The Curious Engineer

All blogs / Security

Gingerlime

gingerlime.com

Hi! Welcome to Gingerlime. My name is Yoav Aner. I’m an Antipreneur. What’s an Antipreneur? Think Entrepreneur, minus the cut-throat, growth-at-all-costs mentality. Keeping things sustainable, personal, humane, yet still aiming for profitability. I co-founded a couple of companies. I’m now working o

SecurityPythonRuby / RailsGeneral

’10’15’20’25
Posts
99 from 14 Jul 2007 to 18 May 2026
Posting
now and then (2 in the last year)
Kind
personal blog
Feed
https://www.gingerlime.com/feed/

2026 2

  1. Stripe is friendly to “friendly fraud”
  2. Security Advisory: WooCommerce Delivery Notes RCE Exploit (CVE-2025-13773)

2024 1

  1. Self-hosting with Kamal: Watch your ports when shipping.

2023 1

  1. Reversible irreversible deletion

2021 1

  1. jumping through hoops

2020 12

  1. Does iOS 14 protect your privacy?
  2. How we switched to 4-day weeks
  3. Protecting TimeMachine backups from itself
  4. Sonos is spying on me… (and you)
  5. Why is Backblaze tracking me?
  6. Disposable emails: I gave Fastmail a second chance
  7. Who’s sharing my data? … and who the hell is Dave M. Rogenmoser?
  8. hey.com is onto something with its tracking-pixel blocker
  9. Bunq freeloading: joint accounts now cost at least 59.9% more, your privacy doesn’t matter either
  10. Who DOESN’T want to be hired?
  11. Does Apple care about your privacy?
  12. The cup-of-coffee pricing fallacy

2019 15

  1. Remember me
  2. envwarden and kubernetes secrets
  3. hosting-compose (or) the sad buyout of Webfaction
  4. too many toys?
  5. Security through obscurity with Bitwarden
  6. SEO optimization for suckers
  7. Planning for the unplanned
  8. simple and secure cron using AWS Lambda
  9. why I stopped using Intercom
  10. marketing lessons from the street market
  11. take your pick
  12. Innovation, Promises, Lies and Toupées
  13. A Guava a day
  14. invisible reCAPTCHA v3 with Rails and Devise
  15. Is it zen at work?

2018 5

  1. SmugMug video data loss
  2. Introducing envwarden – manage your server secrets with Bitwarden
  3. An open letter to SmugMug
  4. The dark side of Rails Russian Doll Caching
  5. The one (stupid) feature

2016 3

  1. Why I’m not using Fastmail
  2. a scalable Analytics backend with Google BigQuery, AWS Lambda and Kinesis
  3. a Scaleable A/B testing backend in ~100 lines of code (and for free*)

2015 2

  1. AlephBet – javascript A/B Test framework for developers
  2. Stop showing me your homepage

2014 8

  1. Coffee A/B Tasting – Results
  2. Coffee A/B Tasting – aeropressoccino
  3. Coffee A/B Tasting – Creme de la Crema
  4. Coffee A/B testing – first A/B taste
  5. Coffee A/B testing
  6. Cutting through red-tape with Stripe
  7. Android Teleportation (or silly location restrictions)
  8. Route53 healthcheck failover for SSL pages with nginx

2013 7

  1. Quick & Dirty SSL tunnelling for rails development
  2. Getting a bit creepy
  3. Measure *everything*
  4. Matryoshka Fragment Caching in Rails
  5. Django-Tastypie Authorization glitch
  6. Software? eugh!
  7. Graphite Alerts with Monit

2012 16

  1. Rails IP Spoofing Vulnerabilities and Protection
  2. I’m not pinterested in spam
  3. Statsd and Carbon security
  4. Rackspace ate my homework pt. II
  5. Rackspace ate my homework
  6. More ActiveAdmin Customizations with CanCan
  7. Simple Detection of Comment Spam in Rails
  8. Bootstrap cloud shoot-out part II
  9. Webfaction fail. over.
  10. Fabric Installer for Graphite
  11. bootstrap shooting at the clouds
  12. How much (cache) is too much?
  13. A different kind of spider
  14. updating lighttpd on debian squeeze against the BEAST
  15. Keep your hands off my tastypie
  16. encryption is not the right solution

2011 10

  1. dynamic goal values in google analytics
  2. unicode url double-encoding 404 redirect trick
  3. django memory leaks, part II
  4. django memory leaks, part I
  5. timthumb vulnerability
  6. ajaxizing
  7. thumbs up
  8. timing is everything
  9. passwordless password manager
  10. Smile

2010 6

  1. 2nd edition of 1
  2. Once upon a time
  3. iphone running late
  4. iphone asterisk sync
  5. who’s calling?
  6. Get in shape

2009 3

  1. Guilty Pleasures
  2. GoDaddy taking european domains hostage prior to expiration
  3. Postcode, Barcode and python code

2008 3

  1. sniffing some fresh tomatoes
  2. cron woes – file timsetamp monitoring plugin for munin
  3. JDK 5 Debian etch Virtuozzo installation oddities

2007 4

  1. Turbogears, Lighttpd and WSGI for real dummies
  2. Windows 2003 split DNS
  3. iCal on Mac with Apache on Windows
  4. Rsnapshot Server on Windows