SaturdayMP Show #26: Human Resource Machine

Posted on January 3, 2024 by Chris C

In this episode I play Human Resource Machine by Tomorrow Corporation, a game that simulates programming in assembly. Anyone have any suggestions for optimizing the number of steps in the Fibonacci Visitor (Year 22)?

Thanks to the person on the Dev Edmonton Slack you asked about the game. I didn’t review it but hopefully this video helps you decide if you should buy it or not.

Found this video useful? Then help others find it by liking, subscribing, and sharing.

Have question you want answered in a future video? Pair on a problem? Constructive feedback? Send an email to ask@saturdaymp.com.

Need help shipping secure high quality software faster? Check out Saturday Morning Productions.

Posted in Fun, Saturday MP Show, Software Development | Tagged , , , , | Comments Off on SaturdayMP Show #26: Human Resource Machine

SaturdayMP Show #25: TPS Report Uploader CFT Walkthrough (Vulnerable Blazor Application)

Posted on December 27, 2023 by Chris C

Happy Holidays!

In this episode I do a walkthrough of the TPS Report Uploader capture the flag (CTF) I created. The walkthrough includes how to exploit the vulnerabilities and how to fix them in this .NET 8 Blazor application. You can try the CTF, or just follow along with the video, by downloading the TPS Report Uploader repo.

Tools used in this walkthrough:

Thanks to Edmonton .NET User Group (EDMUG) letting me to present this walkthrough for the first time.

Found this video useful? Then help others find it by liking, subscribing, and sharing.

Have question you want answered in a future video? Pair on a problem? Constructive feedback? Send an email to ask@saturdaymp.com.

Need help shipping secure high quality software faster? Check out Saturday Morning Productions.

Posted in Saturday MP Show, Security, Software Development | Tagged , , , , , | Comments Off on SaturdayMP Show #25: TPS Report Uploader CFT Walkthrough (Vulnerable Blazor Application)

SaturdayMP Show #24: Can you use Docker Compose Watch without a Dockerfile?

Posted on December 20, 2023 by Chris C

In this episode I answer a viewer’s question if you can use Docker Compose Watch without a Dockerfile. Actually, it’s more me checking if they are correct. Spoiler alert, they are correct and you can’t use Docker Compose Watch without a Dockerfile. You will get an error message: “can’t watch service [service-name] without a build context”.

Previous video about Docker Compose Watch:

Found this video useful? Then help others find it by liking, subscribing, and sharing.

Have question you want answered in a future video? Pair on a problem? Constructive feedback? Send an email to ask@saturdaymp.com.

Need help shipping secure high quality software faster? Check out Saturday Morning Productions.

Posted in Saturday MP Show, Software Development | Tagged , , , | Comments Off on SaturdayMP Show #24: Can you use Docker Compose Watch without a Dockerfile?

Happy Holidays!

Posted on December 19, 2023 by Chris C

May your holidays be filled with more joy then discovering a legacy project with 90% test coverage, the happiness that rivals getting a project out the door on-time and under budget, and secure from sensitive information leaks from too much Christmas cheer.

Happy holidays from SaturdayMP and all the best in 2024!

P.S. – The SaturdayMP virtual office will be closed from Dec 21st to Jan 1st. I’ll still be checking and responding to message but much slower then normal.

Posted in Fun | Tagged | Comments Off on Happy Holidays!

SaturdayMP Show #23: Adding Basic Auth to NGINX Passenger Docker (Part 3)

Posted on December 15, 2023 by Chris C

In this stunning conclusion to the 3 part series I finally get HTTP Basic Authentication working. Including merging my changes into the main branch in GitLab and making sure it works in staging and production in Render. The video is so long because I made dumb mistake 10 minutes in.

Spoiler: When using the Passenger Docker image it’s really important you don’t delete:

RUN rm -f /etc/service/nginx/down

Found this video useful? Then help others find it by liking, subscribing, and sharing.

Have question you want answered in a future video? Pair on a problem? Constructive feedback? Send an email to ask@saturdaymp.com.

Need help shipping secure high quality software faster? Check out Saturday Morning Productions.

Posted in Saturday MP Show, Security, Software Development | Tagged , , , , , , , | Comments Off on SaturdayMP Show #23: Adding Basic Auth to NGINX Passenger Docker (Part 3)

SaturdayMP Show #22: Adding Basic Auth to NGINX Passenger Docker (Part 2)

Posted on December 4, 2023 by Chris C

In this episode I get the Basic Authentication NGINX configuration working using the envsubst tool to replace environment variables in the config file. Ran out of time to test the fix in actual staging. That will hopefully be done in the 3rd part of this series.

Watch the previous video in the series:

Found this video useful? Then help others find it by liking, subscribing, and sharing.

Have question you want answered in a future video? Pair on a problem? Constructive feedback? Send an email to ask@saturdaymp.com.

Need help shipping secure high quality software faster? Check out Saturday Morning Productions.

Posted in Code Examples, Saturday MP Show, Software Development | Tagged , , , , , | Comments Off on SaturdayMP Show #22: Adding Basic Auth to NGINX Passenger Docker (Part 2)

SaturdayMP Show #21: Adding Basic Auth to NGINX Passenger Docker (Part 1)

Posted on November 29, 2023 by Chris C

In this episode I explain and then start to add HTTP Basic Authentication to the Saturday MP website which is a Ruby on Rails application hosted on a Passenger Docker image. As usual I ran into some trouble and at the end of the video figured out I should use the envsubst command to dynamically set the Basic Auth, and other values, in the NGINX config.

Found this video useful? Then help others find it by liking, subscribing, and sharing.

Have question you want answered in a future video? Pair on a problem? Constructive feedback? Send an email to ask@saturdaymp.com.

Need help shipping secure high quality software faster? Check out Saturday Morning Productions.

Posted in Saturday MP Show, Software Development | Tagged , , , , , | Comments Off on SaturdayMP Show #21: Adding Basic Auth to NGINX Passenger Docker (Part 1)

SaturdayMP Show #20: Hack the Box – Busqueda Part 3 (Root Flag)

Posted on November 22, 2023 by Chris C

In this episode I find the root flag for the Busqueda machine on Hack the Box. Took a wrong turn looking for Gitea and Git vulnerabilities but eventually found the root flag with help from the walkthrough.

Watch part 2 of me hacking the Busqueda machine:

Thanks to Hack the Box for creating a playground for myself, and others, to learn cyber security skills. Thanks to kavigihan for creating the Busqueda machine.

Found this video useful? Then help others find it by sharing it.

Have question you want answered in a future video? Pair on a problem? Constructive feedback? Send an email to ask@saturdaymp.com.

Need help shipping secure high quality software faster? Check out Saturday Morning Productions.

Posted in Saturday MP Show, Security | Tagged , , | Comments Off on SaturdayMP Show #20: Hack the Box – Busqueda Part 3 (Root Flag)

Saturday MP Show #19: Comparing Docker Volumes to Docker Compose Watch

Posted on November 15, 2023 by Chris C

In this episode I answer a viewer question from episode #16: Are Docker Volumes are a two way sync?. The answer is kind-of.

You can view the question in the comments section of episode #16 where I try out Docker Compose Watch for the first time.

Thanks to victorajayi9056 for asking the question. Thanks to Docker for creating Docker. That sounded weird. Anyway it has been an invaluable tool for creating development environments for my clients.

Have question you want answered in a future video? A question I should ask you? Pair on a problem? Constructive feedback? Send an email to ask@saturdaymp.com.

Need help shipping secure high quality software faster? Check out Saturday Morning Productions consulting.

Posted in Saturday MP Show | Tagged , , , | Comments Off on Saturday MP Show #19: Comparing Docker Volumes to Docker Compose Watch

SaturdayMP Show #18: Hack the Box – Busqueda Part 2 (Reverse Shell)

Posted on November 8, 2023 by Chris C

In this episode I get a reverse shell working and make some progress on capturing the root flag. Spoiler: There is a self hosted GitHub like website.

Watch part 1 of me hacking the Busqueda machine at:

Thanks to Hack The Box for creating a playground for myself, and others, to learn cyber security skills. Thanks to kavigihan for creating the Busqueda machine:

Have question you want answered in a future video? A question I should ask you? Pair on a problem? Constructive feedback? Send an email to ask@saturdaymp.com.

Need help shipping secure high quality software faster? Check out Saturday Morning Productions.

Posted in Saturday MP Show, Security | Tagged , , , | Comments Off on SaturdayMP Show #18: Hack the Box – Busqueda Part 2 (Reverse Shell)