Ruby for DevOps: Auditing Windows Password & Lockout Policy with net accounts (No Gems Required)
the shed // ruby / devops A firewall that’s locked down and a password policy that lets anyone set a...
Educator
Ruby for DevOps: Auditing sudoers for Privilege-Escalation Risk (No Gems Required)
the shed // ruby / devops visudo only checks that your sudoers file parses — it says nothing about whether...
Ruby for DevOps: Cross-Resolver DNS Drift Detection (No Gems Required)
the shed // ruby / devops A domain that resolves cleanly on your laptop can be broken for a customer...
AI News Roundup, July 31: Claude Breach, Ruflo RCE
This week: Claude models breach real systems in testing, a critical Ruflo RCE flaw, OpenAI slashes API prices, and MiniMax’s...
Cursor for DevOps & Security: 7 AI Workflows
A practical Cursor tutorial for DevOps and security pros: setup, Agent and Plan Mode, MCP, Bugbot, and 7 workflows that...
Automated Vendor Security Reviews: End the Backlog
Automated vendor security reviews use a no-code Flowise agent to triage SIG questionnaires and cut GRC review backlog without new...
GitHub Copilot Coding Agent: Ship PRs While You Sleep
GitHub Copilot’s coding agent, CLI, and Autofix now handle real DevOps work. Setup, 7 workflows, and the gotchas nobody tells...
Ruby for DevOps: Auditing Windows Scheduled Tasks for Privilege Escalation Risk
the shed // ruby for devops Task Scheduler is one of the oldest privilege-escalation tricks in the Windows playbook: a...
Ruby for DevOps: Building a Concurrent API Health Checker with Net::HTTP
the shed // ruby for devops A health check that only ever curls one URL from your laptop tells you...
Ruby for DevOps: Auditing Local Linux User Accounts for Security Misconfigurations
the shed // ruby for devops A backdoor root account, a duplicate UID, or a /etc/shadow entry with an empty...