All articles

2021

September

September 16, 2021 » A categorized list of all Java and JVM features since JDK 8 to 17
September 14, 2021 » How to use the refresh token with Cognito
September 7, 2021 » How to secure the Cognito login flow with a state nonce and PKCE

August

August 31, 2021 » AWS security case study: Vulnerable roles
August 24, 2021 » How to integrate with Elastic Stack via Logstash
August 17, 2021 » How to add Cognito login to a website
August 10, 2021 » AWS security case study: Unprotected logs
August 3, 2021 » AWS security case study: Hardcoded credentials

July

July 29, 2021 » Introducing: Async/await in Javascript video course
July 27, 2021 » Do not use fs sync methods in Javascript, use fs.promises instead
July 20, 2021 » How to avoid uncaught async errors in Javascript
July 13, 2021 » Lambda development toolbox: Set environment variables locally
July 6, 2021 » How authentication and authorization work in AWS

June

June 29, 2021 » Why use a single domain for the backend and the frontend
June 22, 2021 » Lambda development toolbox: CLI logs watcher
June 15, 2021 » How Syncthing provides secure file syncing without sharing your files with a third party
June 10, 2021 » Introducing: AWS IAM masterclass video course
June 8, 2021 » How to use CloudFront Functions to change the origin request path
June 1, 2021 » How to integrate a containerized application with the Elastic Stack

May

May 25, 2021 » 9 tips for working with AWS IAM
May 18, 2021 » Getting started with the Jest Javascript testing framework
May 11, 2021 » What is the await statement in Javascript
May 4, 2021 » How to use CloudFront Trusted Key Groups parameter and the trusted_key_group Terraform resource

April

April 27, 2021 » 3 genius visual data extraction attacks in Javascript
April 20, 2021 » How to implement a persistent file-based cache in Node.Js
April 13, 2021 » The async lazy initializer pattern in Javascript
April 6, 2021 » AWS architecture icons in an npm package

March

March 30, 2021 » New language features since Java 8 to 16
March 23, 2021 » How to write a Webpack loader
March 16, 2021 » How serverless cold starts change best practices
March 9, 2021 » How to keep accurate counts in DynamoDB
March 2, 2021 » AWS JS SDK v3 first impressions

February

February 23, 2021 » How to fix the profile support in the AWS JS SDK v3
February 16, 2021 » How to use cfn-init to set up EC2 instances with CloudFormation
February 9, 2021 » EC2 VPC building blocks
February 2, 2021 » How to properly implement unique constraints in DynamoDB

January

January 26, 2021 » How to convert between callbacks and Promises in Javascript
January 22, 2021 » How to speed up Puppeteer scraping with parallelization
January 19, 2021 » How to clear a DynamoDB table
January 15, 2021 » What is end-to-end encryption and why it's such a confusing term
January 12, 2021 » How to use DynamoDB batch write with retrying and exponential backoff
January 8, 2021 » How to implement an exponential backoff retry strategy in Javascript
January 5, 2021 » How to test with a live domain name for free
January 1, 2021 » RxJS: How to make an ordered mergeMap operator

2020

December

December 29, 2020 » What is the principle of least privilege and why it's such a hard thing to achieve
December 25, 2020 » RxJS: How to use startWith with pairwise
December 22, 2020 » RxJS: The differences between first(), take(1), and single()
December 18, 2020 » My AWS wishlist
December 15, 2020 » Encryption options for S3 objects
December 11, 2020 » What is the async disposer pattern in Javascript
December 8, 2020 » How Firefox's HTTPS-only mode solves the first insecure request problem
December 4, 2020 » How to cache ssm.getParameter calls in a Lambda function
December 1, 2020 » How to serialize calls to an async function

November

November 27, 2020 » How to use SRI hashes to secure third-party dependencies
November 24, 2020 » How to handle timeouts in Lambda functions
November 20, 2020 » How to add timeout to a Promise in Javascript
November 13, 2020 » Use-cases for IAM roles
November 10, 2020 » How to use OpenAPI with API Gateway REST APIs
November 6, 2020 » AWS IAM deep dive: How roles work
November 3, 2020 » How to use OpenAPI to deploy an API Gateway HTTP API

October

October 30, 2020 » How to implement a Lambda backend based on OpenAPI
October 27, 2020 » Interactive API documentation using Swagger UI deployed with Terraform
October 23, 2020 » How to use a break-glass role for sensitive admin tasks
October 20, 2020 » IAM policy evaluation logic explained with examples
October 16, 2020 » How to debug CloudFront origin requests
October 13, 2020 » AWS IAM deep dive: How the policy evaluation logic works
October 9, 2020 » AWS IAM deep dive: How IAM users and groups work
October 6, 2020 » Granularity levels in AWS IAM policies
October 2, 2020 » The AWS account administrator's guide to MFA

September

September 25, 2020 » How CloudFront determines the origin request URL
September 22, 2020 » How CloudFront speeds up content delivery
September 18, 2020 » How CloudFront routing works
September 15, 2020 » How to manage IAM user passwords
September 11, 2020 » How to use async/await with postMessage
September 8, 2020 » How to use a custom domain with CloudFront and Route53
September 4, 2020 » How to use a custom domain on CloudFront with Cloudflare-managed DNS
September 1, 2020 » What is CNAME flattening and how it helps redirecting the apex domain

August

August 28, 2020 » AWS IAM deep dive: Identity-based, and Resource-based policies
August 25, 2020 » How to route to an arbitrary S3 bucket website with Cloudflare Workers
August 18, 2020 » How to add HTTPS for an S3 bucket website with Cloudflare
August 11, 2020 » How to completely lock down an AWS account with a service control policy (SCP)
August 4, 2020 » The consequences of memory allocation size for a Lambda function

July

July 28, 2020 » How to use async functions with gapi, the Google Drive client, and the file picker
July 21, 2020 » Generating a crossfaded slideshow video from images with ffmpeg and melt
July 14, 2020 » Refresh the browser when a text appears on the terminal
July 7, 2020 » Tips to debug NodeJS inside Docker

June

June 30, 2020 » Testing Bash scripts with the Bats testing framework
June 23, 2020 » How to change a blog's permalinks and not lose all organic traffic
June 16, 2020 » Are S3 signed URLs secure?
June 9, 2020 » Function tests in Bash and the errexit mode
June 2, 2020 » How to use the aws_apigatewayv2_api to add an HTTP API to a Lambda function

May

May 26, 2020 » What is the optimal password length
May 19, 2020 » How to mock in Bash tests
May 12, 2020 » Unit testing Bash scripts
May 5, 2020 » Avoid excessive costs and save money with S3 storage classes

April

April 28, 2020 » How to refactor a Promise chain to async functions
April 21, 2020 » Easily run CLI commands as an AWS role with AWSudo
April 14, 2020 » Debugging Bash scripts
April 7, 2020 » Secure tempfiles in NodeJS without dependencies

March

March 31, 2020 » Comparing async Javascript functions and callbacks on AWS Lambda
March 24, 2020 » How to use async functions with Array.some and every in Javascript
March 17, 2020 » How to Bash and jq: generate statistics for a REST API
March 10, 2020 » How to use async functions with Array.filter in Javascript
March 3, 2020 » How to use async functions with Array.forEach in Javascript

February

February 25, 2020 » How to use async functions with Array.map in Javascript
February 18, 2020 » How to use async functions with Array.reduce in Javascript
February 11, 2020 » Asynchronous array functions in Javascript
February 4, 2020 » How to lazy load and initialize elements using an Intersection Observer

January

January 28, 2020 » Automatically schedule emails on MailChimp with RSS and AWS Lambda
January 21, 2020 » How to manage Lambda log groups with Terraform
January 14, 2020 » Using external libraries in JShell
January 7, 2020 » How to solve CORS problems when redirecting to S3 signed URLs

2019

December

December 31, 2019 » How to integrate PlantUML into other software
December 24, 2019 » Prototyping with JShell
December 17, 2019 » How to deploy a single-page application with Terraform
December 10, 2019 » How to run a build script with Terraform
December 3, 2019 » How to target subscribers in an SNS topic

November

November 26, 2019 » How CloudFront solves CORS problems
November 19, 2019 » How to setup CORS for Lambda Proxy integration
November 12, 2019 » Is Access-Control-Allow-Origin: * insecure?
November 5, 2019 » Seamless S3 encryption does not imply better security

October

October 29, 2019 » Encryption in the cloud
October 22, 2019 » How to reproduce a Lambda function's environment variables locally
October 15, 2019 » How to define Lambda code with Terraform
October 8, 2019 » Working with structured data in Java
October 1, 2019 » How to use Lambda@Edge with Terraform

September

September 24, 2019 » How to use API Gateway with CloudFront
September 17, 2019 » Magento 2 - Programmatically recreate the missing Catalog Search index table
September 10, 2019 » How to route to multiple origins with CloudFront
September 5, 2019 » AWS Config notifications with CloudWatch Events

August

August 27, 2019 » How to use unique resource names with Terraform
August 20, 2019 » How to use the AWS SQS CLI to receive messages
August 14, 2019 » Adding continuous rendering to the PlantUML server

July

July 30, 2019 » How to paginate the AWS JS SDK using async generators
July 23, 2019 » How to clean up Lambda logs
July 17, 2019 » Differences between PUT and POST S3 signed URLs
July 2, 2019 » How to use S3 POST signed URLs

June

June 25, 2019 » How to use S3 PUT signed URLs
June 18, 2019 » Limit permissions with roles for signed URLs
June 11, 2019 » How to get near-realtime logs for a Terraform-managed Lambda function
June 4, 2019 » Cacheable S3 signed URLs

May

May 28, 2019 » Why AWS access and secret keys should not be in the codebase
May 21, 2019 » Taking notes on a conference with smartphone and Bluetooth keyboard
May 14, 2019 » Why a multi-account setup is essential for secure systems
May 7, 2019 » CloudFormation CLI workflows

April

April 30, 2019 » How to check if your Reserved Instances are used
April 24, 2019 » How Service Control Policies help to secure AWS accounts
April 16, 2019 » AWS: How to query the available CPU credits for t2/t3 instances
April 10, 2019 » AWS: How to limit Lambda and API Gateway scalability
April 2, 2019 » AWS: Increase instance security by allowing SSH only from your IP

March

March 26, 2019 » AWS: How to get notified on compromised credentials
March 19, 2019 » Optimized SPA deployment CloudFormation template
March 12, 2019 » How to automate development tasks using NPX
March 5, 2019 » Keep costs under control when using t3 instances

February

February 26, 2019 » AWS: How to secure access keys with MFA
February 12, 2019 » Managing EC2 servers at scale: Ansible and RunCommand
February 5, 2019 » AWS: How to get notified on IAM user logins

January

January 30, 2019 » AWS: How to get notified on root account login
January 22, 2019 » The rocky path to delete an AWS Organizations member account
January 16, 2019 » How to use the PhysicalResourceId for CloudFormation Custom Resources
January 8, 2019 » Custom resources in CloudFormation templates: Lessons learned
January 1, 2019 » How to manage S3 Objects in CloudFormation templates

2018

December

December 25, 2018 » How to manage custom CloudFormation resources with Lambda
December 18, 2018 » The anatomy of a CloudFormation template with a simple Lambda function
December 11, 2018 » Customizable monitoring script on AWS Lambda
December 4, 2018 » How to secure different types of CloudFront origins

November

November 27, 2018 » How Origin Access Identity works
November 20, 2018 » The differences between S3 and CloudFront signed URLs
November 15, 2018 » How to use S3 signed URLs with CloudFront
November 6, 2018 » How CloudFront signed URLs work

October

October 30, 2018 » How S3 Signed URLs work
October 23, 2018 » How to handle mixed content with CSP
October 9, 2018 » How I failed to implement CSP
October 2, 2018 » How to securely check your LastPass vault against the Pwned Passwords database

September

September 25, 2018 » How to compare file revisions with fugitive.vim
September 11, 2018 » Dive into Git history with fugitive.vim

August

August 28, 2018 » Why certificate pinning with HPKP is a bad idea
August 21, 2018 » HTTPS security best practices

July

July 24, 2018 » How to use Let's Encrypt with Node.js and Express
July 10, 2018 » Using Let's Encrypt with Supervisor
July 3, 2018 » Supervisor with Docker: Lessons learned

June

June 26, 2018 » Let's Encrypt hooks use cases
June 12, 2018 » Working with the system clipboard in Vim
June 5, 2018 » When to use Let's Encrypt's webroot and standalone authorization

May

May 29, 2018 » Let's Encrypt tips
May 22, 2018 » Getting started with Let's Encrypt
May 15, 2018 » Tips on window management in Vim
May 8, 2018 » Use last-position-jump to recover context after reopening a file with Vim

March

March 27, 2018 » The need for an additional refactor phase in TDD
March 20, 2018 » Two ways of skipping tests in Maven
March 13, 2018 » Best practices on how to work with collections in Javascript
March 6, 2018 » Dependency Injection Boundaries

February

February 27, 2018 » What to expect when you decide to migrate from Javascript to Typescript
February 20, 2018 » JUnit and Cucumber test reports based on source code and behavior
February 8, 2018 » Introducing: Array#Extras email course
February 6, 2018 » Effective debugging with breakpoints

January

January 2, 2018 » Reuse code with domain-specific steps in collection pipelines

2017

December

December 19, 2017 » The silver bullet of collection pipelines: Functional composition
December 12, 2017 » Demystifying chaining in Javascript
December 5, 2017 » Where Array#Extras fall short

November

November 28, 2017 » Effective print debugging
November 21, 2017 » Ditch for loops. Here is a case study to convince you
November 14, 2017 » Better collection processing with collection pipelines
November 7, 2017 » End-to-end manual verification
November 6, 2017 » Listen to your code: Problem-solving techniques in programming

October

October 31, 2017 » 2 cases where Babel fixes your code but it shouldn't
October 3, 2017 » Generators and ImmutableJS

September

September 26, 2017 » Generators in Javascript
September 19, 2017 » Use Persistent Undo in Vim for maximum comfort
September 12, 2017 » Never lose a change again: Undo branches in Vim
September 5, 2017 » Iterables in Javascript

August

August 29, 2017 » Iterators in Javascript
August 22, 2017 » How to create a good Pull Request
August 15, 2017 » Introducing: Weekly JS Tips & Tricks

July

July 25, 2017 » 3 ways to set up author information in Git

June

June 13, 2017 » How to create a Theme Plugin for Magento

March

March 1, 2017 » Profile-based optimization techniques in the JVM

February

February 7, 2017 » Why Webpack 2's Tree Shaking is not as effective as you think

January

January 31, 2017 » Getting started with Browserify
January 24, 2017 » Copy-pasting in Vim without +clipboard
January 17, 2017 » JSPM basics and review
January 10, 2017 » Managing Scala projects in Vim with Ag and Ctags

2016

December

December 21, 2016 » Why Bower is still relevant

November

November 22, 2016 » Frontend dependencies without tools
November 8, 2016 » 3 Common Cucumber Mistakes You've Probably Made

September

September 14, 2016 » One year with Vim

August

August 24, 2016 » Lessons learned from using xmonad for a year
August 9, 2016 » Parallel Processing in JS

June

June 28, 2016 » JVM JIT optimization techniques - part 2
June 14, 2016 » Simulating movement with ES6 generators

May

May 31, 2016 » Infinite collections with ES6 generators
May 27, 2016 » JVM JIT optimization techniques
May 17, 2016 » More readable Javascript without variables
May 10, 2016 » Fully automated dockerized Let's Encrypt reverse proxy
May 3, 2016 » Using Java Generics to express variance of Collections and Functions

April

April 19, 2016 » Proper random numbers in Javascript
April 13, 2016 » A brief overview of hack.summit() 2016 (part 3)
April 5, 2016 » Dealing with async in React

March

March 29, 2016 » Detecting errors in the browser with Selenium
March 22, 2016 » A brief overview of hack.summit() 2016 (part 2)
March 8, 2016 » A brief overview of hack.summit() 2016 (part 1)
March 1, 2016 » Getting started with OpenCV for Java on Ubuntu

February

February 2, 2016 » The first steps from Grunt to Webpack

January

January 28, 2016 » Git to track local history, without a remote
January 12, 2016 » Custom CSS animations in React
January 5, 2016 » Global listener patterns in React

2015

December

December 29, 2015 » Unbroken windows - overengineering in the name of clean code
December 8, 2015 » React basics

November

November 24, 2015 » A tale of two development competitions
November 11, 2015 » 5 Productivity Power Tools for Software Development on Linux
November 3, 2015 » Crazy Search Results in Eclipse for Multiple Module Maven Projects

October

October 27, 2015 » Walkthrough for a TDD Kata in Eclipse
October 15, 2015 » Some thoughts on managing small development teams

September

September 29, 2015 » Static HTTP preview server using Docker
September 17, 2015 » Automated tests with Eclipse using MoreUnit
September 1, 2015 » Revisiting webapp performance on HTTP/2

August

August 26, 2015 » Scott: detailed failure reports and hassle free assertions for Java tests
August 18, 2015 » A solution to Codility Kalium
August 4, 2015 » Isolating scripts on a page

July

July 28, 2015 » A simple proxy to circumvent the SOP
July 21, 2015 » Calm assertions with Spock

June

June 23, 2015 » Historical monitoring on AWS
June 11, 2015 » Scala development in Vim

May

May 26, 2015 » Accessing Google Drive in Javascript
May 12, 2015 » Using Google auth in Javascript

April

April 28, 2015 » Animated failure reports with Selenium and Cucumber
April 14, 2015 » Deploying Docker images via SSH

March

March 31, 2015 » Why you should care about Vim
March 17, 2015 » MathJax processing on the server-side
March 3, 2015 » Quick and dirty way to build PhantomJS2 from source

February

February 17, 2015 » Log review guided by tests
February 3, 2015 » Detecting possibly duplicate Strings

January

January 20, 2015 » Testing for undesired log output
January 6, 2015 » Efficient SQLite backup on Android

2014

December

December 23, 2014 » Attached Maven tests with Cucumber
December 9, 2014 » Practical measurement of the Android Backup Manager

November

November 25, 2014 » Running LP optimisation from Javascript
November 11, 2014 » Running LP and IP optimisation from Java

October

October 28, 2014 » Plotting charts with SVG
October 14, 2014 » Integrating Facebook Comment Count Sum

September

September 30, 2014 » Integrating Facebook Comments