Operations | Monitoring | ITSM | DevOps | Cloud

Detecting jQuery File Upload vulnerability using Falco (CVE-2018-9206)

In the past few days, a new vulnerability was disclosed in a widely used component – jQuery File Upload plugin. A change in Apache’s Web Server security setting handling, exposed users of this plugin to an unrestricted file upload flaw. Let’s dig in on how to detect jQuery File Upload vulnerability (CVE-2018-9206) using Falco.

PHP Profiling: How to Find Slow Code

I use performance monitoring tools primarily to find slow and buggy code. At the start of development, I typically use the tools more for finding software bugs. Once the codebase is at a relatively stable phase, then I shift my focus toward finding less performant code. Which is why I turn to tools like Retrace to help with profiling for better performance.

The Differences Between Monitoring Containerized Apps and Non-Containerized Apps

Containers provide a nifty solution to package up applications along with their dependencies, and for the whole encapsulated process to be run on a host system. This technology is undeniably popular due to its ability to allow developers to create flexible, scalable, reliable solutions in a quicker amount of time. It has enabled more freedom in choosing the technology we use in our applications and has brought development and production environments closer to parity.

How to add "unlimited" SMS support?

Your monthly monitoring plan includes predefined number of monthly SMS messages which are used to notify you about outages. For some users this number may be low and for this reason we decided to write short tutorial how to add your own SMS provider which is limited only by available credit on your account. In this tutorial we will describe how to integrate with Nexmo but similar method could be applied for other SMS providers.

We can do better failure detection in serverless applications

Traditionally in white-box monitoring, error reporting has been achieved with third party libraries, that catch and communicate failures to external services and notify developers whenever a problem occurrs. I’m here to argue that for managed services this can be achieved with less effort, no agents and without performance overhead.