Matthew Sullivan's blog and technical notes.
I recently needed to figure out what process on my Mac was hogging a port I needed to utilize. Unfortunately a simple netstat -l was useless because half of the processes were all simply npm . With a lot of LLM help I got this command working which shows all listening processes, by the command-line that Continue reading Displaying Full Command-Line Arguments for Listening Sockets on MacOS
Vite is a popular and powerful local dev server. One of my favorite Vite features is the proxy, which allows you to develop your frontend locally against an arbitrary backend URL. I found myself in a situation where my backend required authentication but the upstream server s Set-Cookie directive was being ignored by my browser. The Continue reading Unbreaking Cookies in Local Dev with Vite Proxy
In this post, I explore an AWS-native solution for accessing internal Application Load Balancers (ALBs) on a private network segment within one AWS account from another, all using the power of AWS API Gateways, a sprinkling of AWS IAM, and Python.
Integral Cloud is a cloud platform which helps knowledge workers write and run small Python applications. In this post, I describe the tech that allows Integral Cloud users to deploy code updates to running AWS Lambda deployments, instantly.
Security teams are receiving more headcount, tooling, and organizational support than ever before... so why are we still miserable? In this blog post, I will make the argument that a lack of product management in security is burning out our leaders and leaving leadership's direct reports out to dry.
The Python requests library will silently drop 'cookie' from a headers dictionary, and this behavior is not easily overridden. Here's a little trick to make it work.
A string of recent attacks has made it clear that 'classic' ways of doing MFA are not sufficient. This guide provides instructions for setting up a MacBook Pro's Touch ID fingerprint reader to be utilized as an authenticator for your Okta account.
Companies spend a lot of money on runtime logging. But are we getting a lot of value? This blog post examines some common logging pitfalls and provides examples and best practices for how you can increase the value your logs provide.
Introducing bugalert.org, a free and open-source service for alerting security and IT professionals of high-impact and 0day vulnerabilities by email, SMS, and phone calls (and via Twitter).
A little over a year ago, my employer threw away our VPNs in production and production-like server environments and moved towards a set of new, cutting-edge technologies that make remote access simpler and safer. I've come to realize that we innovated in this space, and kind of did so by accident. This post is a technical deep-dive on how the industry operates legacy remote access solutions,…