|
Hello, world! I just bought a domain name today ( davi.sh ) and am setting up the site. We’ll see how this goes! Hopefully it can get me to start blogging about cool stuff :)
|
|
Integration with Amazon Web Services Elastic Container Registry (ECR) is one of our most popular use cases with Snyk Container and so we’re happy to announce that we’ve made it simpler to integrate Snyk Container vulnerability scanning within your Amazon Elastic Kubernetes Service (EKS) and ECR services.
|
|
If you’re reading this article at the time of its publishing, your professional world is probably upended with pleas (or demands) to work from home. I’ve embraced remote work culture for years and I believe it is the future of work.
|
|
I wrote this for my tech leads who needed a crash course in engineering management. The advice you see in this article is the advice I used to help level up my team leads.
|
|
A fascinating read, especially as someone who investigates and architects secure systems for a living. See also, encrypting secrets in memory . Permalink.
|
|
SchedLat: a Low Tech Script for Measuring Process CPU Scheduling Latency on Linux
-
tanelpoder.com
-
6 years ago
-
eng
As you may know, I like to use low tech scripts when possible, ideally such ones that don’t even require you to be root. I prefer simple and “boring” tools as a starting point simply because of the production reality at my customers in traditional enterprise IT. Systems where RHEL6 (and clones) seem to be the most common distros (with Linux kernel 2.6.32) and it’s not too unusual to see RHEL5 occasionally either.
|
|
SchedLat: a Low Tech Script for Measuring Process CPU Scheduling Latency on Linux
-
tanelpoder.com
-
6 years ago
-
eng
As you may know, I like to use low tech scripts when possible, ideally such ones that don’t even require you to be root. I prefer simple and “boring” tools as a starting point simply because of the production reality at my customers in traditional enterprise IT. Systems where RHEL6 (and clones) seem to be the most common distros (with Linux kernel 2.6.32) and it’s not too unusual to see RHEL5 occasionally either.
|
|
What is this "5-Section 199A dividends" line on my 2019 Robinhood 1099-DIV?
-
www.joehxblog.com
-
6 years ago
-
eng
Robinhood messed up. Or maybe it was the government. But in either case, Robinhood ended up sending me two sets of 1099s this year - an original one, and a “corrected” one.
|
|
Automating remediation for vulnerabilities in Python dependencies using Snyk
-
snyk.io
-
6 years ago
-
eng
We’re pleased to announce improved support for Python in Snyk Open Source, allowing developers to remediate vulnerabilities in dependencies with the help of automated fix pull requests!
|
Hello everyone! In the "The Obscure or Generally Underappreciated Waifu Thread" I saw that some of S...
|
|
When you upload photos to Instagram, back up your phone to “the cloud”, send an email through GMail, or save a document in a storage application like Dropbox or Google Drive, your data is being saved in a data center. These data centers are airplane hangar-sized warehouses, packed to the brim with racks of servers and cooling mechanisms. Depending on the application you are using you are likely hitting one of Facebook’s, Google’s, Amazon’s,....
|
|
I don’t like dependencies , but excusing one language’s reliance on bucketloads of them because others use built-in libraries misses the point. I care about the number of dependencies I have to install just for your project. On a system full of libraries that could have met most of those requirements, as evidenced by other, similar projects that do not need hundreds of extra packages, the fact that yours does gives me pause. The fact tha..
|
|
A Data-Centric Approach to Plan Appropriate COVID-19 Response in the United States . Coronavirus action plan: a guide to what you can expect across the UK - GOV.UK . Coronavirus COVID-19 Global Cases by Johns Hopkins CSSE . COVID-19 (r/COVID19) . COVID-19 Discussion (r/China_Flu/) . Covid-19 DocSearch free access . COVID19 - AMA with r/COVID19 mod u/Jennifer Cole at 10.00pm GMT 25 Feb . Handbook of Covid-19 Prevention and Treatment f..
|
|
I'm a huge fan of Nextcloud and version 18 brought great integration with ONLYOFFICE . I'm not using it though because it ships with binaries that aren't always straightforward to execute.
|
|
The vulnerability was found in the Apache JServ Protocol (AJP). The issue is that this binary protocol allows an attacker to read or include any file into Tomcat webapp directories.
|
|
It's been a while since I wrote a pure opinion post. If this is your first encounter with me, let's just say I am a relatively opinionated person. The…
|
|
I’ve been extremely busy this winter writing my next book – ‘The Road Chose Me Volume 2: Three years and 54,000 miles around Africa’. It’s almost finished, and I’ve launched a Kickstarter to get...
|
|
In recent years, many language ecosystems have developed automatic code formatters to reduce the mental overhead of code readers and therefore to share code more easily. These tools work by ensuring that all code written in the same language looks the same. Some examples of these tools include gofmt for Go or mix format for Elixir. The Erlang community was lacking a tool like this, so we created a rebar3 plugin just to automatically for....
|
|
Speaking of Kevin Kelly , he wrote an interesting article examining the Amish’s relationship with technology. “They don’t adopt everything new but what new technology they do embrace, they take up about half a century after everyone else does. By that time, the benefits and costs are clear, the technology stable, and it is cheap.” Now that just seems like good sense. Permalink.
|
|
We are excited to announce our new strategic partnership with Rapid7, a leader in security analytics and automation.
|
|
For some testing I’m doing I need a set of images of a specific size to simulate pulling larger vs smaller image. Here is a quick script I put together for generating a 200mb, 600mb, 1000mb and 2000mb image (tiny bit larger as alpine included). Took a while to work out best to use /dev/urandom not /dev/zero as with zero the images got compressed for transfer. https://gist.github.com/lawrencegripper/5c25d5fdd13a3233144d87e972b52fb2
|
|
[Don't build] a static serverless website using S3 and CloudFront
-
sanderknape.com
-
6 years ago
-
eng
Sander will get you up and running, probably, but don’t use Amazon Web Services . Have a website , but use the much more user friendly Google Firebase to host it for free . Permalink.
|
|
Using the MediaWiki API doesn’t require coding. The on-wiki GUI provided at Special:ApiSandbox allows you to familiarize yourself with available actions, test queries, and run simple batch jobs without writing a single line of code!
|
|
Using the MediaWiki API doesn’t require coding. The on-wiki GUI provided at Special:ApiSandbox allows you to familiarize yourself with available actions, test queries, and run simple batch jobs without writing a single line of code!
|
|
While attempting to automate some filesystem creation that involved LVM I kept running into an issue occasionally with some holding open the logical volumes. I would attempt to disable the volume using the following command: 1 2 $ lvchange -an system/storage Logical volume system/storage contains a filesystem in use. All of the mounts for the filesystems that were on the volume were unmounted, so it must have....
|
|
ShipIt Day, Cerner Engineering’s 24-hour hackathon, provides associates an environment to be creative, work on new projects, and network with other associates. This event is one of the many things that sit at the core of our Engineering Culture at Cerner, and is rapidly growing- now being hosted globally in Romania, Sweden, India, and the UK. In October, our team had the chance to participate in the seventeenth ShipIt Day at Kansas City’s I..
|
|
So I just saw this log message popup on a SystemD service I wrote yesterday: Feb 24 10:27:11 ip-172-31-24-213 reddit_to_kafka[18391]: Already exists in redis so also in kafka so skipping Sometimes you need to solve a problem without a lot of effort. Yesterday I needed to populate a Kafka queue with data and I didn't want to worry about duplicates flowing into it. Here's what I knew: My source wasn't a stream but a set of social m....
|
|
Docker Images : Part II - Details Specific To Different Languages
-
www.ardanlabs.com
-
6 years ago
-
eng
Series Index Reducing Image Size Details Specific To Different Languages Going Farther To Reduce Image Size Introduction In the first part, we introduced multi-stage builds, static and dynamic linking, and briefly mentioned Alpine. In this second part, we are going to dive into some details specific to Go. Then we will talk more about Alpine, because it’s worth it; and finally we will see how things play out with other language..
|
GitHub Actions are a great way to build powerful customised CI/CD workflows using the power of community-driven resources, but they can be tricky to get right in terms of security.
|
|
This article was derived from my GopherCon Israel 2020 presentation. It’s also quite long. If you’d prefer a shorter version, head over to the-zen-of-go.netlify.com. A recording of the presentation is available on YouTube. How should I write good code? Something that I’ve been thinking about a lot recently, when reflecting on the body of my […]
|
|
Continuing my new trend of discussing Californian curiosities, let’s talk about water. Speaking with only the slightest bit of hyperbole, it doesn’t rain in the Bay Area from May through September, but it gets decently damp from October onward. And I’m not just talking about rain; some mornings bring with them a thick layer of condensation, which I’ve addressed before , a long, long time ago. Back then, I thought the condensation ..
|
|
Continuing my new trend of discussing Californian curiosities, let’s talk about water. Speaking with only the slightest bit of hyperbole, it doesn’t rain in the Bay Area from May through September, but it gets decently damp from October onward. And I’m not just talking about rain; some mornings bring with them a thick layer of condensation, which I’ve addressed before , a long, long time ago. Back then, I thought the condensation ..
|
|
The Rust tool cargo is the Rust equivalent of rake and bundler and rails combined (these are Ruby tools). Cargo is what you use to generate a new Rust app. Here's an example: cargo new loader_datastreamer_to_kafka_rust This generates a new, correctly laid out project directory. And here's what it looks like: ❯ tree . ├── Cargo.toml └── src └── main.rs 1 directory, 2 files The Cargo.toml file is a package manifest which has....
|
|
Last week, I wrote about the mindset that computer systems can be understood, and behaviors can be explained, if we’re willing to dig deep enough into the stack of abstractions our software is built atop. Some of the ensuing discussion on Twitter and elsewhere lead me to write this followup, in which I want to run through a few classes of systems where I’ve found pursuing in-detail understanding of the system wasn’t the right answer.
|
|
Last week, I wrote about the mindset that computer systems can be understood, and behaviors can be explained, if we’re willing to dig deep enough into the stack of abstractions our software is built atop. Some of the ensuing discussion on Twitter and elsewhere lead me to write this followup, in which I want to run through a few classes of systems where I’ve found pursuing in-detail understanding of the system wasn’t the right answer.
|