Blog Archive


I like to write. Here's a collection of my blogposts.

Remote Desktop error: CredSSP encryption oracle remediation


DNS Spy now checks for the “Null MX”


Certificate Transparency logging now mandatory


Chalk Talk #3: how to optimise your content for Varnish


Upcoming presentation at LOADays: Varnish Internals – Speeding up a site x100


Chalk Talk #2: how does Varnish work?


Varnish: same hash, different results? Check the Vary header!


Varnishlog: show the hash() data in output


Drupal core – Highly critical – Remote Code Execution – SA-CORE-2018-002


It’s about what broke, not who broke it


Why I usually run ‘w’ first when troubleshooting unknown machines


Chalk Talk #1: An introduction to Varnish


Upcoming Drupal 7 and 8 core highly critical security release: March 28th


The security footgun in etcd


Enable the slow log in Elastic Search


Varnish 6.0 released


Laravel & MySQL auto-adding “on update current_timestamp()” to timestamp fields


Clear systemd journal


Announcing “Oh Dear!”: a new innovative tool to monitor your websites


Update a docker container to the latest version


Show IDN punycode in Firefox to avoid phishing URLs


Nginx adds support for HTTP/2 Server-Side Push


Chrome will mark all HTTP sites as “not secure”


Red Hat reverts microcode update to mitigate Spectre, refers to hardware vendors for fix


Mozilla Firefox to require HTTPS in order to use latest features