Profile picture
, 21 tweets, 10 min read
My Authors
Read all threads
Thread

One of the perks of working at @Cloudflare is that technical people are encouraged to share their voice with the public on the company blog. Generous coworkers donate time, energy, and expertise to enable these amazing builders to teach and explain for the benefit of all.
Some of these posts are timeless, some are extremely timely, and more than a few of them are deep. Very deep.

I'm going to highlight a few of my favorites from the last several years in this thread.

blog.cloudflare.com (bookmark, like, retweet, etc.)
How and why the leap second affected Cloudflare DNS
blog.cloudflare.com/how-and-why-th…

The post-mortem is a staple of the blog. In this one, @jgrahamc explores how an incorrect assumption about how time works caused a serious outage and how a single character was the fix.
How to Monkey-Patch the Linux Kernel blog.cloudflare.com/how-to-monkey-…

This one is just fun. The lengths @KentonVarda went to support a custom hybrid Qwerty/Dvorak keyboard is admirable.
The WireX Botnet: How Industry Collaboration Disrupted a DDoS Attack blog.cloudflare.com/the-wirex-botn…

A behind-the-scenes look at an industry-wide botnet hunt by the late Jaime Cochran.
Thinking about color blog.cloudflare.com/thinking-about…

The blog is not just for network programmers and security engineers. @mrmrs_ and @samjbmason dig deep into the systems and thought behind Cloudflare's color palette.
Towards Post-Quantum Cryptography in TLS blog.cloudflare.com/towards-post-q…

Upgrading the Internet one cryptography algorithm at a time. Put your math professor hat on and dig deep with @_henrycase.
Introducing time.cloudflare.com blog.cloudflare.com/secure-time/

More of a story than a product launch post, follow @aanchalmalhotre on her journey to secure Internet time during her PhD program.
HTTP/3: From root to tip blog.cloudflare.com/http-3-from-ro…

This is @SimmerVigor's extensive deep dive into the history of the HyperText Transfer Protocol from its origins to HTTP/3.
A History of HTML Parsing at Cloudflare
blog.cloudflare.com/html-parsing-1/
blog.cloudflare.com/html-parsing-2/

HTTP and HTML are the main technologies that make the web possible. This deep dive explores the history of parsing HTML at Cloudflare, everyone's "favorite" "language"
Details of the Cloudflare outage on July 2, 2019
blog.cloudflare.com/details-of-the…

Nobody's perfect! Humbly acknowledging mistakes and transparently explaining the technical process to discover and remedy them is how you improve.
Reflections on reflection (attacks) blog.cloudflare.com/reflections-on…

Sometimes it's great to just explore classic security issues and look at the data to see what's interesting. @majek04 is among the best at this.
Incident report on memory leak caused by Cloudflare parser bug
blog.cloudflare.com/incident-repor…

Also known as #cloudbleed. This is a fascinating read about many things going wrong at once and what can happen when you replace an engine while driving on the highway.
xdpcap: XDP Packet Capture
blog.cloudflare.com/xdpcap/

Some of the best blog posts accompany new software that is being open sourced. This one explores the depths of (e)BPF and comes with code!
HPACK: the silent killer (feature) of HTTP/2 blog.cloudflare.com/hpack-the-sile…

Compression is a performance feature and a security risk all in one. @thecomp1ler has done a lot of work on the subject, including this fun explainer.
Introducing Cloudflare Workers: Run JavaScript Service Workers at the Edge
blog.cloudflare.com/introducing-cl…

This blog post introduces the technology behind Cloudflare Workers, the groundbreaking edge compute platform.
Change the (S)Channel! Deconstructing the Microsoft TLS Session Resumption bug blog.cloudflare.com/microsoft-tls-…

At Cloudflare's scale, we see interesting bugs. This deep dive by @prdonahue explores a nasty protocol bug in schannel that was discovered with the help of Fitbit.
Too Old To Rocket Load, Too Young To Die blog.cloudflare.com/too-old-to-roc…

Great post on re-writing a crusty old feature from scratch based on how the web has evolved.
Squeezing the firehose: getting the most from Kafka compression
blog.cloudflare.com/squeezing-the-…

@ibobrik spends his time figuring out how to squeeze systems until they perform optimally. This is just one of his many stories.
Inside the Entropy
blog.cloudflare.com/inside-the-ent…

A lot of people know about the lava lamps, but did you know that there is a group of organizations working together to provide trustworthy randomness called The League of Entropy? @alxdavids explains.
This is just a taste as there are many other interesting posts I failed to include in this list. Which blog posts are your favorites? What sort of post would you write if given the chance?
Missing some Tweet in this thread? You can try to force a refresh.

Enjoying this thread?

Keep Current with Nick Sullivan

Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Related hashtags

#cloudbleed

More from @grittygrease see all

Profile picture
Nick Sullivan
@grittygrease
I was chatting with a friend of mine who hires engineers who told me that in their company's hiring process they have an explicit focus on assessing the candidate's "grit" during the interview process.
Specifically, they try to determine
1) how willing the candidate is to do the thankless grunt work that is needed for team success
2) how likely are they to spend their time reducing the amount of gruntwork their teammates have to do
They consider it an explicit red flag if an engineer is only focused on doing "the hard/fun stuff" or high-visibility projects and expecting their peers to pick up the slack. Such engineers tend to be more interested in their own career progress than the team's success.
Read 9 tweets
Profile picture
Nick Sullivan
@grittygrease
Richard Barnes (@rlbarnes) just kicked off #RealWorldCrypto with a great overview of MLS, a new proposed standard for group message encryption. There’s still time to contribute: mlswg.github.io
Joanne Woodage (@joannewoodage) outlines a really cool attack on Facebook’s abuse reporting mechanism for encrypted messages. A great example of how popular schemes like AES-GCM can be easily misused. #RealWorldCrypto
The team also came up with a new one-pass authenticated encryption scheme based only on collision-resistant hash functions. It’s somewhat reminiscent of the Keccac team’s Keyac encryption based the a sponge construction: keccak.team/keyak.html
Read 70 tweets
Profile picture
Nick Sullivan
@grittygrease
Welcome to #CryptoWeek at @Cloudflare!

Kicking it off with an introduction by me: blog.cloudflare.com/crypto-week-20…

The Distributed Web Gateway (starring IPFS): blog.cloudflare.com/distributed-we…

IPFS Gateway Validator extension: blog.cloudflare.com/e2e-integrity/

Stay tuned every day for new announcements!
You can now access anything on IPFS at cloudflare-ipfs.com/ipfs/<hash>, or you can point any hostname to an IPFS hash and serve that content through HTTPS.

For example, here's a full, searchable mirror of Stack Exchange:
…sec.stackexchange.cloudflare-ipfs.com
If you set up DNSSEC, then users can run our new IPFS Gateway Validator browser extension to make sure they're getting your content with end-to-end integrity validation. Valid sites are highlighted by this beautiful blue fingerprint icon by @kkblinder. addons.mozilla.org/en-US/firefox/…
Read 3 tweets

Related threads

Profile picture
stefano_fait
@stefanofait
#Thread

1.
 #TulsiGabbard is the de-facto leader of the emerging leftwing sovereign populist movement in the United States.
I suspect this is by design.
In due time, DNC and RNC will be dissolved and replaced by a #PatriotParty.
She will be one of the leaders.
2.
 She's never going to win the democratic primary, but many voters will see how the DNC and MSM have ganged up on her and will not vote for Hillary or Michelle. Some on the anti-war left might even vote Trump as an act of protest and reprisal.
3.
 If she were to run as an independent. She would siphon votes from the Democrats, not from Trump. She would actually help him. Why would a republican vote for her instead of POTUS? It doesn't make any sense whatsoever.
Read 41 tweets
Profile picture
tolu ogunlesi
@toluogunlesi
One of the very interesting things @NNPCgroup is doing is their refinery collocation initiative, that allows private investors to develop brownfield refineries near existing NNPC refineries, so that they can share facilities - access to crude etc.
#Thread
One of the Cos taking advantage of this Initiative is African Refinery Port Harcourt Ltd. It’s set to relocate a 100,000bpd crude oil refinery - which used to be owned by BP, in Turkey; and which it has since acquired - to Nigeria, for collocation with the NNPC Refinery in PH.
“ARPHL signed a framework agreement with the NNPC on 24 July 2017, whereby ARPHL will own and operate the 100,000BPD refinery on a proposed 45 hectares of vacant land within the battery limit of the Port-Harcourt Refinery Complex in Rivers State, Nigeria.” arphl.com/about-us/
Read 6 tweets
Profile picture
WonderWoman 🦋
@SecretDurga2
#Thread "Darkest Side of #Gandhi"

I personally think. Under Gandhi India never could get freedom with his rule of "Ahimsa".

India is not Independent because of Gandhi.

N share this.

To know more 👇👇👇
1)Britsh PM Clement Attlee had accepted that Gandhi’s role was minimal n we left because of erosion of loyalty of armymen. Attlee told Netaji, not Gandhi, got India freedom.
Not just this, this was already anticipated in 1945 by British.

INDEPENDENCE IS NOT FOR GANDHI.
2) i)In 1900 Boer War as an assistant superintendent of the Indian volunteer stretcher-bearer corps.Gandhi wrote in his autobiography-
“When the war was declared,my personal sympathies were all with the Boers,but my loyalty to the British rule drove me to participation with this
Read 29 tweets
Profile picture
Dr. Sturg
@DrSturg
#Thread 1/ Today's a day when I think a lot of people are going to be discussing and critiquing #journalism Since I've been teaching the subject for quite some time now, here's some things I tell my students about their relationships to public officials.
2/ The first rule of #journalism, even in the @spj_tweets code of ethics, is to "seek truth and report it." Sources of truth don't always want it shared. Everyone wants to look good, and when people have chosen to do bad things, they don't want you to expose them.
3/ A side #ProTip for newsmakers: The best way to avoid unfavorable coverage is to not do bad things. It's not 100%, but it works a lot better than other shenanigans you try.
Read 16 tweets
Profile picture
Gonto
@mgonto
#thread One of the biggest misconceptions of new managers is that they think they need to come across as having strong personalities and no weaknesses.

What they don't realize is that by doing that they alienate people. #thread 👇
* When junior people see their managers as very strong, they might be scared to share their opinion
* When senior people see their managers as strong on things that don't make sense, they might think they're an idiot and not say anything
I think the best thing we can do with our teams is create a vulnerability based trust where we can be who we really are. We're never as strong as when we're ourselves.
Read 5 tweets

Trending hashtags

#FoxNews #Russia #disability #AlejandroFleming #StopHindiImperialism #inclusion #Prestitute #Curico #EstadoDeEmergencia #Membrillar #FAMAE #NMCorporatenews #guanacos #media #ChileDespierto #Misogyny #heteropatriarchy #PBS #SaudiArabia #EstoNoHaAcabado #FactsAboveLies #escopetas #DictaduraEnChile #transactions #Cavancha
Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!