Posts

It’s no secret that leaving credentials in source code is risky, especially when tools like GitHub make it easy to share code publicly with a single command. The major players have long had tooling to help prevent this like GitHub Secret Scanning, and GitHub also makes it possible (at least in theory) for third-party providers to join the program.

AWS creates a market for spot instance pricing, but this market is inefficient as customers don’t consider all instance types available. Leveraging this mispricing can save even more than spot pricing already does.

GitHub Codespaces offer convenient hosting for VSCode at a high price. Using EC2 spot instances and Wireguard we can achieve a more flexible setup for nearly 90% less.

IT organizations must take steps to protect their users against cloud Squatting. This post discusses the root causes of cloud squatting from an IT practitioner’s perspective, and demonstrates the steps companies can take to harden their infrastructure.

Our new research details a broad class of attacks against services hosted on public clouds.

Go channels implement a simple way to pass data between concurrent processes. Their one-to-one nature makes them great for handling ownership of resources or allocation of work to a pool of workers.

In Java, classes can be instantiated using the default constructor unless there is a non-default constructor defined. One feature that I’ve often missed in Go is the ability to have such control over struct instantiation.