Developer tips – Noise

Wiretap Detector App For Catching IMSI Catchers

Bozho — Sun, 16 Feb 2025 14:38:39 +0000

Cell-site simulators (also sometimes called Stingrays and IMSI-Catchers) are interception devices used to spy on mobile network communication. A couple of volunteers, including myself, have built an app – WiretapContinue reading

The post Wiretap Detector App For Catching IMSI Catchers appeared first on Bozho's tech blog.

Don’t Reinvent Date Formats

Bozho — Tue, 04 Jan 2022 05:58:34 +0000

Microsoft Exchange has a bug that practically stops email. (The public sector is primarily using Exchange, so many of the institutions I’m responsible for as a minister, have their emailContinue reading

The post Don’t Reinvent Date Formats appeared first on Bozho's tech blog.

Simple Things That Are Actually Hard: User Authentication

Bozho — Tue, 30 Nov 2021 10:37:32 +0000

You build a system. User authentication is the component that is always there, regardless of the functionality of the system. And by now it should be simple to implement itContinue reading

The post Simple Things That Are Actually Hard: User Authentication appeared first on Bozho's tech blog.

Obtaining TLS Client Certificates In Spring Integration

Bozho — Thu, 19 Aug 2021 06:34:55 +0000

Spring Integration is a very powerful and extensible framework for, well, integrations. But sometimes it’s not trivial how to get some information that yo need. In my case – aContinue reading

The post Obtaining TLS Client Certificates In Spring Integration appeared first on Bozho's tech blog.

Every Serialization Framework Should Have Its Own Transient Annotation

Bozho — Sat, 26 Jun 2021 13:56:45 +0000

We’ve all used dozens of serialization frameworks – for JSON, XML, binary, and ORMs (which are effectively serialization frameworks for relational databases). And there’s always the moment when you needContinue reading

The post Every Serialization Framework Should Have Its Own Transient Annotation appeared first on Bozho's tech blog.

List of Open Source Security Tools

Bozho — Sun, 11 Apr 2021 11:24:46 +0000

As a founder of a security company, I’m constantly looking for open source tools to either incorporate in our offering, or get inspiration from, or provide integration with. And thereContinue reading

The post List of Open Source Security Tools appeared first on Bozho's tech blog.

Always Name Your Thread Pools

Bozho — Sat, 20 Mar 2021 13:52:19 +0000

Our software tends to use a lot of thread pools – mostly through java.util.concurrent.ExecutorService implementations (Created via Executors.new.... We create these for various async use-cases, and they can be seenContinue reading

The post Always Name Your Thread Pools appeared first on Bozho's tech blog.

Connecting to Kibana Within an AWS VPC

Bozho — Mon, 22 Feb 2021 20:39:13 +0000

When you use the managed Elasticsearch service on AWS, you usually choose an encrypted connection (via KMS-managed keys), which means you can’t use just any tool to connect to yourContinue reading

The post Connecting to Kibana Within an AWS VPC appeared first on Bozho's tech blog.

Elasticsearch – Scalability and Multitenancy [slides]

Bozho — Tue, 26 Jan 2021 07:51:36 +0000

Last week I gave a talk in a local tech group about my experience with Elasticsearch at LogSentinel, and how we achieve multitenancy and scalability. Obviously, the topic of scalabilityContinue reading

The post Elasticsearch – Scalability and Multitenancy [slides] appeared first on Bozho's tech blog.

Content-Security-Policy Nonce with Spring Security

Bozho — Wed, 06 Jan 2021 20:11:54 +0000

Content-Security-Policy is important for web security. Yet, it’s not mainstream yet, it’s syntax is hard, it’s rather prohibitive and tools rarely have flexible support for it. While Spring Security doesContinue reading

The post Content-Security-Policy Nonce with Spring Security appeared first on Bozho's tech blog.

Releasing Often Helps With Analyzing Performance Issues

Bozho — Sat, 26 Dec 2020 11:33:24 +0000

Releasing often is a good thing. It’s cool, and helps us deliver new functionality quickly, but I want to share one positive side-effect – it helps with analyzing production performanceContinue reading

The post Releasing Often Helps With Analyzing Performance Issues appeared first on Bozho's tech blog.

Syntactic Sugar Is Not Always Good

Bozho — Fri, 11 Dec 2020 09:22:02 +0000

This write-up is partly inspired by a recent post by Vlad Mihalcea on LinkedIn about the recently introduced text blocks in Java. More about them can be read here. Now,Continue reading

The post Syntactic Sugar Is Not Always Good appeared first on Bozho's tech blog.

Creating a CentOS Startup Screen

Bozho — Wed, 25 Nov 2020 13:16:43 +0000

When distributing bundled software, you have multiple options, but if we exclude fancy newcomers like Docker and Kubernetes, you’re left with the following options: an installer (for Windows), a packageContinue reading

The post Creating a CentOS Startup Screen appeared first on Bozho's tech blog.

My Advice To Developers About Working With Databases: Make It Secure

Bozho — Tue, 03 Nov 2020 11:24:49 +0000

Last month Ben Brumm asked me for the one advice I’d like to give to developers that are working with databases (in reality – almost all of us). He publishedContinue reading

The post My Advice To Developers About Working With Databases: Make It Secure appeared first on Bozho's tech blog.

Discovering an OSSEC/Wazuh Encryption Issue

Bozho — Mon, 12 Oct 2020 14:43:48 +0000

I’m trying to get the Wazuh agent (a fork of OSSEC, one of the most popular open source security tools, used for intrusion detection) to talk to our custom backendContinue reading

The post Discovering an OSSEC/Wazuh Encryption Issue appeared first on Bozho's tech blog.

OpenSSL Key and IV Padding

Bozho — Sat, 10 Oct 2020 07:51:04 +0000

OpenSSL is an omnipresent tool when it comes to encryption. While in Java we are used to the native Java implementations of cryptographic primitives, most other languages rely on OpenSSL.Continue reading

The post OpenSSL Key and IV Padding appeared first on Bozho's tech blog.

ElasticSearch Multitenancy With Routing

Bozho — Mon, 28 Sep 2020 09:28:28 +0000

Elasticsearch is great, but optimizing it for high load is always tricky. This won’t be yet another “Tips and tricks for optimizing Elasticsearch” article – there are many great onesContinue reading

The post ElasticSearch Multitenancy With Routing appeared first on Bozho's tech blog.

Bulk vs Individual Compression

Bozho — Thu, 27 Aug 2020 13:56:51 +0000

I’d like to share something very brief and very obvious – that compression works better with large amounts of data. That is, if you have to compress 100 sentences you’dContinue reading

The post Bulk vs Individual Compression appeared first on Bozho's tech blog.