Discover and read the best of Twitter Threads about #Protobuf
Most recents (3)
Currently I'm researching two areas of #openEHR CDR implementation: 1. Conformance verification, 2. Performance / High throughput.
For #openEHR conformance verification I'm continuing my work at #HiGHmed in which I designed hundreds of test cases and data sets (archetypes, templates, JSON and XML instances), to verify an openEHR CDR complies with the openEHR specs.
The first implementation of those #openEHR compliance test cases was done in #RobotFramework which is a Python tool, initially tests were really nice to read, but with complexity, the Robot tests started to look messy and were difficult to maintain.
#ESETresearch analyzed #FontOnLake, a previously unknown #malware family that utilizes custom and well-designed modules, targeting #Linux systems.
welivesecurity.com/2021/10/07/fon…
@HrckaVladislav 1/6
welivesecurity.com/2021/10/07/fon…
@HrckaVladislav 1/6
Modules are under development and provide #remoteaccess to the operators, collect credentials + serve as a proxy server. To do this, #FontOnLake uses modified legitimate binaries adjusted to load further components, its presence is always accompanied by a #rootkit. 2/6 
The sneaky nature of #FontOnLake tools, along with advanced design and low prevalence suggest usage in targeted attacks. #ESETresearch believes its operators are extra cautious as almost all samples seen use unique C&C servers with varying non-standard ports. 3/6
En la chamba tenemos un custom RPC basado en @Netty_Project y #ProtoBuf, es de las piezas que más me gustan, es super eficiente y nos facilita crear servers de servicios robustos y sobre todo, es interoperable con otras tecnologías fuera de la JVM.
Igual se desarrollaron unas clases para crear clientes que abstraen la "complejidad" de protobuf, así como agregan una capa de resiliencia y en nuestro código solo vemos interfaces de negocio, es una gran idea y nos facilita desacoplarse de nuestra capa de comunicación custom.
Con todo esto, el equipo ha construido todo el middleware que soporta las operaciones de negocio, tanto los servers como los clientes proporcionan telemetría básica y las métricas que generan son bastante útiles para monitoreo.
