VirtualTam's bookmarks

1. AI Flame Graphs 2025-01-20

   tags: artificial-intelligence, intel, performance/profiling, programming/c++, programming/python, visualization

   [ permalink ]

   AI developers think about their bit of code, but with AI Flame Graphs they can now see the entire stack for the first time, including the HW, and many layers they don't usually think about or don't know about. It basically looks like a pile of gibberish with their code only a small part of the flame graph.

   This reaction is similar to people's first experiences with CPU flame graphs, which show parts of the system that developers and engineers typically don't work on, such as runtime internals, system libraries, and kernel internals.

2. oha - HTTP load generator 2025-01-08

   tags: command-line, network/http, network/transport-layer-security, programming/rust

   [ permalink ]
3. DNS over HTTPS 2024-11-25

   tags: cryptography/encryption, ietf/rfc, internet/browser/chrome, internet/browser/firefox, network/dns, network/http, network/transport-layer-security

   [ permalink ]

   RFCs:

   • RFC 7858 - Specification for DNS over Transport Layer Security (TLS)
   • RFC 8484 - DNS Queries over HTTPS (DoH)

   Resources:

   • Carsten Strotmann - doh.defaultroutes.de DNS-over-TLS/HTTPS Server
   • DNS over HTTPS - Cloudflare 1.1.1.1 Documentation

   Setting up a DNS-over-HTTPS server:

   • DNS over HTTPS - ArchWiki
   • DNS-over-TLS almost working - Træfik Forum
   • Using Google’s dns.google.com with CoreDNS

   Browser configuration:

   • Configure DoH on your browser - Cloudflare Documentation
   • Using custom DNS-over-HTTPS with CoreDNS and Google Chrome
   • Firefox DNS-over-HTTPS - Firefox Help
4. Making USB devices - end to end guide to your first gadget 2024-11-19

   tags: electronics/pcb, embedded, microcontroller/st-microelectronics/stm32, programming/c, serial-communication/usb

   [ permalink ]

   • Build own USB device on linux-based board!
   • What Are Differential Pairs?
   • How to route USB data lines on a PCB
   • Can You Route USB 2.0 on a 2-Layer Board?
   • KiCad STM32 Hardware Design - An Overview in 20 Minutes - Phil's Lab #15
   • STM32 Programming via USB (DFU) - Phil's Lab #72
   • How To: STM32F103C8T6 As An USB Device (Virtual Serial Port / CDC)
5. The Illustrated QUIC Connection - Every byte explained and reproduced 2024-11-19

   tags: network/http, network/quic, network/transport-layer-security, network/udp

   [ permalink ]
6. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management 2024-05-27

   tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/http-server/traefik, network/reverse-proxy, network/transport-layer-security, programming/go

   [ permalink ]

   • Run a private online TLS certificate authority in a Docker container
   • Configure popular ACME clients to use a private CA with the ACME protocol
   • Run your own private CA & ACME server using step-ca
   • Build a Tiny Certificate Authority For Your Homelab
7. gittuf - A security layer for Git, with key management and permissions for branches and tags 2024-05-13

   tags: automotive, embedded, security, source-code-management/git, trust

   [ permalink ]

   • gittuf/gittuf
   • ossf/wg-supply-chain-integrity
   • OpenSSF - Introducing gittuf: A Security Layer for Git Repositories
   • LWN - Securing Git repositories with gittuf
   • TUF - The Update Framework
   • Uptane - A Secure Software Update Framework for Automobiles
8. facebookexperimental/kperf - TCP and TLS performance testing tool 2024-03-31

   tags: network/tcp, network/transport-layer-security, performance/benchmark, programming/c

   [ permalink ]
9. ANGLE - Almost Native Graphics Layer Engine 2023-12-05

   tags: graphics/opengl, graphics/webgl, internet/browser

   [ permalink ]

   Allow users of multiple operating systems to seamlessly run WebGL and other OpenGL ES content by translating OpenGL ES API calls to one of the hardware-supported APIs available for that platform

10. HAProxy - TLS Termination Setup 2023-07-24

    tags: cryptography/encryption, network/http, network/http-server/haproxy, network/reverse-proxy, network/transport-layer-security, security

    [ permalink ]

    • Traffic Routing - Rewrite Requests
    • Client IP Preservation - X-Forwarded-For
    • HAProxy & HTTP Strict Transport Security (HSTS)
    • Secure Cookies Using HAProxy Enterprise
11. Web Security Cheat Sheet | Mozilla Infosec 2023-07-23

    tags: network/http, network/http/cookie, network/transport-layer-security, programming/html, programming/javascript, security, web

    [ permalink ]
12. OpenSSL Cookbook 2023-05-31

    tags: cryptography/certificate, network/http, network/transport-layer-security, openssl

    [ permalink ]

    The definitive guide to using the OpenSSL command line for configuration and testing.

    Topics covered in this book include:

    • key and certificate management,
    • server configuration,
    • a step by step guide to creating a private CA,
    • testing of online services.
13. Debugging Certificate Errors 2023-02-18

    tags: cryptography/certificate, curl, network/http, network/transport-layer-security, openssl

    [ permalink ]

    • https://www.netmeister.org/whatsthatcert/
14. badssl.com - Memorable site for testing clients against bad SSL configs 2023-02-18

    tags: cryptography/certificate, internet/browser/chrome, network/http, network/transport-layer-security

    [ permalink ]

    • https://github.com/chromium/badssl.com
15. Mitogen for Ansible | A redesigned UNIX connection layer and module runtime for Ansible 2023-01-28

    tags: configuration-management/ansible, network/ssh, programming/python

    [ permalink ]

    • https://github.com/mitogen-hq/mitogen
    • https://mitogen.networkgenomics.com/howitworks.html
    • https://news.ycombinator.com/item?id=15355144
16. TLS Expiry and Uptime Monitor for URLs - Prometheus Blackbox | Grafana 2022-05-01

    tags: network/transport-layer-security, observability/grafana, observability/time-series/prometheus

    [ permalink ]

    • https://prometheus.io/docs/guides/multi-target-exporter/
    • https://github.com/prometheus/blackbox_exporter/blob/master/example.yml
17. embiggen-disk: live-resize a filesystem after first live-resizing any necessary layers below it: an optional LVM LV and PV, and an MBR or GPT partition table 2022-03-05

    tags: filesystem/lvm, linux, programming/go, virtualization, virtualization/qemu

    [ permalink ]

    • https://www.youtube.com/watch?v=69Zy77O-BUM
18. OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs | DigitalOcean 2022-02-24

    tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

    [ permalink ]
19. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch 2021-11-14

    tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/tcp, network/transport-layer-security, observability/elastic/elasticsearch

    [ permalink ]
20. Enhanced SSL Load Balancing with Server Name Indication (SNI) TLS Extension - HAProxy Technologies 2020-12-11

    tags: network/dns, network/http-server/haproxy, network/reverse-proxy, network/server-name-indication, network/tcp, network/transport-layer-security

    [ permalink ]

    • https://discourse.haproxy.org/t/req-ssl-sni-and-ssl-termination/2139/3
    • com/@olivier.ragain/haproxy-https-load-balancing-on-sni-207c17398d19