LeMeteore

The purpose of this document is to make recommendations on how to browse in a privacy and security conscious manner. This information is compiled from a number of sources, which are referenced throughout the document, as well as my own experiences with the described technologies.

I welcome contributions and comments on the information contained. Please see the How to Contribute section for information on contributing your own knowledge.

Table of Contents

• Motivation
• Audience
• TL;DR?
• Updates
• Technologies that Affect Security and Privacy

LeMeteore

Types

A type is a collection of possible values. An integer can have values 0, 1, 2, 3, etc.; a boolean can have values true and false. We can imagine any type we like: for example, a HighFive type that allows the values "hi" or 5, but nothing else. It's not a string and it's not an integer; it's its own, separate type.

Statically typed languages constrain variables' types: the programming language might know, for example, that x is an Integer. In that case, the programmer isn't allowed to say x = true; that would be an invalid program. The compiler will refuse to compile it, so we can't even run it.

LeMeteore

mike@rbci:~$ psql -U postgres
psql (9.0.3)
Type "help" for help.

postgres=# update pg_database set datallowconn = TRUE where datname = 'template0';
UPDATE 1
postgres=# \c template0
You are now connected to database "template0".
template0=# update pg_database set datistemplate = FALSE where datname = 'template1';
UPDATE 1

LeMeteore

#![allow(dead_code)]

use std::fmt::Display;
use std::fmt::Formatter;
use std::fmt::Result;

enum Fzb {
    Value(u64),
    Fizz(u64),
    Buzz(u64),

LeMeteore

First three sections are just stuff from the Go team itself.

Introductory/general

• https://tour.golang.org
• https://play.golang.org
• https://golang.org/ref/spec (much shorter and less formal than most language specs)
• https://golang.org/pkg/ (stdlib ref, also reachable via godoc.org, e.g. godoc.org/compress/gzip)
• https://talks.golang.org
• https://blog.golang.org

LeMeteore

#!/usr/bin/env bash

set -x

NS="ns1"
VETH="veth1"
VPEER="vpeer1"
VETH_ADDR="10.200.1.1"
VPEER_ADDR="10.200.1.2"

LeMeteore

• The Rust Programming Language - the official book about all of Rust. This is what I recommend starting with if you want to learn Rust. The chapters most relevant to what I talked about are:
  • Ownership
  • References and Borrowing
  • unsafe
• The Rustonomicon - an official book all about writing unsafe Rust. Great deep dive of why and how to write good unsafe code.
• Fearless Concurrency - an official blog post on how safety makes concurrency easier.
• Memory Leaks are Memory Safe - a blog post written by a core team member on why memory leaks are still possible in Rust and what that implies.
• [Ruby, Rust, an

LeMeteore

#include <signal.h>
#include <sys/syscall.h>   /* For SYS_xxx definitions */
#include <sys/types.h>
#include <unistd.h>

int main() {
    pid_t tgid=18456;
    pid_t tid=24671;
    return syscall(SYS_tgkill, tgid, tid, SIGABRT);
}

LeMeteore

/**
 * setup JQuery's AJAX methods to setup CSRF token in the request before sending it off.
 * http://stackoverflow.com/questions/5100539/django-csrf-check-failing-with-an-ajax-post-request
 */

function getCookie(name)
{
    var cookieValue = null;
    if (document.cookie && document.cookie != '') {
        var cookies = document.cookie.split(';');

LeMeteore

Go Pipelines

This document demonstrates a basic pipeline in Go and talks about a risk in in implementing them. Keep in mind that:

• Using FizzBuzz here is contrived, but quite a nice way to demonstrate the concept. Obviously there is no advantage to running the basic workload of FizzBuzz in a Goroutine, but if the task involved heavy computation or long lived I/O, it starts to make a lot more sense.
• The problem discussed only applies to Goroutines that actually need to have a way to