Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

As 2019 draws to an end, we are going to be looking back on some great episodes of our podcast The Secure Developer.


I found this incredible rig on Pinterest, of all places. Inspiration for the next version of mine . Permalink.



MapTiler appeared in the Swiss National TV (SRF1 channel) broadcasted in the main Friday news at a prime time.

As mentioned in the getmonero.org blog post , the binaries of Command Line Interface (CLI) of Monero were recently compromised. -Continue to read the article on SerHack.me




Describing how NextRoll is handling processing petabytes of data using AWS Batch. 15 minute read In this blogpost, we are going to review how NextRoll is using AWS Batch for processing data, and how we benefit from this platform. We will start with an overview of the company and explain our needs for data pipelines. Then we’ll talk about how we are utilizing Batch, reviewing the advantages and disadvantages of this technology. Finally,....

Avdi Grimm wrote an interesting post back in June, about using text to create simple diagrams . He highlighted a few different tools, but one stood out: nomnoml . I used UMLet a lot back in college, to create some mediocre user stories, which soured me on UML in general. I gave nomnoml a shot, though, and created this simple network diagram: Permalink.

Building on the new Kubernetes features in Snyk Container, we’ve been experimenting with integrating vulnerability data more closely into the Kubernetes ecosystem.

This blog post takes addresses a common problem for technical workers - you have been offered a full time freelance gig and you don't know whether or not to take it based on its value versus your current compensation. Note : Traditionally I have done a crap ass job at making these kind of assessments. I'm writing this post to hopefully do a better / more "adult" take at this. What is Your Current Job Worth? Your current job's worth ca....

Like a lot of software developers, I can be pretty forgetful at times. If you're in the industry, you know how it goes: You start working on a project and it is February You look up and … it is May and You don't remember all that much of your life between A good friend of mine refers to this as falling down a code hole (Thank you Mister Mott) and it really is a thing. Some people's code holes are a few days long. Other people's code ....



Similar to our report on Docker image security, we wanted to take a look at the state of vulnerabilities in the public Helm Charts repository.

Goroutines are a unusual and powerful programming language feature, so they are a tempting toy to play with, and they get a bit overused. There is some indication that the following Go principle holds true: Strive to provide synchronous APIs, let the caller start goroutines. To put this advice into a more concrete code example: Do this: func (t *type) Run(ctx context.Context) { // Implementation of background task } Instea....

Goroutines are a unusual and powerful programming language feature, so they are a tempting toy to play with, and they get a bit overused. There is some indication that the following Go principle holds true: Strive to provide synchronous APIs, let the caller start goroutines. To put this advice into a more concrete code example: Do this: func (t *type) Run(ctx context.Context) { // Implementation of background task } Instea....

Goroutines are a unusual and powerful programming language feature, so they are a tempting toy to play with, and they get a bit overused. There is some indication that the following Go principle holds true: Strive to provide synchronous APIs, let the caller start goroutines. To put this advice into a more concrete code example: Do this: func (t *type) Run(ctx context.Context) { // Implementation of background task } Instea....

About a month ago there was an urgent security notice from the Nexcloud devs regarding a flaw in Nginx php-fpm and the associated Nextcloud config . Unfortunately we are now seeing it being exploited in the wild. Via: Bleeping computer A new ransomware has been found in the wild that is currently undetected by antivirus engines on public scanning platforms. Its name is NextCry due to the extension appended to encrypted files and th....

About a month ago there was an urgent security notice from the Nexcloud devs regarding a flaw in Nginx php-fpm and the associated Nextcloud config . Unfortunately we are now seeing it being exploited in the wild. Via: Bleeping computer A new ransomware has been found in the wild that is currently undetected by antivirus engines on public scanning platforms. Its name is NextCry due to the extension appended to encrypted files and th....

About a month ago there was an urgent security notice from the Nexcloud devs regarding a flaw in Nginx php-fpm and the associated Nextcloud config . Unfortunately we are now seeing it being exploited in the wild. Via: Bleeping computer A new ransomware has been found in the wild that is currently undetected by antivirus engines on public scanning platforms. Its name is NextCry due to the extension appended to encrypted files and th....

About a month ago there was an urgent security notice from the Nexcloud devs regarding a flaw in Nginx php-fpm and the associated Nextcloud config . Unfortunately we are now seeing it being exploited in the wild. Via: Bleeping computer A new ransomware has been found in the wild that is currently undetected by antivirus engines on public scanning platforms. Its name is NextCry due to the extension appended to encrypted files and th....

At home, I can send a link from any device to a local web server that saves it for later. Then, when I have time to read, I can see all my saved articles, move them into folders, and refer back to them as needed. At work, though, those links go into a text file. When I get home, I find the text file, open it, copy the list, clear the file, close it, and then send the list to the server. pbcopy makes that process just a little easier. Now, c..


A close friend recently said to me: I'm Copying You Since You're So Effective with respect to how much I tend to get done and I thought I'd elaborate on this a bit since I suspect that why I'm effective isn't always apparent. These aren't really in any order other than the order that I chose to finish them. I suspect they are all pretty important. Ten Reasons Why I Think I'm Effective Get Rid Of Anything That Pisses You Off . ....

Like so many other things this falls into the category of "I'll do it 100 more times before I die and I can never remember it so may as well blog it". A migration adds a column to a table in a database managed by Rails. In this case I had a table which needed to manage multiple types of data all front ended by an amount method that dynamically figures out why field to fetch back the data from. This gave me a column structure like this: ....

I've written in the past about watching your SQL queries stream by in the Rails console and how seeing, well, stupidity / things that look wrong can help guide you to things you need to find. Here's an example I witnessed recently: habit = Habit.find(2) habit.total_this_month Metric Load (2.5ms) SELECT metrics.date_created_at, metrics.int_val, metrics.float_val, metrics.metric_type_id FROM metrics WHERE metrics.habit_id = 2 AND (date_cr....

Introduction Link to heading I found a manuscript earlier this year (2019), written by my dad about his time in Antarctica between 1958 and 1965. Although he passed away in 1996, I thought it would be nice to publish it, primarily for the benefit of surviving family members. It had been typewritten rather than written longhand, so I didn’t think it would be too difficult.

Introduction Link to heading I found a manuscript earlier this year (2019), written by my dad about his time in Antarctica between 1958 and 1965. Although he passed away in 1996, I thought it would be nice to publish it, primarily for the benefit of surviving family members. It had been typewritten rather than written longhand, so I didn’t think it would be too difficult.

Some people may be aware that I run the local CSS meetup in Singapore. A few more may know that we've recently celebrated 4 years of miraculous existence. I've…



Hex gets used a lot, and it's more than possible to figure it out in your head - up to a point This snippet contains 2 simple routes to convert between Hexidecimal and Decimal with a slightly modified version at the end which converts a hex string into ascii chars Read more…

Hex gets used a lot, and it's more than possible to figure it out in your head - up to a point This snippet contains 2 simple routes to convert between Hexidecimal and Decimal with a slightly modified version at the end which converts a hex string into ascii chars Read more…




So I recently moved to running my Ruby code thru RuboCop prior to each submission courtesy of the magic that is Lefthook . I don't always fix everything that RuboCop detects but I tend to read thru the reports. I'm using the "Boy Scout" approach to campsites, i.e. leave your campsite (code base) better than you found it, to at least make some of the changes each time. Note: To avoid the massive amount of errors that Rubocop detects v....

One of the worst aspects of doing Rails development, although this is not limited to Rails in any way, is getting data to use for development work once your site starts getting users. Yes I know that you should always have full test coverage and that local data shouldn't be necessary – but it absolutely is . There is always a class of errors that you simply can't diagnose with a set of data with which to work. The happy truth though is....

Flutter and Fuchsia. In 2019 you will see these two words everywhere, and now is your chance to get ahead of the curve.” - Todd Fabacher, writing for Forbes Forbes saw it coming back in July of 2018. If you didn’t, then here’s your chance to find out why they did. From lower lead times to increased productivity, the number of platforms you’ll be able to reach to the simplicity of maintenance, Flutter is now leading the way in just about ..


50 visitors online