security tip_of_the_day

Recently I had this problem and was surprised by this limitation. The problem is wildcard SSL certificates only support one level of subdomains, i.e *.a.com matches foo.a.com but not bar.foo.a.com (taken from RFC2818, see link below). To support all subdomains beyond foo you would need a wildcard certificate for *.foo.a.com

Resources

dev tip_of_the_day, csharp

To capitalize all words in a string you can use the function built-in the .NET framework ToTitleCase function in System.Globalization.TextInfo class

Here is a sample (taken from MSDN link below):

using System;
using System.Globalization;

public class Example
{
   public static void Main()
   {
      string[] values = { "a tale of two cities", "gROWL to the rescue",
                          "inside the US government", "sports and MLB baseball",
                          "The Return of Sherlock Holmes", "UNICEF and children"};

      TextInfo ti = CultureInfo.CurrentCulture.TextInfo;
      foreach (var value in values)
         Console.WriteLine("{0} --> {1}", value, ti.ToTitleCase(value));
   }
}
// The example displays the following output: 
//    a tale of two cities --> A Tale Of Two Cities 
//    gROWL to the rescue --> Growl To The Rescue 
//    inside the US government --> Inside The US Government 
//    sports and MLB baseball --> Sports And MLB Baseball 
//    The Return of Sherlock Holmes --> The Return Of Sherlock Holmes 
//    UNICEF and children --> UNICEF And Children

Resources

awssecurity tip_of_the_day, iam

AWS is a very critical service for businesses and enabling a 2nd factor authentication would be very helpful to increase security.

Step 0: Install Google Authenticator or a similar OTP generator tool on your mobile device.

Step 1: Logon to your account and select Security Credentials from the menu on the upper right corner. Then click on Activate MFA button. AWS MFA Step 1

Here you have two options. You can choose to use a hardware device if you choose to purchase one from Amazon. At the time of this writing the price on Amazon was $12.99 so it’s also an affordable option. I decided to use Google Authenticator because it was already installed and active on my phone and I didn’t want to manage another piece of hardware.

Step 2: It will display a QR code which you can scan using Google Authenticator. Once the scan is completed you will need to enter 2 consecutive numbers the device generates. Once the device is synchronized it will be ready to use. You can verify it by checking its status:

AWS MFA Step 2

Step 3: Log out and log back in to see the results. After the password screen you should see an additional screen asking for the authentication code.

AWS MFA Step 3

Resources