Blogpost archive
This is a list of all my blogposts. They range from highly technical to entry level, from Linux to PHP and server management.
If you have an interesting topic to write about, reach out and I'll see what I can do.
2017-05
2017-04
- Top 5 security checks for secure, unhackable web applications
- cron.weekly issue #77: OpenStack, Moby, Caddy, Devuan, Linuxkit, Tmux, Jenkins & more
- Canada Just Ruled to Uphold Net Neutrality
- Follow-up: MIT no longer owns their /8
- Interview on Laravel Spark & DNS Spy
- MIT no longer owns 18.0.0.0/8
- DNS Spy has launched!
- Nginx might have 33% market share, Apache isn’t falling below 50%
- CAA checking becomes mandatory for SSL/TLS certificates
2017-03
- Intent to Deprecate and Remove: Trust in existing Symantec-issued Certificates
- cron.weekly issue #72: FreeBSD, lkml, llvm, dnscontrol, buck, ReOpenLDAP, Postfix, Bash, Xargs & more
- Finding the biggest data (storage) consumers in Zabbix
- Drupal 7.x Services module unserialize() to Remote Code Execution
- WordPress on PHP 7.1
- CVE-2017-2636: Linux local privilege escalation flaw in ‘n_hdlc’
- cron.weekly issue #70: GitHub, Kompose, Usql, tmux-cssh, HAProxy, icdiff, GlusterFS & more
- Log all queries in a Laravel CLI command
- Podcast: Config Management Camp: Kubernetes, Sysdig & Mgmt
- DNS Spy enters public beta
2017-02
- Mitigating PHP’s long standing issue with OPCache leaking sensitive data
- Cloudbleed: Cloudflare Reverse Proxies have Dumped Uninitialized Memory
- Announcing the first SHA1 collision
- Kernel patching with kexec: updating a CentOS 7 kernel without a full reboot
- Linux kernel: CVE-2017-6074 – local privilege escalation in DCCP
- Security is Hard: Where Do I Start?
- HTML & CSS Is Hard: A friendly web development tutorial
- PHP 7.2 to get modern cryptography into its standard library
- IETF Draft: Hypertext Transfer Protocol (HTTP) over multicast QUIC
- Introducing Docker Secrets Management
- Server-side timings in the Chrome Devtools
- Review: Ubiquiti’s Amplifi HD, mesh WiFi networking done right?
- Brotli compression saves 1.5 petabytes per day at Google’s Play Store
- Flame graphs for file systems
- cron.weekly issue #66: Git Filesystem, Security, JVM, Fission, Habitat, TLS 1.3
- Microsoft announces GVFS: Git Virtual File System
- Stop Disabling SELinux: A Real-World guide
- Standardising the “URL”
2017-01
- htop Explained Visually
- Implementing “Save For Offline” with Service Workers in the Browser
- A change of RSS feeds
- Look before you paste from a website to terminal
- Chrome 56 Will Aggressively Throttle Background Tabs
- Return of the Unauthenticated, Unfirewalled protocols
- Create a SOCKS proxy on a Linux server with SSH to bypass content filters
- Starting with sponsorships for this blog
- Despite revoked CA’s, StartCom and WoSign continue to sell certificates
- Google Infrastructure Security Design Overview
- WordPress to get secure, cryptographic updates
- Staying Safe Online – A short guide for non-technical people
- A collection of Drupal Drush one liners and commands
- Show the environment variables of a running process in Linux
2016-12
2016-11
2016-10
2016-08
- Podcast: Application Security, Cryptography & PHP
- TCP vulnerability in Linux kernels pre 4.7: CVE-2016-5696
- youtube-dl: download audio-only files from YouTube on Mac
- Mark a varnish backend as healthy, sick or automatic via CLI
- zsh: slow startup for new terminals
- Docker Cheat Sheet
- Awk trick: show lines longer than X characters
- Podcast: Ansible config management & deploying code with James Cammarata
- Postfix mail queue: deliver e-mail to an alternate address
- Chrome 52: return old backspace behaviour
2016-07
- Google’s QUIC protocol: moving the web from TCP to UDP
- Enable QUIC protocol in Google Chrome
- Varnish Agent: an HTML frontend to manage & monitor your varnish installation
- Why do we automate?
- A new website layout, focussed on speed and simplicity
- vsftpd on linux: 500 OOPS: vsftpd: refusing to run with writable root inside chroot()
- Highly Critical Remote Code Execution patch for Drupal (PSA-2016-001)
- How To Get Pokémon Go on iPhone Outside US
- The Bash For Loop, The First Step in Automation on Linux
2016-06
2016-05
- Limit the runtime of a cronjob or script
- The async Puppet pattern
- Redis: OOM command not allowed when used memory > ‘maxmemory’
- The day Google Chrome disables HTTP/2 for nearly everyone: May 31st, 2016
- Podcast: Devops, SSL & HTTP2 op HTTP Café
- Apple prepares iOS to move to IPv6-only networks
- Security week: 2x High Severity OpenSSL vulnerability & critical ImageMagick flaw