Issues #146 Apr 6, 2020 (25)

Security Engineering: A Guide to Building Dependable Distributed Systems A free ebook where you can read PDF/download for free on security engineering. This is third edition. Looking at all security issue of Zoom in last weeks, I think it’s worth to invest your time in security, especially if you are a devops or backend engineer

Deploys at Slack This post will outline their process and a few of the major projects that got them to where they are.

10 Things I Hate About PostgreSQL Despite the click bait title, this is a really good post with real pain point of Postgres.

Attack matrix for Kubernetes While Kubernetes has many advantages, it also brings new security challenges that should be considered. Therefore, it is crucial to understand the various security risks that exist in containerized environments, and specifically in Kubernetes.

Software Engineering Advice from Building Large-Scale Distributed Systems This is PDF file of a talk of Jeff Dean, one of founding engineer of Google share his experience and lessions.

Move Fast & Roll Your Own Crypto A Quick Look at the Confidentiality of Zoom Meetings. I don’t like to include trendy news in my news letter, because it isn’t helpful for future self and doesn’t age well. However, this isn’t a normal article that bash on Zoom but has real methodlogy that they use to analyze zoom, which you can learn the techniques...

Writing a Low-Level Sound System — You Can Do It! In this post, I’ll take a look at what it takes to write a low-level sound system. I.e., one where you do all the sampling, mixing, effects, etc by yourself. Though this may seem like a daunting task it is in fact pretty straightforward, depending on what features you want to add.

Writing a Simple Linux Kernel Module A Linux kernel module is a piece of compiled binary code that is inserted directly into the Linux kernel, running at ring 0, the lowest and least protected ring of execution in the x86–64 processor. Code here runs completely unchecked but operates at incredible speed and has access to everything in the system Another article on this topic

A runc container escape On Monday, February 11, CVE-2019-5726 was disclosed. This vulnerability is a flaw in runc, which can be exploited to escape Linux containers launched with Docker, containerd, CRI-O, or any other user of runc. But how does it work? Dive in!

Pointer Compression in V8 When Chrome switched from being a 32-bit process to a 64-bit process, it gave Chrome better security, stability and performance, but it came at a memory cost since each pointer now occupies eight bytes instead of four. We took on the challenge to reduce this overhead in V8 to try and get back as many wasted 4 bytes as possible.

How an anti ad-blocker works: Reverse-engineering BlockAdBlock How does an anti ad-blocker detect adblockers? And how do adblockers react and block ad-block-blockers?

A Practical Guide to Memory Leaks in Node.js Since NodeJS run on V8. You generally can apply the knowledge into front-end JavaScript as well. You will learn using Chromr Dev Tools and its memory profile to find out the leak. And since you are here, let’s check out A Tale of a JavaScript Memory Leak where create a small portion of a large string...