Notes

Short notes about anything that catches my attention. Also a place to save stuff I keep forgetting over and over.

06/15/2026

11:10

Nice finding of the day: AWS Vault.

06/02/2026

11:01

  • Positive lookahead: (?=regex)
  • Negative lookahead: (?!regex)
  • Positive lookbehind: (?<=regex)
  • Negative lookbehind: (?<!regex)

05/18/2026

15:23

How to change the password of a .pfx certificate:

openssl pkcs12 -in old.pfx -out temp.pem -nodes
openssl pkcs12 -export -out new.pfx -in temp.pem

If the .pfx uses an old/legacy cipher (RC2-40-CBC) that newer OpenSSL versions disable by default, run a slightly different command to extract the temp.pem file:

openssl pkcs12 -in old.pfx -out temp.pem -nodes -legacy
openssl pkcs12 -export -out new.pfx -in temp.pem

04/27/2026

17:57

If macOS refuses to install an application because it can't verify it, go to System Settings > Privacy and Security. Scroll down to Security: you'll find your app there and all you have to do is to click "Open Anyway".

02/23/2026

11:31

It's astonishing how little we (Brazilians) know about religions other than Christianity.

02/15/2026

19:52

curl -i: include headers
curl -I: only headers
curl -L: follow redirects

01/15/2026

11:51

O cheiro de chuva tem um nome: petricor. Mais especificamente, o cheiro que sentimos vem da geosmina, um composto orgânico presente no solo. Geosmina vem do grego, "cheiro ou perfume da terra".

Meu amigo Rafa Machado foi quem me falou sobre isso.

12/01/2025

15:18

Update: just use AWS Vault.

SST won’t work if the AWS credentials you’re using have MFA enabled. You’ll get:

Error creating AWS session: AssumeRoleTokenProviderNotSetError: assume role with MFA enabled, but AssumeRoleTokenProvider session option not set.

The easiest way to make it work is to set up a new AWS cli profile with credential_process. If you’re using the default profile, for example, you can set up something like this:

[profile sst-mfa]
region = ap-northeast-1 # don’t forget to set the same region as the original profile
credential_process = aws configure export-credentials

And then setting the AWS_PROFILE environment variable before running any SST command:

AWS_PROFILE=default-sst sst dev

If you’re using any other AWS profile, you need to set the --profile parameter accordling:

[profile sst-mfa]
region = ap-northeast-1 # don’t forget to set the same region as the original profile
credential_process = aws configure export-credentials —profile original-profile

Note that aws configure export-credentials was introduced in AWS cli 2.9.0, so please make sure you have that version or later by running aws --version.

10/14/2025

11:07

Typecasting is evil.

10/13/2025

14:28

Nietzschepicking: not just asking what the code does, but why it exists at all.

This is a hand-crafted, a little weird personal website. Create one of your own!