BetterDev #151 - OWASP Web Security Testing Guide v4.1
Better Dev #151 May 11, 2020
Hi everyone, Welcome to issue #151.
This week sponsor is programmingdigest.net, they are a weekly newsletter just like BetterDev but emphasizing on delivering five links per week. Check them out. Sponsor helps to keep this newsletter going. Thanks to ProgrammingDigest.
No need to introduce about OWASP. They are all about Web Security. They also have a PDF version, available on Github which you can download and read on your kindle.
Cloud providers generally do not disclose to customers how much energy their services consume. To make up for this lack of data, Etsy created a set of conversion factors called Cloud Jewels to help us roughly convert our cloud usage information (like Google Cloud usage data) into approximate energy used.
for database administrators and system developers. Learn about Write Ahead Log, VACUUM processing, and Point In Time Recovery.
This document describes best current security practice for OAuth 2.0. It updates and extends the OAuth 2.0 Security Threat Model to incorporate practical experiences gathered since OAuth 2.0 was published and covers new threats relevant due to the broader application of OAuth 2.0.
This repository consisted of learning the concepts required to write scene descriptions for POV-Ray, and writing a new scene each day for 25 day. Very useful if you want to know about how thing are rendered in game engine etc
and the crucial role it plays in modern operating systems.
Why 0.1 * 3
is 0.30000000000000004
. We understand that this is due to the fact that floating point numbers, stored with only 64 bits of precision, cannot represent the entire real number line. The moral of the story is, never use a floating point number to represent money.
An SQL injection bug in an ORDER BY clause came up in a recent engagement, which lead to an interesting rabbit hole regarding exploiting SQLi against a PostgreSQL database. This post details some of that adventure. We’ll look at some useful Postgres functions to make exploiting SQLi easier, some interesting file read/write primitives and a path to command execution as the DB user. I’ve included some sample vulnerable code for those of you that want to try this stuff out first hand.
A books about technical aspect of DOOM. All the way from hardware to software, 2D/3D renderer, memory management, file system, sound etc. An amazing books I would say, about the history, game, technoligies.
Normal stack: Nginx, fluentd, apache flune to process log. Yet, once upgrading from k8s 1.14.4 to 1.64.4, fluentd cannot process log fast enough and buffering the log. They used BPF tools from BCC project: BCC CPU Profiler generate kernel stack trace, they compare and see different and was able to figured out a bug in k8s issue with repeated ebtables rule.
Ever wondered how performance scales with number of disks? RAID1, RAID5, RAID6,… Read on, friend.
You run a script? You edit some line of it? And suprise the new change you just save somehow got run as well.
Code to read
A blazing fast 100% spec compliant, self-hosted javascript parser written in Typescript
TypeScriptJavaScriptA web-based SVG animation tool using real-time TF.js models Takes a 2D vector illustration and animates its containing curves in real-time based on the recognition result from PoseNet and FaceMesh.
JavaScriptMachine LearningA Facebook AI Research’s next generation software system that implements state-of-the-art object detection algorithms. It is a ground-up rewrite of the previous version
PythonA virtual filesystem for speeding up the performance of source control checkouts by Facebook. It has 3 components: cli, server and EdenFS(A virtual file system). Code is Python, Rust, C++, C. Oh my. You gotta read this code
PythonRustC++CReed-Solomon Erasure Coding in Go, with speeds exceeding 1GB/s/cpu core implemented in pure Go.
GoModern encryption for Rails. Useful if you want to learn more about AES-GCM, and padding
RubyTools
a PostgreSQL log analyzer built for speed with fully detailed reports and professional rendering. It outperform any other PostgreSQL log analyzer.
a bare metal provisioning engine. It’s built and maintained by the team at Packet. It has: DHCP and iPXE Server, Meta Data Service, Workflow Engine, In-Memory Environment.
an open-source database schema migration tool that converts a schema definition into migration scripts that can be applied in any environment.
You can view this issue in web browser.
If you have any suggestion/feedback, do tell me by replying to this email. I read them all.
No longer want to receive these emails?
Older messages
BetterDev #150 - The Best Medium-Hard Data Analyst SQL Interview Questions
Monday, May 4, 2020
Better Dev #150 May 04, 2020 Hi everyone, Welcome to issue #150. We continue to our pandemic with this novel virus global wide. I hope we all stay healthy, positive and safe. This week sponsor is
BetterDev #149 - What if Two Processes Write to the Same File simultaneously
Monday, April 27, 2020
Better Dev #149 Apr 27, 2020 Hi everyone, Welcome to issue #149. Given the current economy, many companies are looking to reduce infrastructure cost, many migrations need to be done. In this issue, I
BetterDev #148 - DIY Single Sign-On for SSH and System design for advanced beginners
Monday, April 20, 2020
Better Dev #148 Apr 20, 2020 Hi everyone, Welcome to issue #148. I got quite a bit of stuff, code and tooling. Lot of fun thing like tool to write books, podcast cli. I also included more videos link
BetterDev #147 - How Much of a Genius-Level Move Was Using Binary Space Partitioning in Doom and Migration ZooKeeper into Kubernetes without downtime
Monday, April 13, 2020
Better Dev #147 Apr 13, 2020 Hi everyone, The world continue to need video chat software that secure and reliable. WebRTC is utilized a lot to quickly build your own tool. In this issue, I had 2 code
BetterDev #146 - Security Engineering: A Guide to Building Dependable Distributed Systems
Tuesday, April 7, 2020
Better Dev #146 Apr 6, 2020 Hi everyone, Memory Leak, Security, Low level systems: sound system and linux kernel module and how Slack deploy their system. I got them all this week :). Hope you like
You Might Also Like
Import AI 399: 1,000 samples to make a reasoning model; DeepSeek proliferation; Apple's self-driving car simulator
Friday, February 14, 2025
What came before the golem? ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏
Defining Your Paranoia Level: Navigating Change Without the Overkill
Friday, February 14, 2025
We've all been there: trying to learn something new, only to find our old habits holding us back. We discussed today how our gut feelings about solving problems can sometimes be our own worst enemy
5 ways AI can help with taxes 🪄
Friday, February 14, 2025
Remotely control an iPhone; 💸 50+ early Presidents' Day deals -- ZDNET ZDNET Tech Today - US February 10, 2025 5 ways AI can help you with your taxes (and what not to use it for) 5 ways AI can help
Recurring Automations + Secret Updates
Friday, February 14, 2025
Smarter automations, better templates, and hidden updates to explore 👀 ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏
The First Provable AI-Proof Game: Introducing Butterfly Wings 4
Friday, February 14, 2025
Top Tech Content sent at Noon! Boost Your Article on HackerNoon for $159.99! Read this email in your browser How are you, @newsletterest1? undefined The Market Today #01 Instagram (Meta) 714.52 -0.32%
GCP Newsletter #437
Friday, February 14, 2025
Welcome to issue #437 February 10th, 2025 News BigQuery Cloud Marketplace Official Blog Partners BigQuery datasets now available on Google Cloud Marketplace - Google Cloud Marketplace now offers
Charted | The 1%'s Share of U.S. Wealth Over Time (1989-2024) 💰
Friday, February 14, 2025
Discover how the share of US wealth held by the top 1% has evolved from 1989 to 2024 in this infographic. View Online | Subscribe | Download Our App Download our app to see thousands of new charts from
The Great Social Media Diaspora & Tapestry is here
Friday, February 14, 2025
Apple introduces new app called 'Apple Invites', The Iconfactory launches Tapestry, beyond the traditional portfolio, and more in this week's issue of Creativerly. Creativerly The Great
Daily Coding Problem: Problem #1689 [Medium]
Friday, February 14, 2025
Daily Coding Problem Good morning! Here's your coding interview problem for today. This problem was asked by Google. Given a linked list, sort it in O(n log n) time and constant space. For example,
📧 Stop Conflating CQRS and MediatR
Friday, February 14, 2025
Stop Conflating CQRS and MediatR Read on: my website / Read time: 4 minutes The .NET Weekly is brought to you by: Step right up to the Generative AI Use Cases Repository! See how MongoDB powers your