CiprianDorinCraciun/ReadingQueue/2013

2013

December

2013-12-30

• Publisher’s Letter;

• Slaves of the Internet, Unite!;

2013-12-23

• Bad Science vs. Good Science: A Guide for the Layperson (Part 2);

• Bad Science vs. Good Science: A Guide for the Layperson (Part 1);

2013-12-21

• Professional Criticism;

2013-12-19

• How to Get Ahead at the NSA;

• Our Government Has Weaponized the Internet. Here’s How They Did It;

• Ensuring Randomness with Linux's Random Number Generator;

• Why secure systems require random numbers;

• Staying on top of TLS attacks;

2013-12-18

• Tradeoffs in Cyber Security;

• How the Bitcoin protocol actually works;

• A (relatively easy to understand) primer on elliptic curve cryptography;

• The Battle for Power on the Internet;

• Surveillance as a Business Model;

• Defending Against Crypto Backdoors;

• The Trajectories of Government and Corporate Surveillance;

• The Myth of the 'Transparent Society';

• David Brin Rebuts Schneier In Defense of a Transparent Society;

• The Eternal Value of Privacy;

• Apple's Fingerprint ID May Mean You Can't "Take the Fifth";

2013-12-12

• How NSA Mass Surveillance is Hurting the US Economy;

2013-12-06

• A Critique Of Lavabit;

• In Memoriam: Lavabit Architecture - Creating a Scalable Email Service;

2013-12-05

• PaaS Under the Hood, Episode 1: Kernel Namespaces;

• PaaS Under the Hood, Episode 2: cgroups;

• PAAS Under the Hood, Episode 3: AUFS;

• PaaS Under the Hood, Episode 4: GRSEC;

• PaaS Under the Hood, Episode 5: Distributed Routing with Hipache;

• PaaS Under the Hood, Episode 6: How to Optimize the Memory Usage of Your Apps;

2013-12-03

• Exploring LXC Networking;

• The past, present, and future of control groups;

2013-12-02

• Your visual how-to guide for SELinux policy enforcement;

• Rewriting a large production system in Go;

• The failure of pysandbox;

• The New Threat: Targeted Internet Traffic Misdirection;

November

2013-11-12

• Google’s iron grip on Android: Controlling open source by any means necessary;

• Rethinking the Linux distibution;

2013-11-10

• NSA Files: Decoded -- What the revelations mean for you;

October

2013-10-22

• Re: [ccache] Stumbling blocks with ccache and embedded/encapsulated environments;

• On getting criticism;

2013-10-17

• Air Gaps;

• Surreptitiously Tampering with Computer Chips;

• The NSA's New Risk Analysis;

• Reforming the NSA;

2013-10-11

• Maven is broken by design;

• In quest of the ultimate build tool;

• Recursive Maven considered harmful;

• Build in the Cloud: Accessing Source Code;

• Build in the Cloud: How the Build System works;

• Build in the Cloud: Distributing Build Steps;

• Build in the Cloud: Distributing Build Outputs;

• Testing at the speed and scale of Google;

2013-10-09

• How Lavabit Melted Down;

• The N.S.A. and Its Targets: Lavabit Shuts Down;

• Edward Snowden’s E-Mail Provider Defied FBI Demands to Turn Over Crypto Keys, Documents Show;

• Government Announces Steps to Restore Confidence on Encryption Standards;

• Implementing the GNU make "jobserver";

2013-10-05

• NSA and GCHQ target Tor network that protects anonymity of web users;

• Attacking Tor: how the NSA targets users' online anonymity;

• Why the NSA's attacks on the internet must be made public;

• New Snowden Documents Show NSA Deemed Google Networks a "Target";

2013-10-04

• Bruce Schneier: NSA Spying Is Making Us Less Safe;

2013-10-03

• The Internet: We’re Doing It Wrong;

September

2013-09-27

• Revealed: how US and UK spy agencies defeat internet privacy and security;

• N.S.A. Able to Foil Basic Safeguards of Privacy on Web;

• Revealed: The NSA’s Secret Campaign to Crack, Undermine Internet Security;

• Why We Published the Decryption Story;

• More on the NSA Commandeering the Internet;

• What Exactly Are the NSA’s ‘Groundbreaking Cryptanalytic Capabilities’?;

• Government Secrecy and the Generation Gap;

• The Only Way to Restore Trust in the NSA;

• NSA Secrets Kill Our Trust;

• Trust and Society;

• Our Newfound Fear of Risk;

• Trust in Man/Machine Security Systems;

• The Limitations of Intelligence;

• Security Tips from Bruce Schneier;

• How Companies Can Protect Against Leakers;

• The Real, Terrifying Reason Why British Authorities Detained David Miranda;

• David Miranda: 'They said I would be put in jail if I didn't co-operate';

• The Betrayal of the Internet Imaginaire;

• Rethinking the guest operating system;

• Reddit: Lessons Learned from Mistakes Made Scaling to 1 Billion Pageviews a Month;

2013-09-26

• The US government has betrayed the internet. We need to take it back;

• NSA surveillance: A guide to staying secure;

• NSA: Possibly breaking US laws, but still bound by laws of computational complexity;

• How to foil NSA sabotage: use a dead man's switch;

• On the NSA;

• Crypto prof asked to remove NSA-related blog post;

• Re: [Cryptography] Opening Discussion: Speculation on "BULLRUN";

• Toward healthy paranoia;

• A Lesson in Resource Management;

August

2013-08-09

• Now That It’s in the Broadband Game, Google Flip-Flops on Network Neutrality;

• FSFE objects to claims of 'predatory pricing' in Free Software;

2013-08-02

• More Encryption Is Not the Solution;

• Feds put heat on Web firms for master encryption keys;

• SSL Labs: Deploying Forward Secrecy;

• Michael Hayden on the Effects of Snowden's Whistleblowing;

July

2013-07-25

• NSA surveillance and "foreigners";

• Overview of Linux Kernel Security Features;

• Connecting on the QUIC;

2013-07-23

• A clustering for Erlang on Xen;

2013-07-19

• Google told to find new solution for European search antitrust row;

• Spygate Lawsuit Accuses NSA of Unconstitutional ‘Dragnet Electronic Surveillance’;

• Why HTTP/2.0 does not seem interesting;

2013-07-18

• Debian, Berkeley DB, and AGPLv3;

• Google, Reader, and hard lessons about migration;

• The Naming of Hosts is a Difficult Matter;

• What's new in HTTP 2;

2013-07-16

• Is Cryptography Engineering or Science?;

2013-07-12

• Revealed: how Microsoft handed the NSA access to encrypted messages;

2013-07-06

• Rethinking Surveillance;

2013-07-04

• SSL: Intercepted today, decrypted tomorrow;

• Strong eventual consistency;

• Verifying the source code for binaries;

• U.S., British intelligence mining data from nine U.S. Internet companies in broad secret program;

• NSA slides explain the PRISM data-collection program;

• Misinformation on classified NSA programs includes statements by senior U.S. officials;

• NSA collected US email records in bulk for more than two years under Obama;

• To understand terrorism and threat assessment, look to Aum;

• Beyond the Snowden Endgame;

• Schrödinger's 😻 and outside-the-box naming;

2013-07-02

• Dependency Hell;

June

2013-06-26

• Devolution, predation, and the forum fathead phenomenon;

2013-06-25

• Why passwords have never been weaker -- and crackers have never been stronger;

• Password Security, Protection, and Management;

2013-06-23

• The Technical Interview Is Dead (And No One Should Mourn);

2013-06-20

• EDRi letter to the US Embassy on PRISM;

• US agencies have unlimited access to Internet data;

• Civil society letter to United States Congress on Internet and telecommunications surveillance;

• Results of the Debian systemd survey;

• Survey answers part 1: systemd has too many dependencies, or it is bloated, or it does too many things, or is too complex;

• Little things that matter in language design;

2013-06-19

• Cryptography is a science, not engineering;

• How they invented the term "Postdoctral Scholar";

2013-06-17

• More Wisdom from my 3 Year Old;

2013-06-07

• SQLAlchemy Migrated to Git;

2013-06-06

• Turkish demonstrations using social media despite censorship;

• Pondering the X client vulnerabilities;

• Disclosure timeline for vulnerabilities under active attack;

• Rebooting Responsible Disclosure: a focus on protecting end users;

• Content hosting for the modern web;

• HTTP cookies, or how not to design protocols;

• The Linus and Dirk show;

• ALS: Linux interprocess communication and kdbus;

2013-06-05

• Whatever happened to Google?;

• Hacking into the Indian Education System;

May

2013-05-31

• Empty symlinks and full POSIX compliance;

2013-05-25

• HTTP 0.2 (ie., HTTP 2.0 / 10);

2013-05-24

• How To Choose CD/DVD Archival Media;

• Blank DVD Media Quality Review;

2013-05-17

• (Nearly) full tickless operation in 3.10;

2013-05-16

• Transparency and Accountability;

• Intelligence Analysis and the Connect-the-Dots Metaphor;

• Refuse to be Terrorized;

• The Public / Private Surveillance Partnership;

• After Checking Your Bank Account, Remember To Log Out, Close The Web Browser, And Throw Your Computer Into The Ocean;

• Use These Secret NSA Google Search Tips to Become Your Own Spy Agency;

• Walt Disney World fingerprints visitors;

2013-05-09

• Code authenticity checking;

2013-05-07

• Stopping Telemarketers;

2013-05-01

• Viewpoint: Is gap year volunteering a bad thing?;

• Opera sues ex-employee for passing secrets to Mozilla;

• The world-changing libwww is 20 years old today;

April

2013-04-19

• The Web Is Dead. Long Live the Internet;

• Profit On-Demand;

• Analysis: Eric Schmidt says whole world will be online by 2020. Really?;

2013-04-17

• The node.js Community is Quietly Changing the Face of Open Source;

2013-04-16

• HTTP/2.0 is good news for CDNs and FEO;

2013-04-15

• The Trello Tech Stack;

• How Trello is different;

• Strategy Letter I: Ben and Jerry's vs. Amazon;

2013-04-12

• HTTP KeepAlive Considered Harmful;

• Routing Performance Update;

• Routing and Web Performance on Heroku: a FAQ;

• Three Latency Anomalies;

• Timelike: a network simulator;

• Timelike 2: everything fails all the time;

• Easily Parsed LIST Format;

• Design of Antiweb4;

• Framework Benchmarks;

• Why Sphinx and reStructuredText?;

• Did you call them autocrap tools?;

2013-04-11

• on open source development and disagreements;

• An HTTP reverse proxy for realtime;

• HTTP GRIP and the Proxy-and-Hold technique;

2013-04-10

• Today, we save the Internet (again): fix the CFAA!;

• Segregating services;

• Making applications scalable with Load Balancing;

2013-04-08

• Linked Data -- Design Issues;

• Metacrap: Putting the torch to seven straw-men of the meta-utopia;

• A new development era (essay);

2013-04-06

• Broken Promises;

• Callbacks are imperative, promises are functional: Node’s biggest missed opportunity;

• Some Thoughts on Asynchronous Programming;

2013-04-04

• Too big to fail;

2013-04-03

• (Tim Berners-Lee) Frequently asked questions;

• The World Wide Web: A very short personal history;

March

2013-03-30

• Who Killed Gopher? -- An Extensible Murder Mystery;

• Down the Gopher Hole;

• Why is Gopher Still Relevant?;

• Gopher: Underground Technology;

• the gopher:// manifesto;

• The WELL Gopher;

2013-03-29

• What's Going On;

• All Those Companies that Can't Afford Dedicated Security;

• Nationalism on the Internet;

• The Pull Request Hack;

• GooFS: a ridiculously simple filesystem for cloud instances;

• Linux Asynchronous I/O Explained;

2013-03-28

• Solving the wrong problem;

• When does the FSF own your code?;

• Connectors, controversy and the LGPL;

2013-03-26

• What is Object Oriented Programming: A Critical Approach;

• Authentication: Don’t be Clever;

2013-03-22

• SCALE: The life and times of the AGPL;

• The SO_REUSEPORT socket option;

• SCALE: The Hockeypuck key server;

• LC-Asia: Facebook contemplates ARM servers;

• 9th Circuit Appeals Court: 4th Amendment Applies At The Border; Also: Password Protected Files Shouldn't Arouse Suspicion;

2013-03-18

• States Seek Ban to Employers' Social-Media Snooping;

• Securing ZeroMQ: CurveCP and NaCl;

2013-03-16

• Oxford blocks Google Docs as a phishing countermeasure;

• Static site generators for building web sites;

2013-03-14

• The Boot Loader Specification;

2013-03-11

• McDipper: A key-value cache for Flash storage;

2013-03-10

• Building A Node.JS Server That Won’t Melt -- A Node.JS Holiday Season, part 5;

• Taming Configurations with node-convict – A Node.JS Holiday Season, part 7;

2013-03-07

• Hacking the Papal Election;

• Namespaces in operation, part 5: User namespaces;

2013-03-05

• A Tale of Two Standards;

2013-03-04

• Bypassing Google’s Two-Factor Authentication;

• Why functional code is shorter;

• Functional Programming in C++;

February

2013-02-28

• Why Use Make;

• FUCK PASSWORDS;

• Solving the Discovery Problem;

2013-02-27

• Don't Under-Think It: SQL vs NoSQL;

2013-02-25

• The Merit of AMQP (part I);

• Implementing Network Protocols in User Space;

• Why should I have written ZeroMQ in C, not C++ (part II);

2013-02-21

• FOSDEM: Richard Fontana on copyleft-next;

• GPLv3, Clarity and Simplicity;

• Password Cracking AES-256 DMGs and Epic Self-Pwnage;

• Why you shouldn’t use the OWASP Top 10 as a list of software security requirements;

2013-02-20

• Swamped by Automation;

• Systemd lightweight containers;

• Namespaces in operation, part 1: namespaces overview;

• Namespaces in operation, part 2: the namespaces API;

• Namespaces in operation, part 3: PID namespaces;

• Namespaces in operation, part 4: more on PID namespaces;

• On the Brokenness of File Locking;

• Addendum on the Brokenness of File Locking;

• On IDs;

• /tmp or not /tmp?;

• A Plumber's Wish List for Linux;

2013-02-07

• systemd -- The Biggest Myths;

January

2013-01-31

• Twitter’s New Transparency Report Shows Increase in Government Demands, Sheds Light on Copyright Takedowns;

• Aaron's Army;

2013-01-30

• Your LGPL license is completely destroying iOS adoption;

• How to make app stores open source-friendly;

2013-01-27

• Do you read hacker news?;

2013-01-26

• Why Am I So Upset About Aaron Swartz's Suicide?;

• Techno-McCarthyism and the death of Aaron Swartz;

• Prosecutor as bully;

• The Truth about Aaron Swartz’s “Crime”;

• RIP, Aaron Swartz;

2013-01-23

• A fresh look at JavaScript Mixins;

2013-01-22

• How your Conference Presentation Goes;

2013-01-19

• Divided by Division;

2013-01-15

• Terms of Service as a Security Threat;

• Rich Hickey on Datomic, Data Storage, Functional Programming and Immutability;

2013-01-13

• The Virtues of Monitoring, Redux;

• The Virtues of Monitoring;

• Eric Evans and Brian Foote discuss the state of Software Design;

• asynchronous disk I/O;

• How Erlang does scheduling;

2013-01-11

• The Unreasonable Effectiveness of C;

2013-01-09

• Patterns For Large-Scale JavaScript Application Architecture;

• Asynchronous Javascript -- the tale of Harry;

• The truth about Goobuntu: Google's in-house desktop Ubuntu Linux;

• Cloud app vs. web app: Understanding the differences;

2013-01-08

• Kickjumper -- Super Science Machine;

• Node core vs userland;

• Key backup for the paranoid;

• How Dropbox sacrifices user privacy for cost savings;

• Rewriting GitHub Pages with Riak and Webmachine;

• Measure Anything, Measure Everything;

• Counting & Timing;

• Are events fast?;

• CPC: programming with a massive number of lightweight threads;

• Continuation Passing for C: A space-efficient implementation of concurrency;

2013-01-07

• Programmers Don't Read Books -- But You Should;

• A rant about documentation;

• Building Secure Web Applications;

• Security -- Problem Solved?;

2013-01-05

• Rethinking Passwords;

• Lessons from 32 Million Passwords;

• Weapons of Mass Assignment;

2013-01-04

• Winning is the worst thing that can happen in Vegas;

• SQL is Agile;

• Solving bugs;

• Hackathons in the Classroom;

• Redis Crashes;

2013-01-03

• Erik Meijer discusses programming language design, effects and some web programming problems;

• Stefan Tilkov on REST and Hypermedia, ROCA, WebSockets vs. HTTP;