The Curious Engineer

All blogs / Security

Volution Notes

notes.volution.ro

Notes on various subjects, mostly regarding IT technology and security.

SecurityLinux / UnixDevOps / SRE / infrastructureNetworking

Posts
55 from 22 Nov 2018 to 28 Mar 2026
Posting
now and then (1 in the last year)
Kind
personal blog
Feed
https://notes.volution.ro/index.xml

2026 1

  1. Designing a single-file mmap-backed read-only hashed multi-table database

2025 3

  1. Individual URL compression experiment initial thoughts
  2. EU-based cloud alternatives affordability for small projects and companies
  3. Bot countermeasures impact on the quality of life on the web

2024 6

  1. Misusing Linux policy based routing for firewalling
  2. Linux UEFI booting simplified
  3. Infineon TPM firmware update on the HP t620 thin client
  4. Musing about a secure computer for sensitive data
  5. Context binding password-based authentication
  6. Pre-hashing large password files used with PBKDFs

2023 17

  1. Lightweight container building blocks
  2. Please don't write application launchers in `sh`!
  3. We need deterministic installs, not just immutable OSs
  4. Linux becoming a Windows / OSX clone
  5. Learning before dabbling in applied cryptography
  6. Misusing random oracles for practical purposes
  7. Experimenting with multi-factor encryption
  8. My biases when choosing open-source tools
  9. SSH authorization keys experiments
  10. Privatizing our digital identities
  11. Another take on the binary to text encoding
  12. Binary to text encoding -- state of the art and missed opportunities
  13. Debating deterministic passwords
  14. Containerized deployments, the Death Star of complexity
  15. Passwords in deployment or development scripts?
  16. Memorable password schemes and patterns?
  17. Password strength for offline storage?

2022 7

  1. Securing my static site server with seccomp
  2. Static site hosting hurdles
  3. Useful Firefox addons
  4. The many flavors of hashing
  5. On modern laptop requirements
  6. The impact of hacktivism / protestware in open-source
  7. Single binary executable packages

2021 5

  1. Good to know -- issue 2021.02
  2. Security through stupidity, Banca Transilvania style
  3. Good to know -- issue 2021.01
  4. In Go-land you pay even for what you don't use
  5. The curious case of shell commands, or how "this bug is required by POSIX"

2020 5

  1. Benchmarking "textual" file compression methods
  2. Cleaning and compacting Git repositories
  3. Properly sorting FQDNs in Bash
  4. The before time -- microsoft.com
  5. The before time -- google.com

2019 8

  1. Good to know -- issue 2019.02
  2. A visual comparison between HTTP/1.1 vs HTTP/2
  3. Exfiltrating Go current goroutine ID
  4. Good to know -- issue 2019.01
  5. Containers Will Not Fix Your Broken Culture (and Other Hard Truths)
  6. Choosing Linux RAID5 chunk size (part 3) -- Ext4 / CDNjs raw data
  7. Choosing Linux RAID5 chunk size (part 2) -- the internet's wisdom
  8. The State Of Software Security In 2019

2018 3

  1. Choosing Linux RAID5 chunk size (part 1) -- block-device level benchmarks
  2. The chronicle of getting text sizing to just work in mobile browsers
  3. Hello world!