Since transitioning into the security field, I’ve specialized in Application Security. Moving forward, you can expect even more security-focused insights and analyses from my blog.

From The World

Useful built-in macOS command-line utilities

macOS comes with a lot of built-in utilities. Here’s a list of some that I find interesting.

What I Wish Someone Told Me About Postgres

Interesting tips for PostgreSQL.

Latency Comparison Numbers for Rails

A must-read for every Ruby on Rails developer: latency numbers in one table, from local variable access and React route to Elasticsearch queries and Largest Contentful Paint.

Rails Is Better Low Code Than Low Code

Rails is better low code than low code.

Rails for Everything

Rails is not dead; It’s better than ever. Try using it to make something new this year.

Recent Blog Posts

PostgreSQL Index Usage Monitoring

Having too many unused or underused indexes on a table can slow down write and update operations in your PostgreSQL database, making it crucial to regularly identify and manage them for optimal performance. Read more.

C# DbContext ServiceLifeTime

My note about C Sharp ServiceLifeTime.

Subdomain Hijacking

My dormant subdomain was recently hijacked, redirecting it to a online gamble registration page.

Tutorial - “su username vs su - username” - A Security Perspective

The main difference between su username and su - username lies in the environment variables that are loaded when switching to the specified user. Read more.

Envelope Encryption

Envelope encryption is the practice of encrypting plaintext data with a data key, and then encrypting the data key under another key.

AWS Secrets Manager

Explanation about AWS Secrets Manager with example code.

DevSecOps

My Notes about DevSecOps.

Is Getting AWS Solutions Architect Associate Certification Worth It?

If you are a full-time Software Engineer, there’s no strong need to pursue this certification. Read more.

How to Defend Against Brute-Force and DoS Attacks with Fail2ban, Nginx limit_req, and iptables

In this tutorial, I’ll explain how to protect your public-facing Linux server and Nginx web server from common threats, including brute-force and DoS attacks.