1
New
The latest blog posts to take off on Hacker News. 498 posts.
2
IOHIDeous OS X Local Kernel Vulnerability
Siguza’s Blog
3
Three Years on Google App Engine
For the last 3 years I worked on an application that runs on Google App Engine. It is a fascinating, unique piece of service Google is offering here. Unlike anything you’ll find elsewhere. This is my in-depth, personal take on it.
4
Randomness 101: LavaRand in Production
As some of you may know, there's a wall of lava lamps in the lobby of our San Francisco office that we use for cryptography. In this post, we’re going to explore how that works.
5
Escaping Docker container using waitid() – CVE-2017-5123
Prisma Cloud is the most complete Cloud Native Application Protection Platform (CNAPP) for code to cloud security in any cloud, multicloud, and hybrid environment.
6
Dumping a PS4 Kernel in “Only” 6 Days
What if a secure device had an attacker-viewable crashdump format? What if that same device allowed putting arbitrary memory into the crashdump? Amazingly, the ps4 tempted fate by supporting both of these features! Let’s see how that turned out…
7
PostgreSQL Benchmark on FreeBSD, CentOS, Ubuntu Debian and OpenSUSE
In this post, I’m going to show benchmark results of the recently released PostgreSQL 10.1. I’ve benchmarked the DB on these OSes (all are 64-bit):
8
Building a Distributed Log from Scratch: Data Replication
In part one of this series we introduced the idea of a message log, touched on why it’s useful, and discussed the storage mechanics behind it. In part two, we discuss data replication. We have our log. We know how to write data to it and read it back as well as how data is persisted. The caveat to this is, although we…
9
The state of netbooting Raspberry Pis
Let's take a look at the state of netbooting for Raspberry Pis including how and why you'd build a cluster and how well containers play with network booting
10
Computer latency: 1977-2017
I've had this nagging feeling that the computers I use today feel slower than the computers I used as a kid. As a rule, I don’t trust this kind of feeling because human perception has been shown to be unreliable in empirical studies, so I carried around a high-speed camera and measured the response latency of devices…
11
12
How to Print Integers Really Fast
Paul Khuong's personal blog. Some Lisp, some optimisation, mathematical or computer.
13
14
Building a Distributed Log from Scratch, Part 1: Storage Mechanics
The log is a totally-ordered, append-only data structure. It’s a powerful yet simple abstraction—a sequence of immutable events. It’s something that programmers have been using for a very long time, perhaps without even realizing it because it’s so simple. Whether it’s application logs, system logs, or access logs…
15
Learning to operate Kubernetes reliably
Online payment processing for internet businesses. Stripe is a suite of payment APIs that powers commerce for businesses of all sizes.
16
Netstat without netstat
Recently I was doing an assessment in a locked down and restricted environment. One of the first actions you tend to do when landing a shell on a [linux] box is to do some reconnaissance. This is both on host and network, as you want to determine what new access this host has given you. Normally you would run netstat…
17
Tokio internals: Understanding Rust's async I/O framework
Tokio is a Rust framework for developing applications which perform asynchronous I/O — an event-driven approach that can often achieve better …
18
OpenBSD 6.2 and CDE
If you've noticed a disruption in the time-space continuum recently, it is likely because I have finally been able to compile and install ...
19
How to Design a Scalable Rate Limiting Algorithm
What is rate limiting? Navigate through the pros and cons of the available algorithms and best practices for how to design scalable rate limiting in Kong API.
20
Exploiting Windows 10 in a Local Network with WPAD/PAC and JScript
by Ivan Fratric, Thomas Dullien, James Forshaw and Steven VittitoeIntroMany widely-deployed techn...
21
22
Kernel debugging for newbies
This week, I’ve been working on an application that sets up IPsec connections. PF_KEYv2 is the standard interface for configuring IPsec. PF_KEYv2 is widely-available; even systems with more advanced IPsec stacks (like XFRM on Linux) provide a PF_KEYv2-compatible wrapper. I want my application to work on OS X and…
23
Hybridizer: High-Performance C# on GPUs
Hybridizer is a compiler from Altimesh that lets you program GPUs and other accelerators from C# code or .NET Assembly. Using decorated symbols to express parallelism, Hybridizer generates source code…
24
On the dangers of Intel's frequency scaling
While I was writing the post comparing the new Qualcomm server chip, Centriq, to our current stock of Intel Skylake-based Xeons, I noticed a disturbing phenomena.
25
High Performance Z80 Emulation
…wherein I talk about my latest Z80 emulation adventures.
26
Apple's CVDisplayLink Doesn't Link to Your Display
Edit 2017/12/10: So I screwed up, I thought I was safe confirming it in two different ways but I was using an external monitor and all of the below is accurate only for a specific multi-monitor case. Skip to the bottom to read about my new results.
27
What Have We Learned from the PDP-11?
This post is a slightly edited version of my November presentation to the San Francisco chapter of Papers We Love.
28
PostgreSQL HA cluster failure: a post-mortem
Discover our incident review with our API and dashboard after the outage on 10th October.
29
30
ReactOS 0.4.7 released
ReactOS is a free, opensource reimplementation of windows