Eric Pauley
Eric Pauley
Home
Publications
Posts
Posts
The Need for Standardized Secret Scanning
It’s no secret that leaving credentials in source code is risky, especially when tools like GitHub make it easy to share code publicly with a single command. The major players have long had tooling to help prevent this like GitHub Secret Scanning, and GitHub also makes it possible (at least in theory) for third-party providers to join the program.
Eric Pauley
Dec 16, 2022
4 min read
Leveraging Mispriced AWS Spot Instances for Fun and Savings
AWS creates a market for spot instance pricing, but this market is inefficient as customers don’t consider all instance types available. Leveraging this mispricing can save even more than spot pricing already does.
Eric Pauley
Oct 20, 2022
8 min read
Saving 90% vs. GitHub Codespaces with EC2 Spot Instances
GitHub Codespaces offer convenient hosting for VSCode at a high price. Using EC2 spot instances and Wireguard we can achieve a more flexible setup for nearly 90% less.
Eric Pauley
Oct 9, 2022
4 min read
Securing Cloud Services against Squatting Attacks
IT organizations must take steps to protect their users against cloud Squatting. This post discusses the root causes of cloud squatting from an IT practitioner’s perspective, and demonstrates the steps companies can take to harden their infrastructure.
Eric Pauley
,
Patrick McDaniel
May 18, 2022
14 min read
Cloud Squatting: The Risk of IP Reuse on Public Clouds
Our new research details a broad class of attacks against services hosted on public clouds.
Eric Pauley
,
Patrick McDaniel
Apr 11, 2022
5 min read
Broadcast Channels in Go
Go channels implement a simple way to pass data between concurrent processes. Their one-to-one nature makes them great for handling ownership of resources or allocation of work to a pool of workers.
Eric Pauley
Apr 4, 2017
5 min read
Single-Implementation Interfaces in Go
In Java, classes can be instantiated using the default constructor unless there is a non-default constructor defined. One feature that I’ve often missed in Go is the ability to have such control over struct instantiation.
Eric Pauley
Mar 31, 2017
4 min read
Cite
×