Engineering writeups and incident post-mortems for #security.
Articles: 7In-depth engineering analysis: Zero-downtime kernel live patching with kpatch in enterprise Linux environments. Practical diagnostics, logs and production configuration.
In-depth engineering analysis: Post-mortem: TLS certificate renewal failure due to stale redirect in HTTP-01 challenge. Practical diagnostics, logs and production configuration.
In-depth engineering analysis: Building deterministic test environments with rootless containers. Practical diagnostics, logs and production configuration.
In-depth engineering analysis: Modernizing legacy OpenSSL 1.0.2 microservices to TLS 1.3 and ALPN. Practical diagnostics, logs and production configuration.
In-depth engineering analysis: eBPF XDP: dropping 14 Mpps SYN floods at the NIC driver layer. Practical diagnostics, logs and production configuration.
In-depth engineering analysis: systemd-resolved in isolated VPC: DNS caching gotchas and split-horizon resolution. Practical diagnostics, logs and production configuration.
In-depth engineering analysis: NTP clock skew of 1.2s: how clock drift invalidated distributed HMAC signatures. Practical diagnostics, logs and production configuration.
