DEV Community: Awal Ariansyah

Create a emoji-picker in dmenu

Awal Ariansyah — Mon, 09 Jan 2023 13:25:45 +0000

One of the nice things I have in Windows is that when I pressed windows + ., the emoji picker shows up. When I moved to linux distros as a daily driver, I kinda missed that features.

You can use others packages or use IBus, but I would like some cleaner approach. This approach is presented by Luke Smith, check out his cool youtube: https://www.youtube.com/watch?v=UCEXY46t3OA.

I'm assuming you're already installed dmenu on your system.

Get all the emoji

mkdir ~/dmenu
cd dmenu

curl https://gist.githubusercontent.com/Caellian/947e9b7b0f9d42278b9308765dc4ec08/raw/66a8b264732b4da40970cb3c57df02118e47cb2b/update.sh | sh

We make a directory and then use this nice script by Caellian to collect all available emojis and format it.

You'll see a file named "emoji_list". That's the file we're going to insert into dmenu.

Make the script

touch dmenuemoji.sh
chmod +x dmenuemoji.sh

We created a file dmenuemoji.sh, open it with your favorite editor.

Paste the script by Luke Smith below.

#!/bin/sh

grep -v "#" emoji_list | dmenu -i -l 20 | awk '{print $1}' | tr -d '\n' | xclip -selection clipboard

pgrep -x dunst >/dev/null && notify-send "$(xclip -o -selection clipboard) Copied!"

Don't forget to bind it with a keyboard shortcut.

You can edit the script, for example your preferred dmenu layout or your clipboard app. Here's my final result:

My final script:

#!/bin/sh
grep -v "#" emoji_list | dmenu -c -i -l 15 | awk '{print $1}' | tr -d '\n' | xclip -selection clipboard;

if [ -n "$(xclip -o -selection clipboard)" ]; then
notify-send "Emoji copied" "$(xclip -o -selection clipboard) successfully copied!" --icon=dialog-information;
fi

Setup PHP Laravel (Postgresql & mysql) Development Environment on Ubuntu 22.04 Jammy

Awal Ariansyah — Sun, 11 Dec 2022 14:42:09 +0000

I'm not a big fan of PHP and mainly worked with Node.js project, this time I get a project using a legacy PHP/Laravel code bases and It's really frustrating for me to just run the code because I'm not getting used to the ecosystem.

In case you are running the same issues or maybe me, I decided to wrote it here.

OS Information

Installing PHP

Be sure which PHP version you want to install, because compatibility matter. A lot. Seriously.

The default APT repository is PHP 8. In my case, I need to install PHP 7.4.

sudo apt install -y apache2 php7.4 php7.4-common php7.4-cli php7.4-xml php7.4-mbstring php7.4-gd php7.4-pgsql

Installing composer

curl -sS https://getcomposer.org/installer | sudo php -- --install-dir=/usr/bin --filename=composer

Laravel global installer

composer global require laravel/installer

Installing mysql

sudo apt install -y mysql-server php7.4-mysql

Installing postgresql

sudo apt install -y postgresql pgadmin4

Setup postgresql & pgadmin

sudo /usr/pgadmin4/bin/setup-web.sh

sudo -i -u postgres

psql

ALTER USER postgres WITH PASSWORD 'yourpostgrespassword';

\q

logout

The default postgresql information:

Hostname: localhost
Port: 5432
Username: postgres
Password: yourpostgrespassword

Now you can access it via Pgadmin desktop app or the web version at http://127.0.0.1/pgadmin4/browser/

Run existing laravel project

Clone the project to local
cd into it
Run composer install
Fix every composer's lockfiles issues (usually missing php extension) (if there's any). Example:

sudo apt install -y php7.4-gd
sudo service apache2 restart

Then run composer install again.

Run npm install Make sure you have already installed python. In my case I need to install python2 and set the npm global variable.

sudo apt install python2
npm config set python /usr/bin/python2

Run npm run dev
Run cp .env.example .env
Edit the .env file configuration (especially in DB, make sure you created an empty database first)
Run php artisan key:generate
Run php artisan migrate
Run php artisan serve

Hope it helps~

How to recover lost files in Linux using Foremost

Awal Ariansyah — Thu, 01 Dec 2022 08:41:20 +0000

A lot of people don't know that Foremost is a very good command line program for recovering lost files. It's actually in many distros by default and it's very easy to use, as you'll see in the article.

Introduction

When a file is deleted, the data is not immediately removed from the storage device. The operating system simply removes the reference to the file from the file system table. The space that was occupied by the file is now marked as free space and can be overwritten by new data.

If you act quickly, you may be able to recover lost files using Foremost. Foremost is a data recovery program that uses headers and footers to identify files. It can search a storage device for specific file types and recover them.

What is Foremost?

Foremost is a data recovery program that can be used to recover lost files in Linux. The program works by looking for patterns in the data that are characteristic of specific file types, and then extracting the data from the file. Foremost can be used to recover a wide variety of file types, including images, documents, and even video files.
How does Foremost work?

Foremost works by looking for patterns in the data that are characteristic of specific file types. Once a file type has been identified, Foremost will then attempt to extract the data from the file. In order to do this, Foremost uses a number of different techniques, including looking for headers and footers, and using heuristics to guess the structure of the file.

How to install Foremost?

In order to use Foremost to recover lost files, you will need to have a Linux system with the Foremost package installed. The Foremost package is available through many different package managers, so consult your package manager's documentation for instructions on how to install it. Once you have Foremost installed, you can begin using it to recover lost files.

For debian-based:

sudo apt install foremost

For arch-based:

sudo pacman -S foremost

How to use Foremost?

Assuming you have already installed Foremost, here are the steps to follow to recover lost files using this tool.

1. Scan your directory to recover

sudo fdisk -l

In this case, mine is at /dev/sdc.

2. Create an output directory for the recovered files

mkdir /output

Run Foremost with desired options against the image file

sudo foremost -q -v -t png -i /dev/sdc -o /output

You can use the "-i" option to specify the input file, which is typically a disk image or partition that you wish to search. The "-q" and "-v" is for quick scan and verbose/logging respectively.

Once you have specified the input file, you can then use the "-o" option to specify the output file. This is the file that Foremost will write the recovered files to. It is important to note that Foremost will overwrite any existing files in the output file, so make sure that you do not specify an existing file as your output file.

Conclusion

Foremost is a powerful data recovery tool that can be used to recover lost files in Linux. In this article, we have provided a step-by-step guide on how to use Foremost to recover lost files. We hope that this guide will be useful for you and help you get your lost files back.

COBIT 5 Framework Implementation

Awal Ariansyah — Mon, 21 Nov 2022 10:54:57 +0000

COBIT 5 Framework Implementation

The COBIT 5 framework is a set of best practices for enterprise governance and management of information and technology. It provides a comprehensive and flexible approach to help organizations meet their IT governance needs in a cost-effective and efficient manner. This blog post will provide an overview of the COBIT 5 framework and its implementation. We will cover its key components, benefits, and challenges. By the end of this post, you should have a good understanding of what COBIT 5 is and how it can be used to improve your organization's IT governance.

What is COBIT 5?

COBIT 5 is the latest version of the COBIT framework, released in 2012. It is a comprehensive framework for the governance and management of enterprise IT. COBIT 5 provides guidance for all aspects of IT governance, from strategy to implementation. It is based on an updated version of the ISO/IEC 38500 standard, and includes input from over 150 experts from around the world.

What is the benefit using COBIT 5?

There are many benefits to using COBIT 5, including its comprehensive and coordinated approach, its clear structure and terminology, and its focus on governance. Additionally, COBIT 5 provides a comprehensive framework for the implementation of an effective governance system. It also helps organizations to understand the relationships between different processes and how they contribute to organizational objectives. Finally, COBIT 5 is flexible enough to accommodate the unique needs of any organization.

How to implement COBIT 5 in real case?

COBIT 5 is a process-based approach for the governance and management of enterprise IT. It provides a comprehensive framework that covers all aspects of IT governance from strategy to implementation.

The first step in implementing COBIT 5 is to develop a clear understanding of the organization's IT requirements. This includes identifying the specific business goals that the organization wants to achieve with IT, and determining the resources required to support these goals. Once the IT requirements are understood, the next step is to develop a COBIT 5 implementation plan. This plan should be designed to meet the specific needs of the organization and should be tailored to the organization's size, structure, and culture.

Once the implementation plan is in place, the next step is to implement COBIT 5 within the organization. This process typically involves training employees on COBIT 5 and its processes, as well as deploying COBIT 5 tools and templates within the organization. The goal of this phase is to ensure that all employees are aware of COBIT 5 and its processes, and that they know how to use COBIT 5 tools to support organizational goals.

The final step in implementing COBIT 5 is to monitor and review the progress of the implementation. This includes tracking metrics related to COBIT 5 usage, assessing compliance with organizational policies, and evaluating the overall effectiveness of COBIT 5 in meeting business goals.

Job roles in a startup company

Awal Ariansyah — Mon, 17 Oct 2022 23:04:22 +0000

Continuing my task in Information and security task, I'm here to write several job roles and their policy. There are certain roles. Here are eight important ones to consider from reference I found:

1. Chief executive officer (CEO) and chief operations officer (COO)

Two of the most essential players in your business will be the CEO and COO. The CEO is typically the big-picture person who controls the company’s direction, vision, and culture, whereas the COO primarily focuses on the day-to-day operations that keep your business running.

You can hire externally for these positions, but the founders of the company usually assume these responsibilities. Tierra Wilson, co-founder and CMO of Lovely Impact, recommends starting as the CEO of your business before hiring out. If you and your co-founder(s) already plan to take on these titles and responsibilities, hire the following seven positions next.

2. Product manager

The product manager will be your go-to on all things related to your products. This team member manages the product strategy, vision and development. They typically work closely with the engineering and marketing teams to create and market your products.

Vince Repaci, senior coach at LOVR Atlantic, said that bringing on a product manager can be difficult for founders, as they are typically the initial default product manager and heavily invested in their own products or services.

“When you [can] afford to bring on a project manager, though, it forces you to change the way you think about the project by documenting and training someone else in it,” Repaci told Business News Daily. “This move allows founders to start working on the business rather than in the business.”

3. Chief technology officer (CTO)

A team member who specializes in technology and development is crucial to your business’s success, especially for tech startups. Although you can hire freelance front-end and back-end engineers, it’s useful to have someone on your internal team take charge of this sector. As your team grows, you can split this role into two separate positions.

“Having someone with the skills to decide what will work best for your business, as well as overseeing the integration and management of various systems, is key,” said Sue Andrews, business and HR consultant at KIS Finance. “They’ll need to consider everything from hardware to software and mobile technology.”

Andrews said this team member can also take the lead in building your online presence. They can split that responsibility with your marketing manager as well.

4. Chief marketing officer (CMO) and community manager

This team member will focus on your customers and how they view your product or service. Andrews said that hiring an expert with excellent marketing and promotional skills is essential to make sure your vision reaches a wide audience.

“Find a marketing manager that is a jack-of-all-trades,” Wilson said. “Until you can scale, they should be able to write copy, design collateral, code landing pages, run ad campaigns and handle social media marketing.”

They should also interact with your customers and act as an interim community manager to maintain positive relationships between your business and consumers. This team member can work with the product manager to incorporate customer feedback into product development.

5. Sales manager

This team member will focus on generating new leads and bringing in money for your company. Wilson said startups and small business owners who master sales first last longer.

“Hire an amazing sales rep or manager, and then use the money they bring in to hire more people,” she said. “This is probably the hardest position to hire for, but [it is] worth the time and effort to get the right person.”

Repaci said that a skilled sales manager with experience in your industry typically won’t require a lot of training to generate leads and close deals.

6. Chief financial officer (CFO)

Experts recommend that startups outsource their accounting and finance roles, but if you have the capability to hire a CFO, it can be extremely helpful for your business.

“It’s essential that you have someone on the team who is responsible for the money and has an eye for detail to manage all aspects of the company’s finances,” Andrews said. “In the early stages, this will range from major issues, such as securing bank lending and leasing premises, to everyday necessities, such as paying suppliers and managing the petty cash.” [Read related article: Startup Costs: How Much Cash Will You Need?]

7. Business development manager

While similar to the sales manager, a business development manager finds ways to grow your business from both a marketing and sales standpoint. For example, this professional might focus on developing relationships with other businesses to increase revenue and potential for growth.

A good business development manager identifies new business opportunities, both within your organization and with other companies. In doing so, they’ll consider new markets, areas where you might expand, new partnerships, ways to reach other existing markets, and ways to appeal to your target customers.

For example, perhaps a competitor is offering a product or service you haven’t yet considered. Your business development manager will look for ways to not only keep up with their offerings but also set you apart from them to attract more attention to your brand.

8. Customer service representative

Customer service is a critical task every business should master. Building positive relationships with your customers and clients is the cornerstone of your brand.

It doesn’t matter how great your products or services are if your business isn’t effectively communicating with its customers and clients. Without a professional handling customer questions, calls or concerns, your reputation will inevitably suffer. You’ll want to fill this role as soon as possible

Policy strategies for information system threats

Awal Ariansyah — Mon, 03 Oct 2022 17:14:45 +0000

I'm back writing a college task for my Network and Information Security class. This time the task is to write some policy strategies based on all the threats I already mention in the previous post.

Read it here Company information security analysis
.

I picked is a local Indonesian hosting company, namely Rumahweb. Rumahweb did a great job in making a policy. I will write what I understand.

General Agreement

Consists of several point of agreement between the company and the customer that is

Subject of Agreement
Validity of Agreement
Service Agreement
Service Policy
Customer Rights and Obligations
Customer Support
Agreement Changes
Violations and Sanctions
Disclaimer
Dispute resolution

There is a lot of stuff, you can read more here

Domain Service Agreement

Agreement that focused on the domain services, consists of

Service Definition
Customer Rights and Obligations
Rumahweb's Rights and Responsibilities
Deletion and Termination of Service
Uniform Domain Name Dispute Resolution Policy (“UDRP”)
Costs

Web Hosting Service Agreement

The main agreement between Rumahweb and the customer for the main service which is a web hosting service. Overall it is similar to previous agreement with the addition of:

Service Guarantee
Claims for Service Warranty Failure

Privacy Policy

Next we will be looking at the privacy policy. It is covering what data they collected, how will they use the data, third-party authentication, data confidentiality limits and the data security.

What's written in the data security policy is that Rumahweb Indonesia tries its best to protect customers' personal/company data from parties who are not authorised to obtain such data, except to do the things mentioned in Data Use.

That's so simple policy I'd say. Read the policy here

Acceptable Use Policy (AUP)

Acceptable Usage Policy is a policy on the use of Rumahweb Indonesia facilities which are included in the services used by customers.

It covers:

Website content
Hosting account usage
E-mail facility usage
Hosting resource usage
VPS/Cloud Server service usage
Titan Email/Flockmail service usage
Alibaba Cloud VPS service usage
Sanctions Against Violations
Handling Violations/Abuses
Contact Abuse
Abuse Report Tracking

Read full here

Service Level Agreement (SLA)

The last thing is the agreement in the level of service, it requires customer to understand the other policies first.

The inside is consists of:

Internet Connectivity Uptime Guarantee
Server Uptime Guarantee
Data Security Guarantee
Claim for Warranty Failure
Approval of Premium WordPress Plugins and Themes
Alibaba Cloud VPS Service Definition
Alibaba Cloud VPS Service Downtime Guarantee
Alibaba Cloud VPS Downtime Guarantee Failure Claim Process
Disclaimer
Amount of Compensation for Service Failure
Tax Collection
Billing and Payment
Refund Policy

Read full story here

Wrap-up

Well, I know it's kind of lazy writing that just write the sub-heading of the content. At the very least you learn about policy of a hosting provider so you could prepare for it in case you want to open one. Thanks.

Company information security analysis

Awal Ariansyah — Sun, 18 Sep 2022 13:10:55 +0000

In my recent class of college, a Network and Information Security, I have tasked to do some analysis of a company and identify the information assets and also the threat of that company. So, I decided to write it here.

Before we jump, I will explain briefly what I learned so far regarding to Network and Information Security.

What is information system?

I will rephrase the definition from Satzinger, Jackson and Burd.

Information System is a group that are linked one to another in purpose of gathering, processing and storing information that can be used as an output to solve a business problem. (Satzinger, Jackson, Burd: 2010).

What is assets?

Assets in terms of Information System is an assets that is important as the fundamental block of the system.

Assets categorised into:

Personnel
Hardware
Application software
System software
Data
Facility
Support

What is a threats?

Threats is an action or event in a company that can occurs in the form of harm, resulting in losses. It can be losses in money or costs, energy or effort and even opportunity, good reputation and bankruptcy.

The category of threats:

Human resources failures
Hardware failures
Software failures
External threats
Internal threats
Financial
Nature

The purpose of information security

A value of information will be valued by the people if it can be trusted for:

Integrity
Confidentiality
Availability
Authenticity

Company analysis

Now we are back to the task, the company I picked is a local Indonesian hosting company, namely Rumahweb.

Rumahweb - Painless hosting solution, is a Platform as a Service (PaaS) provider that serves a web hosting as well as domain registration focusing in a low to mid-level online businesses. (https://www.rumahweb.com/).

I am not trying to promote Rumahweb, but it is worth to check due to cheap cost for your development test. So, let us analyse the assets and the threats of Rumahweb.

Assets analysis

Personnel

As a platform service, sure they had a lot of personnel. Let's just mention several of them. Customer supports, Accountant, and probably the whole IT departments such as IT support, Database Administrator, Back end Developer, Front End Developer and more.

Hardware

The hardware is a server computer with a lot of VM's running and also a datacenter to store customer's data. It can be independent server, or partnering with bigger cloud company like AWS, Alibaba, Litespeed, Google Cloud or Digital Ocean.

Application software

In the client-area it will provide a web-based application of cPanel with tools and utilities.

System software

Rumahweb provide a Virtual Private Server a.k.a VPS to handle system-level of business requirements.

Data

They store a client's application data, the critical data of the company and other internal data such as financial data and services documentation.

Facility

The company essential facility of Rumahweb is the office building. They have 2 building, a headquarter and a branch buildings located in Yogyakarta and Jakarta respectively.

Support

Support or helper assets of Rumahweb is the Indonesian Law to protect the client's data and the eligibility of the company itself.

Threats analysis

Human resources failure

No system is safe

No matter how secure a system, a failure can happen. Especially in the human's level, a social engineering is the common threats with a fatality depends on the target and the data leaked.

A hosting provider, typically can happen a failure from the non-IT staff due to Social Engineering. That does not mean an IT staff would not likely to be affected.

Hardware failures

Hardware failures can happen like the server overheat, unnoticed damage in hardware, low quality hardware. I can not think anymore example.

Software failures

This category of failures is the common one among many company, it can be causes by missed User Experience implementation, outdated application, and poor user-interface.

External threats

In a hosting provider scenario, the bad actor is going to target the client from the hosting provider because the client is the first-layer of the attack.

The threats can be a Remote Code Execution due to poor web application deployed to the hosting, a phising, DDoS, or a malware that steal the access token's users.

Internal threats

Internal threats from the perspective of the company would be a sabotage, human-error as well as non-technical problems among the staff.

Financial threats

The financial threats of Rumahweb would be can not afford an infrastructure to scale the client's business either by financial miscalculation, partner regulations, and wrong financial strategy.

The others would be lost to its own competitor.

Nature threats

This one is an easy analysis, if Rumahweb only relies on Regional or National data centre, the nature threats would be a Flood or a Earthquake.

Because those are the most common disaster that occurs in Indonesia.

Conclusion

Well, that's wrap all of it. I am sorry if you are ended up reading into this section and do not find it any useful. I wrote this as my part of college's task, so enjoy.

I hope you learn something new, thank you.

A Tale of Reducing Expo/React Native Android Application

Awal Ariansyah — Tue, 13 Apr 2021 02:55:05 +0000

I'm going to take you to my journey on how to smoothly reduce an android application made with React Native/Expo and hopefully without getting any error. Let's begin the journey!

First things first, let's talk about my development environment. I'm using Lubuntu 20.04 focal, with Desktop Environment LxQt 0.14.1 and the details as shown in the picture below. I've successfully reduce my app for about 49% (the universal version).

Requirements

There are several package you need to install in order to have smooth build.

Install JRE, JDK and check the installation

sudo apt-get install default-jre
sudo apt-get install defalut-jdk

java -version
javac -version

Install Expo Command Line

sudo npm install --global expo-cli

Install Android Command Line Tools

sudo export ANDROID_HOME=/usr/lib/android-sdk
sudo wget https://dl.google.com/android/repository/commandlinetools-linux-6609375_latest.zip
sudo unzip commandlinetools-linux-6609375_latest.zip -d cmdline-tools
sudo mv cmdline-tools $ANDROID_HOME/
sudo export PATH=$ANDROID_HOME/cmdline-tools/tools/bin:$PATH

Set up licenses

Go to /usr/lib/android-sdk/ directory

cd /usr/lib/android-sdk/

We need to accept the license before using the sdk

sudo yes | sdkmanager --licenses

And also we need to change the permission on /tmp folder

sudo chmod -R 0777 /tmp

Action

So, the first action you need to take is open up your expo react native folder in a terminal. Make sure you back up your project files first, for safety.

Run the following command

expo eject

You will be asked with several question, and just answer it based on your project information. After you finish, there will be a new folder inside your project called android and IOs.

Go to android folder and make a new file called local.properties. This file will be used for pointing the sdk that gradle need in order to build your application.

cd android
touch local.properties
sudo nano local.properties

add the sdk.dir variable like this

sdk.dir = /usr/lib/android-sdk/

Ctrl + O, Enter, Ctrl + x to save it.

Next, go to the android/app folder on your terminal and generate a keystore for your application so that you can publish it in Google Play Store.

cd android/app
sudo keytool -genkey -v -keystore yourkeyname.keystore -alias yourkeyaliasname -keyalg RSA -keysize 2048 -validity 10000

Replace yourkeyname and yourkeyaliasname. And you will be asked for password. Make sure you remember the password.

After finish, a new file will appear with the extension (.keystore). That's your key. Now head back one directory and edit the gradle.properties file.

cd ..
sudo nano gradle.properties

add this line below

MYAPP_UPLOAD_STORE_FILE=yourkeyname.keystore
MYAPP_UPLOAD_KEY_ALIAS=yourkeyaliasname
MYAPP_UPLOAD_STORE_PASSWORD=yourkeypassword
MYAPP_UPLOAD_KEY_PASSWORD=yourkeypassword
org.gradle.jvmargs=-Xmx4096m

Replace yourkeyname, yourkeyaliasname and yourkeypassword then save it.

Now, go to app folder and edit the build.gradle file

cd app
sudo nano build.gradle

Change these line from false to true

def enableSeparateBuildPerCPUArchitecture = false
def enableProguardInReleaseBuilds = false

Scroll down into signingConfigs and add this configuration below the debug

    release {
            if (project.hasProperty('MYAPP_UPLOAD_STORE_FILE')) {
                storeFile file(MYAPP_UPLOAD_STORE_FILE)
                storePassword MYAPP_UPLOAD_STORE_PASSWORD
                keyAlias MYAPP_UPLOAD_KEY_ALIAS
                keyPassword MYAPP_UPLOAD_KEY_PASSWORD
        }

Then, in the buildTypes look in curly brackets for release change this line

signingConfig signingConfigs.debug

signingConfig signingConfigs.release

Also add this line below the minifyEnabled

shrinkResources true

Then scroll down to the last line, add a closing curly bracket (}). I don't know I'm getting an error without this strange closing curly bracket.

The last thing, if you also want to build an universal apk file then scroll up and search for splits, inside the abi change universalApk from false to true. Save it.

Note: If your app doesn't contain any permission, make sure you don't have any use permission code inside AndroidManifest.xml.

Because by default, if you're not set the permission in the package.json, expo will automatically add every permission to your app and I'm having this issue when I was trying to publish to Google play store, so make sure you check that part.

Now everything is ready, time to build. Head back to android folder where the gradlew file exist. Log in terminal as super user, to avoid permission issues.

cd ..
sudo su

If you want to build the .apk file, run this command

./gradlew assembleRelease

Or if you want to build as a bundle (.aab) file run this command

./gradlew buildRelease

In my case, this take about 5-18 minutes depending on your machine and your project. The output will be in app/build/outputs/apk/release for .apk and app/build/outputs/bundle/release for .aab.

Well, that's all I guess. Hope it help, thank you for reading and sorry for a bad English. Cheers~