|
Abstract In writer-priority reader/writer locks, as soon as a single writer enters the acquisition queue, all future accesses block behind any in-flight reads. Thus, if any readers hold the lock for extended periods of time, this can lead to extreme pauses and loss of throughput given even a very small number of writers. This phenomenon is well-known in certain systems engineering communities (e.g. among some kernel or database developers),..
|
|
750 words, 3 minutes. The reason I don’t post on Cyber Security current affairs? It’s a scramble to be first. If I’m to write something, what should it be? What’s my angle? Which lens do I use on the microscope, or since this is a mass medium, the projector? What film can I show you that you haven’t already seen a dozen times? I’ll attempt to answer these questions here, and in so doing introduce what may become a new thread of posts.
|
|
A Denial of Service vulnerability discovered in the Axios JavaScript package - affecting all versions of the popular HTTP client
-
snyk.io
-
7 years ago
-
eng
Affected versions of axios are vulnerable to Denial of Service (DoS) because content continues to be processed from requests even after maxContentLength is exceeded, causing increased I/O and CPU usage.
|
|
Having team-wide rules that prevent credentials from being stored as code is a great way to police bad actions in your existing developer workflow.
|
|
If you find sensitive data in your Azure Repos repository, you need to do several things to recover, including invalidating the tokens and passwords that were once public.
|
|
Adding a SECURITY.md file to your Azure Repos helps your users find the information they need and encourages maintainers to consider general security practices.
|
|
By adding Snyk’s native integration with Azure Repos, each pull request will be tested to ensure new vulnerabilities aren’t introduced into the code base. Policies can be defined to configure the severity level of a vulnerability that fails the merge. The following image displays a failed PR due to new vulnerabilities that it would have added:
|
|
Following the rule of least privilege, ensure that contributors exist in the correct groups and therefore have the necessary permissions to work. Try to restrict administrative actions where possible.
|
|
Azure Repos access is typically done using SSH keys or personal access tokens (in lieu of a password). But what happens if those tokens are stolen and you didn’t know? Be sure to refresh your keys and tokens periodically, mitigating any damage caused by keys that leaked out.
|
|
Expenses paid in cash between two dates ledger -f my.ledger reg "^Expenses" and expr 'any(account=~/Assets:Cash:Wallet/)' -b 02/19 -e 04/09 Bank account income between two dates ledger -f my.ledger reg "^Assets:Bank:Acme" and expr "amount > 0" -b 02/19 -e 04/09 Formatting reg output ledger -f my.ledger reg "^Assets:Bank:Acme" --format="%(payee) %(amount)\n"
|
|
Understanding grid placement through building a HTML periodical table
-
chenhuijing.com
-
7 years ago
-
eng
I've been using CSS grid to build layouts for quite a while now, and all my designs to date involved either a handful of explicitly placed individual grid…
|
|
Despite the fact that the NVIDIA Jetson Nano DevKit comes with Docker Engine preinstalled and you can run containers just out-of-the-box on this great AI and Robotics enabled board, there are still some important kernel settings missing to run Docker Swarm mode, Kubernetes or k3s correctly. So, let’s try to fix this… Analyzing the Linux Kernel In my last blogpost Verify your Linux Kernel for Container Compatibility , I already sh....
|
|
The first time I saw wdired in action, it blew my mind. wdired makes dired (directory editor) buffers writeable, so you can edit them like any other Emacs buffer. You can subsequently use all your favorite file-editing tricks to rename files (amongst other things). You can see it in action at the end of Emacs Rocks episode 16 . When combining find-dired with wdired, one can easily find matching files and quickly batch rename them u....
|
|
Writing a lisp compiler from scratch in JavaScript: 4. LLVM conditionals and compiling fibonacci
-
notes.eatonphil.com
-
7 years ago
-
eng
Previously in compiler basics: 1. lisp to assembly 2. user-defined functions and variables 3. LLVM Next in compiler basics: 5. LLVM system calls 6. an x86 upgrade In this post we'll extend the compiler 's LLVM backend to support compiling conditionals such that we can support an implementation of the fibonacci algorithm. Specifically we're aiming for the following: $ cat tests/fib.lisp ( def f....
|
|
In this blog, we take a look at the libraries that, because they contain today’s most common vulnerabilities, also most frequently appear in Snyk project scans.
|
|
I had a hard time getting Sublime Text to work with Marked 2 , back when I used Brett’s app to proof my writing. Dan Sturm posted a simple snippet that launched it using a build system, that failed if Marked came from the App Store. Here’s the fix: Permalink.
|
|
Maestro is a library we have developed to handle all playback across SoundCloud web applications. It successfully handles tens of millions of plays per day across soundcloud.com, our mobile site, our widget, Chromecast, and our Xbox application. We are considering open sourcing it, and this blog post is a technical overview of what we’ve achieved thus far with Maestro.
|
|
Maestro is a library we have developed to handle all playback across SoundCloud web applications. It successfully handles tens of millions of plays per day across soundcloud.com, our mobile site, our widget, Chromecast, and our Xbox application. We are considering open sourcing it, and this blog post is a technical overview of what we’ve achieved thus far with Maestro.
|
|
I’ve had a very particular itch for a long time, now. Something I love about open source is that it empowers developers to scratch their own itches, and a while back I decided to do exactly that. We’ve used it in production on the Nextcloud snap for a few months with relatively few issues, so I think it’s time to open it up for wider use… in case you share my itch.
|
I Recently complete a basic ncurses based terminal application for minglinng with bits. I’m working low level most of the times and need to tinker with bits, masks and to translate between number bases (hex to dec, and vice verse). As I’m working 99% of my time in a terminal, I found it very annoying […]
|
|
A few days ago, I decided to start an article about my writing setup. Over the years I have dialed it in, and today I have a pretty neat workflow. As I started on that piece, though, I realized that I had never talked about why I write in plain text. Most aspects of my workflow traces back to that choice, so today I want to explain some of the reasons I made it. Permalink.
|
In this post we are going to manage nested objects of a document indexed with Elasticsearch. The nested type is a specialised version of the object datatype that allows arrays of objects to be indexed in a way that they can be queried independently of each other. – Nested datatype - Official Elasticsearch reference Prerequisites To follow this post you need: an up and running Elasticsearch instance I use 6.7 here an up....
|
|
In this post we are going to manage nested objects of a document indexed with Elasticsearch. The nested type is a specialised version of the object datatype that allows arrays of objects to be indexed in a way that they can be queried independently of each other. – Nested datatype - Official Elasticsearch reference Prerequisites To follow this post you need: an up and running Elasticsearch instance I use 6.7 here an up....
|
|
In this post we are going to manage nested objects of a document indexed with Elasticsearch. The nested type is a specialised version of the object datatype that allows arrays of objects to be indexed in a way that they can be queried independently of each other. – Nested datatype - Official Elasticsearch reference Prerequisites To follow this post you need: an up and running Elasticsearch instance I use 6.7 here an up....
|
|
In this post we are going to manage nested objects of a document indexed with Elasticsearch. The nested type is a specialised version of the object datatype that allows arrays of objects to be indexed in a way that they can be queried independently of each other. – Nested datatype - Official Elasticsearch reference Prerequisites To follow this post you need: an up and running Elasticsearch instance I use 6.7 here an up....
|
|
When I first moved to the Bay area I was fresh out of grad school. I was frequently heading out to dinner or to happy hour after work with colleagues. I was young and single, so why not of course. As time passed, marriage, kids, etc. the ability to go out for a quick drink or dinner was competing with various priorities. Dinner and drinks with co-workers was always a great time. It wasn’t just about hanging out, it built rapport and trust w....
|
|
When I first moved to the Bay area I was fresh out of grad school. I was frequently heading out to dinner or to happy hour after work with colleagues. I was young and single, so why not of course. As time passed, marriage, kids, etc. the ability to go out for a quick drink or dinner was competing with various priorities. Dinner and drinks with co-workers was always a great time. It wasn’t just about hanging out, it built rapport and trust w....
|
|
Starting today, developers can test, fix, and monitor their Azure Repos projects for open source vulnerabilities.
|
|
Avoiding Javascript also means missing out on cool tricks like these, that make writing good code easier when we have no choice but to use it. I work hard to optimize the Python behind this site , but did almost nothing with the 400 lines of uncommented Javascript code behind my LMTV RV builder . I have some serious work ahead of me on that project, and simple tips like these from Antonio Sanchez will make that a lot easier. Permali..
|
|
We're continuing to extend our Container Vulnerability Management offering, now providing integration with your container image registries as well.
|
|
Responsibility is only possible by granting ownership and setting expectations. If you don't turn over ownership, don't expect folks to take responsibility. When you grant ownership and set expectations, you'll be astounded what folks will accomplish without you. I am astounded.
|
|
Docker Hub may have reset your account details if it detected that it was part of the breach. What could potentially happen? What should I do to protect my code?
|