Cloud Jewels: Estimating kWh in the Cloud
Cloud providers generally do not disclose to customers how much energy their services consume. To make up for this lack of data, Etsy created a set of conversion factors called Cloud Jewels to help us roughly convert our cloud usage information (like Google Cloud usage data) into approximate energy used.
The Internals of PostgreSQL
for database administrators and system developers. Learn about Write Ahead Log, VACUUM processing, and Point In Time Recovery.
OAuth 2.0 Security Best Current Practice
This document describes best current security practice for OAuth 2.0.
It updates and extends the OAuth 2.0 Security Threat Model to
incorporate practical experiences gathered since OAuth 2.0 was
published and covers new threats relevant due to the broader
application of OAuth 2.0.
Ray Tracing with POV-Ray
This repository consisted of learning the concepts required to write scene descriptions for POV-Ray, and writing a new scene each day for 25 day.
Very useful if you want to know about how thing are rendered in game engine etc
Taming Floating Point Error
0.1 * 3 is
0.30000000000000004. We understand that this is due to the fact that floating point numbers, stored with only 64 bits of precision, cannot represent the entire real number line. The moral of the story is, never use a floating point number to represent money.
SQL injection and postgres - an adventure to eventual rce
An SQL injection bug in an ORDER BY clause came up in a recent engagement, which lead to an interesting rabbit hole regarding exploiting SQLi against a PostgreSQL database. This post details some of that adventure. We’ll look at some useful Postgres functions to make exploiting SQLi easier, some interesting file read/write primitives and a path to command execution as the DB user. I’ve included some sample vulnerable code for those of you that want to try this stuff out first hand.
Game Engine Black Book: DOOM (High-Res PDF eBook)
A books about technical aspect of DOOM. All the way from hardware to software, 2D/3D renderer, memory management, file system, sound etc.
An amazing books I would say, about the history, game, technoligies.
Inside Kinvolk Labs: Investigating Kubernetes performance issues with BPF
Normal stack: Nginx, fluentd, apache flune to process log. Yet, once upgrading from k8s 1.14.4 to 1.64.4, fluentd cannot process log fast enough and buffering the log.
They used BPF tools from BCC project: BCC CPU Profiler generate kernel stack trace, they compare and see different and was able to figured out a bug in k8s issue with repeated ebtables rule.
Code to read
A web-based SVG animation tool using real-time TF.js models
Takes a 2D vector illustration and animates its containing curves in real-time based on the recognition result from PoseNet and FaceMesh.
A Facebook AI Research’s next generation software system that implements state-of-the-art object detection algorithms. It is a ground-up rewrite of the previous version
A lightweight text editor written in Lua
A virtual filesystem for speeding up the performance of source control checkouts by Facebook.
It has 3 components: cli, server and EdenFS(A virtual file system).
Code is Python, Rust, C++, C. Oh my. You gotta read this code
A toy web browser and web browser engine in Go.
Reed-Solomon Erasure Coding in Go, with speeds exceeding 1GB/s/cpu core implemented in pure Go.
Free Desktop book-keeping software for small-businesses and freelancers.
💎 Web debugging proxy with one-click on Windows/macOS
a PostgreSQL log analyzer built for speed with fully detailed reports and professional rendering. It outperform any other PostgreSQL log analyzer.
Favicon service written in Go. Basically give you an API to find favicon of any website.
a bare metal provisioning engine. It’s built and maintained by the team at Packet.
It has: DHCP and iPXE Server, Meta Data Service, Workflow Engine, In-Memory Environment.
an open-source database schema migration tool that converts a schema definition into migration scripts that can be applied in any environment.
That's it for this round, have a great day! If you like this newsletter, please tell the world, or
tweet about this