Alex Atkinson AlexAtkinson

Compliance & InfoSec Primer

Important

Disclaimer: This IS NOT legal advice.

Until the mid-2010's the "technology industry" was widely considered to be unregulated, resulting in tremendous harm. The colloquialism "move fast and break things" is from these times, and despite being a proven travesty, continues to influence leadership across industry.

Fortunately, today, both data and related business operations are regulated.
Unfortunately, there are many in leadership roles who see the compliance-related fines and penalties as acceptable business risks -- especially as their expected tenure ostensibly limits personal exposure to said risks.

SLDC, ALM, and CICD

RELATED: Git Branching Strategies, Versioning, Artifacting

These processes comprise the bulk of the technical footprint necessary for developing and releasing software products.

Important

Like Git, there are too few who understand this material -- especially in startups.
While this material may not initially be as appealing to non-technical leadership as shipping a feature, it becomes imperative with the first major outage, failed InfoSec audit, or data breech.

Git Branching Strategies

RELATED: SDLC, ALM, & SDLC, Versioning, Artifacting

From the merge hell of SVN and the early days of Git to the refined tactics we enjoy today, there have been many developments in branching strategies, but only a few remain relevant. This document covers these strategies as well as their adoption considerations.

Branching Strategies

The first three strategies are the most commonly used, with the fourth highlighting a critical anti-pattern, and the last being used for Linux kernel development; and some other large projects. Skip learning about the last two for now, but know that they exist.

iptables

NOTICE: iptables is being deprecated. See nftables.

Architecture

Understanding the architecture of netfilters is helpful, but not necessary to make use of the information here.

Architecture

Ansible Cheat Sheet

Stuff I forgot...

TODO: Remember the stuff that drove me nuts as a noob...

Personal Use Tactics

These tactics shouldn't be employed in production.

Linux Redirects

Redirect operations are quite involved. Here are a few of the highlights:

The files: '/dev/std{in,out,err}', are symlinks to file descriptors.
File descriptors (aka file handles) are numbers that identify open files.
A file is an object that stores data, information, settings, or commands.
The numbers commonly seen in the redirect '2>&1' are file descriptors.
Running 'file /dev/std*' outputs: /dev/stdin: symbolic link to /proc/self/fd/0 /dev/stdout: symbolic link to /proc/self/fd/1

	#!/usr/bin/env bash
	# v1: https://gist.github.com/AlexAtkinson/7a60dc26a8dd94fb910e01529b379ae2
	# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
	# PW Material Generator
	# Notes:
	# - Used by genpass
	# - Generates 20 characters per invocation
	# - Takes ~1ms per character generated on an average
	# system
	# - Will _always_ lead with an ALPHA character

	#!/usr/bin/env bash
	# v2: https://gist.github.com/AlexAtkinson/99e7eb85fdc95b36a1978e4e7e8e92ac
	# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
	# PW Material Generator
	# Notes:
	# - Used by genpass
	# - Generates 20 characters per invocation
	# - Takes ~1ms per character generated on an average
	# system
	# - Will _always_ lead with an ALPHA character

	#!/usr/bin/env bash
	# Truecolor demo
	# Thanks to those who I've taken inspiration from.
	# My Adds:
	# - int bounding
	# - text overlay for single-line output with contextual hint

	__color_truecolor_demo() {
	local TXT FG COLUMN COLUMNS FILL_L FILL_R R G B
	TXT="This will be a smooth gradient if truecolor is supported."

	#!/usr/bin/env bash
	# shellcheck disable=2183

	# GIST NOTES
	# v1 is here: https://gist.github.com/AlexAtkinson/49078eb9a2dcff17b28371eb92964cca

	# Clean Test - run:
	# NOTE: The hash in the URL below should match this gist. <<< VERIFY THIS
	# docker run -e LANG="C.UTF-8" -e LC_ALL="C.UTF-8" -it debian /bin/bash
	# apt update && apt -y install curl