Bookmarks (3825)

go-mysql-server A cool project where it implement MySQL protocol and syntax so we can use it to parse SQL and executes queries on your own data sources. A simple in-memory database and table impelemtation are provided. If you works with thing like SphinxSearch, you know you can leverage these kind of library to basically avoid writing client since you can just use the normal mysql client.

ancestry a gem that allows the records of a Ruby on Rails ActiveRecord model to be organised as a tree structure (or hierarchy)

Terminating a Frozen SSH Session Have feel frustrated because you have a SSH session that disconnect/timeout somehow when returning to your laptop? Most of the time I ended up just close my terminal. But it has a way to do that properly. Basically, to force terminate a frozen SSH session, press ~ then .. Note that when press ~ nothing will show up on terminal though.

Use NATURAL FULL JOIN to compare two tables in SQL Compare two tables in great way to verify something like ETL job, backup, replication. The normal method is table1 - table2 union table2 - table1 but that fetch each tables 2 times? How can we do that with a single fetch per table?

Three months, 30x demand: How we scaled Google Meet during COVID-19 Title says it all. COVID-19 increase demand for video chat system. And video streaming require bandwidth and cpu/gpu to decode data from camera stream.

What every developer should know about consistency Imagine assigning some value to a variable, reading it back immediately after, and finding out that somehow the write had no effect at all - madness! Whether an update becomes visible sooner rather than later depends on the guarantees offered by the database.

datasette a tool for exploring and publishing data. It helps people take data of any shape or size and publish that as an interactive, explorable website and accompanying API.

repokid Set up your script and run it and the tool determines the minimum set of permissions needed for future runs. You lock that permission set in for future runs. Netflix has a companion post

parliament an AWS IAM linting library. It reviews policies looking for problems such as: malformed json, bad polici patterns

How to Secure Anything Security engineering is the discipline of building secure systems. Its lessons are not just applicable to computer security. In fact, in this repo, I aim to document a process for securing anything, whether it’s a medieval castle, an art museum, or a computer network

A few thoughts on the $80 million fine from the Capital One Breach It’s Twitter thread so a bit hard to read but worth it. The cause is due to an AWS IAM policy s3:GetObject to * resource. IAM is trial and error, you run your app, see if it works and need what permission and grant it. Sometime you feel frustrated and just quickly do a * and there we go. $80 million fine. What can we do about it? This thread give some tips and guide line to improve security when working with IAM. Some tools such as police sentry to review IAM, or Netflix’s repokid to automatically revoking unused IAM permission.

About the Quay.io Outage: Post Mortem quay.io is a docker registry and went down on May 19th. The root cause is a storm of tens of thousands of database connection that locking MySQL instance. Reading these post motern help level up your debugging skill because it’s the hard lesson from these teams.

Zero downtime release: disruption free Load Balancing of a Multi-Billion User Website This link is a PDF on dropbox so it can be a bit hard to read online or on mobile. It outlines how facebook leverage the end-to-end networking infrastructure to prevent or mask any disruptions in face of releases.

1Keys – How To Made a Piano in only 1kb of JavaScript This project won first place in JS1024. It made use of Web Audio API to make a piano all in 1024 bytes. We will go over every single line of code together with tips and tricks to achieve that.

Node Modules at War: Why CommonJS and ES Modules Can’t Get Along It’s very important to get this right now in Node 14. here are now two kinds of scripts: there are old-style CommonJS (CJS) scripts and new-style ESM scripts (aka MJS). CJS scripts use require() and exports; ESM scripts use import and export. ESM and CJS are completely different animals.

sysbox an open-source container runtime (aka runc), originally developed by Nestybox, that enables Docker containers to act as virtual servers capable of running software such as Systemd, Docker, and Kubernetes in them, easily and with proper isolation

Download FusionAuth today and get a FREE t-shirt! It doesn’t cost anything to get started! FusionAuth provides authentication, authorization, and user management for any app: deploy anywhere, integrate with anything, in minutes. Download and install FusionAuth today and we’ll send you a FREE t-shirt!

Designing a physics engine Physics engines are responsible for figuring out where each object in a scene is over time. Objects can collide with one another, then choose to respond in several ways. It’s a generic problem that the user can configure at several different levels. Do they want a collider? Do they want to respond to collisions? Do they want to simulate dynamics? They could want dynamics, but not gravity. It’s a problem that calls for good planning and robust design.

Migrating a 40TB SQL Server Database Stackoverflow tech stack is very standarize, and they always try to scale vertically, as in just using a single big database instead of sharding into multiple servers. They have amazing performance given their huge traffic. In this post, Taryn shares the journey of migrating their traffic log data.

Stackoverflow performance metrics If you use Stackoverflow, and enjoy their approach to lean and simple engineering, then why not see how their performance looks like

How we migrated Dropbox from Nginx to Envoy Envoy is a new load balancer by Lyft, design for dynamic environment. You can change its configuration without the need of generating static config file and trigger a reload like Nginx. For performance, at scale Envoy is a bit better.

Cloudflare Bot Management: machine learning and more Every website will have to deal with bots at some time, good bad, bad bot. Imagine how much bot traffic cloudflare has to deal with?

Small Mailserver Best Current Practices If you ever have to send out email from your app, and have to deal with DKIM and SPF and struggle with all the thing that you have to go through to make your email delivery reliably to your audience, then this post is for you.

Writing a file system from scratch in Rust Walk you through process of writing a file system driver so you can pre-allocate a raw file which will be used to house your … files, then mount it, then finally access it through normal file system API. You can create file, ls file. The post ins’t too heavy on Rust b ut give a nice entry introduction to file system.

Bloom filters debunked: Dispelling 30 Years of bad math with Coq! FireFox or Chrome warns you when you visit a malicious URL. How do they store that list of URL? In a big database with million of URLs on your computer. Nope. They use bloom filter.

DIY Video Hosting I probably won’t do this soon but it’s good to know what part and piece of a video hosting platform

sudo with TouchID and Apple Watch, even inside tmux TouchID is so convenience. It would be great to make it work with sudo. It useds to have bug when running inside tmux but now they are all fixed. Worth to look into this if you use a MacBook that supports TouchID or a watch.

Design Docs at Google As software engineers our job is not to produce code per se, but rather to solve problems. Unstructured text, like in the form of a design doc, may be the better tool for solving problems early in a project lifecycle

An offensive guide to the authorization code grant Despite a fundamental problem of every application and many best practice. Yet, implementaion of many OAuth still has bug when first rolling out. Even Apple. NCCGroup developed the desire for a comprehensive and digestible enumeration of security concerns in the OAuth 2.0 Authorization Code flow, from an end-user (or penetration tester)’s external vantage. This post will introduce, break down the observable vulnerabilities, and explain the exploitation of each the following aspects of the Authorization Code flow.

TinyPilot: Build a KVM Over IP for Under $100 KVM allows you to view screen, control keyboard mouse of a remote system even before the OS is fully loaded(otherwise you can use VNC or any remote desktop). But they are usually expensive. In this post the author build thing together, run on a raspberry pi.