Skip to main content

Rebuilding... again 🦖

Welp... life happened. Shit storm level happened over the last couple of years. I'll spare the details, but they include a new job, death in the family, & hospitalization of loved ones.

All of this is to say I missed the EOL date for CentOS Stream 8 & all my tools broke. I migrated to a new system on a supported release & am currently rebuilding my Nikola backed pages as well as trying to get them on a not-AWS CDN. My objective is to get this stuff managed with as little personally involved maintenance in the future & then make some time to finally start working on games.

Linode Migration

Managed to hose my aws personal server in the course of a certification class. I've relocated to linode, as I was planning on doing anyways. The games. & news. pages are still being served from s3 via cloudfront, but I'd like to migrate those over to linode or Backblaze as well.

The really nice thing about finally getting off of Amazon Linux is letsencrypt is fully supported now, so yay, new SSL certs.

New Project - CVESearch (cves)

I've been taking time at work to start a new project, CVESearch or cves for short. I've cloned it over to my public GitHub and have been keeping the two in sync with each other. The end goal is an application that looks up CVEs in OS vendor notifications, namely Ubuntu's USN and Red Hat's RHSA boards. Once identified, it provides a link to the advisory so you know when it was patched for that OS and can go about your day. The current version I'm working on takes this scraper methodology and dumps the data into a database for persistence then facilitates lookups through the local cache first and only scrapes external sites if its needs to be populated still.

https://github.com/wiseeyesent/cves

Refresh

Since my AWS free tier ran out a while ago, I'm probably going to be migrating all of this to cheaper hosting. I really only have one site that requires server side processing. Most of the rest already lives on S3. I think I'm going to try and build this network out in a sort of reverse Disaster Recovery (DR) fashion.

Resume

I've uploaded a copy of my resume to the homepage for ease of access. My wife helped me design this new version in Adobe Illustrator, which she's been picking up due to her school work. We're looking at relocating in the near future, so hopefully this will help out.

I've also been doing some miscellaneous work on the site, mostly in regards to SSL and navigation on the games page. Feel free to contact me, admin (a) wiseeyesent.com, if you have any feedback.

CloudFront Integration & HTTPS

I noticed that some posts had links with absolute urls using https. This was causing issues as S3 hosting does not support HTTPS due to the hostname convention or possibly some other reason. I've applied a CloudFront CDN distribution using my existing letsencrypt SSL certificate to re-enable HTTPS traffic on this sub-domain. You may have noticed intermittent disruption today while this was being worked on. The same will be applied to the Games site shortly.

WEEGames Updated

Following up with the success of my pushing this news page to nikola+s3, I have completed the initial push of the WEEGames page. Gone are the days of empty WordPress pages forever waiting to be populated with content for the third time!

I've also re-organized a little bit. Still collecting what software I have available for publication though.

  • Admin

Check Yo Sigs

Received an interesting report from a colleague today. Apparently WebRoot released a false positive signature which totally borked Windows and legitimate applications in a substantial volume. I haven't used their software in a while as I've been on Avast for the last decade or so.

Malware scanning itself is something highly selective and rather difficult to perform, particularly due to the usually randomized nature of the malware itself. When I was working in security, I performed a significant number of application level cleanings and found that RegEx was usually the most beneficial, coupled with selective file searching based on ctime & OS reported file type (got a JPEG reported as an ASCII text file? May wanna take a look at it). The DHS Grizzly Steppe report also includes a sample signature of theirs on page 5. Worth a read if you haven't looked at it.

Temporary Disruption

There was a temporary disruption today as a result of a minor administrative error. Remediative action required stopping my server so the EBS volume could be re-attached to another instance & fixed. Everything should be working normally at this time. - Admin