~/devreads

7 Aug 2018

6 Aug 2018

1 min read

Yesterday, OpenAI Five won a best-of-three against a team of 99.95th percentile Dota players: Blitz, Cap, Fogged, Merlini, and MoonMeander—four of whom have played Dota professionally—in front of a live audience and 100,000 concurrent livestream viewers.

research

1 min read

Yet again, intern season is coming to a close, and so it’s time to look back at what the interns have achieved in their short time with us. I’m always impressed by what our interns manage to squeeze into the summer, and this year is no different.

14 min read

Nowadays, it’s rather common to encounter Apache Spark being utilized in a lot of companies that need to process huge amounts of data, and things aren’t any different here at SoundCloud — as one can imagine, we have lots of data to process all the time.

5 Aug 2018

20 min read

ed: If you want to jump right to the solution, jump ahead to Ok so what actually works?. Docker is an excellent tool for local web development. It allows creating non-trivial environments without polluting the local system with tools. There are still some things that make working with it just a tad bit harder than necessary. Today’s topic involves running…

dockerblog

4 Aug 2018

bohops 5 min read

TL;DR An Office XML (.xml) document can call a remote XSL stylesheet over SMB. If this occurs against an attacker controlled server, the net-NTLM authentication hash (challenge/response) of that user is revealed. Operationally, an attacker could crack this offline or leverage a relay technique for remote command execution (if privileged and on-net). There are possible […]

uncategorized

3 Aug 2018

2 Aug 2018

31 Jul 2018

8 min read

Over the last 5+ years I have done all my development on local virtual machines managed by Vagrant and provisioned by Puppet. I even created a fairly well-received FOSS called PuPHPet. At the end of 2017 I started really looking into containers, and as of January started working on what will become PuPHPet’s successor, Dashtainer. While this is not a…

webdevdockerlets-encryptblog

30 Jul 2018

29 Jul 2018

28 Jul 2018

blog.muffn.io (muffn_) 1 min read

Intro # For a while now I’ve wanted a compact, ‘at a glance’ look at some of my lab statistics and other things in my flat, since my lab is elsewhere. Originally I started looking for 4k monitors that could be rotated vertically, then I started looking for small hobby boards that could output in 4k and eventually just putting…

27 Jul 2018

Matthew Green 1 min read

For over a year this blog has failed to deliver on an essential promise — that there would someday be pictures of dachshunds. Today we deliver. This is Callie (short for Calliope) working her way through a bit of summer crypto reading: But sometimes that’s exhausting and you’ve gotta take a break. A visit from … Continue reading Friday Dachshund…

uncategorized

26 Jul 2018

25 Jul 2018

10 min read

Sometimes, an important team that’s part of an otherwise healthy company culture starts tanking and the people on the team get frustrated and even quit. In this article, I want to share what I learned when I started to manage a team — referred to as the R Team from here on out — that had huge problems when I…

24 Jul 2018

Alex Smolen 3 min read

Clever Goals is a new product that tracks students’ educational software usage. It creates progress data, a new type of data for Clever. This sensitive data needs to be protected from unauthorized access, and users should feel in control over how it’s used. How does the Clever security team make sure that new products like […] The post Securing New…

privacysecurity

1 min read

Over at Math3ma, Tai-Danae Bradley shared the following puzzle, which she also featured in a fantastic (spoiler-free) YouTube video. If you’re seeing this for the first time, watch the video first. Consider a square in the xy-plane, and let A (an “assassin”) and T (a “target”) be two arbitrary-but-fixed points within the square. Suppose that the square behaves like a…

23 Jul 2018

6 min read

A quick history ed: If you want to jump right to the solution, jump ahead to Nginx map. Docker for Mac is very slow. It is so slow that I purchased a new Dell XPS laptop and for the first time in 6 years am now using a non-MacOS (Fedora) machine as my daily driver. Not everyone has the luxury…

webdevserverphpxdebugdocker

20 Jul 2018

kevin 2 min read

Last week I wrote about how AWS ALB's do not validate TLS certificates from internal services. Colm MacCárthaigh, the lead engineer for Amazon ELB, writes: I’m the main author of Amazon s2n, our Open Source implementation of TLS/SSL, and a contributor to the TLS/SSL standards. Hopefully I’m qualified to chime in! You’re right that ALB […]

code

19 Jul 2018

18 Jul 2018

17 Jul 2018

16 Jul 2018

Daniel Schmidt 4 min read

Almost two years ago I gave Ignite by Infinite Red a try and I was instantly hooked. It was a super convenient and fast way to start a new project with React Native that solves all the hard setup problems for you. Today I would like to explore with you what happened with Ignite besides a major release . How…

react-nativecode-generationignite

Dave Cheney 3 min read

In my previous post I converted httpstat to use Go 1.11’s upcoming module support. In this post I continue to explore integrating Go modules into a continuous integration workflow via Travis CI. Life in mixed mode The first scenario is probably the most likely for existing Go projects, a library or application targeting Go 1.10 […]

goprogrammingdependancy managementmodulestravis ci

Stanko 1 min read

This happened to me couple of times - borders would just randomly disappear in Chrome. All other browsers render them normally, but they just vanish in Chrome, on some screen sizes. Resizing helps sometimes, but I never was able to catch real pattern for reproducing. If this ever happens to you, there is a (hacky) solution. Change border width from…

15 Jul 2018

14 Jul 2018

Dave Cheney 4 min read

Update: Since this post was written, Go 1.11beta2 has been released. I’ve updated the setup section to reflect this. Russ Cox kindly wrote to me to explain the reasoning behind storing the Go module cache in $GOPATH. I’ve included his response inline. This weekend I wanted to play with Ubuntu 18.04 on a spare machine. […]

goprogrammingdependancy managementmodulesvgo

13 Jul 2018

lukaseder 1 min read

One of the things that confuse SQL users all the time is how DISTINCT and ORDER BY are related in a SQL query. The Basics Running some queries against the Sakila database, most people quickly understand: This returns results in an arbitrary order, because the database can (and might apply hashing rather than ordering to … Continue reading How SQL…

sqldistinctdistinct onorder byorder of operations

12 Jul 2018

Dave Cheney 5 min read

This blog post was inspired by a conversation with a co-worker about using a slice as a stack. The conversation turned into a wider discussion on the way slices work in Go, so I thought it would be useful to write it up. Arrays Every discussion of Go’s slice type starts by talking about something […]

goprogrammingslices

Stanko 2 min read

TL;DR # If you just want to add git version tag after npm publish add this to your package.json: "postpublish" : "PACKAGE_VERSION=$(cat package.json | grep \\\"version\\\" | head -1 | awk -F: '{ print $2 }' | sed 's/[\",]//g' | tr -d '[[:space:]]') && git tag v$PACKAGE_VERSION && git push --tags", I advise you to read rest of the post…

11 Jul 2018

10 Jul 2018

Cameron Akhavan 1 min read

Learn how to build an IoT Twitter bot using Functions. Learn to publish and subscribe temperature/humidity sensor readings from a Raspberry Pi.

Daniel Schmidt 3 min read

In one of my last blog posts, Samuel Omole asked me if I could do an article about uploading content with React Native. For me the most interesting content to upload are videos, they are fun to watch. Also, they open up cool opportunities to do super cool stuff like streaming, so there might be a part two on this…

videosnodejsreact-native

9 Jul 2018

1 min read

We introduce Glow, a reversible generative model which uses invertible 1x1 convolutions. It extends previous work on reversible generative models and simplifies the architecture. Our model can generate realistic high resolution images, supports efficient sampling, and discovers features that can be used to manipulate attributes of data. We’re releasing code for the model and an online visualization tool so people…

research

6 Jul 2018

kevin 1 min read

Twelve days before Christmas 2017, Otto LLC, a company that wanted to produce smart locks, shut down with little notice. Employees were given no severance and contractors were left with tens or hundreds of thousands of dollars in unpaid invoices. This incident was widely covered in the press, and one board member has since quit […]

todays world

5 Jul 2018

lukaseder 1 min read

Exciting discovery when playing around with PostgreSQL 11! New SQL standard window function clauses have been supported. If you want to play with this, you can do so very easily using docker: docker pull postgres:11 docker run --name POSTGRES11 -e POSTGRES_PASSWORD=postgres -d postgres:11 docker run -it --rm --link POSTGRES11:postgres postgres psql -h postgres -U postgres … Continue reading PostgreSQL 11’s…

sqlexclude clauseframe clausegroups modepostgresql

4 Jul 2018

1 min read

We’ve trained an agent to achieve a high score of 74,500 on Montezuma’s Revenge from a single human demonstration, better than any previously published result. Our algorithm is simple: the agent plays a sequence of games starting from carefully chosen states from the demonstration, and learns from them by optimizing the game score using PPO, the same reinforcement learning algorithm…

research

3 Jul 2018

Unknown 2 min read

We are pleased to announce the immediate availability of new lovely VM flavors in ePouta backed by new server hardware! A summary of the changes: introduced standard-flavors to ePouta; these are the most popular flavors in cPouta. introduced a new generation of hpc-flavors which have Skylake CPUs. a new generation of big memory flavor with 700GB of RAM. GPUs in…

2 Jul 2018

1 min read

I’ve been the CTO of Splice for more than 5 years now, from early prototypes to today’s 100+ employees. When Steve and I started Splice, I never thought we would get this big. What I didn’t know was that one the challenges of being a CTO post product-market fit would be to build internal and external confidence around the engineering…

1 Jul 2018

29 Jun 2018

1 min read

With the external release of OCaml 4.07.0 imminent, we in Jane Street’s Tools & Compilers group have been planning what we want to work on for inclusion in OCaml 4.08. These days OCaml uses (or at least attempts) a time-based release process with releases scheduled every 6 months. We’re trying to avoid rushing in changes at the last minute –…

28 Jun 2018

Kaushik Ravikumar 1 min read

Get started building your own voice-activated home automation app with emotional intelligence using Functions, Dialogflow, and Amazon Comprehend.

bohops 6 min read

TL;DR Vendors are notorious for including and/or leaving behind Registry artifacts that could potentially be abused by attackers for lateral movement, evasion, bypass, and persistence. CLSIDs subkeys (LocalServer32 and InprocServer32) can be enumerated to discover abandoned binary references. Interestingly, CLSIDs can be called (‘invoked’) with this command: rundll32.exe -sta {CLSID} Defensive recommendations – clean up […]

uncategorized

27 Jun 2018

lukaseder 1 min read

Imagine you have a configuration table like the following: It specifies a set of rules that Can be enabled / disabled Can be given a priority among themselves Include a set of flags which correspond to the thing you want to configure (e.g. some check to execute) Those flags can be ordered as well So, … Continue reading Using UNPIVOT…

sqlconfiguration tablenormalisationunpivotwindow functions

26 Jun 2018

25 Jun 2018

lukaseder 1 min read

One of Oracle 12c’s coolest features was the introduction of the SQL standard OFFSET .. FETCH clause, as we can now write things like: This is querying the Sakila database. Most other databases had this clause (or a non-standard version of it) for ages, e.g. MySQL with LIMIT. For all the different LIMIT syntaxes, check … Continue reading Oracle’s OFFSET…

sqlansi-sqlfetch firstfetch nextoffset .. fetch

Henrik Warne 4 min read

When I switched jobs four years ago, I went from using subversion (svn) to using git as the version control system. Even though I am a pretty quick learner, it took me a quite a while to really understand git. … Continue reading →

learningprogramminggit

22 Jun 2018

3 min read

Agile retrospectives are a widely used practice within engineering teams. They provide teams with a way to reflect on how they work and become better at what they do. One of the main benefits of retrospectives is that they empower teams to define and make changes by analyzing what happened in an iteration and by determining what can be improved…

20 Jun 2018