2016

August

2016-08-21

• The Security of Our Election Systems;

• The TCP "challenge ACK" side channel;

• Why Uber Engineering Switched from Postgres to MySQL;

• On Uber’s Choice of Databases;

• Keysafe, a cloud-based key backup proposal;

2015

December

2015-12-25

• The daemontools family;

• A side-by-side look at run scripts and service units;

• Mistakes to avoid when designing Unix dæmon programs;

• How to make daemons that will maximise sysadmin hatred;

• daemon -- Writing and packaging system daemons;

• Introducing vdev;

2015-12-12

• Pickled Patches -- On repositories of patches and tension between security professionals and in-house developers;

• It Probably Works -- Probabilistic algorithms are all around us. Not only are they acceptable, but some programmers actually seek out chances to use them.;

2015-12-06

• How Apple Is Giving Design A Bad Name;

• What’s in a Boarding Pass Barcode? A Lot;

October

2015-10-22

• Permissive licenses, community, and copyleft;

2015-10-08

• The microservices cargo cult;

2015-10-06

• Exercising Software Freedom in the Global Email System;

September

2015-09-27

• We Get What We Want;

2015-09-25

• Living in a Code Yellow World;

June

2015-06-06

• The Moose is loose: Linux-based worm turns routers into social network bots;

2015-06-01

• git and backups;

• Backups;

March

2015-03-29

• The New Editors of the Internet;

• Why I’m Saying Goodbye to Apple, Google and Microsoft -- I’m putting more trust in communities than corporations;

• Raw Networking -- Relevance and repeatability;

• Go Static or Go Home -- In the end, dynamic systems are simply less secure;

• HTTP/2.0 -- The IETF is Phoning It In -- Bad protocol, bad politics;

• Bugs and Bragging Rights -- It's not always size that matters;

February

2015-02-25

• Has modern Linux lost its way? (Some thoughts on jessie);

• Reactions to "Has modern Linux lost its way?" and the value of simplicity;

January

2015-01-19

• How to Keep Your AWS Credentials on an EC2 Instance Securely;

• Securing the Cloud: Part 1 -- Managing Credentials;

• Securing the Cloud: Part 2 -- Managing Security Around Remote Login and Development;

• Securing the Cloud: Part 3 -- Credentials and Password Policies;

2015-01-05

• Stop trying to innovate keyboards. You’re just making them worse;

• The Dvorak Keyboard Controversy;

2014

December

2014-12-27

• A Short History of Internet Protocols at CERN;

2014-12-09

• Port Squatting / Don't irk your local sysadmin;

November

2014-11-20

• Whats Wrong with Markdown;

• Foo over UDP;

2014-11-14

• Fixing the internet for confidentiality and security;

• When Russians thought the Internet would make them free;

• Project health, and why it's important -- part of the #shellshock afterwords;

• JavaScript is Assembly Language for the Web: Part 2 - Madness or just Insanity?;

• Will HTML ever be replaced?;

• Time for Pudding Code!;

• Is this the tipping point?;

• Bash gets shellshocked;

October

2014-10-16

• ISG Position Paper: Use of Dropbox;

2014-10-05

• Developers are users too;

September

2014-09-17

• Torvalds says he has no strong opinions on systemd;

2014-09-06

• What's the matter with PGP?;

August

2014-08-19

• Irrational Fear of Risks Against Our Children;

July

2014-07-17

• A case against syntax highlighting;

2014-07-07

• Outsourcing Responsibility / What do you do when your debugger fails you?;

June

2014-06-27

• Factory Reset, Stateless Systems, Reproducible Systems & Verifiable Systems;

2014-06-24

• A Plea to Software Vendors from Sysadmins -- 10 Do's and Don'ts;

• Quality Software Costs Money -- Heartbleed Was Free;

• The Answer is 42 of Course;

• Who Must You Trust?;

2014-06-19

• memfd_create(2);

May

2014-05-14

• Simple Binary Encoding;

2014-05-11

• Go Package Management;

2014-05-10

• Git submodules are probably not the answer;

• Why your company shouldn’t use Git submodules;

2014-05-09

• Scaling Mercurial at Facebook;

April

2014-04-02

• The /doc hierarchy;

March

2014-03-29

• Edward Snowden: 'The NSA set fire to the internet. You are the firefighters';

2014-03-28

• If GCHQ wants to improve national security it must fix our technology;

• Debian and CAcert;

• rsyslog's first signature provider: why Guardtime?;

• Which data does the Guardtime signature provider transfer to external parties?;

• Why I think Lua is no solution for rsyslog;

• RFC5424 or cee-enhanced syslog?;

• journald and rsyslog;

• What I don't like about journald / Linux Journal;

• journald log hash chaining is broken;

• why does the world need another syslogd? (aka rsyslog vs. syslog-ng);

2014-03-25

• A Few Words with Niklaus Wirth;

• On the cruelty of really teaching computing science;

2014-03-23

• The End of Agile: Death by Over-Simplification;

2014-03-21

• Inside the NSA’s Secret Efforts to Hunt and Hack System Administrators;

• I Hunt Sys Admins;

2014-03-20

• What's new with HTTP2;

• A false midnight;

• Glibc feature test macros;

• node_modules in git;

2014-03-19

• Choosing Secure Passwords;

• Metadata = Surveillance;

• Who Should Store NSA Surveillance Data;

• Surveillance by Algorithm;

• Computer Network Exploitation vs. Computer Network Attack;

• Breaking Up the NSA;

• Using git and make for tasks beyond coding;

2014-03-18

• The Logic of Logging -- And the illogic of PDF;

• Rate-limiting State -- The edge of the Internet is an unruly place;

• Standard for E-mail "spam";

• Breeding Internet Superbugs;

• DNS Experiment Concludes;

• On Free Speech and the Rule of Law;

2014-03-15

• Software user's rights;

• On Mail;

• message threading;

• mail summary files;

2014-03-13

• JSON Redux AKA RFC7159;

2014-03-06

• Parkinson's Law of Triviality;

• Scalable Conferences;

• Ivo (a view on terminals);

• Yoshimi (a view on operating systems);

• RFC 7149 --- Software-Defined Networking: A Perspective from within a Service Provider Environment;

2014-03-05

• The penultimate guide to stopping a DDoS attack -- A new approach;

February

2014-02-28

• Ripoff nation: How Verizon and AT&T stacked the deck against cellphone users;

• Finding People's Locations Based on Their Activities in Cyberspace;

• Broken by design: systemd;

• Lennart Poettering on Debian and systemd;

• Dear Debian Developers, lrn2gpg;

2014-02-20

• Flags as a system call API design pattern;

2014-02-11

• Losing graciously;

• Debate initsystem systemd;

• Debate initsystem upstart;

• Debate initsystem openrc;

• Debate initsystem sysvinit;

2014-02-13

• What happens with digital rights management in the real world?;

• International Principles on the Application of Human Rights to Communications Surveillance;

January

2014-01-29

• Why is Build automation important?;

• File up-to-date checks;

• Types of inputs and outputs: Explicit versus Implicit;

• Implicit outputs: badness in a build;

• tl;dr;

2014-01-27

• Finite Resources in Shake;

• Shake Before Building -- Replacing Make with Haskell;

2014-01-21

• How the NSA Threatens National Security;

• How the NSA Almost Killed the Internet;

• Security Risks of Embedded Systems;

• Unikernels: Rise of the Virtual Library Operating System --- What if all the software layers in a virtual appliance were compiled within the same safe, high-level language framework?;

• Center Wheel for Success --- "Not invented here" syndrome is not unique to the IT world;

• This is the Foo Field --- The meaning of bits and avoiding upgrade bog downs;

• The Road to SDN --- An intellectual history of programmable networks;

• "Evil Maid" Attacks on Encrypted Hard Drives;

2014-01-16

• bzr is dying; Emacs needs to move -- from Eric S. Raymond;

• Re: Prefer Mercurial instead of git -- from Stephen J. Turnbull;

• Endangered species of the Web: the Link;

• Broken Links;

2014-01-15

• Bug#727708: init system other points, and conclusion -- from Ian Jackson;

• Bug#727708: init system other points, and conclusion -- from Russ Allbery;

• Another go at Go... failed!;

2014-01-02

• Trust Me (I'm a kettle);

• The Android AppOps vanishing act;

2013

December

2013-12-30

• Publisher’s Letter;

• Slaves of the Internet, Unite!;

2013-12-23

• Bad Science vs. Good Science: A Guide for the Layperson (Part 2);

• Bad Science vs. Good Science: A Guide for the Layperson (Part 1);

2013-12-21

• Professional Criticism;

2013-12-19

• How to Get Ahead at the NSA;

• Our Government Has Weaponized the Internet. Here’s How They Did It;

• Ensuring Randomness with Linux's Random Number Generator;

• Why secure systems require random numbers;

• Staying on top of TLS attacks;

2013-12-18

• Tradeoffs in Cyber Security;

• How the Bitcoin protocol actually works;

• A (relatively easy to understand) primer on elliptic curve cryptography;

• The Battle for Power on the Internet;

• Surveillance as a Business Model;

• Defending Against Crypto Backdoors;

• The Trajectories of Government and Corporate Surveillance;

• The Myth of the 'Transparent Society';

• David Brin Rebuts Schneier In Defense of a Transparent Society;

• The Eternal Value of Privacy;

• Apple's Fingerprint ID May Mean You Can't "Take the Fifth";

2013-12-12

• How NSA Mass Surveillance is Hurting the US Economy;

2013-12-06

• A Critique Of Lavabit;

• In Memoriam: Lavabit Architecture - Creating a Scalable Email Service;

2013-12-05

• PaaS Under the Hood, Episode 1: Kernel Namespaces;

• PaaS Under the Hood, Episode 2: cgroups;

• PAAS Under the Hood, Episode 3: AUFS;

• PaaS Under the Hood, Episode 4: GRSEC;

• PaaS Under the Hood, Episode 5: Distributed Routing with Hipache;

• PaaS Under the Hood, Episode 6: How to Optimize the Memory Usage of Your Apps;

2013-12-03

• Exploring LXC Networking;

• The past, present, and future of control groups;

2013-12-02

• Your visual how-to guide for SELinux policy enforcement;

• Rewriting a large production system in Go;

• The failure of pysandbox;

• The New Threat: Targeted Internet Traffic Misdirection;

November

2013-11-12

• Google’s iron grip on Android: Controlling open source by any means necessary;

• Rethinking the Linux distibution;

2013-11-10

• NSA Files: Decoded -- What the revelations mean for you;

October

2013-10-22

• Re: [ccache] Stumbling blocks with ccache and embedded/encapsulated environments;

• On getting criticism;

2013-10-17

• Air Gaps;

• Surreptitiously Tampering with Computer Chips;

• The NSA's New Risk Analysis;

• Reforming the NSA;

2013-10-11

• Maven is broken by design;

• In quest of the ultimate build tool;

• Recursive Maven considered harmful;

• Build in the Cloud: Accessing Source Code;

• Build in the Cloud: How the Build System works;

• Build in the Cloud: Distributing Build Steps;

• Build in the Cloud: Distributing Build Outputs;

• Testing at the speed and scale of Google;

2013-10-09

• How Lavabit Melted Down;

• The N.S.A. and Its Targets: Lavabit Shuts Down;

• Edward Snowden’s E-Mail Provider Defied FBI Demands to Turn Over Crypto Keys, Documents Show;

• Government Announces Steps to Restore Confidence on Encryption Standards;

• Implementing the GNU make "jobserver";

2013-10-05

• NSA and GCHQ target Tor network that protects anonymity of web users;

• Attacking Tor: how the NSA targets users' online anonymity;

• Why the NSA's attacks on the internet must be made public;

• New Snowden Documents Show NSA Deemed Google Networks a "Target";

2013-10-04

• Bruce Schneier: NSA Spying Is Making Us Less Safe;

2013-10-03

• The Internet: We’re Doing It Wrong;

September

2013-09-27

• Revealed: how US and UK spy agencies defeat internet privacy and security;

• N.S.A. Able to Foil Basic Safeguards of Privacy on Web;

• Revealed: The NSA’s Secret Campaign to Crack, Undermine Internet Security;

• Why We Published the Decryption Story;

• More on the NSA Commandeering the Internet;

• What Exactly Are the NSA’s ‘Groundbreaking Cryptanalytic Capabilities’?;

• Government Secrecy and the Generation Gap;

• The Only Way to Restore Trust in the NSA;

• NSA Secrets Kill Our Trust;

• Trust and Society;

• Our Newfound Fear of Risk;

• Trust in Man/Machine Security Systems;

• The Limitations of Intelligence;

• Security Tips from Bruce Schneier;

• How Companies Can Protect Against Leakers;

• The Real, Terrifying Reason Why British Authorities Detained David Miranda;

• David Miranda: 'They said I would be put in jail if I didn't co-operate';

• The Betrayal of the Internet Imaginaire;

• Rethinking the guest operating system;

• Reddit: Lessons Learned from Mistakes Made Scaling to 1 Billion Pageviews a Month;

2013-09-26

• The US government has betrayed the internet. We need to take it back;

• NSA surveillance: A guide to staying secure;

• NSA: Possibly breaking US laws, but still bound by laws of computational complexity;

• How to foil NSA sabotage: use a dead man's switch;

• On the NSA;

• Crypto prof asked to remove NSA-related blog post;

• Re: [Cryptography] Opening Discussion: Speculation on "BULLRUN";

• Toward healthy paranoia;

• A Lesson in Resource Management;

August

2013-08-09

• Now That It’s in the Broadband Game, Google Flip-Flops on Network Neutrality;

• FSFE objects to claims of 'predatory pricing' in Free Software;

2013-08-02

• More Encryption Is Not the Solution;

• Feds put heat on Web firms for master encryption keys;

• SSL Labs: Deploying Forward Secrecy;

• Michael Hayden on the Effects of Snowden's Whistleblowing;

July

2013-07-25

• NSA surveillance and "foreigners";

• Overview of Linux Kernel Security Features;

• Connecting on the QUIC;

2013-07-23

• A clustering for Erlang on Xen;

2013-07-19

• Google told to find new solution for European search antitrust row;

• Spygate Lawsuit Accuses NSA of Unconstitutional ‘Dragnet Electronic Surveillance’;

• Why HTTP/2.0 does not seem interesting;

2013-07-18

• Debian, Berkeley DB, and AGPLv3;

• Google, Reader, and hard lessons about migration;

• The Naming of Hosts is a Difficult Matter;

• What's new in HTTP 2;

2013-07-16

• Is Cryptography Engineering or Science?;

2013-07-12

• Revealed: how Microsoft handed the NSA access to encrypted messages;

2013-07-06

• Rethinking Surveillance;

2013-07-04

• SSL: Intercepted today, decrypted tomorrow;

• Strong eventual consistency;

• Verifying the source code for binaries;

• U.S., British intelligence mining data from nine U.S. Internet companies in broad secret program;

• NSA slides explain the PRISM data-collection program;

• Misinformation on classified NSA programs includes statements by senior U.S. officials;

• NSA collected US email records in bulk for more than two years under Obama;

• To understand terrorism and threat assessment, look to Aum;

• Beyond the Snowden Endgame;

• Schrödinger's 😻 and outside-the-box naming;

2013-07-02

• Dependency Hell;

June

2013-06-26

• Devolution, predation, and the forum fathead phenomenon;

2013-06-25

• Why passwords have never been weaker -- and crackers have never been stronger;

• Password Security, Protection, and Management;

2013-06-23

• The Technical Interview Is Dead (And No One Should Mourn);

2013-06-20

• EDRi letter to the US Embassy on PRISM;

• US agencies have unlimited access to Internet data;

• Civil society letter to United States Congress on Internet and telecommunications surveillance;

• Results of the Debian systemd survey;

• Survey answers part 1: systemd has too many dependencies, or it is bloated, or it does too many things, or is too complex;

• Little things that matter in language design;

2013-06-19

• Cryptography is a science, not engineering;

• How they invented the term "Postdoctral Scholar";

2013-06-17

• More Wisdom from my 3 Year Old;

2013-06-07

• SQLAlchemy Migrated to Git;

2013-06-06

• Turkish demonstrations using social media despite censorship;

• Pondering the X client vulnerabilities;

• Disclosure timeline for vulnerabilities under active attack;

• Rebooting Responsible Disclosure: a focus on protecting end users;

• Content hosting for the modern web;

• HTTP cookies, or how not to design protocols;

• The Linus and Dirk show;

• ALS: Linux interprocess communication and kdbus;

2013-06-05

• Whatever happened to Google?;

• Hacking into the Indian Education System;

May

2013-05-31

• Empty symlinks and full POSIX compliance;

2013-05-25

• HTTP 0.2 (ie., HTTP 2.0 / 10);

2013-05-24

• How To Choose CD/DVD Archival Media;

• Blank DVD Media Quality Review;

2013-05-17

• (Nearly) full tickless operation in 3.10;

2013-05-16

• Transparency and Accountability;

• Intelligence Analysis and the Connect-the-Dots Metaphor;

• Refuse to be Terrorized;

• The Public / Private Surveillance Partnership;

• After Checking Your Bank Account, Remember To Log Out, Close The Web Browser, And Throw Your Computer Into The Ocean;

• Use These Secret NSA Google Search Tips to Become Your Own Spy Agency;

• Walt Disney World fingerprints visitors;

2013-05-09

• Code authenticity checking;

2013-05-07

• Stopping Telemarketers;

2013-05-01

• Viewpoint: Is gap year volunteering a bad thing?;

• Opera sues ex-employee for passing secrets to Mozilla;

• The world-changing libwww is 20 years old today;

April

2013-04-19

• The Web Is Dead. Long Live the Internet;

• Profit On-Demand;

• Analysis: Eric Schmidt says whole world will be online by 2020. Really?;

2013-04-17

• The node.js Community is Quietly Changing the Face of Open Source;

2013-04-16

• HTTP/2.0 is good news for CDNs and FEO;

2013-04-15

• The Trello Tech Stack;

• How Trello is different;

• Strategy Letter I: Ben and Jerry's vs. Amazon;

2013-04-12

• HTTP KeepAlive Considered Harmful;

• Routing Performance Update;

• Routing and Web Performance on Heroku: a FAQ;

• Three Latency Anomalies;

• Timelike: a network simulator;

• Timelike 2: everything fails all the time;

• Easily Parsed LIST Format;

• Design of Antiweb4;

• Framework Benchmarks;

• Why Sphinx and reStructuredText?;

• Did you call them autocrap tools?;

2013-04-11

• on open source development and disagreements;

• An HTTP reverse proxy for realtime;

• HTTP GRIP and the Proxy-and-Hold technique;

2013-04-10

• Today, we save the Internet (again): fix the CFAA!;

• Segregating services;

• Making applications scalable with Load Balancing;

2013-04-08

• Linked Data -- Design Issues;

• Metacrap: Putting the torch to seven straw-men of the meta-utopia;

• A new development era (essay);

2013-04-06

• Broken Promises;

• Callbacks are imperative, promises are functional: Node’s biggest missed opportunity;

• Some Thoughts on Asynchronous Programming;

2013-04-04

• Too big to fail;

2013-04-03

• (Tim Berners-Lee) Frequently asked questions;

• The World Wide Web: A very short personal history;

March

2013-03-30

• Who Killed Gopher? -- An Extensible Murder Mystery;

• Down the Gopher Hole;

• Why is Gopher Still Relevant?;

• Gopher: Underground Technology;

• the gopher:// manifesto;

• The WELL Gopher;

2013-03-29

• What's Going On;

• All Those Companies that Can't Afford Dedicated Security;

• Nationalism on the Internet;

• The Pull Request Hack;

• GooFS: a ridiculously simple filesystem for cloud instances;

• Linux Asynchronous I/O Explained;

2013-03-28

• Solving the wrong problem;

• When does the FSF own your code?;

• Connectors, controversy and the LGPL;

2013-03-26

• What is Object Oriented Programming: A Critical Approach;

• Authentication: Don’t be Clever;

2013-03-22

• SCALE: The life and times of the AGPL;

• The SO_REUSEPORT socket option;

• SCALE: The Hockeypuck key server;

• LC-Asia: Facebook contemplates ARM servers;

• 9th Circuit Appeals Court: 4th Amendment Applies At The Border; Also: Password Protected Files Shouldn't Arouse Suspicion;

2013-03-18

• States Seek Ban to Employers' Social-Media Snooping;

• Securing ZeroMQ: CurveCP and NaCl;

2013-03-16

• Oxford blocks Google Docs as a phishing countermeasure;

• Static site generators for building web sites;

2013-03-14

• The Boot Loader Specification;

2013-03-11

• McDipper: A key-value cache for Flash storage;

2013-03-10

• Building A Node.JS Server That Won’t Melt -- A Node.JS Holiday Season, part 5;

• Taming Configurations with node-convict – A Node.JS Holiday Season, part 7;

2013-03-07

• Hacking the Papal Election;

• Namespaces in operation, part 5: User namespaces;

2013-03-05

• A Tale of Two Standards;

2013-03-04

• Bypassing Google’s Two-Factor Authentication;

• Why functional code is shorter;

• Functional Programming in C++;

February

2013-02-28

• Why Use Make;

• FUCK PASSWORDS;

• Solving the Discovery Problem;

2013-02-27

• Don't Under-Think It: SQL vs NoSQL;

2013-02-25

• The Merit of AMQP (part I);

• Implementing Network Protocols in User Space;

• Why should I have written ZeroMQ in C, not C++ (part II);

2013-02-21

• FOSDEM: Richard Fontana on copyleft-next;

• GPLv3, Clarity and Simplicity;

• Password Cracking AES-256 DMGs and Epic Self-Pwnage;

• Why you shouldn’t use the OWASP Top 10 as a list of software security requirements;

2013-02-20

• Swamped by Automation;

• Systemd lightweight containers;

• Namespaces in operation, part 1: namespaces overview;

• Namespaces in operation, part 2: the namespaces API;

• Namespaces in operation, part 3: PID namespaces;

• Namespaces in operation, part 4: more on PID namespaces;

• On the Brokenness of File Locking;

• Addendum on the Brokenness of File Locking;

• On IDs;

• /tmp or not /tmp?;

• A Plumber's Wish List for Linux;

2013-02-07

• systemd -- The Biggest Myths;

January

2013-01-31

• Twitter’s New Transparency Report Shows Increase in Government Demands, Sheds Light on Copyright Takedowns;

• Aaron's Army;

2013-01-30

• Your LGPL license is completely destroying iOS adoption;

• How to make app stores open source-friendly;

2013-01-27

• Do you read hacker news?;

2013-01-26

• Why Am I So Upset About Aaron Swartz's Suicide?;

• Techno-McCarthyism and the death of Aaron Swartz;

• Prosecutor as bully;

• The Truth about Aaron Swartz’s “Crime”;

• RIP, Aaron Swartz;

2013-01-23

• A fresh look at JavaScript Mixins;

2013-01-22

• How your Conference Presentation Goes;

2013-01-19

• Divided by Division;

2013-01-15

• Terms of Service as a Security Threat;

• Rich Hickey on Datomic, Data Storage, Functional Programming and Immutability;

2013-01-13

• The Virtues of Monitoring, Redux;

• The Virtues of Monitoring;

• Eric Evans and Brian Foote discuss the state of Software Design;

• asynchronous disk I/O;

• How Erlang does scheduling;

2013-01-11

• The Unreasonable Effectiveness of C;

2013-01-09

• Patterns For Large-Scale JavaScript Application Architecture;

• Asynchronous Javascript -- the tale of Harry;

• The truth about Goobuntu: Google's in-house desktop Ubuntu Linux;

• Cloud app vs. web app: Understanding the differences;

2013-01-08

• Kickjumper -- Super Science Machine;

• Node core vs userland;

• Key backup for the paranoid;

• How Dropbox sacrifices user privacy for cost savings;

• Rewriting GitHub Pages with Riak and Webmachine;

• Measure Anything, Measure Everything;

• Counting & Timing;

• Are events fast?;

• CPC: programming with a massive number of lightweight threads;

• Continuation Passing for C: A space-efficient implementation of concurrency;

2013-01-07

• Programmers Don't Read Books -- But You Should;

• A rant about documentation;

• Building Secure Web Applications;

• Security -- Problem Solved?;

2013-01-05

• Rethinking Passwords;

• Lessons from 32 Million Passwords;

• Weapons of Mass Assignment;

2013-01-04

• Winning is the worst thing that can happen in Vegas;

• SQL is Agile;

• Solving bugs;

• Hackathons in the Classroom;

• Redis Crashes;

2013-01-03

• Erik Meijer discusses programming language design, effects and some web programming problems;

• Stefan Tilkov on REST and Hypermedia, ROCA, WebSockets vs. HTTP;

2012

December

2012-12-22

• GnuTLS, copyright assignment, and GNU project governance;

• The tragedy of GNU copyright assignments;

• Crowding out OpenBSD;

• libabc README;

• Versioned Symbols -- A New Level of Hell;

2012-12-21

• Code Abuse;

2012-12-20

• Feudal Security;

• Virtual machine used to steal crypto keys from other VM on same server;

2012-12-19

• Miles Sabin on Dependent Types with Scala, Shapeless, Scala Macros;

• Debasish Ghosh on Functional Programming, NoSQL;

• Ken Little on Scaling Tumblr;

• Max Sklar on Machine Learning at Foursquare;

2012-12-18

• The Cloud Is Not for You;

• Scaling Your Clouds;

• Heroku Isn't for Idiots;

2012-12-17

• Browser Security Case Study: Appearances Can Be Deceiving;

• Off-the-road-map: Data checksums;

• Smart or simple RAID recovery??;

• EC2 is 380% more expensive than internal cluster;

• Hyper+JSON: A First Draft;

• HyperJSON;

• SQLite: the Case against Custom Application File Formats;

• Highly Available Real Time Push Notifications and You;

• PaaS Is The Word;

2012-12-14

• More Code, More Problems;

2012-12-13

• Fight against Software Complexity;

November

2012-11-30

• Tor operator charged for child porn transmitted over his servers;

• German police raid home of man who operated Tor server;

• Tor madness reloaded;

2012-11-22

• The Web Won't Be Safe or Secure until We Break It;

• When Will our Email Betray Us? An Email Privacy Primer in Light of the Petraeus Saga;

• Surveillance and Security Lessons From the Petraeus Scandal;

2012-11-20

• LCE: The failure of operating systems and how we can fix it;

• There's No Such Thing As Software Productivity;

• My First Recommendation to New Scientific Coders: Learn Visualization;

• 10 reasons not to use Ruby;

• Go is PHP for the Backend;

2012-11-17

• All the crypto code you’ve ever written is probably broken;

• Encryption in Cloud Computing;

• The Risks of Trusting Experts;

• Stoking Cyber Fears;

• OOP Isn't a Fundamental Particle of Computing;

2012-11-15

• The Background Noise Was Louder than I Realized;

• Why Technical People Should Blog (But Don’t);

2012-11-10

• The little ssh that (sometimes) couldn't;

• Plan 9 mounts and dependency injection;

• Ode to the Teletype;

• To understand the command line...;

2012-11-08

• Why Google Went Offline Today and a Bit about How the Internet Works;

October

2012-10-28

• Esmerelda's Imagination;

• Less is exponentially more;

• Regular expressions in lexing and parsing;

• The byte order fallacy;

• Thank you Apple;

2012-10-24

• Dropbox dives into CoffeeScript;

• Popularity (about JavaScript);

• The World's Most Misunderstood Programming Language Has Become the World's Most Popular Programming Language;

• A Case Against Using CoffeeScript;

2012-10-23

• XML Fever;

• Don’t Invent XML Languages;

• On XML Language Design;

• Does Erlang/OTP need a new package management solution?;

• UBF and VM opcocde design;

• JSON protocols (part 1);

• Why I often implement things from scratch;

• Engineer-to-Engineer Talk: How and Why Twitter Uses Scala;

• A behind-the-scenes look at LinkedIn’s mobile engineering;

• Clearing up some things about LinkedIn mobile’s move from Rails to node.js;

2012-10-21

• Vegas Blues;

• Drowning Good Ideas with Bloat. The tale of pkg.m4;

2012-10-19

• TÂRGUL DE IDENTITĂȚI. Ce se întâmplă cu CNP-ul tău (I);

• JSON versus XML: Not as Simple as You Think;

2012-10-18

• Object-oriented design patterns in the kernel, part 1;

• Object-oriented design patterns in the kernel, part 2;

• The Signs of Trouble: On Patterns, Humbleness and Lisp;

• Rethinking Design Patterns;

• Are Design Patterns How Languages Evolve?;

• Head First Design Patterns;

• Things I wish I knew about MongoDB a year ago;

• MongoDB or How I learned to stop worrying and love SQL;

2012-10-17

• Go Go Gadget;

2012-10-16

• The impact of Google’s aging software infrastructure on App Engine;

• App Engine: Google's deepest secrets as a service;

2012-10-15

• Passwords in the wild, part I: the gap between theory and implementation;

• Passwords in the wild, part III: password standards for the Web;

• When Will We See Collisions for SHA-1?;

• Recent Developments in Password Cracking;

• What I Wrote Just Before the SHA-3 Announcement;

• Password cracking, part I: how much has cracking improved?;

• Password cracking, part II: when does password cracking matter?;

• Passwords Are Not Broken, but How We Choose them Sure Is;

• Choosing Secure Passwords;

• All about Website Password Policies;

2012-10-12

• The Degradation of Java Developers;

• Weathering the Unexpected;

2012-10-11

• NSQ: realtime distributed message processing at scale;

2012-10-07

• Incremental Research vs. Paradigm-Shift Mania;

• Please do not port software to Windows!;

September

2012-09-25

• I Am Worried About The Future Of Python;

• RE: Why I'm not leaving Python for Go;

2012-09-22

• On Leaving OAuth;

• On the Deadness of OAuth 2;

• Doing It Wrong;

• The TTY demystified;

• EINTR and PC loser-ing (The "Worse Is Better" case study);

• Why I Migrated Away From MongoDB;

• Downwardly Scalable Systems;

2012-09-21

• iPad + Linode, 1 Year Later;

• Web Sites with Embedded Command Lines: You got your Command Line in my Internet;

• UPDATE: New York Judge Tries to Silence Twitter in Its Ongoing Battle to Protect User Privacy;

• TextDrive, R.I.P.;

2012-09-17

• Stop Sending Dates as Strings in Your APIs;

2012-09-15

• The Importance of Security Engineering;

• Is iPhone Security Really this Good?;

• 3 Reasons to Kill the Internet Kill Switch Idea;

• SSSCA;

• Security at the 9/11 WTC Memorial;

• Do You Have a Photo ID, Young Man?;

• Coroutines vs explicitly async APIs;

2012-09-14

• Crack in Internet's foundation of trust allows HTTPS session hijacking;

• Disks from the Perspective of a File System;

• Let's Debate Coding Style;

2012-09-10

• "Twitter killed my business." An inside look at the ecosystem crackdown;

• The Seven Deadly Sins of Cloud Computing Research;

• O/R modelling interlude: PostgreSQL vs MySQL;

2012-09-04

• Poll Results: Erlang & Maintenance;

2012-09-01

• Don’t waste your time in crappy startup jobs;

• Frighteningly Ambitious Startup Ideas;

• Big Data Is Less About Size, And More About Freedom;

• NoSQL, Heroku, and You;

• NoSQL: The Dawn of Polyglot Persistence;

• Memcached, a Database?;

• Polyglot Programming: Flawed Dream?;

• i3 -- An Improved Tiling Window Manager;

August

2012-08-30

• Cloud hosting vs colocation;

• Rent or Own: Amazon EC2 vs. Colocation Comparison for Hadoop Clusters;

• Cloud Economics;

• How Cloud Computing Impacts the Cash Needs of Startups;

• Cloud Hype, An Amazon Web Services Post-Mortem;

• On Why I Don't Like Auto-Scaling in the Cloud;

• SkyNet Lives! (aka EC2 @ SmugMug);

• Basecamp, now with more vroom;

• Broken Builds;

• Coding Smart: People vs. Tools;

• Are functional languages inherently slow?;

• Reified Generics for Java;

• The Truth About Value Types;

• How I Became a REST "Convert";

• Divorcing SOA and Web Services;

• Startups: Bands for Hackers;

• Rethinking Programming Language Tutorials;

2012-08-29

• Advances and Challenges in Log Analysis;

• Reflections on Trusting Trust;

• My Compiler Does Not Understand Me;

• The Software Industry IS the Problem;

• The Most Expensive One-byte Mistake;

• The Hyperdimensional Tar Pit;

• A Plea to Software Vendors from Sysadmins - 10 Do's and Don'ts;

• Lessons from the Letter;

• The Game of Distributed Systems Programming. Which Level Are You?;

• Twitter Search is Now 3x Faster;

• The Engineering Behind Twitter’s New Search Experience;

• Introducing Gizzard, a framework for creating distributed datastores;

• Collecting Counters;

• Bound by the Speed of Light;

• Latency and Livelocks;

2012-08-28

• Designing robust web API;

• Agile is a Sham;

• Good Agile, Bad Agile;

• Let the Agile Fad Flow By;

• that "duct tape" silliness;

• Duct tape context: A tale of two rewrites;

• Big Macs vs. The Naked Chef;

• Just What We Need: Another RPC Package;

• Bloat;

• SpiderDuck: Twitter's Real-time URL Fetcher;

• Finagle: A Protocol-Agnostic RPC System;

2012-08-27

• The birth of LISP -- a summary of John McCarthy's original paper;

• Google CIO and others talk DevOps and "Disaster Porn" at Surge;

• How We Made GitHub Fast;

• Mongrel2 Sqlite3 Config System Working;

• What is DevOps?;

• Deployment management design patterns for DevOps;

• Where are the design patterns for software operations?;

2012-08-24

• You Can’t Sacrifice Partition Tolerance;

• Clarifications on the CAP Theorem and Data-Related Errors;

• Some things I've learned about memory;

• Platform of the future;

• Why not Haskell?;

• Quoting;

• The end (about Chrome);

• Sabbatical;

• Unix -- A story with a moral (about editors);

2012-08-23

• Storing Passwords Securely;

• (Coda Hale on Scala);

• The Rest Of The Story;

• One way to fix your rubbish password database;

• Password Strength;

2012-08-22

• Why JSON will continue to push XML out of the picture;

2012-08-21

• A Generation Lost in the Bazaar;

• Panel: PaaS - Present and Future;

2012-08-20

• Can open source be democratic?;

• The Rise and Fall of CORBA;

• Building high-throughput data pipelines with Google App Engine;

2012-08-19

• Can More Code Mean Fewer Bugs?;

• Cybercrime 2.0: When the Cloud Turns Dark;

• STL Hackathon Canceled After Social Backlash;

2012-08-15

• Yes, I was hacked. Hard.;

• Tech journalists: Stop hyping unproven security tools;

• POSIX v. reality: A position on O_PONIES;

• Soft updates, hard problems;

2012-08-14

• What was wrong with ZeroMQ (and how we fixed it);

2012-08-13

• Getting 2.5 Megalines of code to behave -- On Curiosity and its software;

2012-08-10

• Why does the IT industry continue to listen to Gartner?;

• Attack of the Cosmic Rays!;

2012-08-09

• TCP Fast Open: expediting web services;

2012-08-08

• Rubber Duck Debugging;

2012-08-04

• Reinvent The Wheel!;

• A lesson in shortcuts;

2012-08-03

• Announcing an audacious proposal;

• Dear Mark Zuckerberg;

• Hot Dogs & Caviar;

• Critical mass vs network effects;

• Fred Wilson is wrong about "Free";

• What Twitter could have been;

• The Case vs Ad-Supported Platforms;

• In Defense Of Free;

• Careful, Twitter -- remember what happened to MySpace and Digg;

• The $8 Billion Elephant in the Room: How to Understand the Future of Twitter;

July

2012-07-31

• HTTP2 Expression of Interest (Facebook's response);

• HTTP2 Expression of Interest: Squid;

• Fwd: HTTP2 Expression of Interest [twitter];

2012-07-30

• HTTP/2 Expression of luke-warm interest: Varnish;

2012-07-29

• The Difference Between Good And Good Enough;

• The Power of Technical Debt;

• Why I Don't Use Autocomplete;

• To Comment Or Not To Comment -- A Tale Of Two Stories;

• DAOs and MySQL -- A Response;

2012-07-28

• Framework Fixation -- An Anti Pattern;

2012-07-27

• Are functional languages inherently slow?;

• Why CLISP is under GPL;

• Why Society Doesn’t Change: The System Justification Bias;

2012-07-26

• Functional programming is a ghetto;

• OAuth 2.0 and the Road to Hell;

• WRAP, and the Demise of the OAuth Community;

• Go at SoundCloud;

2012-07-25

• Is it reasonable to write new code in Perl right now?;

2012-07-19

• EU Proposes To Provide Open Access To The Results Of Research It Funds;

2012-07-18

• An Open Letter to JavaScript Leaders Regarding Semicolons;

2012-07-17

• So You Want to Be a Security Expert;

• Rand Paul Takes on the TSA;

2012-07-16

• Kogan introduces Internet Explorer 7 'tax';

2012-07-14

• Concurrent Maps;

2012-07-13

• Keep it Simple...;

• XML Matters: Intro to PYX;

• Introducing MicroXML, Part 1: Explore the basic principles of MicroXML;

• Introducing MicroXML, Part 2: Process MicroXML with MicroLark;

• Pyxie;

2012-07-11

• Levels of aspiration;

• Cloud APIs – Is Amazon the de Facto Standard?;

• Caching with Twemcache;

• Scaling memcached at Facebook;

2012-07-10

• The role of DNS and DNSSEC in information security;

• DNSSEC-bis for complete beginners (like me);

• On SRP - some implementation notes and a critical review;

• OpenFlow: A Radical New Idea in Networking;

• The perfect error message;

2012-07-09

• LinkedIn Password Leak: Salt Their Hide;

• Md5crypt Password scrambler is no longer considered safe by author;

2012-07-07

• Let's Destroy Flash Together;

2012-07-05

• More than you may want to know about BIOSes and partitioning;

2012-07-03

• Overengineering and Overadoption;

June

2012-06-30

• Why Files Exist;

• I’m Done Developing for Twitter;

2012-06-28

• Coders' Rights At Risk in the European Parliament;

• Defending Privacy at the Israeli Border: Information for Travelers Carrying Digital Devices;

• ‘Do you feel more Arab or more American?’: Two women’s story of being detained and interrogated at Ben Gurion;

2012-06-26

• Cool URIs don't change;

2012-06-23

• There is No Risk;

• CQRS;

• CQRS, Task Based UIs, Event Sourcing agh!;

• Clarified CQRS;

2012-06-21

• Biometric National IDs and Passports: A False Sense of Security;

• "Hacking" Strikes Fear in the Heart of Texas Bureau of Prisons;

2012-06-19

• Why Should I Care What Color the Bikeshed Is?;

2012-06-18

• How Companies Can Beef Up Password Security;

2012-06-17

• Applications vs. Platforms;

• Good Error Recovery is Hard, So Use PostgreSQL;

• Linux OOM Killer;

• Re: Unchecked malloc()s in libjack/thread.c and libjack/intclient.c;

• Your Coding Philosophies are Irrelevant;

• Don't Fall in Love With Your Technology;

• Micro-Build Systems and the Death of a Prominent DSL;

• Recovering From a Computer Science Education;

2012-06-16

• Google Begins Behavioral Targeting Ad Program;

2012-06-15

• How to GET a Cup of Coffee;

• Starbucks Does Not Use Two-Phase Commit;

• DDD -- Diagram Driven Design;

• UML Mode;

• UML: The Positive Spin;

• PowerPoint Is Evil;

• The Trouble with Airport Profiling;

2012-06-14

• Hackers Need Our Own Everything;

• In Praise of Idleness;

2012-06-11

• Colorful metaphors and properly reusing functions;

• A System is not a Product;

2012-06-06

• Enforcing the GPL – Kernel hackers join the fight;

2012-06-04

• Marten Mickos: The LAMP stack is dead, and cloud has killed it;

2012-06-01

• Exec and Tail-call Optimization;

May

2012-05-31

• A Case For Standardizing Password Security;

• How Heroku Works -- Teams and Tools;

• How Heroku Works -- Maker's Day;

• How Heroku Works -- Hiring;

2012-05-30

• 20 lines of code that will beat A/B testing every time;

2012-05-29

• Logout before you burnout;

2012-05-28

• False cognates and syntax;

2012-05-25

• Battle.net authentication misconceptions;

2012-05-23

• Engineering Infrastructures for Humans;

2012-05-17

• Vert.x: Why the JVM May Put Node.js on the Ropes;

2012-05-15

• The Twelve-Factor App;

• Logs Are Streams, Not Files;

• Polyglot Platform;

2012-05-14

• Why should I have written ZeroMQ in C, not C++;

• Python Deployment Anti-Patterns;

• Python Application Deployment with Native Packages;

• git-based fabric deploys are awesome;

• The Hidden Cost of Outsourcing Software: Software Intelligence;

2012-05-04

• TPB gets censored in the UK;

2012-05-02

• Phd Comics: Existential Deconstruction;

April

2012-04-25

• History of the browser user-agent string;

2012-04-21

• An old OS idea is new again: non-installation;

2012-04-20

• Phd Comics: Academic Homepage;

March

2012-03-30

• Managing Technical Debt;

• Technical Debt Quadrant;

• Cannot Measure Productivity;

• Your Mouse is a Database;

• Inside the ToyBox: An interview with Rob Landley;

• Goodbye Google App Engine (GAE);

• HTTP cookies, or how not to design protocols;

2012-03-24

• Another Git branching model;

• Analysis of Git and Mercurial;

• NoSQL Data Modeling Techniques;

2012-03-16

• Security in Plan 9;

2012-03-13

• iPad is the new IE6;

2012-03-07

• How Patents Hinder Innovation;

2012-03-01

• Scale Failure;

February

2012-02-29

• An Open Letter to Chris Dodd;

2012-02-23

• Welcome to DuctTape!;

2012-02-09

• What Actually Changed in Google’s Privacy Policy;

• Not Piracy;

2012-02-07

• Building a Modern Web Stack for the Real-time Web;

• Protocol Buffers, Avro, Thrift & MessagePack;

• A Git Workflow for Agile Teams;

2012-02-06

• Google: MoreSQL is Real;

• How I got massively faster DB with async batching;

2012-02-05

• RObotzi.S02.Ep.Special.ACTA;

• 3lăr ACTA;

• Schlep Blindness;

2012-02-04

• Node.js isn't a silver bullet, but it's still a bullet.;

• If you're using Node.js, you're doing life wrong;

• LEGOs, Play-Doh, and Programming;

• Python Is Not Java;

2012-02-03

• Why CouchDB?;

2012-02-01

• Learning from Clouds Past: A Look Back at Magellan;

January

2012-01-30

• January 2012 -- State of the Servers;

2012-01-29

• My thoughts on S.O.P.A.;

2012-01-24

• Economics of Messaging Software;

2012-01-22

• An Easy But Serious Screensaver Security Problem In X.Org;

2012-01-21

• ECMAScript5 Strict Mode;

2012-01-19

• INTERNETS, 18th of January 2012, PRESS RELEASE;

• Amazon DynamoDB – a Fast and Scalable NoSQL Database Service Designed for Internet Scale Applications;

2012-01-14

• A few observations about systemd;

• [Lennart Poettering] Re: A few observations about systemd;

• The systemd fallacy;

2012-01-10

• Kilim: Fast, lightweight, cheap message passing in Java;

• Add Honest Achmed's root certificate;

2012-01-07

• TCP incast: What is it? How can it affect Erlang applications?;

2011

December

2011-12-31

• The Joel on Software Discussion Group;

• I hate almost all software;

• The Law of Leaky Abstractions;

• LMAX - How to Do 100K TPS at Less than 1ms Latency;

• The LMAX Architecture;

• Single Writer Principle;

• bup: Git for backups;

• Quotes from the Nato Software Engineering Conference in 1968;

2011-12-29

• Why Mechanical Sympathy?;

• YOW! 2011: Steve Vinoski - Riak Core, Erlang and Frisbee Freestyle;

2011-12-20

• Everything Is PaaSible;

2011-12-13

• Disruptor: High performance alternative to bounded queues for exchanging data between concurrent threads;

• A Retrospective on SEDA;

• Is it Raining Comets and Threads… Again?;

• Writing Java Multithreaded Servers -- whats old is new;

2011-12-09

• BufferBloat: What's Wrong with the Internet?;

2011-12-07

• journald and rsyslog;

• What I don't like about journald / Linux Journal;

• journald log hash chaining is broken;

2011-12-06

• A successful Git branching model;

2011-12-02

• The Case Against Queues;

• Monitoring Theory;

• Straight Talk on Event Loops;

• Amazon -- The Purpose of Pain;

2011-12-01

• Bell Labs and CSP Threads;

• Gofmt;

• Lessons from the Debian/OpenSSL Fiasco;

• Visualizing TCP;

• Successful Strategies for Commenting Code;

November

2011-11-30

• Gobs of data;

• The Laws of Reflection;

2011-11-24

• Stevey's Google Platforms Rant;

• Waving Goodbye;

• Leaving Google - part 2;

• Amazon EC2 outage: summary and lessons learned;

• Background to AMQP;

• 10 Principles for AMQP;

• The Other Side of Red Hat: Pieter Hintjens on AMQP and Patents;

• AMQP Lulz;

2011-11-23

• Is Google losing it?;

• Over time, Linux package dependencies show predator/prey relationship;

2011-11-18

• gyp -- RE: [webkit-dev] CMake as a build system?;

2011-11-17

• Using Gossip Protocols for Failure Detection, Monitoring, Messaging and Other Good Things;

• List of Known Scalable Architecture Templates;

2011-11-14

• Unit testing in Coders at Work;

• On Duct Tape;

• The Duct Tape Programmer;

• RE: The Duct Tape Programmer;

• Sudoku in Coders At work;

• TDD Is Not An Algorithm Generator!;

2011-11-12

• ØMQ: Mission Accomplished;

2011-11-09

• Don't use MongoDB;

2011-11-06

• Mike Williams on the History of Erlang, Modeling and Large Scale Design;

• Multi-Platform Messaging with RabbitMQ;

2011-11-05

• Premature optimization is the root of all evil;

2011-11-03

• libabc -- README;

2011-11-02

• ECMA-262-3 in detail -- Chapter 7.1 -- OOP: The general theory;

2011-11-01

• The #! magic, details about the shebang/hash-bang mechanism on various Unix flavours;

October

2011-10-31

• Riak SmartMachine Benchmark: The Technical Details;

• Riak and Cassandra and HBase, oh my!;

• Measuring messaging performance;

• Cheap and Nasty, two essential patterns;

• MOPED - a Message-Oriented Pattern for Elastic Design;

• A Tale of Two Bridges;

2011-10-26

• Programming Language Checklist;

2011-10-25

• John McCarthy -- Father of AI and Lisp -- Dies at 84;

2011-10-24

• Dart: An Erlanger’s Reflections;

2011-10-21

• On commit messages;

• Is Node.js a cancer? No!! It's quite nice, really;

2011-10-18

• Cell Phone Guide for Occupy Wall Street Protesters (and Everyone Else);

• Occupy Wall Street Marks One Month;

2011-10-17

• xkcd: Standards;

2011-10-12

• LPC: Booting and systemd;

• Systems Security: A Primer;

September

2011-09-29

• ØMQ: The Theoretical Foundation;

2011-09-27

• Node.js vs Erlang is the wrong battle;

• Routing Topologies for Performance and Scalability with RabbitMQ;

2011-09-26

• Are You Talking to Me?;

2011-09-20

• Justin Sheehy and Damien Katz on Riak and CouchDB;

2011-09-18

• Node and Scaling in the Small vs Scaling in the Large;

• Solving The Hacker News Problem;

2011-09-16

• Calling Go from Python via JSON-RPC;

• More on Remote Procedure Calls;

• Node.js: Asynchronous I/O for Fun and Profit;

• Get on D-BUS;

2011-09-15

• Threaded JavaScript: it works!;

• RingoJS vs. Node.js: Runtime Values;

2011-09-14

• WebSockets: The Web Communication Revolution;

2011-09-08

• The Problem with Cloud-Computing Standardization;

2011-09-07

• RINA: redefining the network fundamentals;

• Is PaaS Passe yet?;

August

2011-08-29

• Speed Limit of PaaS – 64K TCP Ports;

2011-08-16

• So sue me: are lawyers really the key to computer security?;

• Dropbox Left User Accounts Unlocked for 4 Hours Sunday;

• Deep packet inspection used to stop censorship in new "Telex" scheme;

2011-08-15

• Opinion: Is It Time to Replace SMTP?;

2011-08-13

• Does Visual Studio Rot the Mind?;

• The Go Programming Language, or: Why all C-like languages except one suck;

• The Wrong Cloud?;

2011-08-10

• A True Conversational Web;

July

2011-07-27

• The Trouble with Erlang (or Erlang is a ghetto);

• The cutting edge of VM design;

2011-07-26

• An interview with Lennart Poettering;

2011-07-22

• Cleaning up your storage space quickly and efficiently;

2011-07-14

• unREST;

June

2011-06-28

• Of Penguins, Rabbits and Buses;

• Do we still need the FSF, GNU and GPL?;

2011-06-01

• Time for Amazon to pay its dues to open source?;

• How to choose a license for your own work;

May

2011-05-25

• Depixelizing Pixel Art: Upscaling Retro 8-bit Games;

2011-05-13

• IBM doesn't care about node.js people;

2011-05-08

• Execution in the Kingdom of Nouns;

• Life of an App Engine Request;

2011-05-07

• The Grant Cycle;

• The Ephemeral Ports Problem (and solution);

April

2011-04-25

• Video Slideshow, Introducing Webmachine;

2011-04-24

• Java PaaS shootout;

2011-04-23

• Is Cloud Computing As We Know it Broken?;

• Why IO Matters in the Cloud;

2011-04-22

• Amazon EC2 outage calls 'availability zones' into question;

2011-04-10

• Improving SSL certificate security;

March

2011-03-30

• Introducing /run;

• Separate /usr is broken;

• Meet the Goliath of Ruby Application Servers;

2011-03-26

• The Recent RA Compromise;

• Report of incident on 15-MAR-2011;

2011-03-22

• When the Internet Nearly Fractured, and How It Could Happen Again;

2011-03-20

• PyCon 2011: Advanced Network Architectures With ZeroMQ;

2011-03-18

• B.Y.O.C. (1,342 Times and Counting);

2011-03-17

• Cell phones are 'Stalin's dream,' says free software movement founder;

February

2011-02-21

• Structured Streams: a New Transport Abstraction;

2011-02-17

• Beyond init: systemd;

2011-02-14

• C500k in Action at Urban Airship;

2011-02-13

• Developing RESTful Web Services with Webmachine;

2011-02-04

• How to Design a Good API & Why it Matters;

• Webmail for Millions, Powered by Erlang;

2011-02-03

• Microsoft’s Bing uses Google search results -- and denies it;

• Setting the record straight;

• False Boundaries and Arbitrary Code Execution;

• The Road we didn't go down;

• RPC Under Fire;

2011-02-01

• How to Commit to a Goal;

January

2011-01-29

• NoSQL at Twitter;

2011-01-18

• A Guide to Branching in Mercurial;

2011-01-13

• Memo: ‘Gawker tech team didn’t adequately secure our platform’;

2011-01-09

• A continuous build system for Erlang;

• Build Process Integration;

2011-01-08

• Deep inside Node.js with Ryan Dahl;

• High Performance Websites in the Cloud;

2011-01-04

• What is Traitorware?;

2011-01-03

• Kresten Krab Thorup Discusses Programming Languages, Concurrency and Integration;

• Juergen Hoeller on the Past and Future of Spring;

• Josh Bloch on Java and Programming;

2011-01-02

• Products For People Who Make Products For People;

• The Long Beard's Revenge;

• If Web 1.0’s Kryptonite Was the Bust, Web 2.0 Kryptonite Was the Grind;

2011-01-01

• Why I Don't Use Tor;

2010

December

2010-12-31

• What’s Next for jclouds?;

• Mariano Guerra on the Efene and Erlang VM as Language Platform;

• Scala, Erlang, F# Creators Discuss Functional Languages;

• Scott Chacon on Git and GitHub;

• Rich Hickey on Protocols and Clojure 1.3;

• Realism in UI Design;

2010-12-27

• Hiding in Plain Sight: The Rise of Amazon Web Services;

2010-12-26

• Ovrimos SQL Server;

2010-12-25

• Bavaria Booms, but Germans Feel Economic Malaise;

2010-12-24

• Re: [RFC] Convert builin-mailinfo.c to use The Better String Library;

• C++ Compilation Speed;

2010-12-22

• WikiLeaks website pulled by Amazon after US political pressure;

• Google's ChromeOS means losing control of data, warns GNU founder Richard Stallman;

• Lessons from WikiLeaks: decentralize, decentralize, decentralize;

• Interview: Eben Moglen - Freedom vs. The Cloud Log;

2010-12-17

• Amazon and WikiLeaks - Online Speech is Only as Strong as the Weakest Intermediary;

• Software Monoculture;

• Full Body Scanners: What's Next?;

• Airline Security: A Waste of Money and Time;

2010-12-16

• The Ext4 Linux file system;

2010-12-15

• Resigned from EC;

2010-12-09

• The Illusion of Truth;

2010-12-08

• Phd Comics: So wrong;

2010-12-07

• Collaboration in System Administration;

2010-12-04

• Wikileaks -- News and Background;

• Common Sense and Security: Body Scanners, Accountability, and $2.4 Billion Worth of Security Theater;

• "Do Not Track" Explained;

November

2010-11-23

• An Introduction to Logsurfer;

2010-11-21

• Plan 9 –- an Integrated Approach to Grid Computing;

2010-11-20

• Linux's answer to MS-PPTP;

• Joyent & Node;

• JSON protocols (part 1);

• Designing Plan 9 -- Bell Labs' Plan 9 research project looks to tomorrow;

2010-11-16

• Changing Passwords;

• The Security of Modern Password Expiration: An Algorithmic Framework and Empirical Analysis;

2010-11-09

• Where data goes when it dies and other musings;

• The Tao of Backup;

2010-11-04

• ZeroMQ an introduction;

2010-11-01

• Maintaining Files on Plan 9 with Mk;

• When App Engine went wrong;

October

2010-10-30

• RAID5 versus RAID10 (or even RAID3 or RAID4);

2010-10-28

• Technical Issues of Separation in Function Cells and Value Cells;

• An Advanced Syntax-Rules Primer for the Mildly Insane;

• Let Over Lambda -- 50 Years of Lisp (Chapter 3);

2010-10-27

• Sir, Please Step Away from the ASR-33!;

• Gardening Tips;

• The Case Against Data Lock-in;

2010-10-24

• Objects have not failed;

• Let Over Lambda -- 50 Years of Lisp (Chapter 1);

• Let Over Lambda -- 50 Years of Lisp (Chapter 2);

• Eight Epic Failures of Regulating Cryptography;

• The way GitHub helped Erlang and the way Erlang helped Github;

• Joe Armstrong and Simon Peyton Jones discuss Erlang and Haskell;

• Stop using Ajax!;

2010-10-23

• Steve Vinoski on Erlang and Rest;

• Lean Lessons Learned: Our Experiences Moving to Kanban;

2010-10-19

• Modeling Concurrency with Actors in Java -- Lessons Learned from Erjang;

2010-10-18

• Building a distributed concurrent queue with Apache ZooKeeper;

2010-10-17

• Wiretapping the Internet;

• Stuxnet;

2010-10-14

• Counting stuff is really hard;

• SOA and Newton's Universe;

2010-10-09

• BigTable Model with Cassandra and HBase;

2010-10-02

• Government Seeks Back Door Into All Our Communications;

• U.S. seeks to expand Internet wiretapping;

2010-10-01

• Boost network performance with libevent and libev;

September

2010-09-17

• Privacy Policy Update – October 3, 2010;

• Bruce Schneier at EWI Cybersecurity Summit 2010;

• Consumerization and Corporate IT Security;

• I Am Detained By The Feds For Not Answering Questions;

• 10 Brief Responses To 700 Comments About Refusing To Answer Questions At Passport Control;

• Compromising Twitter's OAuth security system;

• Clojure and concurrency;

2010-09-14

• Web Design is 95% Typography;

• Reactions to 95% Typography;

2010-09-13

• The Evolution of Web Fonts;

2010-09-11

• The Scourge of Arial;

• ACLU Challenges Laptop Searches and Seizures at the Border;

• Hello! Students Have a Right to Keep Cell Information Private;

• Overview to the OSS-QM project;

2010-09-03

• Is Scheme Faster than C?;

• Joe Hellerstein on cloud programming;

August

2010-08-31

• Why is Gopher Still Relevant?;

2010-08-22

• EFF to Verizon: Etisalat Certificate Authority Threatens Web Security;

• Mnesia A Distributed Robust DBMS for Telecommunications Applications;

2010-08-19

• BIFURCAŢII. Cum stăm;

• WPA2 vulnerability found;

• On a New Road;

• My Thoughts on Oracle v Google;

• Learning FC++: The C++ functional programming library;

2010-08-12

• Network Tuning and Performance Guide (OpenBSD);

• Racket vs. Clojure;

2010-08-11

• PHD Comics: The Repulsor Field Explained;

2010-08-08

• Metaclass programming in Python, Part 3;

July

2010-07-30

• Going fast with DWM;

2010-07-10

• EFF Celebrates 20th Anniversary With New Animation by Nina Paley;

2010-07-08

• You're Doing It Wrong;

• GNU HURD: Altered visions and lost promise;

• Democracy is sick in the US, government monitors your Internet;

2010-07-02

• Popular Cryptography Magazine;

2010-07-01

• Dan Ingalls on the History of Smalltalk and the Lively Kernel;

• Aaron Quint on the State of Javascript;

• Integrity Under Attack: The State of Scholarly Publishing;

• What Matters in an Asynchronous Job Queue;

• Jt -- Java Pattern Oriented Framework;

• Security guide to customs-proofing your laptop;

June

2010-06-30

• PHD Comics: Call for Papers!;

2010-06-24

• The Joy of Programming;

• Seven Lessons on Scalability from Reddit;

2010-06-23

• Gathering statistics is important, but so is making them available to others;

2010-06-02

• Dependency-based & Event-based init daemons and launchd;

May

2010-05-27

• What is wrong with AMQP (and how to fix it);

• Necessary Changes In AMQP;

• How To Build Utterly Reliable Systems;

• Introduction to RestMS;

• XML Watch: Bird's-eye BEEP;

• XML Watch: Worm's-eye BEEP;

2010-05-24

• Stuart Halloway on Clojure and Functional Programming;

• Patterns for Cloud Computing;

• Treb Ryan on Cloud Computing and OpSource;

2010-05-19

• How to Become Linus Torvalds;

2010-05-16

• RabbitMQ: An Open Source Messaging Broker That Just Works;

2010-05-15

• Worst-Case Thinking;

• apache.org incident report for 04/09/2010;

2010-05-13

• Overspecialization can be the kiss of death for sysadmins;

2010-05-07

• Ceph: A Linux petabyte-scale distributed file system;

2010-05-06

• Firefox and the open web;

2010-05-04

• Dynamo: Amazon’s Highly Available Key-value Store;

• Eventually Consistent -- Revisited;

• Eventually Consistent;

• PHD Comics: Sentences;

• Teaching Programming Languages in a Post-Linnaean Age;

2010-05-01

• Bittorrent over Tor isn't a good idea;

April

2010-04-29

• riak -- Control your data, don't let it control you;

• Everyday mongoDB -- Open-source, high-performance, schema-free, document-oriented database;

• Tin -- A database engine so tiny, its name had to be shortened;

2010-04-28

• Ceph: The Distributed File System Creature from the Object Lagoon;

• NoSQL Ecosystem;

• SQL Databases Don't Scale;

• NoSQL in the Enterprise;

• Is dump really deprecated?;

2010-04-24

• Getting Things Done -- The Art of Stress-Free Productivity;

2010-04-23

• Review: Getting Things Done;

• Getting Things Done Guru David Allen and His Cult of Hyperefficiency;

• Five things I hate about corporate IT;

2010-04-21

• HBase vs Cassandra: why we moved;

2010-04-18

• PHD Comics: Two cents on the dollar;

2010-04-06

• Web Security Trust Models;

• Why NoSQL is bad for startups;

March

2010-03-31

• Three Levels of the REST Maturity Model;

• Act Three: The Maturity Heuristic;

• Do we need WADL?;

2010-03-27

• New Research Suggests That Governments May Fake SSL Certificates;

• Software Development Has Stalled;

• Programming in the Mid-Future;

2010-03-24

• PHD Comics: Interdisciplinary Madness!;

• Free software's second era: The rise and fall of MySQL;

2010-03-07

• Why I (now) hate Apple;

• Git Gaines Advantage over Subversion;

• POSIX IO Must Die!;

2010-03-06

• A geek's will;

• Python vs. Ruby: A Battle to The Death;

2010-03-05

• The Duct Tape Programmer;

• Scheming is Believing;

• A Web OS? Are You Dense?;

• Versioned Symbols -- A New Level of Hell;

• Static Linking Considered Harmful;

2010-03-03

• .desktop files and security;

• How to write a Linux virus in 5 easy steps;

February

2010-02-24

• Sendmail Meets Erlang: Experiences Using Erlang for Email Applications;

2010-02-21

• The Inferno Shell;

2010-02-15

• A Descent into Limbo;

• The design of the Inferno virtual machine;

2010-02-14

• Plan 9 From Bell Labs;

• UTF-8 history;

• Some Notes on the "Who wrote Linux" Kerfuffle;

• Ken Brown's Motivation;

2010-02-13

• The Six Dumbest Ideas in Computer Security;

• Personal observations on the reliability of the Shuttle, by R.P. Feynman;

• artificial ignorance: how-to guide;

2010-02-12

• GoogleSharing: A way to prevent tracking by Google;

2010-02-10

• A Primer on Information Theory and Privacy;

• What Information is "Personally Identifiable"?;

• Linux Job Scheduling;

2010-02-09

• Here comes the new cell phone etiquette;

2010-02-07

• Python Web Server Gateway Interface v1.0;

2010-02-06

• Understanding FastCGI Application Performance;

• WSGI Explorations in Python;

2010-02-05

• FastCGI, SCGI, and Apache: Background and Future;

January

2010-01-28

• Principles for Standardized REST Authentication;

2010-01-25

• Unix Pipe As Functional Language;

• Slackware Linux -- Less is more;

2010-01-24

• The Xcpu Cluster Management Framework;

• XGet: A Highly Scalable and Efficient File Transfer Tool for Clusters;

• The Use of Name Spaces in Plan 9;

• A Unified Execution Model for Cloud Computing;

• KvmFS: Virtual Machine Partitioning For Clusters and Grids;

2010-01-23

• Why I (A/L)GPL;

• Programmers Need To Learn Statistics Or I Will Kill Them All;

• A Case for Erlang;

2010-01-22

• The insecurity of OpenBSD;

2010-01-17

• SELinux and grsecurity: A Case Study Comparing Linux Security Kernel Enhancements;

2010-01-16

• Stop the autoconf insanity! Why we need a new build system;

• What’s Wrong With GNU make?;

• Dependency Management -- The irony of Make;

• How We Made GitHub Fast;

• Introducing BERT and BERT-RPC;

• Getting Erlang to talk to the outside world;

• Interview: Arch Linux Team;

• Arch Linux makes Linux fun to use again;

• I am not clueless -- or -- Myths and misconceptions about the design of GoboLinux;

2010-01-15

• What is Wrong with Make?;

• Make alternatives;

2010-01-07

• Virtual Linux;

• Anatomy of the libvirt virtualization library;

2009

December

2009-12-31

• Problems with Hash Tables;

2009-12-19

• Insurgents Hack U.S. Drones;

2009-12-18

• Recursive Make Considered Harmful;

• Inside the Linux 2.6 Completely Fair Scheduler;

2009-12-15

• Standards are Great, but Standardisation is a Really Bad Idea;

2009-12-14

• First look at FreeBSD 8.0;

2009-12-12

• A Whirlwind Tutorial on Creating Really Teensy ELF Executables for Linux;

2009-12-06

• GoboLinux: An Interview with Lucas Villa Real;

2009-12-02

• The Antidesktop;

November

2009-11-25

• S.F. cops may have gone too far in seizing DJ gear at underground parties;

2009-11-24

• Just Say No To Proprietary Cryptographic Algorithms;

2009-11-20

• How to protect yourself from RAID-related Unrecoverable Read Errors (UREs);

• Why RAID 5 stops working in 2009;

October

2009-10-27

• bashreduce: A Bare-Bones MapReduce;

2009-10-24

• Europe backs down on piracy plans;

2009-10-18

• A Stick Figure Guide to the Advanced Encryption Standard (AES);

September

2009-09-23

• File Deletion;

2009-09-18

• Reduce Linux power consumption, Part 1: The CPUfreq subsystem;

August

2009-08-23

• Tech giants unite against Google;

2009-08-22

• A fresh look at OOP with concurrent objects;

• scripting daemons through pipes; e.g.: newsreader in sh? (yes!);

• OO Scheme;

2009-08-21

• 10 ways to stay sane in your cubicle;

2009-08-20

• Lisping at JPL;

• Why? Language Archaeology... and Metaprogramming;

2009-08-19

• CRUD is bad for REST;

• I finally get REST. Wow.;

• Caring About Programming Languages;

• Microsoft is Dead;

2009-08-16

• Building in Surveillance;

• Privacy Salience and Social Networking Sites;

• Laptop Security while Crossing Borders;

• Self-Enforcing Protocols;

• When Security Gets in the Way;

• Secure Passwords Keep You Safer;

2009-08-15

• You Deleted Your Cookies? Think Again;

2009-08-06

• Choosing the right Linux File System Layout using a Top-Bottom Process;

2009-08-04

• A smarter CLI -- Innovation by Simplicity;

2009-08-03

• Joel on Software -- Exceptions;

• Exceptions vs. status returns;

• Exception Handling: A False Sense of Security;

• Exceptional Situations In Lisp;

2009-08-02

• Exceptional Java;

• The Trouble with Checked Exceptions;

• Does Java need Checked Exceptions?;

• Java's checked exceptions were a mistake (and here's what I would like to do about it);

• How Exceptions Came to be Classes;

July

2009-07-31

• Make the most of large drives with GPT and Linux;

2009-07-26

• Linux Boot Scripts;

2009-07-04

• The Diceware Passphrase Home Page;

• The Diceware Passphrase FAQ;

• KeyLength;

June

2009-06-23

• Erlang Doesn’t Fit The JVM;

2009-06-17

• Dr. Alan Kay on the Meaning of "Object-Oriented Programming";

2009-06-16

• Schneier on Security -- Cloud Computing;

• Dear Mr. Schneier, If Cloud Is Nothing New, Why Are You Talking So Much About It?;

May

2009-05-31

• The speed, size and dependability of programming languages;

2009-05-29

• Linux: Lean, clean, and green;

April

2009-04-25

• The No. 1 Reason to Move to Open Source is to IMPROVE Security;

2009-04-20

• Spam 'produces 17m tons of CO2';

2009-04-18

• Recreating the button;

• Court jails Pirate Bay founders;

2009-04-10

• ~tuomov/b/ -- Defection? Part 2: Linux;

• ~tuomov/b/ -- Unbelievable crap!;

2009-04-07

• Moldova's Twitter Revolution;

• Protests in Moldova Explode, With Help of Twitter;

• Transaction strategies: Models and strategies overview;

2009-04-06

• Google is just an amoral menace;

2009-04-01

• The Open Company -- Running your business as if it were an Open Source Project;

March

2009-03-28

• 7 Myths of Service-Oriented Architecture;

• SOA is Dead; Long Live Services;

2009-03-25

• Tim Bray on the Future of the Web;

2009-03-21

• The Positive Legacy of C++ and Java;

2009-03-14

• 10 tech mistakes small businesses make;

2009-03-08

• Cloud computing versus grid computing;

2009-03-03

• Jaunty Jackalope: Where's the Beef? (PC World);

February

2009-02-26

• Write A Template Compiler For Erlang;

2009-02-24

• How not to sell Linux products;

2009-02-20

• Anatomy of ext4;

2009-02-15

• Is the Relational Database Doomed?;

• Probability lessons may teach children how to weigh life’s odds and be winners;

• Interview with an Adware Author;

• It’s Me, and Here’s My Proof: Why Identity and Authentication Must Remain Distinct;

January

2009-01-03

• Understanding Syntactic Macros;

2009-01-19

• Set up virtual machines with extra caution;

2009-01-16

• RESTful Web services: The basics;

2009-01-11

• "AXXo You Are a God" -- The secrets of BitTorrent's top movie pirate;