Fabian Mu fabianmu

These patches are for qtwebengine-everywhere-src-5.12.3.tar.xz, SHA256: 3ff3bac12d75aa0f3fd993bb7077fe411f7b0e6a3993af6f8b039d48e3dc4317

Linking stage for QtWebEngineCore requires 10+GB of RAM :) (debug build)

Additional stuff needed:

Fixed libxslt.pc (non-packaged/develop/lib/pkgconfig) - qmake checks if directories in .pc files exist and will fail with some libs if libxslt was built with libxml2-2.6.2 and libxml2 was later updated to let's say libxml2-2.9.9, libxslt.pc will contain -L with non-existent directory (because it was not rebuilt with newer libxml2) Custom .pc file fixes this.

PX	REM	TW
4	0.25	1
8	0.5	2
16	1	4
32	2	8
48	3	12
64	4	16
80	5	20
96	6	24
112	7	28

System Design Cheatsheet

Picking the right architecture = Picking the right battles + Managing trade-offs

Basic Steps

Clarify and agree on the scope of the system

User cases (description of sequences of events that, taken together, lead to a system doing something useful)
- Who is going to use it?
- How are they going to use it?

Basecamp was under network attack

The attack detailed below has stopped (for the time being) and almost all network access for almost all customers have been restored. We're keeping this post and the timeline intact for posterity. Unless the attack resumes, we'll post a complete postmortem within 48 hours (so before Wednesday, March 26 at 11:00am central time).

Criminals have laid siege to our networks using what's called a distributed denial-of-service attack (DDoS) starting at 8:46 central time, March 24 2014. The goal is to make Basecamp, and the rest of our services, unavailable by flooding the network with bogus requests, so nothing legitimate can come through. This attack was launched together with a blackmail attempt that sought to have us pay to avoid this assault.

Note that this attack targets the network link between our servers and the internet. All the data is safe and sound, but nobody is able to get to it as long as the attack is being successfully executed. This is like a bunch of people

OS X Screencast to animated GIF

This gist shows how to create a GIF screencast using only free OS X tools: QuickTime, ffmpeg, and gifsicle.

Instructions

To capture the video (filesize: 19MB), using the free "QuickTime Player" application:

	alias wget='wget -q --no-check-certificate'

	# so that we can install virtualbox via apt-get
	for x in xenial xenial-security xenial-updates; do
	egrep -qe "deb-src.* $x " /etc/apt/sources.list \|\| echo "deb-src http://archive.ubuntu.com/ubuntu ${x} main universe" \| tee -a /etc/apt/sources.list
	done
	echo "deb http://download.virtualbox.org/virtualbox/debian xenial contrib" \| tee -a /etc/apt/sources.list.d/virtualbox.list
	wget https://www.virtualbox.org/download/oracle_vbox_2016.asc -O- \| apt-key add -

	apt-get update

	#!/bin/bash

	# Expects Ubuntu 16.06 (xenial) and kernel 4.x.
	# Based upon a blog post by Zach at http://zachzimm.com/blog/?p=191

	set -eux

	# Have the user call sudo early so the credentials is valid later on
	sudo whoami

	// by dave aka bees & bombs >:)

	void setup() {
	colorMode(HSB,1);
	size(540, 540, P3D);
	rectMode(CENTER);
	fill(200);
	noStroke();
	frameRate(50);
	smooth(8);

	{{-- Define all our servers --}}
	@servers(['staging' => '', 'production' => ''])

	@setup
	{{-- The timezone your servers run in --}}
	$timezone = 'Europe/Amsterdam';

	{{-- The base path where your deployments are sitting --}}
	$path = '/var/www/site.com/htdocs';

	# Bind SSL port with PFS-enabling cipher suite
	bind :443 ssl crt path_to_certificate no-tls-tickets ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-GCM-SHA384:AES128-SHA256:AES128-SHA:AES256-SHA256:AES256-SHA:!MD5:!aNULL:!DH:!RC4

	# Distinguish between secure and insecure requests
	acl secure dst_port eq 443

	# Mark all cookies as secure if sent over SSL
	rsprep ^Set-Cookie:\ (.*) Set-Cookie:\ \1;\ Secure if secure

	# Add the HSTS header with a 1 year max-age