There are certain of headers that just by adding them make browser protect the app from a certain kind of attack. Here is a quick walk through for some common ones.

Penetration teams start from the lowest level of the infrastrucuture, understanding every aspect of privilege and permission. We as a developer don’t have time to focus on all of them and just use one we most frequently use, which create blind spot for us. By understanding all of these aspect enable us to make information choice when designing infrastructure and make it more secure

In recent years, there are a bunch of search enginer appear to take on ElasticSearch such as TypeSense, MeiliSearch, Toshi. So how Postgress FTS compare to them in term of performanc for ingesting, query and accuracy.

Needless to say what to index is an art. Over index and the app slow down on write, or make the engine harder to decide what index to use. Here, knock team shares with us their signal that they use to make decision on indexing.

This guide will cover various ways to make hexagonal grids, the relationships between different approaches, and common formulas and algorithms

Have you work on a very big app where a few old customers cannot upgrade their system for whatever reason and we have to maintain backward compatible and hack around? This is exactly what happen with WebKit browser engine, they have very ugly hack that check and hard code domain name, css selector to account for old websites.

There are quite good practices to apply to any container such as not using root, run multistage build etc.

Have you ever setup some tricky services where it cannot be exposed to the world directly and goes through a few proxy or tunnel, using a few iptables trick. It’s impossible to debug those without invoking tcdump to know where the traffic hit, how does it flow? But remember tcpdump syntax is tedious and I keep coming to this examples all the time