The following sections of this post is the conversation I had with Genie, exported directly from the Genie AI VS Code extension using their “export [conversation] to markdown” option.

What’s notable about my interaction with these two models, is how GitHub copilot intuited the exact block of code I needed on its first try without any input from me. Whereas I had to have a conversation with Genie that resulted in a similar block of code that originally did not work due to my use of Docker Desktop WSL2 integration. GitHub Copilot generates correct code snippets for me about 80% of the time, and I can cycle through alternatives using the alt + ] shortcut. But if it gets it wrong, I have no way to refine the generated code, other than taking the closest match and refining it in such a way that it generates further recommendations. Genie AI and ChatGPT on the other hand, only generate correct code for me about 10% of the time. But I’m able to refine the code through the chat mechanism which can result in some great code.

So in my opinion, a developer should be using both of these tools because GitHub Copilot is surprisngly accurate and has seemless integration with VS through the same mechanism we’re used to with Intellisense. But when we’re in the ideation stage of building software, or if GitHub Copilot doesn’t understand our intent, then the chat feature of Genie or ChatGPT pays off.

Oh, as a side note, what I was trying to implement was a way to give my Kubernetes hosted asp.net services access to my local Azure CLI so that they could use my dev credentials to access the MS Azure services they needed. This way they’d work the same way as they do when running them from Visual Studio. Unfortunately, what I found is that the WSL compatible Azure CLI executable is some sort of virtual file that Kubernetes doesn’t recognize as a valid file. I got this error when I attempted to deploy this solution to my Docker Desktop Kubernetes cluster:

MountVolume.SetUp failed for volume “az-cli” : hostPath type check failed: /run/desktop/mnt/host/c/Program\ Files\ (x86)/Microsoft\ SDKs/Azure/CLI2/wbin/az is not a file

It indeed is reported as a file by Windows Explorer and WSL2 Ubuntu. But Microsoft has some special virtual files it uses to blend the Windows host environment with the WSL environment. So I’m guessing this is one of those situations, and despite Docker Desktop using the WSL environment, it doesn’t recognize the virtual file as a real file.

If you’re wondering about the path being right, I copied that straight from my WSL hosted Ubuntu environment. Kubernetes also successfully mounted the az-cli (renamed az-config) volume given to me by GitHub Copilot.

You

Does the DefaultAzureCredential class provided by the Azure.Identity library for dotnet use the Azure CLI credentials if available?

Genie

Yes, the DefaultAzureCredential class provided by the Azure.Identity library for dotnet does use the Azure CLI credentials if available. When the DefaultAzureCredential class attempts to authenticate a given Azure service client object, it first tries to authenticate using the local development environment’s VSCode or Visual Studio authenticated user account. If that doesn’t work, it will try to authenticate using credentials provided by Azure PowerShell modules. Finally, if neither of those approaches works, the DefaultAzureCredential class will check for the presence of an Azure CLI installation and use its credentials to authenticate with Azure.

You

Find problems with the following code

volumes:
  - name: az-cli
    hostPath:
    path: ~/.azure

Genie

The YAML code provided seems to be creating a volume for Kubernetes. However, it contains an issue that may cause errors.

• The tilde (~) is used as shorthand to represent the current user’s home directory path in shell environments like bash, but it may not work outside of them. Therefore, using ~/.azure in the hostPath section of the YAML file may cause issues when running on a non-shell environment.

To fix this issue, you can replace ~/.azure with the absolute path to the host directory where Azure CLI credentials are stored. For example:

volumes:
  - name: az-cli
    hostPath:
      path: /home/user/.azure #replace with actual absolute path

Make sure to replace /home/user/.azure with the actual absolute path to your Azure CLI credentials directory.

You

Is that the correct path when using Docker Desktop for Windows?

Genie

No, the correct path to reference in your YAML file when using Docker Desktop for Windows would be different.

On Windows machines, the default path for Azure CLI credentials is C:\Users\<username>\.azure. Therefore, you should use the following path in your YAML file:

volumes:
  - name: az-cli
    hostPath:
      path: C:\Users\<username>\.azure #replace with actual username

Make sure to replace <username> with your actual Windows username in the path value of the YAML file.

You

Why did GitHub copilot recommend: /run/desktop/mnt/host/c/Users//.azure

Genie

GitHub Copilot recommended /run/desktop/mnt/host/c/Users/<username>/.azure as the path for the Azure CLI credentials because it is the location where Docker Desktop for Windows maps the C: drive of the host machine, i.e., your Windows machine.

Docker Desktop for Windows runs in a lightweight virtual machine (VM) that has its file system isolated from the host machine’s file system. To provide access to files and directories on the host machine, Docker Desktop for Windows uses a special feature called “bind mounts” that map directories from the host file system to directories inside containers.

When you mount a bind mount in Docker Desktop for Windows by referencing a path like /run/desktop/mnt/host/c/Users/<username>/.azure, Docker will automatically map this path to the correct location on the host machine.

So, while /run/desktop/mnt/host/c/Users/<username>/.azure might look strange, it would work as expected when used in a Docker container running on Docker Desktop for Windows.

15563255 [main] sh 1473 dofork: child -1 - forked process 50444 died unexpectedly, retry 0, exit code 0xC0000142, errno 11 .git/hooks/pre-push: fork: Resource temporarily unavailable

Initially, this was caused by Microsoft Defender for Windows. And I resolved it by adding C:\Program Files\Git to the exclusions list:

Add-MpPreference -ExclusionPath “C:\Program Files\Git”

That fixed it for a while. But then it came back. After messing with exclusion rules, paths, and copying files around so that all git.exe’s installed on my system had a git-lfs.exe available to them. I decided to just reinstall all git applications. And that fixed the issue.

Example Code

Here is an example of the code that demonstrates the issue:

using System;
using System.Data.SqlClient;
using System.Text.RegularExpressions;

public class SqlInjectionMitigation
{
    private static readonly Regex ColumnNameRegex = new Regex("^[a-zA-Z0-9_]+$");

    public void ExecuteQuery(string columnName)
    {
        if (!ColumnNameRegex.IsMatch(columnName))
        {
            throw new ArgumentException("Invalid column name");
        }

        string query = $"SELECT {columnName} FROM Users";
        using (SqlConnection connection = new SqlConnection("your_connection_string"))
        {
            SqlCommand command = new SqlCommand(query, connection);
            connection.Open();
            SqlDataReader reader = command.ExecuteReader();
            while (reader.Read())
            {
                Console.WriteLine(reader[0]);
            }
        }
    }
}

In the above code, the ColumnNameRegex is defined as a static readonly field. However, Snyk Code static analysis won’t detect the custom SQL injection mitigation because there is no local Regex variable declaration.

Solution

To ensure that Snyk Code detects the custom SQL injection mitigation, you need to add a local Regex variable declaration. Here is the modified code:

using System;
using System.Data.SqlClient;
using System.Text.RegularExpressions;

public class SqlInjectionMitigation
{
    private static readonly Regex ColumnNameRegex = new Regex("^[a-zA-Z0-9_]+$");

    public void ExecuteQuery(string columnName)
    {
        // Local Regex variable declaration
        Regex localColumnNameRegex = ColumnNameRegex;

        if (!localColumnNameRegex.IsMatch(columnName))
        {
            throw new ArgumentException("Invalid column name");
        }

        string query = $"SELECT {columnName} FROM Users";
        using (SqlConnection connection = new SqlConnection("your_connection_string"))
        {
            SqlCommand command = new SqlCommand(query, connection);
            connection.Open();
            SqlDataReader reader = command.ExecuteReader();
            while (reader.Read())
            {
                Console.WriteLine(reader[0]);
            }
        }
    }
}

By adding the local Regex variable declaration Regex localColumnNameRegex = ColumnNameRegex;, Snyk Code static analysis will now detect the custom SQL injection mitigation and recognize that the attack vectors have been successfully mitigated.

However, I’ve been having trouble with using Microsoft Teams for Web within this browser due to one of the performance and power saving features: Sleeping Tabs.

This feature frees up resources for a tab I have not interacted with in the last two hours, pausing notifications from my MS Teams tab. This is of course a huge problem, because I need to be always available on Teams during work hours, and I’ve missed about a dozen messages as a result. But no longer, for I have found the solution to my problem.

Disable Sleeping Tabs for a site

You can disable Sleeping Tabs for individual sites, or more specifically domains, by following this handy guide: https://www.tenforums.com/tutorials/165266-add-remove-sites-sleeping-tabs-block-list-microsoft-edge.html

Application Icon (Windows Forms)

Each component with a window can have its icon set in the InitializeComponent or constructor methods. But there are several ways to add the icon file to the project.

MyComponent.cs InitializeComponent()

// myicon.ico added to project as embedded resource
this.Icon = new System.Drawing.Icon(typeof(MyEntrypointClass), "myicon.ico");

// myicon.ico added to project resource file
this.Icon = new System.Drawing.Icon(MyEntrypointClass.Properties.Resources.MyIconKey);

// myicon.ico added to component resource file
this.Icon = new System.Drawing.Icon(typeof(MyComponentClass), Resources.MyIconKey);

// myicon.ico added to project as "copy to output directory"
this.Icon = new System.Drawing.Icon("myicon.ico");

Any of these methods work fine, but I’ve listed them in order of my preference. I prefer not using a resource file because if I’m not supporting multiple languages, they add unecesary overhead to compilation and probably negatively impact runtime performance.

Normally, I would prefer leaving the file external to the DLL to reduce time it takes to load the DLL; meaning the last option I listed. However, in this case, the icon will most definitely be needed at startup, so embedding it makes the most sense as it’s simpler to manage the deployment with less files.

Add/Remove Programs Icon (MSI)

You can set the icon used in Add/Remove Programs in your WiX project WSX file:

Product.wsx

<Wix>
  <Product>
    <Icon Id="icon.ico" SourceFile="$(var.SolutionDir)\myicon.ico"/>
    <Property Id="ARPPRODUCTICON" Value="icon.ico" />

The installer icon is more complicated to set because it needs to be a banner bitmap, so I didn’t bother figuring that out.

Problem

Reference Guest/Host by DNS name.

Solution

1. Create a public virtual switch:
   1. Open the Hyper-V Manager
   2. Under Actions on the right, select “Virtual Switch Manager”
   3. You should only see one or two Switches:
      • Default Switch - an internal switch which allows internet access but uses a private subnet for the VMs
      • WSL (optional) - An internal switch which doesn’t allow internew access. Use by the Windows Subsystem for Linux 2 (WSL2)
   4. Select “New virutal network switch”
   5. Choose External for the type
   6. Click “Create Virtual Switch”
   7. OK
2. Assign the VM to the public virtual switch:
   1. Select the VM
   2. Settings…
   3. Network Adapter
   4. Virtual switch: External
   5. OK

That’s it! You can now make network requests to the host and guest using their hostname.

Still Didn’t Work

If this didn’t work for you, then you’re going to need to ensure that your network has its own DNS server and that it is set as the primary DNS for your network.

Additionally, the DNS server itself should not be configured to forward local DNS queries. It must handle those itself.

Despite the silly name, Redirect Pizza is amazing. It does just this one thing, and it does it flawlessly. I had my domain redirected in under 5 minutes.

Redirect Pizza

This service is simply elegant. Their landing page asks where you want to redirect from, and where to. It’s just two input boxes and a submit button. They then ask you to create an account using a variety of popular platforms, or your email address, and then you’re presented with instructions for modifying your DNS record to complete the redirect setup.

It even verified that I had finished my DNS configuration within a minute of my making the change; no page refresh required. Although I did have to refresh the page to see the overall domain status update to completed.

I’m using this service for the blog you’re looking at right now. It used to be hosted on Blogger at https://blog.carlinscott.com, but thanks to Redirect Pizza, it’s hosted here on GitHub Pages.

GitHub Pages

This site is hosted on GitHub Pages, which only provides apex domain and https redirect:

1. http://carlinscott.com > httpS://carlinscott.com
2. https://carlinscott.com > https://www.carlinscott.com

AWS

You can do http > https redirects on most AWS services, but the other kinds of redirects are more difficult.

The biggest issue with AWS is that they have no solution for redirecting an apex (aka bare, naked) domain that doesn’t require you to transfer DNS control to them from your domain registrar (GoDaddy, NameCheap, etc).

I worked around that issue by deploying a public EC2 server to handle the redirect using ngnx. But it has been a pain to keep the Let’s Encrypt cert up to date. I have a cron-job set up to renew the cert every 2 months, but it runs, throws no errors, and doesn’t renew the cert. But when I run it manually, it works perfectly.

That solution costs $6/mo.

If you can forward DNS to AWS, then you can use a Load Balancer Listener Rule to perform whatever redirects you need.

This costs minimum $18/mo, but if you’re using this solution, you probably already needed a load balancer. So it’s basically free.

Naked SSL

This service looks if simpler than Redirect Pizza, but it’s not as easy to use, and they provide little to no info about their service without signing up. I used their domain redirect tester without signing up, and it said that it didn’t support my domain without providing an explanation.

I don’t recommend this service.

Redirection IO

This service is really complicated to use. I spent about an hour trying to set up my free redirect from blog.carlinscott.com to www.carlinscott.com, and I gave up. They require you to write rules to match the entire URL using their weird syntax that I couldn’t figure out. They could have just let me use Regex, or provided a catch-all example, but they didn’t. I also wasn’t sure how to deploy my solution after I figured out the matchers.

I think this service could be useful for admins who are managing huge and complex networks of related websites. Their redirect matching engine is sophisticated and provides custom verification scenarios so that you can ensure that it will work the way you want.

I only recommend looking at this service for enterprise IT architects.

301 Redirect Website

This is a free service that only provides HTTP redirects. So not terribly useful in the age of HTTPS Everywhere.

I will continue to use the tax prep services because of their audit protection insurance. But come on, can’t they pre-fill some of my tax return?

Features I’d like to see

Asset Depreciation History

The most useful and easy to implement feature that I’d like to see from any of the tax services, is importing my depreciating assets from previous tax returns. I have to enter their depreciation history each year, so it’s a simply a clone of previous years, plus what I’m going to depreciate this year. And the tax service can suggest the expected depreciation for this year while giving me the option to modify it.

Automatic Imports

Most of the info we fill in on our taxes, is available online on various websites. I’ve seen some progress on this front from TurboTax, but it’s pretty minimal. Last time I checked, they only imported a W2 from ADP. And that process was more complicated than just entering the info from the W2 I was sent in the mail.

Services they could import data from:

• Investment and retirement account providers
  • Services: Fidelity, Vanguard, Prudential
  • Tax related accounts: 401k, IRA, Roth IRA, Realized gains/losses from personal investments
• Banks
  • Basically all banks have online account access, and many provide expense classifications. So they could import all my charitable donations and deductible expenses and depreciable asset purchases.
  • They could also run some analyses to determine if I’m forgetting to include misc income or if I missed classifying an expense as tax deductible.
• W2 from ADP and Workplace
• Sales
  • Income from Etsy, RedBubble, Threaded, etc

Services I’ve Used

• Credit Karma taxes / CashApp Taxes
  are free, and have a pretty good interface. But they don’t provide as much help and extra services as the two paid service I’ve tried. I do like their interface better than TaxACT though.
• TaxACT
• TurboTax
  has the best features, but they’re also the most expensive by a large amount; they also use deceptive, almost scam like marketing tactics, and they’re a major reason why the IRS doesn’t just send us a bill.

dbContext.DbSet.FromSql(queryString)

This method does not actually execute raw SQL. It interprets the SQL query and then attempts to generate a LINQ query from it. This will fail if you have SQL methods in your query string. It can also fail for some parameter types. Finally, even if it works, it will wrap your query in another query in order to make it compatible with LINQ, whether or not you actually use LINQ.

In general, this is not a useful method in my opinion.

If you do not need to retrieve data, there’s another method available that actually executes raw SQL:

dbContext.DbSet.ExecuteSqlCommandAsync(queryString);

This command returns an int reflecting the number of records affected.

But what if I want to perform a SELECT query using raw SQL? Well, EntityFramework has no option for you. However, you are in luck because there’s another library that can be used with EF to accomplish your goal. It’s called Dapper.

Dapper provides several raw SQL execution methods that can be applied to an IDbConnection. And you can access the IDbConnection from EF, like so:

using Dapper;
IDbConnection dbConnection = dbContext.Database.GetPgSqlConnection();
var results = await dbConnection.QueryFirstOrDefaultAsync(queryString);

The QueryFirstOrDefaultAsync method is an extension method provided by Dapper.

This drive to deploy can lead to us skipping some important steps, such as preventing search engines from publishing our test and demo environments. To avoid this, we can employ two different tactics.

1. robots.txt

This is a file that has been around for ages with a singular purpose; to tell robots what to do when they encounter your website. Not all robots listen to our instructions, but we don’t necessarily need to worry about those ones. The most problematic robots behave well but have a big impact on us. These robots are search engine web crawlers.

When a search engine crawls your website, it publishes your website to people searching for things related to your site. This may not impact you, but you could end up with a real customer accidentally visiting your beta or test site on accident. You may also end up with a lot more curious people visiting your test site than you’d like.

ASP.NET robots.txt.cshtml

If you’re using a modern version of ASP.NET, you can create a simple Razor Page that will tell robots to go elsewhere for your non-production sites.

This file should be placed with your other Razor Pages in the Pages directory in your ASP.NET website project. You only need to have MVC enabled in Startup.cs to use this, and it doesn’t require any controller logic because Razor Pages are magical.

What this Razor Page does, is generate a robots.txt file in your website’s root folder. For non-production environments, the robots.txt file tells robots to avoid interacting with the entire site. For production, it tells them to avoid crawling the /hidden/path, which is just a placeholder for any routes on your site that you don’t want to be indexed by a search engine.

2. Web Access Firewall (WAF)

You may be more worried about security bugs on your non-production websites, than them showing up in search results. You may also have an admin portal that you only want accessible from your coworkers and business partners.

The best way to protect sensitive areas on your website is definitely not a robots.txt. For one thing, it doesn’t prevent a person or a robot from entering the restricted area, rather it just tells them that they souldn’t. It’s like a realy low-key keep out sign. The other problem with highlighting a restricted route with robots.txt is that it highlights the sensitive area for hackers to exploit.

A WAF can restrict access to sections of your website to specific blocks of IPs. It is quite common for companies to have a section of their website only available to people on their network. To accomplish this, they create a WAF routing rule that only allows their block of IP addresses from accessing certain routes.

I will not go into the details of doing this as it is dependent on where you’re hosting your website, and the web host platform you are using. However, I think the terminology I have provided will help you find what you need on the internet.