Categories
News

Azure Portal, the request is blocked

The following message greeted multiple people on August 9th, 2024 at 09:47 CEST. It recovered by opening the portal fresh in the tab. But after the recent incident with Cloudstrike and other incidents immediately, your mind goes wandering when you see a large central structure greeting you and your colleagues with an error message.

The request is blocked.

https://portal.azure.com/Error/UE_SessionExpired#view/Microsoft_Azure_Support/SupportRequestDetails.ReactView/id/*** (2024-08-09 09:47)

Categories
Web

clockify.me and the flood of errors

Time tracking is a fundamental task in most companies. I used to use Clockify for a few years, primarily for its API access and the native Windows client with the mini counter. However, I frequently encountered issues with the client logging me out, crashing, or syncing incorrectly. By the summer of 2024, I had reached my limit.

Categories
Security

hardenize.com secure score card

Hardenize is an interesting alternative to Mozilla’s HTTP Observatory, which scans your website and security perimeter. It provides you with a free and public scorecard that is also shareable via a link. Achieving a good score is a strong indicator that you care about security and demonstrates your commitment to it publicly.

Categories
News

Mozilla new HTTP Observatory

The Mozilla Observatory is a well-known web tool that verifies your website’s security baseline. Achieving a high score is a good indicator of your website’s security awareness.

It’s also a highly visible and effective indicator for website visitors. Having a high score is, therefore, not only a good practice but also an advertisement for your competency.

Categories
Azure News

Azure outage on July 30th, 2024

At this moment I saw many services becoming unavailable and also portal.azure.com is no longer available. The status on azure.com shows issues with accessing the portal, but the effects seem to be broader than that. At Microsoft, this case is known by the Tracking ID: KTY1-HW8

https://azure.status.microsoft/en-us/status (2024-07-30 14:29) Tracking ID: KTY1-HW8

Disruptions started at 12:06 UTC or 14:06 CEST based on my monitoring.

https://web-performance.freshping.io/reports?check_id=*** (2024-07-30 15:11)

After the big outtage originated by cloudstrike on July 19th, 2024 we see right away the next big issue on July 30th, 2024. Having contencanly plans and desater processes becomes more and more important.

Categories
AI

What i learned about LM Studio

LM Studio is a user-friendly desktop application designed for exploring local and open-source Large Language Models (LLMs). Your data remains securely stored on your machine, and the best part is, it’s completely free for personal use.

Categories
Security

Subresource Integrity in HTML

In light of the recent supply chain attack on the polyfill.io CDN, a GitHub account and domain were taken over by a malicious actor, who began injecting harmful JavaScript into thousands of websites. If websites load JavaScript, this script can operate in the first-party context and may perform a range of actions, including logging form data, capturing cookies, and modifying the website as desired. This poses an extreme risk if you do not trust the source completely.

One way to mitigate this risk is by using Subresource Integrity (SRI), which allows you to pin a remote JavaScript file to a specific hashed fingerprint of its content. This makes loading remote resources significantly safer by blocking the loading if the content of the remote JavaScript content changed.

Categories
AI

What i learned about Claude.ai

I started playing with Claude.ai and this is what I learned.

As is typical with my blog posts, this is a developing story, and I will continue to update this post as I play and learn more. For now, I am still impressed by the quality of the answers. Particularly, coding appears to yield far superior results compared to ChatGPT 3.5, ChatGPT 4, or ChatGPT 4.

Categories
Azure

New Kudu for Linux App Service

Already published in February 2020 with the “preview”-state, the new Kudu was published on Microsoft’s website. But until recently, I was also not aware that this existed. Now in July 2024, the default link from the Azure portal still leads to the old Kudu, with the new Kudu only available if you know it’s there.

Categories
Web

What is ClaudeBot/1.0

ClaudeBot is a web crawler used to download training data for training LLMs (Large Language Models). This bot is operated by Anthropic, the company that runs Claude.ai.

ClaudeBot/1.0; +claudebot@anthropic.com

Should you block CaludeBot or limit its access, and how can you do that? Find out more in this article.