|
For developers, deciding which security issue to address first is hard, requiring time and expertise developers often don't have. This is a chance for the right tools to shine, providing the expertise to know which security questions to ask when prioritizing, and the technology to answer them quickly.
|
|
Outsourcing has put America in a precarious position. It quietly became one of the greatest threats to national security over the course of several decades, unrealized until the Coronavirus pan(dem)ic revealed the fragility of our situation. David Adler and Dan Breznitz, in the American Affairs Journal, discuss the issue and offer some concrete suggestions for fixing it. I encourage you to give it a read. See also: On National and Enterpr..
|
|
Normally when I'm trying to validate that an Internet service is available, well, I ping . Ping is one of those Internet bedrock protocols that I'm firmly in the camp of "SHOULD ALWAYS, ALWAYS, ALWAYS BE TURNED ON". But there are ping flooding attacks, etc so there are reasons why it isn't always a default (looking at you here AWS; staring you dead in the eyes with the 'ol stink eye). I recently realized that while it isn't example the ..
|
|
Apollo vs Relay Modern: An unbiased look at which GraphQL client to use
-
maxrozen.com
-
6 years ago
-
eng
If you're building an app using GraphQL, picking a client to use can be hard. Apollo? Relay? Urql? Let's look into some options.
|
|
Docker runs as root. The programs executing inside containers too. Make it a bit better. # do everything you need as root (maybe installing some dependencies) # create a non-root user RUN addgroup --gid 1001 appgroup RUN useradd --create-home --gid 1001 --uid 1001 appuser # set new workdir WORKDIR /home/appuser # activate non-root user USER appuser # copy new files with correct permis..
|
Bitcoin seemed to stand alone in having a whitepaper that was dropped out of nowhere and having their founder disappear. Until Monero.
|
|
I went on an adventure today. I left behind the stable comforts of the terminal and compiled bleeding-edge Emacs that uses a native window system. This is a big deal for me. As long as I can remember, I’ve used Emacs from within a terminal. I’ve decided to give the GUI’d Emacs a whirl. My Journey I’m running macOS Catalina (10.15.5). Originally I tried using the pre-built packages via brew (brew cask install emacs) and those available a....
|
|
In our new series ‘Career Pathways’, we’ll share inspiring, real-life stories from our Thoughtworkers based in Australia on how they began their careers in technology, their learnings, and how their journey at Thoughtworks has continued to enable their career as technologists.Name: Garima Singh
|
|
While Thoughtworks hires technologists all around the world, our recruiters encounter similar questions from candidates regardless of their location. We asked recruiters from multiple countries for the most frequently-asked questions they get from candidates. Here are the top 7 FAQs.1. What are the main technologies that Thoughtworks works with?
|
|
[Stories of social change] Reducing the gender gap in the music industry through technology
-
www.thoughtworks.com
-
6 years ago
-
eng
Over the years, the world has seen remarkable and rapid advancements in technology which are deeply impacting society. Despite this, we continue to struggle with issues such as poverty, violence, and climate change. At Thoughtworks, we believe that technologists have a unique role to play in how we can positively impact society and push for a more equitable tech future.
|
|
I went on an adventure today. I left behind the stable comforts of the terminal and compiled bleeding-edge Emacs that uses a native window system. This is a big deal for me. As long as I can remember, I’ve used Emacs from within a terminal. I’ve decided to give the GUI’d Emacs a whirl. My Journey I’m running macOS Catalina (10.15.5). Originally I tried using the pre-built packages via brew (brew cask install emacs) and those available a....
|
|
Normally when I'm trying to validate that an Internet service is available, well, I ping . Ping is one of those Internet bedrock protocols that I'm firmly in the camp of "SHOULD ALWAYS, ALWAYS, ALWAYS BE TURNED ON". But there are ping flooding attacks, etc so there are reasons why it isn't always a default (looking at you here AWS; staring you dead in the eyes with the 'ol stink eye). I recently realized that while it isn't example the ..
|
|
Talks about the valiant but almost-dead 10-year effort to prevent tracking with the Do Not Track header.
|
Adding Google Analytics to Django properly requires a bit of extra steps over just pasting the Google provided JavaScript snippet in your base template and calling it a day. For example, if you use the same analytics key in dev and production you would inadvertently be co-mingling... [Continue reading...] Adding Google Analytics to Django Templates The post Adding Google Analytics to Django Templates appeared first on BHoey .
|
|
Whether you want to start a career as a developer, or have been a developer for 20 years, you should check out these books.
|
|
PUBNUB: Making Engaging Realtime Experiences a Reality in India
-
www.9lessons.info
-
6 years ago
-
eng
Realtime Communication is providing enterprises with an innovative way to deliver better, more cost-effective customer service. Technology companies in India are racing towards a more connected and always-on world, making it easier, faster, safer, and more convenient for everyday people to do the things they need and achieve the things about which they dream. PubNub’s Realtime Communication Platform provides the backbone that any company ..
|
|
It seems like a simple enough question. Which word should you choose so that it takes your opponent the most guesses to discover it? Should you choose a long word to use up your opponent’s guesses? Or perhaps a short word with obscure letters? In this document I look into this question. But first, a bit of background. If you’re not familiar with the rules of hangman, it is a guessing game played between two people. Player A chooses a secr..
|
|
Monitoring Your Own Infrastructure Using Grafana, InfluxDB, and CollectD
-
serhack.me
-
6 years ago
-
eng
For some companies, infrastructure is the heart of its business. Specifically, I am referring to those companies which need to manage data and applications located on more than one server. -Continue to read the article on SerHack.me
|
|
It’s so hard to find great engineers that pass all of your interviews with flying colors. So when you do find someone who actually makes that happen, don’t let them go because you feel the need to bargain over little bits of money.
|
|
It’s so hard to find great engineers that pass all of your interviews with flying colors. So when you do find someone who actually makes that happen, don’t let them go because you feel the need to bargain over little bits of money.
|
|
K8s Operator with dynamic CRDs using controller runtime (no structs)
-
blog.gripdev.xyz
-
6 years ago
-
eng
Warning: This is a bit of a brain dump. I’m working on a project at the moment which dynamically creates a set of CRDs in Kubernetes and an operator to manage them based off a schema which is provided by the user at runtime . When the code is being built it doesn’t know the schema/shape of the CRDs. This means the standard approach used in Kubebuilder with controller-gen isn’t going to work.
|
|
21 June 2021: Updated to resolve bug where wrong private key was passed to client_certs. This was exposed by service change. There is a good guide to generating the necessary certificates and manually editing the openvpn config you can download from the portal in the official docs. Being a sucker for punishment I wondered if I could automate the process (mainly because I always forget the openssl commands) and secondly it was to be ru..
|
|
Recently I have seen a fair amount of talk about email in general and self-hosting email ( Email is not broken , Email is broken and Why I no longer host my emails myself ). I started selfhosting email using kolab almost 7 years ago now and I would never go back to the bad old days of hosted email. Using a well respected email stack/package like mailinabox , modoboa , mailcow or docker-mailserver is easy. They come with all....
|
|
Welcome to the Snyk Monthly Vulnerability Profile. In this series, Snyk looks back on the vulnerabilities discovered by or reported to our Security Research Team. This month we’re looking at one of a series of Zip Slip vulnerabilities Snyk’s Security Research Team identified in Golang packages.
|
|
Recently I have seen a fair amount of talk about email in general and self-hosting email ( Email is not broken , Email is broken and Why I no longer host my emails myself ). I started selfhosting email using kolab almost 7 years ago now and I would never go back to the bad old days of hosted email. Using a well respected email stack/package like mailinabox , modoboa , mailcow or docker-mailserver is easy. They come with all....
|
|
Recently I have seen a fair amount of talk about email in general and self-hosting email ( Email is not broken , Email is broken and Why I no longer host my emails myself ). I started selfhosting email using kolab almost 7 years ago now and I would never go back to the bad old days of hosted email. Using a well respected email stack/package like mailinabox , modoboa , mailcow or docker-mailserver is easy. They come with all....
|
|
layout: post title: So That One Time You Played with Docker for hte So that one time, at band camp – wait; wrong movie, this is a technical blog post about Docker … I recently helped a friend doing some federal work in the medical field get a better understanding of Docker and how Docker can mess about with open source licensing. We got up a "open source" stack of tooling using a bunch of heavy weight tools: Mongo Memcached A big Py....
|
|
I am in the process of wrapping up a year long engagement where I: Built a high performance data pipeline Capable of processing all of Twitter in real time / near real time Applied multiple tools to the data at different stages of the pipeline Applied one or more Machine Learning models at different stages of the pipeline Operated on AWS using SQS as the queueing structure This blog post talks about one of the key things I learned in te....
|
|
This one is a short one but a good one. I've been using SQS (disclaimer – I love SQS) lately for a large scale data pipeline. We are processing literally billions of small JSON blobs and in our cost modeling, we initially came up with an estimate that made SQS something that we couldn't use because of the number of JSON blobs. And then one of our people, thank you Don Neufeld, came up with the idea of batching up the JSON blobs and hav....
|
|
Everything is important and urgent, we just need more capacity. Sound familiar? Every organization has more things it wants to do than it can do. This is often viewed as a capacity problem; if only we had more capacity, we could get everything done. However, this is not true. All organizations have a finite capacity and from our experience, there is a law of diminishing returns where adding more and more people to increase capacity is actua..
|
|
It was a rich month in July Google-Adsense wise, but slow in the sense that I didn’t write many posts.
|
|
layout: post title: So That One Time You Played with Docker for hte So that one time, at band camp – wait; wrong movie, this is a technical blog post about Docker … I recently helped a friend doing some federal work in the medical field get a better understanding of Docker and how Docker can mess about with open source licensing. We got up a "open source" stack of tooling using a bunch of heavy weight tools: Mongo Memcached A big Py....
|
|
I am in the process of wrapping up a year long engagement where I: Built a high performance data pipeline Capable of processing all of Twitter in real time / near real time Applied multiple tools to the data at different stages of the pipeline Applied one or more Machine Learning models at different stages of the pipeline Operated on AWS using SQS as the queueing structure This blog post talks about one of the key things I learned in te....
|
|
This one is a short one but a good one. I've been using SQS (disclaimer – I love SQS) lately for a large scale data pipeline. We are processing literally billions of small JSON blobs and in our cost modeling, we initially came up with an estimate that made SQS something that we couldn't use because of the number of JSON blobs. And then one of our people, thank you Don Neufeld, came up with the idea of batching up the JSON blobs and hav....
|
|
It’s July, the seventh month, meaning the first six months of the year are over. In other words, the year is already more than halfway over.
|
|
Editors Note: Originally posted on medium by me At least, the way things are going here in the USA. Our roads, as we currently handle them, are unsustainable. As city and states are financially stretched in different and difficult ways, the incredible cost of road maintenance and construction is getting harder and harder for policy makers and government workers to manage. At the rate we are going there will be significantly fewer roads, mor..
|
|
The problem Link to heading While going through my backlog of various bookmarks, I came upon one CCC presentation titled ‘How Facebook tracks you on Android’ that sees researchers from the organization ‘Privacy International’ go through their findings on the ways Facebook tracks users on Android, outside of any use of their own applications and without any permissions from users. They do this through the implementation of the Facebook SDK i..
|