Around March of 2017, I received a call asking for a code review on a product about to be launched. This company had issues with memory leaks, spontaneous crashing, slow loading, CPU spiking, and had to release in a couple of weeks. You might have heard this…

Who cares about your software when your hardware is crap?

A few days ago, Cloudflare — along with the rest of the world — learned of a "practical" cache poisoning attack. In this post I’ll walk through the attack and explain how Cloudflare mitigated it for our customers.

This article gives an overview of the implementation and performance of two recent additions to LocustDB, an extremely fast open-source analytics database built in Rust. The first addition is suppo…

JavaScript web apps and web servers are susceptible to a specific type of vulnerabilities/attacks known as regular expression (regex) denial of service (ReDoS).

Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

We launched the t1.micro instance type in 2010, and followed up with the first of the T2 instances (micro, small, and medium) in 2014, more sizes in 2015 (nano) and 2016 (xlarge and 2xlarge), and unlimited bursting last year. Today we are launching T3 instances…

Multi-part series in building start-ups using serverless technologies

On twitter this week, @srhtcn noted that “Many incidents happen during or right after release” and asked for advice on ways to fix this. And he’s right!  Rolling out new software …

If you are beginning your journey in learning a cloud provider like Amazon Web Services or Google Cloud Platform you have likely come across the term Infrastructure As Code (IaC) . It is a swiss army knife for both developers and system administrators. In…

Everything you ever wanted to know about qubits, superpositioning, and spooky action at a distance.

There are two links I've come across recently that have stuck with me and made me think about ethics...

An OpenSSH bug that was reclassified as a vulnerability after it was fixed has made scary headlines – but the sky isn’t falling

Jack Wallen makes a —possibly unpopular —case for Dropbox dropping Linux support.

Regardless of database technology, it is necessary to have a monitoring setup, to detect problems so we can take action, or simply to know the current state of our systems. In this blog, we’ll take a look at one of the most widely used monitoring tool: Nagios.

PostgreSQL Performance Tuning: Optimize database parameters for maximum efficiency. Learn about configuration, query, hardware optimization, and more.

Within the community we’ve been debating the best practices for many years, but there are a few that have been relatively accepted for most…