Background It is important to know about “DevOps” culture before starting to understand “DevSecOps”. The reason behind this is that DevOps is an underlying building block of DevSecOps which brings the attribute of speed, precision and automation. The core principles of DevOps is to deliver software faster and more reliable by designing automated integration and delivery pipeline with collaboration of Development and Operation team. Even with reliable process and technology, people plays a critical part to adopt DevOps mindset and culture. The need for Security in the DevOps pipeline itsel...

I passed SSCP certification exam from ISC2 recently. The post is to share preparation tips and reasons to take this exam. There is not a lot of posts on Internet about SSCP prep since it’s not quite a popular exam and I hope this article helps people who decided to take SSCP. Why SSCP The first thing is to understand SSCP exams and its nature. IMO, it’s entry-mid level exam with focusing to examine technical/administrative thinking for security practitioners. It’s also a very good starter exam for those who can’t obtain CISSP due to lack of working experience or knowledge. I decided to ta...

I am writing this after a year using Pebble Time. I bought it the day I heard company is gone but still it's going this far. I shout out to pebble team and a bit to Fitbit for making it happen. Pebble server will down at 30th June 2018. Features that requires online services will be lost for pebbler. Some can live with that but most people might not satisfy with partial malfunction devices. Fibit offering all pebble users $50 discount for Fibit Ionic. It is a budget choice for a good smartwatch but what are the alternatives out there? I get rid of watches with Apple & Andriod Wear ec...

AV is not enough protection for the new era of cyber attack paradigm Recently, I’ve been using more than AV for my work PC to tighten the security. The landscape of the attackers is expanding to more scary things like ransomware attacks and I think it is important for everyone to understand what is ransomware. ESET Ransomware Explained(vid) is also a short nice video of what ransomware capable of. AV can’t detect and prevent them. The attackers are more clever than ever to construct a payload that can exploit the system without the knowledge of AVs. Behavioral monitoring is necessary to det...

A question of “what to possess and why I have them?” Women buy things they fancy. The same applies to men. Men even fall into the category of buying things that are useless and not make life more organizing and productive. I am the kind of guy beat myself up when I end up owning some stupid things. I believe in minimalism and the concept of “buying less” and live simply. It makes my life easy and declutter without chaos in your room. I only buy things I really need, I find it elegant and beauty in it. This is more of a personal note of why I own and planning to buy. Of course, I have more...

I am writing this post with 1 week experience of Pebble Time. Well..Pebble company vanished on 7 Dec 2016 that is the day I got my first Pebble watch. I heard the news that Fitbit is buying some assets of Pebble and I read a post that says something like “it’s a time to buy one if u want it”. I want Pebble since the first OG but I didn’t have a chance to buy it for several reasons. Now, I am capable of having one easily from local reseller and just a thought of “why I should not own one now?”. I ordered it from e-commerence site and it arrives the exact day the company shuts down. I was ...

I wrote on a quora thread about Technology changes in my motherland, Myanmar. A freelance journalist from WEIRD magazine caught an interest on the answer with some follow-up questions. He is working on a piece about technolgy changes and impact on Burmese citizen or similar topic. I took this as a change to write my personal story of what I went through and how I expose to technology and working as a career in IT. I wrote it on a limited time due to my busy schedule lately. It’s more like a drafting and bear with it. I recommend to start with the Quora answer and go on the questions. Firs...

I make a list of selected books I want to read since 2015 and try to stick with it. It is good for me to boost my reading volume and focus on the selected books among ton of books. I handpicked books of my favorite genres: humor, tech, non-fiction and some books to improve my skills and knowledge (InfoSec, Business Development & IT in general). So far, I selected 17 books to read within 2017. The E-Shelf is created at Goodreads if you want to check the details of any particular book. Business This is the condense and worthy book for non-business people to learn about business concept...

If you don’t know Tor network and the function of Proxy tool, this post will make less sense to you. This post is just a quick guideline to setup tor network with proxy tool for any browsers on Debian Linux environment. This is a quick explanation of Tor and Proxy tool. Please google them for further details. Tor Relay Network & Proxy Tor,(The Onion Router) Network is a mechanism to relay to the top-level domain, .onion anonymously by hopping through worldwide network to conceal the source of the encrypted data packet. Basically, The purpose is to hide your network activities and to ge...

Today... I am 29 years 0 months 0 days or 348 months 0 days or 1513 weeks 2 days or 10,593 days or 254,232 hours or 15,253,920 minutes or 915,235,200 seconds old. So far…I tackle tough times, overcome fear and sadness and enjoy happy moments. I am ready to face new challenges and opportunities for the upcoming years.. Just focus to get stronger and focus for the important part of life as we know it!