Can I afford to retire?
Can I afford to retire?
josh's blog
Josh Snyder's blog
Latest posts
Deterministic computing on x86
Deterministic computing on x86
Good encrypted swap
Good encrypted swap
The matryoshka rule
The matryoshka rule
Booting Linux faster with nullfs and pivot_root
Booting Linux faster with nullfs and pivot_root
Running a Linux process deterministically
Running a Linux process deterministically
Eleven missing Terraform features
Eleven missing Terraform features
Achieving immortality with Python workers
Achieving immortality with Python workers
Never move a private key
Never move a private key
Every database needs a transaction killer
Every database needs a transaction killer
A good transaction is a stateless transaction
A good transaction is a stateless transaction
Per-task asyncio utilization statistics
Per-task asyncio utilization statistics
Patching the cpython stdlib is deceptively easy
Patching the cpython stdlib is deceptively easy
What is my asyncio app doing?
What is my asyncio app doing?
Cancelling hung-up requests in uvicorn
Cancelling hung-up requests in uvicorn
wchan, and thinking beneath the syscall
wchan, and thinking beneath the syscall
Wrangling wayward event loops with Linux perf and eBPF
Wrangling wayward event loops with Linux perf and eBPF
Digital signatures are free-range rows
Digital signatures are free-range rows
An oncall meta-runbook
An oncall meta-runbook
Your security is only as good as you can prove
Your security is only as good as you can prove
Distributed hash ring maintenance
Distributed hash ring maintenance
An application should sit in a deep dark hole
An application should sit in a deep dark hole
Shimming S3
Shimming S3
Should all databases be shard-per-core?
Should all databases be shard-per-core?
A good database is a stateless database
A good database is a stateless database
Software artifacts: hash, don't sign
Software artifacts: hash, don't sign
Isolation of libraries is surprisingly easy
Isolation of libraries is surprisingly easy
Don't build "The Vault"
Don't build "The Vault"
Why Kubernetes failed
Why Kubernetes failed
Queueing theory for the working software engineer
Queueing theory for the working software engineer
JIT access considered harmful
JIT access considered harmful
A hierarchy of enclaves
A hierarchy of enclaves
VPN rots your brains
VPN rots your brains
Nonces are bad and we should stop using them
Nonces are bad and we should stop using them
The single version rule is good for Google and bad for you
The single version rule is good for Google and bad for you
Don't use golden images. Do this instead.
Don't use golden images. Do this instead.
Don't trust aws:SourceIP!
Don't trust aws:SourceIP!
But actually, how do flamegraphs work?
But actually, how do flamegraphs work?
Observations about S3
Observations about S3
Contracts do not bind
Contracts do not bind
Safer S3 signed URLs
Safer S3 signed URLs
Security tiers considered harmful
Security tiers considered harmful
iostat's %util is wrong
iostat's %util is wrong
Why bother with immutable infrastructure?
Why bother with immutable infrastructure?