Looking enough time at technology we can see trends that repeat over and over — 15 years ago I worked with mainframe Linux and after that…

In this paper I'll show you how to compromise websites by using esoteric web features to turn their caches into exploit delivery systems

TLS 1.3 (RFC 8446) was published today. This article provides a deep dive into the changes introduced in TLS 1.3 and its impact on the future of internet security.

Adopting DevOps practices is fast becoming essential for digital businesses. Here are 6 common pitfalls, and how to avoid them.

Logging into your AWS account on the web is fairly straightforward: you type in a username and password and you’re done. Logging into your…

This is Part 5 of a multi-part series about all the metrics you can gather from your Kubernetes cluster.

Whether you added the wrong file, committed directly to master, or some other mishap, we've got you covered.

You use AWS, but how well do you actually know AWS? How many AWS icons can you correctly identify?

I am not affiliated with Antimetal. They are plagiarizing hacks without a single funny bone in their body who like to take credit for other people's work.

The documents contained detailed server configurations and Amazon Web Services pricing scenarios.

Container images are the primary packaging format for defining applications within Kubernetes. Used as the basis for pods and other objects, images play an i…

Correctly executing penetration tests against AWS environments is a difficult, complicated task that requires knowledge and practice in a variety of different areas. It requires both AWS knowledge and red-team-like knowledge to perform a worthwhile test.

Creating an efficient DevOps environment is hard. Fortunately, DevOps benefits outweigh the challenges of its implementation. Use these five tips to succeed.

Diffy is an open source triage tool that allows incident response teams to quickly pinpoint compromised hosts during a cloud-centric security incident.

Choose between http/1.1 and gRPC. TL; DR: Use gRPC

Imagine a fly-by architecture review. An architect walks in, looks over, glosses over, seeing though his binoculars. He provides comments that are often too generic or out of context. Comments are often met with deafening silence or winding arguments. They…

At GitHub, we serve tens of thousands of requests every second out of our network edge, operating on GitHub’s metal cloud. We’ve previously introduced GLB, our scalable load balancing solution for bare metal datacenters, which powers the majority of GitHub’s…

Facing the need for a resilient data structure over thousands of storage nodes to serve the 15 million rides per day that occur on our platform, Uber engineers developed Herb, our data replication solution. Herb ensures data availability and integrity across…

Using dev test methods in the ops environment may catch potential infrastructure issues before they become problems.

Here's how to ensure that the tools you select reinforce the values of your organization.

We recently shared some strategies for sniffing out DevOps fakers in your recruiting and hiring. By DevOps fakers, we mean candidates whose qualifications for a DevOps role might be more hype than substance.

Adding test coverage to our Serverless framework projects helps us to ensure that we are effectively testing our production-level applications.