welcome to cyberchuckle dot com. this is where i write about hacking things, breaking things, and occasionally fixing them.
if you're here you probably know who i am. if not — i'm a security engineer, i break stuff for a living, and i have strong opinions about terminal emulators.
first rule of cyberchuckle: there are no rules. but if there were, rule one would be "don't be lame."
did you know tcp_tw_reuse was removed from the kernel and nobody noticed for like 3 years? yeah.
i was debugging a connection issue on a prod box and went down the rabbit hole of socket states and time-wait assassination. turns out the param still "exists" in sysctl but does absolutely nothing since 5.15.
anyway just use SO_REUSEADDR like a normal person. don't be me.
vim users: "i use a modal editor, it's so efficient"
emacs users: "my os has a text editor built in"
me: ed
that's it. just ed. the standard editor. the one true editor. the editor that comes with every unix system and has since the dawn of time. no syntax highlighting. no mouse support. you want to see line 5? type "5". you want to delete line 5? type "5d". you want to save? type "w". you want to quit? type "Q" because you're edpilled and edmaxxing.
try it. you won't.
hear me out. if you need a GUI to intercept HTTP requests, are you even trying?
mitmproxy > burp. and if you're really about that life just pipe everything through a python script with `request.get` and pretend you're a real hacker.
also burp suite costs like $400/yr and mitmproxy is free. you're literally paying for a repeater tab. stop it.
CloudFormation: JSON but make it YAML. Only Amazon thinks this is a good idea. 5/10 for the laugh.
Terraform: HCL is JSON if JSON was designed by someone who hates parsers. State files in S3? more like state files in the TRASH. 7/10.
CDK: just write real code you cowards. typescript, python, go — pick your poison. one cdk synth and you get a cloudformation template anyway BUT AT LEAST YOU WROTE REAL CODE. solid 8/10, losing 2 points because npm.
this entire blog is deployed with CDK btw. check the stack.