Blog archive by Mattias Geniar
This is a list of all my blogposts. They range from highly technical to entry level, from Linux to PHP and server management.
2017-08
2017-07
- Podcast: The Ceremony, the birth of Zcash
- Choose source IP with ping to force ARP refreshes
- Apache httpd 2.2.15-60: underscores in hostnames are now blocked
- mysqldump without table locks (MyISAM and InnoDB)
- Unix time 1.500.000.000
- Launching the cron.weekly forum
- Some more nuances to the systemd debacle
- Podcast: Caching using Varnish
- Giving perspective on systemd’s “usernames that start with digit get root privileges”-bug
2017-05
- HTTP/2 push is tougher than I thought
- Samba CVE-2017-7494: Remote Code Execution in Samba 3.5.0 and upwards
- CentOS 7.4 to ship with TLS 1.2 + ALPN
- (Dutch) Tech45 podcast #341: Technologica & WannaCry ransomware
- WordPress starts Bug Bounty program on HackerOne
- Ways in which the WannaCry ransomware could have been much worse
- Why the Next 10 Days Are Critical to the Internet’s Future
- Chrome to restore one-click certificate viewing in browser
- NIST recommendation: remove periodic password change requirements
- How to enable TLS 1.3 on Nginx
- Remote security exploit in all 2008+ Intel platforms
- Are homogenic nameserver names a single point of failure?
2017-04
- Top 5 security checks for secure, unhackable web applications
- cron.weekly issue #77: OpenStack, Moby, Caddy, Devuan, Linuxkit, Tmux, Jenkins & more
- Canada Just Ruled to Uphold Net Neutrality
- Follow-up: MIT no longer owns their /8
- Interview on Laravel Spark & DNS Spy
- MIT no longer owns 18.0.0.0/8
- DNS Spy has launched!
- Nginx might have 33% market share, Apache isn’t falling below 50%
- CAA checking becomes mandatory for SSL/TLS certificates
2017-03
- Intent to Deprecate and Remove: Trust in existing Symantec-issued Certificates
- cron.weekly issue #72: FreeBSD, lkml, llvm, dnscontrol, buck, ReOpenLDAP, Postfix, Bash, Xargs & more
- Finding the biggest data (storage) consumers in Zabbix
- Drupal 7.x Services module unserialize() to Remote Code Execution
- WordPress on PHP 7.1
- CVE-2017-2636: Linux local privilege escalation flaw in ‘n_hdlc’
- cron.weekly issue #70: GitHub, Kompose, Usql, tmux-cssh, HAProxy, icdiff, GlusterFS & more
- Log all queries in a Laravel CLI command
- Podcast: Config Management Camp: Kubernetes, Sysdig & Mgmt
- DNS Spy enters public beta
2017-02
- Mitigating PHP's long standing issue with OPCache leaking sensitive data
- Cloudbleed: Cloudflare Reverse Proxies have Dumped Uninitialized Memory
- Announcing the first SHA1 collision
- Kernel patching with kexec: updating a CentOS 7 kernel without a full reboot
- Linux kernel: CVE-2017-6074 – local privilege escalation in DCCP
- Security is Hard: Where Do I Start?
- HTML & CSS Is Hard: A friendly web development tutorial
- PHP 7.2 to get modern cryptography into its standard library
- IETF Draft: Hypertext Transfer Protocol (HTTP) over multicast QUIC
- Introducing Docker Secrets Management
- Server-side timings in the Chrome Devtools
- Review: Ubiquiti's Amplifi HD, mesh WiFi networking done right?
- Brotli compression saves 1.5 petabytes per day at Google’s Play Store
- Flame graphs for file systems
- cron.weekly issue #66: Git Filesystem, Security, JVM, Fission, Habitat, TLS 1.3
- Microsoft announces GVFS: Git Virtual File System
- Stop Disabling SELinux: A Real-World guide
- Standardising the “URL”
2017-01
- htop Explained Visually
- Implementing “Save For Offline” with Service Workers in the Browser
- A change of RSS feeds
- Look before you paste from a website to terminal
- Chrome 56 Will Aggressively Throttle Background Tabs
- Return of the Unauthenticated, Unfirewalled protocols
- Create a SOCKS proxy on a Linux server with SSH to bypass content filters
- Starting with sponsorships for this blog
- Despite revoked CA’s, StartCom and WoSign continue to sell certificates
- Google Infrastructure Security Design Overview
- WordPress to get secure, cryptographic updates
- Staying Safe Online – A short guide for non-technical people
- A collection of Drupal Drush one liners and commands
- Show the environment variables of a running process in Linux
2016-12
2016-11
2016-10
2016-08
- Podcast: Application Security, Cryptography & PHP
- TCP vulnerability in Linux kernels pre 4.7: CVE-2016-5696
- youtube-dl: download audio-only files from YouTube on Mac
- Mark a varnish backend as healthy, sick or automatic via CLI
- zsh: slow startup for new terminals
- Docker Cheat Sheet
- Awk trick: show lines longer than X characters
- Podcast: Ansible config management & deploying code with James Cammarata
- Postfix mail queue: deliver e-mail to an alternate address