Issues #18 Oct 2, 2017 (25)

How I Hacked Hundreds of Companies through Their Helpdesk Many companies allow access to their private resources on a third party tool when signing up with company email. A common feature on many SaaS application is allow email forwarding from their domain to your account. Now, you suddenly have an email with that company’s domain.

Email Security and Anti-spoofing This guide is intended to help you secure your organization’s email in two distinct ways: protecting email content and to prevent faking sender addresses.

Floating Point Visually Explained Floating point number sometimes cause interesting bugs. Example: 0.1 * 0.2 may yield 0.020000000000000004 instead of 0.02. So let’s learn how they are organized and stored.

Linux Performance Analysis in 60,000 Milliseconds You log in to a Linux server with a performance issue: what do you check in the first minute? Netflix shares their flow to check performance in first 60 seconds.

SQL is beating NoSQL After years of being left for dead, SQL today is making a comeback. How come? And what effect will this have on the data community?

Distributed Algorithms in NoSQL Databases The article provides a systematic description of techniques related to distributed operations in NoSQL databases.

A Guide to Parsing: Algorithms and Terminology An in-depth presentation of the concepts and algorithms used in parsing, so that you can get a better understanding of this fascinating world.

Visualizing Your Ruby Heap How does Ruby store data on heap? What does it look like when we draw them out? In this article, Aaron shares a program to visualize the layout and fragment of a Ruby heap dump.

Over The Air - Vol. 2, Pt. 1: Exploiting The Wi-Fi Stack on Apple Devices A remote code execution on the iPhone 7 up to iOS 10.3.

Learn Blockchain by Building One Understanding blockchain can be overwhelm nowadays. Let’s learn by building one so we can understand how they really work.

Can you write an OS kernel in Go (Video) Yes, we will learn how to write one that runs within QEMU. We’ll learn a bit about OS kernel, userland code, Ring-0

Low-risk Monolith to Microservice Evolution Part I This is a material from a 2-day workshop for micro service evolutions.

SniffAir: A framework for wireless penetration testing provides the ability to easily parse passively collected wireless data as well as launch sophisticated wireless attack.