!! Covid is messing with the economy, customers are battling financially, the macro economic outlook is problematic, vendor costs are high and climbing and security needs more investment every year. What on earth do we do??!! I know…. lets start a crusade – lets […]

Read more →
Pages: 130313233