Blogpost archive
This is a list of all my blogposts. They range from highly technical to entry level, from Linux to PHP and server management.
2017-05
- Ways in which the WannaCry ransomware could have been much worse
- Why the Next 10 Days Are Critical to the Internet’s Future
- Chrome to restore one-click certificate viewing in browser
- NIST recommendation: remove periodic password change requirements
- How to enable TLS 1.3 on Nginx
- Remote security exploit in all 2008+ Intel platforms
- Are homogenic nameserver names a single point of failure?
2017-04
- Top 5 security checks for secure, unhackable web applications
- cron.weekly issue #77: OpenStack, Moby, Caddy, Devuan, Linuxkit, Tmux, Jenkins & more
- Canada Just Ruled to Uphold Net Neutrality
- Follow-up: MIT no longer owns their /8
- Interview on Laravel Spark & DNS Spy
- MIT no longer owns 18.0.0.0/8
- DNS Spy has launched!
- Nginx might have 33% market share, Apache isn’t falling below 50%
- CAA checking becomes mandatory for SSL/TLS certificates
2017-03
- Intent to Deprecate and Remove: Trust in existing Symantec-issued Certificates
- cron.weekly issue #72: FreeBSD, lkml, llvm, dnscontrol, buck, ReOpenLDAP, Postfix, Bash, Xargs & more
- Finding the biggest data (storage) consumers in Zabbix
- Drupal 7.x Services module unserialize() to Remote Code Execution
- WordPress on PHP 7.1
- CVE-2017-2636: Linux local privilege escalation flaw in ‘n_hdlc’
- cron.weekly issue #70: GitHub, Kompose, Usql, tmux-cssh, HAProxy, icdiff, GlusterFS & more
- Log all queries in a Laravel CLI command
- Podcast: Config Management Camp: Kubernetes, Sysdig & Mgmt
- DNS Spy enters public beta
2017-02
- Mitigating PHP's long standing issue with OPCache leaking sensitive data
- Cloudbleed: Cloudflare Reverse Proxies have Dumped Uninitialized Memory
- Announcing the first SHA1 collision
- Kernel patching with kexec: updating a CentOS 7 kernel without a full reboot
- Linux kernel: CVE-2017-6074 – local privilege escalation in DCCP
- Security is Hard: Where Do I Start?
- HTML & CSS Is Hard: A friendly web development tutorial
- PHP 7.2 to get modern cryptography into its standard library
- IETF Draft: Hypertext Transfer Protocol (HTTP) over multicast QUIC
- Introducing Docker Secrets Management
- Server-side timings in the Chrome Devtools
- Review: Ubiquiti's Amplifi HD, mesh WiFi networking done right?
- Brotli compression saves 1.5 petabytes per day at Google’s Play Store
- Flame graphs for file systems
- cron.weekly issue #66: Git Filesystem, Security, JVM, Fission, Habitat, TLS 1.3
- Microsoft announces GVFS: Git Virtual File System
- Stop Disabling SELinux: A Real-World guide
- Standardising the “URL”
2017-01
- htop Explained Visually
- Implementing “Save For Offline” with Service Workers in the Browser
- A change of RSS feeds
- Look before you paste from a website to terminal
- Chrome 56 Will Aggressively Throttle Background Tabs
- Return of the Unauthenticated, Unfirewalled protocols
- Create a SOCKS proxy on a Linux server with SSH to bypass content filters
- Starting with sponsorships for this blog
- Despite revoked CA’s, StartCom and WoSign continue to sell certificates
- Google Infrastructure Security Design Overview
- WordPress to get secure, cryptographic updates
- Staying Safe Online – A short guide for non-technical people
- A collection of Drupal Drush one liners and commands
- Show the environment variables of a running process in Linux
2016-12
2016-11
2016-10
2016-08
- Podcast: Application Security, Cryptography & PHP
- TCP vulnerability in Linux kernels pre 4.7: CVE-2016-5696
- youtube-dl: download audio-only files from YouTube on Mac
- Mark a varnish backend as healthy, sick or automatic via CLI
- zsh: slow startup for new terminals
- Docker Cheat Sheet
- Awk trick: show lines longer than X characters
- Podcast: Ansible config management & deploying code with James Cammarata
- Postfix mail queue: deliver e-mail to an alternate address
- Chrome 52: return old backspace behaviour
2016-07
- Google's QUIC protocol: moving the web from TCP to UDP
- Enable QUIC protocol in Google Chrome
- Varnish Agent: an HTML frontend to manage & monitor your varnish installation
- Why do we automate?
- A new website layout, focussed on speed and simplicity
- vsftpd on linux: 500 OOPS: vsftpd: refusing to run with writable root inside chroot()
- Highly Critical Remote Code Execution patch for Drupal (PSA-2016-001)
- How To Get Pokémon Go on iPhone Outside US
- The Bash For Loop, The First Step in Automation on Linux
2016-06
2016-05
- Limit the runtime of a cronjob or script
- The async Puppet pattern
- Redis: OOM command not allowed when used memory > ‘maxmemory’
- The day Google Chrome disables HTTP/2 for nearly everyone: May 31st, 2016
- Podcast: Devops, SSL & HTTP2 op HTTP Café
- Apple prepares iOS to move to IPv6-only networks
- Security week: 2x High Severity OpenSSL vulnerability & critical ImageMagick flaw