Thanks for the update!

link: https://codeberg.org/martianh/lem.el

If I understand you correctly, this is trivial in emacs:

(defun insert-text ()
  (interactive)
  (insert "your text here"))

(global-set-key your-keybind-here #'insert-text)

You could make it a format string if it relies on data specific to some file or parameter. You could also make the keybind local to certain modes/files rather than a global keybind if you don't want to pollute your keybind space.

emacs org-mode

Thanks!

Do you happen to know what certs would be most "applicable" in this case? Something like OSWE?

Any advice on requirements to have a shot at appsec jobs?

I have my sec+ and my job is devops. We do everything in AWS (no on prem at all). However I have no actual cyber experience. Our team is pretty small, so I do as much dev as anyone else and as much ops as anyone else (deploying/managing cloud infrastructure), including standard security stuff like IAM and network configuration. It's also a small unknown company.

Is this enough to try and directly break into appsec, or do I need to start with another "cyber" role like SOC analyst or security engineer or something like that? I also plan on getting my OSCP at some point soon if that's relevant.

I agree "cloud native" is not great, I won't be using that term.

Why are cli tools generally not available as flatpaks? There's nothing about how flatpak works afaik which distinguishes gui and cli. I get that the original motivation for flatpak was guis, but considering how long it's been touted as a "universal" package manager for linux, I don't understand how there could be so few clis.

I've heard people say the name for packages from flathub is awkward (which it is), and aliasing everything you install would be annoying (which it would), but that sounds like such a simple problem to solve.

I've also heard people say that flatpak clis would be useless because clis tend to be systadmin tools, and thus need to be not sandboxed. But this strikes me as a non sequitur. Gui tools can be used for sysadmin, and there are tons of cli tools which have nothing to do with sysadmin, they're just userspace programs.

What does your workflow look like with toolbox/distrobox?

Alternatively if price is an issue (NEVER use a “free” VPN) you could torrent over I2P, which is free and very safe (at least as safe as tor, if not moreso).

Also the next release of qbittorrent is about to have built in I2P support (but also standard I2P comes with its own torrenting software).