BetterDev #151 - OWASP Web Security Testing Guide v4.1
Better Dev #151 May 11, 2020
Hi everyone, Welcome to issue #151.
This week sponsor is programmingdigest.net, they are a weekly newsletter just like BetterDev but emphasizing on delivering five links per week. Check them out. Sponsor helps to keep this newsletter going. Thanks to ProgrammingDigest.
No need to introduce about OWASP. They are all about Web Security. They also have a PDF version, available on Github which you can download and read on your kindle.
Cloud providers generally do not disclose to customers how much energy their services consume. To make up for this lack of data, Etsy created a set of conversion factors called Cloud Jewels to help us roughly convert our cloud usage information (like Google Cloud usage data) into approximate energy used.
for database administrators and system developers. Learn about Write Ahead Log, VACUUM processing, and Point In Time Recovery.
This document describes best current security practice for OAuth 2.0. It updates and extends the OAuth 2.0 Security Threat Model to incorporate practical experiences gathered since OAuth 2.0 was published and covers new threats relevant due to the broader application of OAuth 2.0.
This repository consisted of learning the concepts required to write scene descriptions for POV-Ray, and writing a new scene each day for 25 day. Very useful if you want to know about how thing are rendered in game engine etc
and the crucial role it plays in modern operating systems.
Why 0.1 * 3
is 0.30000000000000004
. We understand that this is due to the fact that floating point numbers, stored with only 64 bits of precision, cannot represent the entire real number line. The moral of the story is, never use a floating point number to represent money.
An SQL injection bug in an ORDER BY clause came up in a recent engagement, which lead to an interesting rabbit hole regarding exploiting SQLi against a PostgreSQL database. This post details some of that adventure. We’ll look at some useful Postgres functions to make exploiting SQLi easier, some interesting file read/write primitives and a path to command execution as the DB user. I’ve included some sample vulnerable code for those of you that want to try this stuff out first hand.
A books about technical aspect of DOOM. All the way from hardware to software, 2D/3D renderer, memory management, file system, sound etc. An amazing books I would say, about the history, game, technoligies.
Normal stack: Nginx, fluentd, apache flune to process log. Yet, once upgrading from k8s 1.14.4 to 1.64.4, fluentd cannot process log fast enough and buffering the log. They used BPF tools from BCC project: BCC CPU Profiler generate kernel stack trace, they compare and see different and was able to figured out a bug in k8s issue with repeated ebtables rule.
Ever wondered how performance scales with number of disks? RAID1, RAID5, RAID6,… Read on, friend.
You run a script? You edit some line of it? And suprise the new change you just save somehow got run as well.
Code to read
A blazing fast 100% spec compliant, self-hosted javascript parser written in Typescript
TypeScriptJavaScriptA web-based SVG animation tool using real-time TF.js models Takes a 2D vector illustration and animates its containing curves in real-time based on the recognition result from PoseNet and FaceMesh.
JavaScriptMachine LearningA Facebook AI Research’s next generation software system that implements state-of-the-art object detection algorithms. It is a ground-up rewrite of the previous version
PythonA virtual filesystem for speeding up the performance of source control checkouts by Facebook. It has 3 components: cli, server and EdenFS(A virtual file system). Code is Python, Rust, C++, C. Oh my. You gotta read this code
PythonRustC++CReed-Solomon Erasure Coding in Go, with speeds exceeding 1GB/s/cpu core implemented in pure Go.
GoModern encryption for Rails. Useful if you want to learn more about AES-GCM, and padding
RubyTools
a PostgreSQL log analyzer built for speed with fully detailed reports and professional rendering. It outperform any other PostgreSQL log analyzer.
a bare metal provisioning engine. It’s built and maintained by the team at Packet. It has: DHCP and iPXE Server, Meta Data Service, Workflow Engine, In-Memory Environment.
an open-source database schema migration tool that converts a schema definition into migration scripts that can be applied in any environment.
You can view this issue in web browser.
If you have any suggestion/feedback, do tell me by replying to this email. I read them all.
No longer want to receive these emails?
Older messages
BetterDev #150 - The Best Medium-Hard Data Analyst SQL Interview Questions
Monday, May 4, 2020
Better Dev #150 May 04, 2020 Hi everyone, Welcome to issue #150. We continue to our pandemic with this novel virus global wide. I hope we all stay healthy, positive and safe. This week sponsor is
BetterDev #149 - What if Two Processes Write to the Same File simultaneously
Monday, April 27, 2020
Better Dev #149 Apr 27, 2020 Hi everyone, Welcome to issue #149. Given the current economy, many companies are looking to reduce infrastructure cost, many migrations need to be done. In this issue, I
BetterDev #148 - DIY Single Sign-On for SSH and System design for advanced beginners
Monday, April 20, 2020
Better Dev #148 Apr 20, 2020 Hi everyone, Welcome to issue #148. I got quite a bit of stuff, code and tooling. Lot of fun thing like tool to write books, podcast cli. I also included more videos link
BetterDev #147 - How Much of a Genius-Level Move Was Using Binary Space Partitioning in Doom and Migration ZooKeeper into Kubernetes without downtime
Monday, April 13, 2020
Better Dev #147 Apr 13, 2020 Hi everyone, The world continue to need video chat software that secure and reliable. WebRTC is utilized a lot to quickly build your own tool. In this issue, I had 2 code
BetterDev #146 - Security Engineering: A Guide to Building Dependable Distributed Systems
Tuesday, April 7, 2020
Better Dev #146 Apr 6, 2020 Hi everyone, Memory Leak, Security, Low level systems: sound system and linux kernel module and how Slack deploy their system. I got them all this week :). Hope you like
You Might Also Like
JSK Daily for Nov 27, 2024
Wednesday, November 27, 2024
JSK Daily for Nov 27, 2024 View this email in your browser A community curated daily e-mail of JavaScript news JavaScript Certification Black Friday Offer – Up to 54% Off! Certificates.dev, the trusted
Ranked | The World's Biggest Importers of Goods 🌎
Wednesday, November 27, 2024
As Trump tariffs are anticipated to disrupt global trade and push up prices for consumers, we show the world's biggest importers of goods. View Online | Subscribe | Download Our App >> 📱Book
Daily Coding Problem: Problem #1621 [Easy]
Wednesday, November 27, 2024
Daily Coding Problem Good morning! Here's your coding interview problem for today. This problem was asked by Google. A regular number in mathematics is defined as one which evenly divides some
Spyglass Dispatch: The Xitter Bail Out • OpenAI Tender • Grokking Grok • Smartphone Sales • Fischer Random Chess • Scott Bessent for Treasury
Wednesday, November 27, 2024
The Xitter Bail Out • OpenAI Tender • Grokking Grok • Smartphone Sales • Fischer Random Chess • Scott Bessent for Treasury The Spyglass Dispatch is a free newsletter sent out daily on weekdays. Feel
The Long Road Home: A Story of Loss, Learning, and Renaissance - PART 4
Wednesday, November 27, 2024
Top Tech Content sent at Noon! How the world collects web data Read this email in your browser How are you, @newsletterest1? 🪐 What's happening in tech today, November 27, 2024? The HackerNoon
Top Tech Deals 🏷️ PS5 Slim, 4K TVs, 10th Gen iPad, and More!
Wednesday, November 27, 2024
The Black Friday madness is here! How-To Geek Logo November 27, 2024 Top Tech Deals: PS5 Slim, 4K TVs, 10th Gen iPad, and More! The Black Friday madness is here! Black Friday sales are here, and we
The 165+ best Black Friday deals
Wednesday, November 27, 2024
Windows Super God Mode; Bluesky starter packs; Tech gifts under $100 -- ZDNET ZDNET Tech Today - US November 27, 2024 Black Friday 2024 live blog Best Black Friday deals 2024: 165+ sales live now
⚙️ Neuralink's new trial
Wednesday, November 27, 2024
Plus: Zoom is becoming an AI-first company
Matrix Botnet Exploits IoT Devices in Widespread DDoS Botnet Campaign
Wednesday, November 27, 2024
THN Daily Updates Newsletter cover The AI Value Playbook ($35.99) FREE for a Limited Time Business leaders are challenged by the speed of AI innovation and how to navigate disruption and uncertainty.
The Sequence Chat: Why are Foundation Models so Hard to Explain and What are we Doing About it?
Wednesday, November 27, 2024
Addressing some of the interpretability challenges of foundation models and the emerging fields of mechanistic interpretability and behavioral probing. ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏