We're still running out of IP addresses

Plus the backend technologies used by a search engine, bye to Trident, and a new Intel CPU attack.

#251 — January 29, 2020 Read on the Web StatusCode Weekly Covering the week's news in software development, ops, platforms, and tooling. The State of IP Address Allocations as of 2020 — "Can address allocation data help us to shed some light on what is happening in the larger Internet? Let's look at what happened in 2019." In short, IPv4 allocations have slowed to a crawl, transfers have boomed, and the limited growth of IPv6 paints a pessimistic picture for the future. Geoff Huston (ISP Column) GitHub Releases a Full API for GitHub Actions — Work with workflows, artifacts, and secrets (yep, you can now programmatically rotate them) on GitHub Actions via a new REST API. Here's the documentation. GitHub Find Performance Issues FAST with ScoutAPM — Get to the bottom of performance issues with ScoutAPM. ScoutAPM helps track down N+1 queries, sources of memory bloat, performance abnormalities and more. Try it for free today. ScoutAPM sponsor The Architecture of a Large-Scale Web Search Engine in 2019 — We missed this at the time but it's an interesting roundup of all the backend technologies being used at a privacy-oriented search engine provider. Cliqz JavaScript Libraries Are Almost Never Updated Once Installed — An analysis, based on CDNJS data, of when and if JavaScript libraries are updated after being installed onto websites (the headline kinda gives this one away 😉). Zack Bloom (Cloudflare) The Era of Microsoft's Trident Engine Ends — Edge moving over to using Chromium marked the true end of Microsoft's Trident engine. This is a great and detailed post looking back at the IE era, its quirks, technologies, along with the ideas Microsoft put forward during it. Plenty of good discussion on this one over at Hacker News too. Christian Schaefer Thunderbird, Once Mozilla's Flagship Email Client, Has a New Home — After a lot of doubts over its future, the still popular(ish) Thunderbird project is moving into a new subsidiary of the Mozilla Foundation, MZLA Technologies Corporation. The Mozilla Thunderbird Blog Quick bytes: Is Snapchat paying developers $500k per year to put cartoon mustaches on people's faces? Apparently yes. CacheOut is a new speculative execution attack on Intel CPUs that can acquire leaked data across security boundaries. Linode, the VPS provider, has unveiled free DDoS protection across its network. MongoDB, Inc. has added GraphQL support to its MongoDB-powered Stitch serverless dev platform. It seems that Amazon might be tracking every time you turn the page when reading on the Kindle. The Developer's Guide to Content Creation is a new (paid) book about publishing technical content. Russia has blocked the popular ProtonMail encrypted email service. AWS has extended the Amazon Linux AMI end of life to December 31, 2020. You can now get EC2 T3 instances on dedicated single-tenant hardware. 💻 Jobs DevOps Engineer at X-Team (Remote) — Work with the world's leading brands, from anywhere. Travel the world while being part of the most energizing community of developers. X-Team Find a Job Through Vettery — Vettery is completely free for job seekers. Make a profile, name your salary, and connect with hiring managers from top employers. Vettery 📕 Tutorials Anybody Can Write Good Bash (with a Little Effort) — If you write any shell scripts, you should pick up a tip or two from this. William Woodruff ▶  Learn AWS Lambda From Scratch: An Egghead Collection — 10 fast paced video lessons (totalling under half an hour) that fly through the use of AWS Lambda. The author claims "It's roughly enough info to pass the Lambda section of the AWS Certified Developer - Associate exam." Tomasz Łakomy The Security Engineer's First 90 Days Checklist — Learn how to prioritize your security efforts as the first security engineer or CISO in a startup with this checklist. Sqreen sponsor 3 Steps to Add Tests on Existing Code When You Have Short Deadlines — A commenter over on Reddit said it best: "It's nice to get something helpful for those of us who work with legacy crap." Nicolas Carlo What Is DevSecOps, and How Is It Different From DevOps? — 'DevSecOps' is a term that's picking up in the development space and throws security in as a key part of the ops process. Adam Crivello Five Methods For Database Obfuscation — There's nothing like testing on true datasets but what if your dataset is full of private data? How can you create a dataset that's 'real', shareable, but not a data protection liability? Anonymous 💡 Stories and Opinions How A Kaggle Grandmaster Cheated in a $25k AI Contest with Hidden Code — This is one of those fun but interesting stories. To sweeten a classification algorithm a developer added pre-sorted, real answers which would occasionally be chosen instead.. here's a technical breakdown of how it worked. The Register What Happens When a 96 Bitcoin Ransom Payment Ends Up on an Exchange? — The interesting tale of how a Canadian company's insurer paid a ransom (to decrypt files after a cyber attack) in Bitcoin and how they're trying to get the ransom back. JP Koning Serverless Cost Optimization: Kinesis Streams vs Firehose — Serverless cost efficiency isn't just about pay-per-use, it's also about choosing the right service for a particular task. Uri Parush (Lumigo) Why The TypeScript Team is using Gatsby for Its New Site — Discover why the TypeScript team uses Gatsby (a React powered site generator) and what constraints they use to make it work for their team. Orta Therox How I Got a Lifetime Ban from AWS — Completely illustrated with Larry David GIFs, this tweet thread is billed as a 'cautionary tale for idiots on computers'. Joe Morrison on Twitter The Infinite Loop That Wasn't: A Holy Grail Bug Story Endrift ▶  Temenos: Building Serverless Banking Software at Scale Amazon Web Services From FLOPS to IOPS: The New Bottlenecks of Scientific Computing? — We're entering a world where the main bottleneck for scientific applications is I/O operations per second rather than floating point operations. ACM SIGARCH 🛠 Code and Tools Microsoft Application Inspector: A New Source Code Analyzer — A software source code analysis tool that helps identify and surface well-known features and other interesting characteristics of source code to aid in determining what the software is or what it does. Microsoft Announcing Amazon Relational Database Service (RDS) Snapshot Export to S3 — You can now export Amazon Relational Database Service (Amazon RDS) or Amazon Aurora snapshots to Amazon S3 as Apache Parquet, an efficient open columnar storage format for analytics. Amazon Web Services Introducing Backup Ninja - Simple & Secure Database Backups Backup Ninja sponsor PostgresqlCO.NF: Postgres Configuration for Humans — An epic resource to dig into all the different settings Postgres provides, see what they're about, and discover further resources. Here's the story behind its creation. OnGres TLDR Pages: Simplified, Community Driven man Pages — A community effort to simplify the beloved man pages with practical examples. TLDR pages team Recommending GNU Recutils — GNU Recutils is a set of tools and libraries to access human-editable, plain text databases called 'recfiles'. James Tomasino query-pipe: Command-Line (ND)JSON Querying — A tool for filtering and transforming JSON from the command line using an SQL-like query language. Paybase Fabio: A Fast, Zero-Conf HTTPS and TCP Load Balancing Router Managed by Consul fabio

Curated by Cooperpress. Change your email address or Stop getting this newsletter. © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom