Fuzzing a DNS parser written in Go
Here at CloudFlare we are heavy users of the github.com/miekg/dns Go DNS library and we make sure to contribute to its development as much as possible. Therefore when Dmitry Vyukov published go-fuzz and started to uncover tens of bugs in the Go standard library, our task was clear.
Sabotage
In many places it seems to have become the norm to celebrate overwork, sleep deprivation and chronic stress. Ordinarily if you reveal that you are unhappy, unproductive and causing yourself mental and physical harm, people will be concerned and try to intervene. However, the expected response to this kind of suffering…
Stetho: A new debugging platform for Android
Visit the post for more.
Pgsql: Create an infrastructure for parallel computation in PostgreSQL
Create an infrastructure for parallel computation in PostgreSQL. This does four basic things. First, it provides convenience routines to coordinate …
Lessons Learned in Software Development
Here is my list of heuristics and rules of thumb for software development that I have found useful over the years: Development 1. Start small, then extend. Whether creating a new system, or …
Why is finance so complex? (2011)
Lisa Pollack at FT Alphaville mulls a question : “Why are we so good at creating complexity in finance?” The answer she comes up with is the “ Flynn Effect “, basically the idea that there is an uptrend in human intelligence. Finance, in this view, gets more complex over time because financiers get smart enough to…
Android libstagefright still exploitable
Update (2015-08-13 1:16pm CST): We’ve been in contact with Zimperium and are working with them to provide coverage for detection of this flaw through their Stagefright Detector app. They have been very responsive (more so than the affected vendor) and we plan to alert them of similar flaws we’ve recently discovered…
My bank has an API so I built online banking
I recently attended Mondo’s second Hackathon, and it was incredibly insightful. My first hackathon, and moreover, my first time working…
We have a problem with promises
No, not with promises themselves. Promises, as defined by the A+ spec , are awesome.
GitLab Mattermost, an open source on-premises Slack alternative
We're very excited to announce that we'll ship GitLab Mattermost, an open source, on-premises messaging app (like Slack) along with GitLab.
Probabilistic programming does in 50 lines of code what used to take thousands
MIT researchers demonstrate probabilistic programming that does in 50 lines of code what used to take thousands.
United Airlines Bug Bounty: An experience in reporting a serious vulnerability
About six months ago, United Airlines announced their Bug Bounty program and, almost immediately, it received a ton of press. Though I initially wasn’t interested in pursuing the program (mainly due to its popularity), I decided to take a look a week or two after its launch despite being late to the party. Shortly…
The sad state of SMTP encryption
This is a quick recap of why I’m sad about SMTP encryption. It explains how TLS certificate verification in SMTP is useless even if you force it.
France's Government Aims to Give Itself Carte Blanche to Spy on the World
The United States makes an improper division between surveillance conducted on residents of the United States and the surveillance that is conducted with almost no restraint upon the rest of the world. This double standard has proved poisonous to the rights of Americans and non-Americans alike. In...
How to destroy special collections with social media
I just got back from a wonderful trip to Rare Book School to deliver a talk in their 2015 lecture series. It was the last week of their summer season in Charlottesville, the week when the Descriptive Bibliography course (aka “boot camp”) was in full swing, and the weather was in all its hot, glorious humidity. I…
A Look inside Google’s Data Center Networks
Google has long been a pioneer in distributed computing and data processing, from Google File System to MapReduce to Bigtable and to Bor...
To defend the free web, save Mozilla
The latest version of this post, along with the blog, has moved. TL;DR: Mozilla is largely dependent on Yahoo! We must make sure it is funded by individuals’ donations and a diverse roster of…
Google Photos – Can I get out?
But it begs the question: what happens with my photos once I hand them over? Should I want to move elsewhere, what are my options?
Interviewing for a JavaScript Job
“The Carpenter” was a JavaScript programmer, well-known for a meticulous attention to detail and love for hand-crafted, exquisitely joined code. The Carpenter normally worked through personal referrals, but from time to time a recruiter would slip through his screen. One such recruiter was Bob Plissken. Bob was…
Patronizing Passwords
Passwords suck. Let’s make them better.
Walmart Labs: Why we run an open source program
Over the coming weeks, we are publishing a series of blog posts from TODO Group members, explaining why each company has decided to run programs to publish, use, and improve open source software - and the benefits that result. First up, Dion Almaer (@dalmaer) with Walmart Labs’ perspective. Why would a company spend…