VirtualTam's bookmarks

1. AFL++ - American Fuzzy Lop Fuzzing Framework 2025-02-15

   tags: compiler/llvm, genetic-algorithm, programming/c++, programming/fuzzing, programming/rust, research, security, virtualization/qemu

   [ permalink ]

   • AFLplusplus/AFLplusplus
   • AFLplusplus/LibAFL - A collection of reusable pieces of fuzzers
   • rc0r/afl-utils - Utilities for automated crash sample processing/analysis, job management and corpus optimization
   • 0xricksanchez/AFL_Runner - Scaling best-practice AFLPlusPlus fuzzing campaigns made easy
   • AFL++ Papers
   • Sister Projects
   • The LibAFL Book
   • Fuzzing projects with american fuzzy lop (AFL)
   • afl - american fuzzy lop
2. Topiary - A universal code formatter based on Tree-Sitter 2025-01-21

   tags: abstract-syntax-tree, programming/rust, programming/scheme, static-analysis/formatting

   [ permalink ]

   • tweag/topiary
3. Hacking the Yamaha DX9 To Turn It Into a DX7 2025-01-20

   tags: electronics, firmware, instrument/synthesizer, programming/assembly, reverse-engineering

   [ permalink ]

   • ajxs/yamaha_dx97
   • Yamaha DX7 Firmware ROM Disassembly
   • Yamaha DX7 Official Technical Analysis
   • Yamaha DX 7 Technical Analysis Booklet
   • Introduction to Reverse-Engineering Vintage Synth Firmware
4. sqlfluff - A modular SQL linter and auto-formatter with support for multiple dialects and templated code 2024-11-24

   tags: database/mysql, database/postgresql, database/sqlite, programming/python, programming/sql, static-analysis/lint

   [ permalink ]

   • Configuration
   • Rules Reference
5. sqruff - Fast SQL formatter/linter 2024-11-24

   tags: programming/rust, programming/sql, static-analysis/lint

   [ permalink ]

   • Translating sqlfluff to Rust
6. Serious Engine Networing - Dive-In Analysis 2024-11-18

   tags: game-engine, game/multiplayer, network/udp

   [ permalink ]

   • Croteam-official/Serious-Engine
7. SSHFP - Secure SHell FingerPrint DNS Records 2024-10-27

   tags: cryptography/elliptic-curve, network/dns, network/dnssec, network/ssh

   [ permalink ]

   • IANA - DNS SSHFP Resource Record Parameters
   • ssh - How do I generate SSHFP records?
   • Oh SSH-it, What’s My Fingerprint? A Large-Scale Analysis of SSH Host Key Fingerprint Verification Records in the DNS
     • gehaxelt/sshfp-dns-measurement
     • APNIC - Improving SSH’s security with SSHFP DNS records

   RFCs:

   • RFC 4251 - The Secure Shell (SSH) Protocol Architecture
   • RFC 4255 - Using DNS to Securely Publish Secure Shell (SSH) Key Fingerprints
8. go-arch-lint - Go architecture linter (checker) tool 2024-10-13

   tags: domain-driven-design, programming/go, static-analysis

   [ permalink ]

   • Check project import paths and compare with architechure rules defined in a configuration file
   • Useful for hexagonal / onion / DDD / MVC and other architectural patterns
9. go-recipes - Tools for Go projects 2024-10-13

   tags: compiler, documentation, programming/go, programming/testing, static-analysis/lint

   [ permalink ]
10. Biome - A toolchain for web projects, provinging a formatter and linter, usable via CLI and LSP 2024-03-31

    tags: editor, programming/javascript, programming/json, programming/typescript, static-analysis/formatting, static-analysis/lint

    [ permalink ]
11. Vulnerability Management for Go 2024-01-15

    tags: programming/go, security, static-analysis

    [ permalink ]

    • Go Vulnerability Database (Go Blog)
    • Go Vulnerability Database
    • govulncheck command
12. Performance Analysis and Tuning on Modern CPUs 2024-01-13

    tags: book, linux, performance/profiling, programming/c++, programming/rust

    [ permalink ]

    • PerformanceNinja video courses playlist
    • dendibakh/perf-ninja - An online course where you can learn and master the skill of low-level performance analysis and tuning
    • grahamking/perf-ninja-rs - Rust labs for Performance Ninja Class
13. Teardown Frame Teardown - Rendering Analysis 2023-06-19

    tags: game/sandbox, game/teardown, graphics/3d, graphics/opengl, graphics/voxel, indie

    [ permalink ]
14. Rust Binary Analysis, Feature by Feature 2023-06-17

    tags: compiler, programming/rust, reverse-engineering

    [ permalink ]
15. WebAuthn - An API for accessing Public Key Credentials 2023-06-11

    tags: cryptography/public-key-infrastructure, internet/browser, security/authentication

    [ permalink ]

    The Web Authentication API (also known as WebAuthn) is a specification written by the W3C and FIDO, with the participation of Google, Mozilla, Microsoft, Yubico, and others. The API allows servers to register and authenticate users using public key cryptography instead of a password.

    • Guide to Web Authentication
    • Asynchronous Remote Key Generation: An Analysis of Yubico’s Proposal for W3C WebAuthn [PDF]
    • Issue 664630: Web Authentication API for Chrome
    • Bugzilla - [meta] Update WebAuthn JS API to the L1-REC spec
    • keepassxc#1870 - Feature Request: Integration with the Web Authentication API
16. Go linters configuration, the right version. 2023-03-28

    tags: programming/go, static-analysis, static-analysis/lint

    [ permalink ]

    • https://gist.github.com/cristaloleg/f1610a9ca73ac420cda170fadd21b944
    • https://gist.github.com/maratori/47a4d00457a92aa426dbd48a18776322
    • https://freshman.tech/linting-golang/
17. shell guide | Style guides for Google-originated open-source projects 2023-02-18

    tags: programming/shell, static-analysis/lint

    [ permalink ]
18. HyperLogLog - Approximate the number of distinct elements in a set 2022-12-14

    tags: algorithm, database/postgresql, database/redis

    [ permalink ]

    • HyperLogLog: the analysis of a near-optimal cardinality estimation algorithm (PDF)
    • HyperLogLog in Practice: Algorithmic Engineering of a State of The Art Cardinality Estimation Algorithm
    • https://agkn.wordpress.com/2012/10/25/sketch-of-the-day-hyperloglog-cornerstone-of-a-big-data-infrastructure/
    • Redis new data structure: the HyperLogLog
    • https://www.reddit.com/r/programming/comments/21wshj/redis_new_data_structure_the_hyperloglog/
    • https://redis.uptrace.dev/guide/go-redis-hll.html
    • https://towardsdatascience.com/hyperloglog-a-simple-but-powerful-algorithm-for-data-scientists-aed50fe47869
    • https://odino.org/my-favorite-data-structure-hyperloglog/
    • http://blog.notdot.net/2012/09/Dam-Cool-Algorithms-Cardinality-Estimation
    • https://supabase.com/blog/seen-by-in-postgresql
    • https://www.citusdata.com/blog/2017/12/22/distributed-count-vs-hyperloglog/
19. RedPanda | Data Streaming Platform 2022-09-04

    tags: message-broker/kafka, message-queue, programming/c++, programming/go

    [ permalink ]

    • https://redpanda.com/blog/validating-consistency
    • https://redpanda.com/blog/kafka-redpanda-availability
    • https://redpanda.com/blog/redpanda-official-jepsen-report-and-analysis
    • https://github.com/redpanda-data/redpanda/
    • https://news.ycombinator.com/item?id=25075739
20. Static Analysis Results Interchange Format (SARIF) - Defining a standard output format for static analysis tools 2022-05-30

    tags: continuous-integration, programming/json, static-analysis, static-analysis/lint

    [ permalink ]