Marek's idea of the day
NetworkingLinux / UnixPerformance / optimizationSecurityEngineering blogs
- Posts
- 94 from 31 May 2012 to 31 Mar 2023
- Posting
- quiet since 2023
- Kind
- personal blog
- Feed
- https://idea.popcount.org/rss.xml
2023 1
2022 1
2021 1
2020 4
2019 9
2018 12
- Every 7.8us your memory has a hiccup
- The rise of multivector attacks
- Why we are bumping the IPv6 MTU
- How to drop 10 million packets
- Today we mitigated the resolver
- mmproxy - creative linux routing hack
- Using TPROXY for Spectrum product
- Sockets, Hop Distance and writing eBPF assembly
- The real cause of large DDoS - IP Spoofing
- Memcrashed - Amplification attacks from 11211/UDP
- IP Spoofing at Packet Hacking Village
- SYN packet handling
2017 12
- 5 talks in 5 weeks
- Perfect locality and three SystemTap scripts
- The sad state of Linux socket blancing
- Meet Gatebot - a bot that allows us to sleep
- IP fragmentation is fundamentally broken
- SSDP attack crossing 100Gbps
- Reflections on reflection (attacks)
- Sandboxing landscape
- Epoll is fundamentally broken 2/2
- Socket API thoughts
- Epoll is fundamentally broken 1/2
- Select is fundamentally broken
2016 11
- TLD glue sticks around too long
- A brief history of select(2)
- Say Cheese: DDoS from IoT devices
- Strange Loop - IP Spoofing
- This is strictly a violation of the TCP specification
- Why we use the Linux kernel's TCP stack
- The curious case of slow downloads
- The revenge of the listening sockets
- Web archeology - itblog
- The winter of weekend attacks
- Enigma - Building a DoS mitigation pipeline
2015 11
- A story of one latency spike
- Black Hat EU - Defending the indefensible
- Analysis of a browser-based DDoS
- Kernel bypass
- Turtles all the way down
- How to achieve low latency
- How to receive a million packets per second
- CloudFlare Interview Questions
- OARC - Dealing with DNS packet floods
- Deprecating the DNS ANY
- Path MTU discovery in practice
2014 3
2013 14
- Logging best practices
- How to resolve a million domains
- Visualising SipHash
- It ain't about the callbacks...
- FORTIFY_SOURCE
- IR is better than assembly
- How to sleep a million years
- Baby steps in x86 assembly
- Fun with The Great Firewall
- Hardware entropy: RDRAND
- Bitsliced SipHash
- Stripping layer 2 in pcap
- Counting cycles - RDTSC
- SipHash
2012 15
- Linux process states
- lsof: can't identify protocol
- Too much Erlang
- How to crash gdb on OS X
- SSL scanners
- AES support in Westmere
- Django with SockJS
- Reinventing spinlocks
- Concurrent queue in C
- Am I a cyborg now?
- Introduction to HAMT
- Rethinking full text search
- SSL fingerprinting for p0f
- Dissecting SSL handshake
- Hello world!