Python: JSON vs Pickle
Which serializer is faster in Python, JSON or Pickle? A small benchmark measuring time and memory with the standard library, UltraJSON and Pickle protocols 4 and 5.
DevSecOps series No. 2: Automatic security checks for Dockerfiles
Second post of the DevSecOps series. How to check Dockerfiles for security issues automatically in your CI pipeline, comparing Hadolint and Dockerfile-security.
DevSecOps series No. 3: Old-fashioned issues in DevOps, zip bombs
A zip bomb is a 2001 attack that still works in 2019 and, in an automated pipeline, can reach production on its own. A demo taking down Apache Tomcat with a .war file.
DevSecOps series No. 4: Protecting environment variables in the most well-known CI systems
How Jenkins, GitHub Actions, GitLab CI/CD and Bitbucket Pipelines store secrets, and how to use them so production credentials never end up in a log.
Enhancing SSH server security: configuring OTP for SSH access
How to add a one-time password (OTP) as a second factor to your SSH server with libpam-google-authenticator on Ubuntu or Debian, step by step.