27 October 2024

12 links · Sunday

Understanding Round Robin DNS

In which I try to understand how browsers and Cloudflare choose which server to use

Vulnerabilities of Realtek SD card reader driver, part 1

I discovered multiple vulnerabilities in RtsPer.sys, an SD card reader driver developed by Realtek. These vulnerabilities enable non-privileged users to leak the contents of kernel pool and kernel stack, write to arbitrary kernel memory, and, the most interest…

Rodrigo Rosenfeld Rosas

In my previous article we explored how we can build huge web app monoliths with Ruby that can complete simple request tests in under a second. In this article we’ll focus on Rails apps. We’ll identify what causes a big app to take a long time to boot and run s…

Password managers aren't replacements for passkeys

There was some recent discourse about passkeys that bemoaned that they have so many issues that it’s better to stick with a password manager. The idea is that maintaining strong, unique passwords via a password manager is easier for users to understand. This c…

Why authorization architecture is probably fragile

We initially built our own authorization system in PostgreSQL, but as requirements grew more complex, we had to evolve toward a relation-based authorization service. We chose SpiceDB to handle advanced use cases like organizational hierarchies and temporary ac…

Surviving the complexity winter

Complexity science in 2024: claiming to be what it has never been, but gladly giving away its Nobel prize. This is a reflection about where the science of complex systems stands today, and where it…