Victor on Software

One of my favorite alerts from the open source EDR I’ve been building this year is a high-severity “Suspicious exec chain.”

AI coding agents can ship working code before the team has built the mental model to maintain it.

What are HTTP message signatures?

Our web app architecture Evolutionary architecture proposal Initial implementation First compromise Second compromise Architectural drift Lessons learned A year ago, I embarked on a journey to improve the architecture of our large 500K+ line open source d…

AI agents are changing the way we work.

Have you ever felt like you’re working in a fog?

We’ve changed our tune on OpenTelemetry.

TL;DR: AI coding agents are becoming mainstream, but their impact is focused mainly on implementation and automated testing.

What is mTLS?

TPM architecture TPM key storage TPM key hierarchy model TPM signing Trusted Platform Module (TPM) is a secure cryptoprocessor for many security applications requiring strong device identity, data protection, and platform integrity.

Monday: Arrival Tuesday: Speaker’s dinner Wednesday: Panel discussion Thursday: Showtime Friday: Conclusion Giving the first speech at a conference was an emotional rollercoaster.

Tracking engineering metrics doesn’t have to mean signing up for another expensive SaaS tool.

Recently, we developed a proof of concept using an MCP(Model Context Protocol) server to control Fleet’s device management server.

Fast Continuous Integration (CI) test results are crucial for maintaining a good developer velocity.

Importance of technical diagrams Diagrams are an effective way to communicate technical concepts to other engineers or business stakeholders.

This article is part of a series on technical debt.

This article examines the literate programming paradigm introduced in 1984 by Donald Knuth.

This article is part of a series on technical debt.

The AI landscape is changing rapidly.

Go is designed for fast compilation.

Extract method (aka extract function) Inline variable Extract variable Inline method (aka inline function) What is code refactoring?

Find package dependencies using go list Find package dependencies using Go code What are package dependencies and module dependencies?

This article is part of a series on technical debt.

Metrics for unreadable code How to make your codebase more readable Fix poor software structure Refactor local code for understanding Use unit and integration tests Useful comments Readable code is software code that is easy to understand and easy to chan…

Server CPU and memory utilization Server errors Server API latency (response time) Database slow queries Database performance metrics What is software load testing?

Create a CloudFront distribution Create a CloudFront key pair and add it to a key group Associate the key group with the CloudFront distribution Generate a signed URL using AWS SDKs What is CloudFront CDN?

Introduction In this article, we will create a MySQL replica database.

Example of method overriding with embedded structs What is method overriding?

Engineering metrics are essential for tracking your team’s progress and productivity and identifying areas for improvement.

Get a Google Sheets API key Share a Google Sheets spreadsheet with the service account Edit a Google Sheets spreadsheet using the API When you need to edit a Google Sheets spreadsheet quickly, you can use the Google Sheets API.

How to find the plist file for a running process Create and edit .plist files with PlistBuddy What is launchd?

What is a Go package?

What is a VLAN?

Obtain VPN connection details Point your computer to the remote Active Directory DNS server Join your computer to the Active Directory domain Log in with your Active Directory credentials What is Active Directory?

Create a script-only install package using the pkgbuild command Create a script-only install package using the Packages app What is a macOS install package?

What is staticcheck?

This article discusses our first impressions of using OpenTelemetry with Jaeger.

In this article, we’ll create a custom reusable GitHub Action using TypeScript.

JSON unmarshalling use cases When passing a JSON payload to a Go application, you may encounter situations where you must tell the difference between set, missing, or null fields.

Test NDES using PowerShell Test NDES using a SCEP client Test NDES using Apple MDM profile What is a Windows NDES SCEP server?

Why set up a remote development environment?

CODEOWNERS is not scalable Re-approvals for every push Impractical for protected feature branches Our team has been using GitHub to review the code for our open-source product.

MSI versus EXE installers When distributing software for Windows, you have two main options for installers: MSI and EXE.

Accurately measuring test execution time Why measure test execution time?

Creating a Go benchmark Running Go benchmarks What is benchmarking?

Securing database secrets with Docker secrets Securing database secrets with SQL commands What is a Zero Trust development environment?

STDIN is more secure than environment variables or command-line arguments When you pass command-line arguments to a program, they are visible to anyone who can run the ps command.

Find code owners from the command line What are GitHub code owners?

Add Jest testing framework Write a unit test Review unit test coverage This article is part of our series on building a Chrome extension.

This article will present a problem we encountered in our production distributed system and how we solved it using a distributed lock.