h3rucutu

Selamat datang kembali rekan-rekan, sudah sekian purnama yang lalu sejak saya menulis terakhir kali dan beberapa tulisan yang masih berupa draf urung saya terbitkan. Terakhir kali menulis, saya menggunakan Bahasa Inggris, guna mendapatkan pengunjung secara internasional, serta membiasakan saya untuk menulis dalam Bahasa Inggris. Namun seiring berjalannya waktu, terlintas dipikiran untuk memperkaya khasanah ilmu rekayasa ( engineering ) terutama dalam ilmu rekayasa perangkat lunak ( software ) dalam Bahasa Indonesia, yang merupakan bahasa resmi di mana saya dilahirkan. Setidaknya ini akan melatih kecakapan saya dalam menuliskan atau mendokumentasikan sesuatu dalam Bahasa Persatuan kita. Dengan demikian, setelah tulisan ini diterbitkan, semua tulisan saya berikutnya akan saya tuliskan dalam Bahasa Indonesia. Meski terkesan aneh karena biasanya tulisan tentang ilmu rekayasa perangkat lunak akan dituliskan dalam Bahasa Inggris, tetapi saya sudah bertekad, seperti yang saya sebutkan sebelum...

Continuing the journey of Web Server Application, today we would setup Nginx as Proxy Reverse. If you want to start with how to install Nginx and configure it with SSL/TLS, read here . This post scoped only in  CentOS  7 and I'm using  Alibaba Cloud  as my cloud provider. Using other Operating System (OS) or cloud provider may need some adjustment to be matched, but I'll describe in general. If you have a trouble during follow this tutorial, don't hesitate to ask in the comment. Let's dive in! Step 1 Run Go Application To make this tutorial simple, we gonna use go application to be proxy reverse by our Nginx. Since go application are binary, so they could directly running on our server without need to install any dependency. I have prepared the pre-compiled binary of go application that listen http request on port 8080 for linux OS. So let's download it (because we're not in administrative task, I recommend you to use normal user instead of root user). $...

Hello there, sorry for delay to post almost 2 months. Since covid-19 outbreak have significance impact to my working rhythm. Today I'll continue the journey of initial setup for CentOS 7. After securing our connection into the server (see here ), right now the most used application should we install is the Web Server. There are two most known, one is Nginx (read: Engine X) and Apache HTTP Server (also known as Apache WebServer or httpd ). Personally I recommend you to use Nginx instead of httpd , because the basic architecture of Nginx is using event-driven approach, instead of creating new thread for each request that doing in httpd . So Nginx could handle more concurrent request within small amount of threads. Also today, the event-driven approach are widely adopted, for example the famous ReactiveX library in the programming side is the leading asynchronous API library for programming languages. So more application are now evolved to use event-driven style instead of blockin...

OpenVPN is the most known open source SSL VPN (Virtual Private Network) in the world. OpenVPN implemented OSI Layer 2 or 3 by securing network extension using SSL/TLS protocol. They allow you to connect securely to an insecure public network such as wifi in the cafe or public area. For Corporate and Enterprise they commonly used to allowing/blocking connection for back-office application or even secure connection to the server itself. When you has been read my post before , you can escalate this method to more secure than before, since before we have the SSH Port still exposing to public (although only public key authentication are allowed). This post scoped only in  CentOS  7 and I'm using  Alibaba Cloud  as my cloud provider. Using other Operating System (OS) or cloud provider may need some adjustment to be matched, but I'll describe in general. If you have a trouble during follow this tutorial, don't hesitate to ask in the comment. Go go go! Step 1 Fin...

As I came from Software Engineering background since my first employment, it's my big step to jump in DevOps area. Because at my recent employment, I trusted by the CIO to manage this area. I think all of the knowledge and practice them out, need to be well documented and I remember that I have a blog here. So this is my first time to documented all of the knowledge that I've practice before, in all of the environment ( development , staging , sandbox or even production ) in my recent employment. CentOS Logo I'm starting with the fundamental one, initial server setup with CentOS . This post scoped only in  CentOS  7 and I'm using  Alibaba Cloud  as my cloud provider. Using other Operating System (OS) or cloud provider may need some adjustment to be matched, but I'll describe in general. If you have a trouble during follow this tutorial, don't hesitate to ask in the comment. Go! Step 1 Add Non-Root User Once you have created instance, you need to...

Back to two months ago when ALAMI still under registration process by Financial Service Authorities in Indonesia (OJK), all of team has been fight to fit our platform application with OJK regulations. After the final stage, we're still doesn't have a devops for creating an infrastructure of our application to be in production (live). So the CTO ask me to learn quickly about devops and creating minimal system to be used for our application in production. And then the journey has began. Actually we have our old server but the Management doesn't happy with the provider, so we are searching new provider. How lucky we are, since our office are located at coworking space, there're many startups and one of them have a cloud service named ZettaGrid . After some meetings, the Management team interested to use their services. I got the free-trial Virtual Data Center (VDC) to exploring all of features that they have. But time is running low before we're going live, so I nee...

During the development of Caltic , there is a strange from internal logger of Vert.x (our toolkit to build Caltic Systems). There're some warning log indicate something happen abnormally. See below: [INFO] Nov 08, 2018 5:24:50 PM io.vertx.core.impl.launcher.commands.Watcher [INFO] INFO: Watched paths: [/Users/myrepublic/devel/caltic/caltic-train/target/classes] [INFO] Nov 08, 2018 5:24:50 PM io.vertx.core.impl.launcher.commands.Watcher [INFO] INFO: Starting the vert.x application in redeploy mode [INFO] Starting vert.x application... [INFO] 18b3e3d3-043d-4f63-b8aa-52d018554b6a-redeploy [INFO] Nov 08, 2018 5:24:53 PM io.vertx.core.impl.BlockedThreadChecker [INFO] WARNING: Thread Thread[vert.x-eventloop-thread-0,5,main] has been blocked for 2858 ms, time limit is 2000 [INFO] Nov 08, 2018 5:24:54 PM io.vertx.core.impl.BlockedThreadChecker [INFO] WARNING: Thread Thread[vert.x-eventloop-thread-0,5,main] has been blocked for 3859 ms, time limit is 2000 [INFO] Nov 08, 2018 5:24:55 PM i...

There are several reasons why I'm doing revamp for this blog. First, right now I'm actually a software engineer not a pentest anymore. this is why revamping this blog is a good idea. Because I can write again as usual, mostly the topic may change from security topic into developer topic. The pain is, that I need to update several point of this blog before I actually can write a post, starting from this post. But I think it's a good way for me to increase writing skill also enrich my story telling. The second, to share everything that I got some problems and how could I fix it, it's usually what I did before this revamp . But yeah, the software development side is very broad of problems. We need to integrate between one language with the framework, library with other library, library with application server, so on and so on. And again, there are a lot of problems that can make a software engineer frustrated. Actually we find the answer by googling and stackoverflo...

Assalamu'alaikum... Berawal dari buka-buka arsip file lama di Mac, ketemu file kajian yang sebenarnya ku kira sudah terhapus. Seingetku, file ini dulu tak taruh di MP3 Player (maklum, jaman SMA dulu nge-tren banget mp3 player, meski belum dapat membeli sekelas iPod, tapi Simbadda sudah lebih dari cukup lah untuk merk dan tentu reliability nya) yang kini telah dimuseumkan pada laci gara2 batere nge- drop dan nyari batere nya susah di dalem negeri. Tentu dengan tidak berfungsinya mp3 player tersebut, hilang pula file kajian nya, yg entah gimana juga aku bisa mendapatkannya. Setelah mencoba mengingat ternyata saat itu pasca saudara perempuan (mbak'e) ku menikah yang akhirnya membuatku mencari2 kajian tentang pernikahan. Saat itu baru semester 2-4 kuliah, di file kajiannya terekam tahun 2011 aku mengunduhnya. Meski belum pernah tuntas mendengarkan kajian-nya dikarenakan mp3 player yg rusak dan kerja sambilan yg memakan waktu (maklum part-timer ) aku masih mengingat poin-po...

Affect Distribution Importance Assigned to Status MySQL-Server 5.7 Ubuntu 16.04.1 (x86_64) High h3rucutu Solved Version : 5.7.18 Packages : mysql-server-5.7 (mysql-server-5.7.18-0ubuntu0.16.04.1) mysql-server (mysql-server-5.7.18-0ubuntu0.16.04.1) Bug Description : Upgrading MySQL-Server to 5.7.18 version using apt-get Reproduce : ~$ sudo apt-get upgrade mysql-server-5.7 mysql-server Also Found : launchpad (bug-1605948) Solution : ~$ sudo service mysql start ~$ sudo mysql_upgrade -p ~$ sudo dpkg --configure mysql-server-5.7 ~$ sudo dpkg --configure mysql-server Root Caused : While upgrading mysql-server, mysql-server has been shutting down [ insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script `mysql' overrides LSB defaults (0 1 6) ]. When the mysql_upgrade running, it's can't connect to mysql-server [ mysql_upgrade: Got error: 2002: Can't connect to local MySQL server through socket ...

Extra Train list for Ied Holiday 1438H/2017 (provided by h3rucutu ). Train No. Train Name Origin Destination Class 7F Argo Lawu Fak. SOLOBALAPAN (SLO) GAMBIR (GMR) E* 09.00 WIB 17.50 WIB 8F Argo Lawu Fak. GAMBIR (GMR) SOLOBALAPAN (SLO) E* 21.15 WIB 05.55 WIB 9F Argo Dwipangga Fak. SOLOBALAPAN (SLO) GAMBIR (GMR) E* 21.30 WIB 06.06 WIB 10F Argo Dwipangga Fak. GAMBIR (GMR) SOLOBALAPAN (SLO) E* 10.10 WIB 18.28 WIB 7013 Taksaka Malam Leb. YOGYAKARTA (YK) GAMBIR (GMR) E* 22.15 WIB 05.53 WIB 7014 Taksaka Pagi Leb. GAMBIR (GMR) YOGYAKARTA (YK) E* 10.15 WIB 18.14 WIB 7011 Taksaka Pagi Leb. YOGYAKARTA (YK) GAMBIR (GMR) E* 06.40 WIB 14.30 WIB 7012 Taksaka Malam Leb. GAMBIR (GMR) YOGYAKARTA (YK) E* 19.30 WIB 03.38 WIB 7003 Argo Sindoro Leb. SEMARANGTAWANG (SMT) GAMBIR (GMR) E* 16.50 WIB 23.03 WIB 7004 Argo Sindoro Leb. GAMBIR (GMR) SEMARANGTAWANG (SMT) E* 23.45 WIB 06.09 WIB 70...

Assalamu'alaikum.. Menjadi Developer (red: Programmer ) di tahun-tahun ini ialah sebuah kebutuhan industri yang menjanjikan, karena perkembangan dunia IT sangatlah pesat, baik di lingkup nasional maupun internasional. Virus " start-up " pun mulai menjamur dimana-mana termasuk di dalam negeri. Berbagai industri kreatif yang tadinya tidak bersinggungan dengan dunia IT, kini semua mengarahkannya menuju kesana. Tak ayal semuanya berbondong-bondong meng " online " kan produk masing-masing. Dari proyek rintisan semacam start-up hingga industri yang sudah mapan sekalipun telah merambah semuanya, sehingga banyak sekali vendor-vendor perangkat lunak yang menyediakan solusi penyediaan sistem kebanjiran proyek di sana-sini. Berbagi pengalaman sebagai developer, saya akan mencoba membagikan ilmu yang saya dapatkan selama berkecimpung di dunia profesional. Karena tak semua developer melulu berasal dari jurusan IT (CATAT!). Meskipun posisi developer dianggap sebagia...

It's five months from my latest post where I'm still a university students and doing the research for my thesis. But right now, before the celebrate of the graduation in my University, I was hired by new comers of e-commerce company in my country named JD.id as Java Developer. Although my major in the University is Engineering Physics, but I'm not eligible to be an engineer especially at physics scope, because I'm still doing hard to understand about fluid mechanics, thermodynamics, transport phenomenon, automatics control, modern control, signal processing and another topics that correlated with physics. It's why I'm not at a good confident level when applying an engineering physics vacancy of the company, but I prefer to applying IT vacancy with more good confident level. And I was hired as Java Developer. So it's the occupation which I've dreamed before. Without going to Computer Science or IT major I can go to there. So it's good to start ...

Lama tidak meng ubek-ubek masalah keamanan, beberapa hari lalu saya menemui kejadian-kejadian tidak wajar. Pertama kondisi Internet Banking (IB) salah satu Bank milik Pemerintah (M*ndiri) yang tidak bisa diakses, saya tidak begitu ingat kenapa waktu itu server tidak bisa diakses, padahal saya ingin melakukan transaksi. Saya mencurigai ini dikarenakan koneksi modem saya (S*mpati), kemudian saya hubungkan Laptop saya ke Wifi di kamar yang menggunakan Sm*rtfren, namun hasilnya sama saja, terpaksa jadi harus mlipir ke ATM. Padahal menurut saya Bank ini menempati posisi teratas dari segi keamanan bertransaksi di dunia maya dilihat dari segi SDM nya dan berbagai macam transaksi yang dapat dilakukan, sehingga tidak mungkin Manajemen Bank ini tidak merekrut orang-orang yang terbaik dari yang terbaik, karena apabila tidak tentu akan sangat membahayakan sistem yang ada. Ilustrasi 403 Sore hari, saya mencoba mengakses lagi Internet Banking Bank ini, ladalah sepertinya terjadi perebut...