Wild code

After yet another supply chain issue (npm this time, but it doesn’t really matter that much), Shai-hulud, 500 packages affected and millions of downloads later, I finally wrapped up the protection system for my dev environment.

The meme Python package management / installation is famously difficult… or so the story goes.

Home server so far For quite a while I’ve been using docker for my home server (and some other servers).

The murder mystery Recently I ran into an issue with pulseeffects getting killed without a clear reason.

What’s security by obscurity I end up taking about the security by obscurity with other engineers and it’s sometimes not easy to classify what solution is or isn’t of that kind.

Some experiences on finding remote work.

How to create a minimal Alpine container from scratch.

Are all exits real?

The announcement Many news services reported already on the SpaceX plan to launch a number of satellites to provide internet access; for example Ars, or more specific discussion at reddit.

Getting own malware lists Many extensions like uBlock will provide you with curated lists of malicious URLs and domains.

The challenge A few days ago I saw a tweet from my friend saying: That feeling when you process 5,275,521 records from #JSON to #MySQL in 43 minutes thanks to @celeryproject and @sqlalchemy!

I wanted to create a website for a personal project.

Usually we experience two types of remote execution in practice: You log in to some remote machine and run the application there (ssh), and You get remote application copied locally and run it (mounting remote filesystems, javascript download, etc.)

Many people may already know that all your devices try to broadcast your previous connections.

As explained in the previous post, seccomp can be used for protecting the system and users from misbehaving and exploited applications.

Many programs running for a long time on some server do not do random, unpredictable things.

There’s been a number of issues lately found by fuzzing input files (strings, lesspipe, various image issues, etc.), but these are all stateless apps / libraries.

Here’s a list of things that currently fail when trying to run vagrant under Arch.

There are many ways to turn on the unattended upgrades in Ubuntu.

Any long-term data archives you keep - backups, copies of logs, code repositories, audit entries, etc.

There’s an interesting side effect to way Debian-like systems handle the database configuration for various packages.

I’ve got a couple of Linux machines that need a transparent backup solution at home.

Just a popular stackoverflow question & answer which was deleted as not constructive even with 10+ score and thousands of views (by a mod, so can’t vote to revert - thanks!)

If you follow the latest versions of… everything and tried to install flashcache you probably noticed that none of the current guides are correct regarding how to install it.

Some time ago I ran into a production issue where the init process (upstart) stopped behaving properly.

I started playing some flash-based MMORPG for fun lately.