Firezone is a fast, flexible VPN replacement built on WireGuard® that eliminates tedious configuration and integrates with your identity provider.

Smart SSH, HTTPS, MySQL and Postgres bastion/PAM that doesn't need additional client-side software - warp-tech/warpgate

Nebula Overlay Networks: Extend network access with on-demand, encrypted tunnels between any hosts on any network. Defined Networking is the company behind the Nebula open-source project.

AtomicOS - A security-first operating system built from scratch. - ipenas-cl/AtomicOs

How I wrote filter rules for YouTube

Look no further. This is it.

Wherein I record things I wish I'd known earlier

Gin is a HTTP web framework written in Go (Golang). It features a Martini-like API with much better performance -- up to 40 times faster. If you need smashing performance, get yourself some Gin. - gin-gonic/gin

Modular CJIS Compliance Ruleset for Wazuh A maintainable, version-controlled collection of custom Wazuh rules mapped to CJIS Security Policy controls. Designed for easy auditing, deployment, and integration with SIEM workflows. - TristanGNS/wazuh-cjis-rules

Reinstall your VPS to minimal Debian. Contribute to bohanyang/debi development by creating an account on GitHub.

ChatGPT can harm an individual’s critical thinking over time, a study released this month suggests. Researchers at MIT’s Media Lab asked subjects to write several SAT essays and separated sub…

Free to download, The Little Go Book is an introduction to Google's Go programming language

In this blog we will learn about firewalls in GCP

Some thoughts in defense of the often ridiculed Honeywell H316 kitchen computer.

Abstract page for arXiv paper 2506.13052: Buy it Now, Track Me Later: Attacking User Privacy via Wi-Fi AP Online Auctions

Late last year, eight major U.S. telecoms were the victim of a massive intrusion by Chinese hackers who managed to spy on public U.S. officials for more than a year. The “Salt Typhoon” hack was so severe, the intruders spent a year rooting around the ISP networks even after discovery. AT&T and Verizon, two of the compromised companies,…

The IQUNIX Magi65 is the best-sounding low-profile aluminum keyboard on the market, with VIA support, customizable buttons, volume knob, and ultra-long battery life. Ready to challenge any low-profile keyboard on the market!

Your All-in-One Learning Portal: GeeksforGeeks is a comprehensive educational platform that empowers learners across domains-spanning computer science and programming, school education, upskilling, commerce, software tools, competitive exams, and more.

Papermark is the open-source DocSend alternative with built-in analytics and custom domains. - mfts/papermark

Powerful Open Source Document Management System (DMS) & Enterprise Content Management (ECM) ✓Flexible ✓License-free ✓Reliable since 2003

{{ $description }}

PyITAgent is a Python-based Windows executable designed to serve as an agent for your computer, allowing it to sync seamlessly with your Snipe-IT asset management system. - booskit-codes/PyITAgent

Agent written in GO that updates assets in a Snipe-IT instance with local data. - azusapacificuniversity/snipe-agent

Agent written in GO that updates assets in a Snipe-IT instance with local data. - azusapacificuniversity/snipe-agent

Set up locally hosted OCR (On-premise) to allow your documents to be searchable and editable without leaving your own environment.

The portal for geek projects of Jason A. Donenfeld, also known as ZX2C4.

An embedded platform for combining Depth and AI, built around Myriad X

Intel Movidius Myriad X Platform by Luxonis. Contribute to itsderek23/DepthAI development by creating an account on GitHub.

I had long been aware of the [effort of cznic](https://gitlab.com/cznic/sqlite) to automatically translate the C source of SQLite to Go while avoiding the complexity CGo would introduce. SQLite was always meant to be a database you embed into your application, and I was curious what tradeoffs that meant, if any, and just generally how it differed from the usual suspects (PostgreSQL, etc.). To explore these trade-offs and differences, I decided to dive deeper into the usage of this library. SQLite is a single-writer multiple-reader database. Using just a single instance of database/sql.DB will not work well with this, because it will make it hard to avoid receiving SQLITE_BUSY errors when multiple writers try to run at the same time (because sql.DB is a connection pool). So we will need to separate readers from writers by making two instances of database/sql.DB and limiting the writer to a single [MaxOpenConn](https://pkg.go.dev/database/sql#DB.SetMaxOpenConns) and the reader to as many as you require. So far, SQLite is behaving remarkably like other databases apart from the single-writer gotcha; we still have connections and per-connection settings. The usual way to pass these settings is usually in the DSN you pass to [sql.Open](https://pkg.go.dev/database/sql#Open) and this is [definitely possible](https://pkg.go.dev/modernc.org/sqlite#Driver.Open), but I find that it would be more straightforward if I could just run my custom SQL when a new connection is made[1]. We can do that with [sqlite.RegisterConnectionHook](https://pkg.go.dev/modernc.org/sqlite#RegisterConnectionHook). Now the question is what settings to use, because [there are quite a few of them](https://www.sqlite.org/pragma.html). These are the ones I am using personally: - `PRAGMA journal_mode = WAL;` Use write-ahead-logging. Better concurrency, but with an edge-case: with heavy writers, the wal can grow idefinitely ([see for more](https://www.sqlite.org/cgi/src/doc/wal2/doc/wal2.md)). I don't expect this will happen in my use-case. For a good description on the various jornal modes, [see this blogpost](https://www.mycelial.com/learn/sqlite-journal-mode-options). - `PRAGMA synchronous = NORMAL;` Since with the WAL journal mode, this is safe, there is no reason to use FULL. - `PRAGMA temp_store = MEMORY;` Let's store temporary indices, tables, etc. in memory, my use-case is not very resource-constrained to require using the filesystem (also, [this is a fun read](https://www.sqlite.org/fasterthanfs.html) if we are talking about additional syscalls to the kernel) - `PRAGMA mmap_size = 30000000000; -- 30GB` Just making sure, access to my database is always done with memory-mapped I/O. - `PRAGMA busy_timeout = 5000;` How much time to wait in milliseconds after which SQLITE_BUSY is returned when waiting for the db to unlock. - `PRAGMA automatic_index = true;` Make sure [automatic indexing](https://www.sqlite.org/optoverview.html#autoindex) is enabled, it can only help, and is a great way to get warnings about indexes that should be created. - `PRAGMA foreign_keys = ON;` Make sure foreign key enforcement is enabled. - `PRAGMA analysis_limit = 1000;` Make sure [ANALYZE](https://www.sqlite.org/lang_analyze.html#approx) returns quickly in case the DB gets large. - `PRAGMA trusted_schema = OFF;` No idea what security audited functions are, but this setting makes sure only those can be run. The manual page tells me to turn it off anyway, so let's do that. Not all of these settings are per-connection settings, but it doesn't hurt to always run all of these on every connection, and having a single "Init SQL" makes things simpler. Let's deal with explicit transactions next. The default transaction mode is DEFERRED, meaning that it depends on the next statement what type of transaction is started (if a SELECT statement comes first, a read transaction is started, with the possibility of upgrading it to a write transaction depending on the statements that follow). With our setup, there should never be multiple writers concurrently, so making all transactions write transactions from the get-go (with BEGIN IMMEDIATE) can only help us show if this invariant is violated. Putting this all together, this is the code we arrive at: ```go package main import ( "bytes" "context" "crypto/sha1" "database/sql" "database/sql/driver" "encoding/hex" "fmt" "time" "modernc.org/sqlite" ) type DB struct { dbPath string Read *sql.DB Write *sql.DB } const initSQL = ` PRAGMA journal_mode = WAL; PRAGMA synchronous = NORMAL; PRAGMA temp_store = MEMORY; PRAGMA mmap_size = 30000000000; -- 30GB PRAGMA busy_timeout = 5000; PRAGMA automatic_index = true; PRAGMA foreign_keys = ON; PRAGMA analysis_limit = 1000; PRAGMA trusted_schema = OFF; ` func New(ctx context.Context, dbPath string) (db *DB, err error) { db = &DB{ dbPath: dbPath, } // make sure every opened connection has the settings we expect sqlite.RegisterConnectionHook(func(conn sqlite.ExecQuerierContext, _ string) error { _, err = conn.ExecContext(ctx, initSQL, nil) return err }) write, err := sql.Open("sqlite", "file:"+db.dbPath) if err != nil { return } // only a single writer ever, no concurrency write.SetMaxOpenConns(1) write.SetConnMaxIdleTime(time.Minute) if err != nil { return } read, err := sql.Open("sqlite", "file:"+db.dbPath) if err != nil { return } // readers can be concurrent read.SetMaxOpenConns(100) read.SetConnMaxIdleTime(time.Minute) db.Read = read db.Write = write return } func (db *DB) InTransaction(ctx context.Context, tx func(context.Context, *sql.Conn) error) (err error) { // cancel anything that takes longer than 5 seconds var cancel func() ctx, cancel = context.WithTimeout(ctx, time.Duration(5*time.Second)) defer cancel() // separate conn thats just for us // so that the transactions queries are executed together conn, err := db.Write.Conn(ctx) if err != nil { return } defer conn.Close() _, err = conn.ExecContext(ctx, "BEGIN IMMEDIATE TRANSACTION") if err != nil { return } defer func() { if r := recover(); r != nil || err != nil { if _, err = conn.ExecContext(ctx, "ROLLBACK"); err != nil { return } } }() err = tx(ctx, conn) if err != nil { return } _, err = conn.ExecContext(ctx, "COMMIT") return } ``` Just as a small added bonus, it's also very easy to register our own go functions that we can then call from SQL. In this example, we define the sha1 function, receiving and returning a single argument, and always returning the same output for the same input (thus the deterministic). For more information, [see the docs](https://www.sqlite.org/appfunc.html) ```go func registerFuncs() { // lets add our own sha1 hash function usable from SQL sqlite.MustRegisterDeterministicScalarFunction( "sha1", 1, func(ctx *sqlite.FunctionContext, args []driver.Value) (driver.Value, error) { var arg *bytes.Buffer switch argTyped := args[0].(type) { case string: arg = bytes.NewBuffer([]byte(argTyped)) case []byte: arg = bytes.NewBuffer(argTyped) default: return nil, fmt.Errorf("expected argument to be a string, got: %T", argTyped) } h := sha1.Sum(arg.Bytes()) return hex.EncodeToString(h), nil }, ) } ``` In conclusion, this solution works perfectly well for most of the usage scenarios out there where immense scaling is neither expected nor needed. There are faster ways to use SQLite with Go (see the [excellent cvilsmeier benchmarks](https://github.com/cvilsmeier/go-sqlite-bench)), but its still plenty-fast enough, and avoiding CGo makes it very convenient also. [1]: This is another thing that database/sql.DB being a connection pool makes harder.

Package gorilla/mux is a powerful HTTP router and URL matcher for building Go web servers with 🦍 - gorilla/mux

Free to download, The Little Go Book is an introduction to Google's Go programming language

An extremely fast Python package and project manager, written in Rust. - astral-sh/uv

When it’s time to leave your job, someone from Human Resources may want to sit you down and have an “exit interview”. They’ll ask you questions like “Why are you leaving your position?” and “What was it like to work with your manager.” It’s done with this premise that they’re looking to make the company better.

I have been working on Windows and needed to connect to a Network Interface (NIC). I ran into problems, here is what I learned and hope it saves the same trouble I had in troubleshooting.

i have gone a little above and beyond trying to get all the features of VSCode

Best source for data center parts, networking, storage, switches, printers and POS equipment. From brands like HP/IBM/CISCO/Honeywell/: new, used, refurbished. Available at great prices, with free shipping and prompt customer service. You can contact us by phone at (949)-656-8300, eBay messaging or email and expect prompt responses!

Kyle Chayka writes that studies from M.I.T., Cornell, and Santa Clara University suggest that ChatGPT, Meta AI, and the like make our brains less active.

Just useful tools I developed when assessing the security of open source web applications. - Xorriath/tools

If you have any kind of server connected to the Internet, you are no doubt aware that no matter how small or unimportant it might seem, it is frequently probed, tested or subject to various attempts at abuse.

The CIS Critical Security Controls organize your efforts of strengthening your enterprise's cybersecurity posture. Get to know the Controls today!

Keybase is for keeping everyone's chats and files safe, from families to communities to companies. MacOS, Windows, Linux, iPhone, and Android.

The world's most flexible commerce platform. Contribute to medusajs/medusa development by creating an account on GitHub.

Nginx installer for AlmaLinux, Rocky Linux and CentOS. Shell Menu based install and management for optimized LEMP stack - Nginx, PHP-FPM and MariaDB MySQL

This month I built and launched a website called Earlyname, which lets you claim your original “OG” usernames on new apps, games and websites (for example @ben, @mike or @mia). This is the story of how it went.

Make Python great again. Contribute to samshadwell/TrumpScript development by creating an account on GitHub.

In a Twitter discussion last week on ransomware attacks, KrebsOnSecurity noted that virtually all ransomware strains have a built-in failsafe designed to cover the backsides of the malware purveyors: They simply will not install on a Microsoft Windows computer that…

Contribute to petertjmills/escpos-server development by creating an account on GitHub.

Lavanda gtk theme for linux desktops. Contribute to vinceliuice/Lavanda-gtk-theme development by creating an account on GitHub.

Lavanda-gtk-themeRequirements- GTK `>=3.20`- `gnome-themes-extra` (or `gnome-themes-standard`)- Murrine engine — The package name depends on the distro. - `gtk-engine-murrine` on Arch Linux -...

Insomnia has become a public-health emergency.

Comprehensive analysis of email startup failures. Why most email companies fail, burn millions in VC funding, and shut down. Learn what actually works.

Chimera Linux

You might wonder how apps are grouped under dozens of different categories in Windows 11's new Start menu? It's a JSON file.

These confs are pulled into our SWAG image: https://github.com/linuxserver/docker-swag - linuxserver/reverse-proxy-confs

Headless browsers are currently gaining popularity as an efficient way to test web applications because they do not affect the user interface. In this post, I am going to discuss the benefits of Headless Chrome and two approaches for using Headless Chrome to automatically create PDF reports.  What is Headless Chrome? Headless Chrome is a…

A web-scraping framework written in Javascript, using PhantomJS and jQuery - nrabinowitz/pjscrape

The Bookmark Everything app. Hoard links, notes, and images and they will get automatically tagged AI.