Thinkkun
327 posts


Day 11/60: Log aggregation with Loki
Loki indexes labels, not log content. That single design choice cuts storage costs 10-20x vs Elasticsearch.
Key lesson: never promote high-cardinality fields to Loki labels. Query them with LogQL filters instead.
#SRE #Observability
English

SQL injection still tops OWASP for a reason. The core trick: ' closes the string, -- comments out the rest. One quote turns your input from data into code.
Test: ORDER BY 1,2,3... to find column count, then UNION SELECT to extract.
#SQLi #Pentesting #Websec #Security #SysAdmin
English

Day 11/60: AWS Security Hub needs AWS Config running first or half your compliance controls silently fail. Enable cross-region aggregation or you only see findings from one region. #CloudSecurity #AWS #60DayChallenge #Security #SysAdmin #Linux #DevSecOps #CyberSecurity #InfoSec
English

IP Addressing: tie ipv4 to one real artifact and one real next step. That is how a security lesson becomes usable during triage, hardening, design review, or response. Evidence should beat confidence every time. #Cybersecurity #Infosec #Securityops #Dfir Good security notes make
English

Day 11/90: References. Today's hinge point was who owns the object so the C++ code still reads like a contract when the program or workflow grows. #Cpp #CPlusPlus The debugging path got shorter. The design felt easier to review. It finally stopped feeling like boilerplate.
English