Author Archives: Chris C

SaturdayMP Show #21: Adding Basic Auth to NGINX Passenger Docker (Part 1)

In this episode I explain and then start to add HTTP Basic Authentication to the Saturday MP website which is a Ruby on Rails application hosted on a Passenger Docker image. As usual I ran into some trouble and at … Continue reading

Posted in Saturday MP Show, Software Development | Tagged , , , , , | Comments Off on SaturdayMP Show #21: Adding Basic Auth to NGINX Passenger Docker (Part 1)

SaturdayMP Show #20: Hack the Box – Busqueda Part 3 (Root Flag)

In this episode I find the root flag for the Busqueda machine on Hack the Box. Took a wrong turn looking for Gitea and Git vulnerabilities but eventually found the root flag with help from the walkthrough. Watch part 2 … Continue reading

Posted in Saturday MP Show, Security | Tagged , , | Comments Off on SaturdayMP Show #20: Hack the Box – Busqueda Part 3 (Root Flag)

Saturday MP Show #19: Comparing Docker Volumes to Docker Compose Watch

In this episode I answer a viewer question from episode #16: Are Docker Volumes are a two way sync?. The answer is kind-of. You can view the question in the comments section of episode #16 where I try out Docker … Continue reading

Posted in Saturday MP Show | Tagged , , , | Comments Off on Saturday MP Show #19: Comparing Docker Volumes to Docker Compose Watch

SaturdayMP Show #18: Hack the Box – Busqueda Part 2 (Reverse Shell)

In this episode I get a reverse shell working and make some progress on capturing the root flag. Spoiler: There is a self hosted GitHub like website. Watch part 1 of me hacking the Busqueda machine at: Thanks to Hack … Continue reading

Posted in Saturday MP Show, Security | Tagged , , , | Comments Off on SaturdayMP Show #18: Hack the Box – Busqueda Part 2 (Reverse Shell)

Don’t Commit Sensitive Information to the Repository

One of the most common security issues I in code reviews is sensitive information, such as production credentials, API keys, etc, in the source code. The source code I just pulled from the repository. The source code all the developers … Continue reading

Posted in Security | Tagged , | Comments Off on Don’t Commit Sensitive Information to the Repository

Saturday MP Show #17: Hack the Box – Busqueda (User Flag)

In this episode I find the user flag for the Busqueda machine on Hack the Box. Perhaps with a little help from the walkthrough and Chat GPT to assist with my lack of Python knowledge. Thanks to Hack the Box … Continue reading

Posted in Saturday MP Show, Security | Tagged , , | Comments Off on Saturday MP Show #17: Hack the Box – Busqueda (User Flag)

Do you Really Need Custom Software?

Custom software is expensive to build and usually delivered late and overbudget. Custom software, like a garden, needs to maintained and frequently updated. Especially for security updates. Everyone, well almost everyone, forgets to budget time and money for maintenance. Before … Continue reading

Posted in Business Side | Tagged , | Comments Off on Do you Really Need Custom Software?

Saturday MP Show #16: Trying out Docker Compose Watch

In this episode I try out the new Docker Compose Watch developer feature that synchronizes files on the host and the container. Similar to Docker Volumes. It won’t replace Docker Volumes for for me, at least not yet. Are you … Continue reading

Posted in Saturday MP Show, Software Development | Tagged , , , | Comments Off on Saturday MP Show #16: Trying out Docker Compose Watch

My Takeaway from Talking to Strangers by Malcolm Gladwell

Book: Talking to StrangersAuthor: Malcolm Gladwell This book has a lot of stories that include a police stop gone wrong, pyramid scheme, Cuban spies, drinking, sexual assault, and torture. A bit hard to follow all the different stories and pick out … Continue reading

Posted in Business Side, Takeaways | Tagged , , | Comments Off on My Takeaway from Talking to Strangers by Malcolm Gladwell

Saturday MP Show #15: PR Created for Standard Ruby Linter Bug

I finally create the PR for Standard Ruby Linter Bug I’ve been working on the base several videos and months. I also fix the merge conflict noticed in the previous video. Read about the bug I’m trying to fix here … Continue reading

Posted in Saturday MP Show, Software Development | Tagged , , , , | Comments Off on Saturday MP Show #15: PR Created for Standard Ruby Linter Bug