Quotidien Shaarli
December 22, 2023
open source epub reader.
SMTP Smuggling
[An updated version of this text may be found at https://www.postfix.org/smtp-smuggling.html]
Author: Wietse Venema
Last update: December 21, 2023
Summary
Days before a 10+ day holiday break and associated production change freeze, SEC Consult has published an email spoofing attack that involves a composition of email services with specific differences in the way they handle line endings other than <CR><LF>.
Unfortunately, criticial information provided by the researcher was not passed on to Postfix maintainers before publication of the attack, otherwise we would certainly have convinced SEC Consult to change their time schedule until after people had a chance to update their Postfix systems.
❗Read recent blog post about Manticore vs Elasticsearch❗
Manticore Search is an easy to use open source fast database for search. Good alternative for Elasticsearch. What distinguishes it from other solutions is:
- It's very fast and therefore more cost-efficient than alternatives, for example Manticore is:
- 182x faster than MySQL for small data (reproducible❗)
- 29x faster than Elasticsearch for log analytics (reproducible❗)
- 15x faster than Elasticsearch for small dataset (reproducible❗)
- 5x faster than Elasticsearch for medium-size data (reproducible❗)
- 4x faster than Elasticsearch for big data (reproducible❗)
- up to 2x faster max throughput than Elasticsearch's for data ingestion on a single server (reproducible❗)
- With its modern multithreading architecture and efficient query parallelization capabilities, Manticore is able to fully utilize all your CPU cores to achieve the quickest response times possible.
- The powerful and speedy full-text search works seamlessly with both small and large datasets.
- Row-wise storage for small, medium and big size datasets.
- For even larger datasets, Manticore offers columnar storage support through the Manticore Columnar Library, capable of handling datasets too big to fit in RAM.
- Performant secondary indexes are automatically created, saving you time and effort.
- The cost-based query optimizer optimizes search queries for optimal performance.
- Manticore is SQL-first, utilizing SQL as its native syntax, and offers compatibility with the MySQL protocol, allowing you to use your preferred MySQL client.
- With clients available in PHP, Python, JavaScript, Java, Elixir, and Go, integration with Manticore Search becomes easy.
- Manticore also provides a programmatic HTTP JSON protocol for more versatile data and schema management.
- Built in C++, Manticore Search starts quickly and uses minimal RAM, with low-level optimizations contributing to its impressive performance.
- With real-time inserts, newly added documents are immediately accessible.
- Interactive courses are available through Interactive courses to make learning a breeze.
- Manticore also boasts built-in replication and load balancing for added reliability.
- Data can be synced from sources such as MySQL, PostgreSQL, ODBC, xml, and csv with ease.
- While not fully ACID-compliant, Manticore still supports transactions and binlog to ensure safe writes.
- Effortless data backup and recovery with built-in tools and SQL commands
Re-Inventing the API Client
Bruno is a Fast and Git-Friendly Opensource API client, aimed at revolutionizing the status quo represented by Postman, Insomnia and similar tools out there.
Bruno stores your collections directly in a folder on your filesystem. We use a plain text markup language, Bru, to save information about API requests.
You can use git or any version control of your choice to collaborate over your API collections.
Bruno is offline-only. There are no plans to add cloud-sync to Bruno, ever. We value your data privacy and believe it should stay on your device. Read our long-term vision here.