Willie k cooke (5 Ergebnisse)

Taschenbuch. Zustand: Neu. Neuware - Every secure connection you have ever trusted - a login, a payment, a private message - depends on one protocol working correctly behind the scenes: TLS. And when it comes to actually implementing that protocol in real code, one library sits at the center of it all: OpenSSL. It runs the internet, yet most developers who use it every day have never opened its internals or truly understood what happens between a Client Hello and a finished handshake.This book takes you from why secure communication matters all the way to writing your own working TLS client and server in C, using OpenSSL. You will generate real certificates, build your own certificate authority, and understand exactly what every function call is doing - not just how to copy it.What's Inside- The real threats TLS defends against, and how trust actually works online- The full evolution of SSL to TLS 1.3, and why older versions are dangerous- Symmetric and asymmetric encryption, hashing, and how they combine- Building your own development Certificate Authority from scratch- Programming with OpenSSL's EVP interface, BIO objects, and error handling- Writing a complete TLS client and server in C, including mutual TLS- Non-blocking I/O, ALPN, SNI, and event-driven architecture- Real vulnerabilities explained in depth: Heartbleed, POODLE, downgrade attacks- Cipher suite hardening, testing, and keeping up with CVEsWho It's Meant ForThis book is for you if: - You write networked applications in C and want to stop treating TLS as a black box- You are a backend or systems developer who needs to build secure clients or servers- You have used OpenSSL's command line tool but never its programming API- You want to understand certificates well enough to build your own authority, not just install oneYou do not need prior cryptography experience. You do need to be comfortable writing and compiling C code.Somewhere right now, a server is accepting a connection it should be rejecting, because a developer trusted OpenSSL without understanding it. Don't be that developer.You already know TLS is important. The only question is whether you will keep guessing at it, or finally understand it completely - one handshake, one certificate, one line of code at a time.Open the first chapter. The threats are real. So is the fix.…

Taschenbuch. Zustand: Neu. Neuware.

Taschenbuch. Zustand: Neu. Neuware.

Taschenbuch. Zustand: Neu. Neuware - Picture this: a ten-million-row CSV file, a laptop, and a deadline in twenty minutes.No server to spin up. No cluster to provision. No waiting on a data platform team to grant you access. You open a terminal, run one command, and get your answer before your coffee goes cold.That is the promise DuckDB makes - and the promise this book helps you actually keep. You will start by understanding why this promise works: the columnar storage, the vectorized execution, the zero-copy querying that lets you skip loading data altogether. Then you will put it to work - joining a live Postgres table against a Parquet archive sitting in S3, all in one query. You will embed DuckDB inside a Python service, a Go backend, a Rust application. You will build pipelines that run without complaint at 3 a.m., and you will learn to read a query plan the way a mechanic reads an engine, spotting exactly where the time goes.By the final page, DuckDB will not feel like a new tool you picked up. It will feel like the one you reach for automatically.What's Inside- Foundations: OLAP vs. OLTP, DuckDB's architecture, and where it fits beside Pandas, Postgres, Snowflake, and Spark- Analytical SQL: window functions, CTEs, advanced aggregation, and nested/JSON data- Data engineering: reading and writing CSV, Parquet, and JSON at scale; connecting to Postgres, MySQL, and SQLite- Embedded applications: building with DuckDB in Python, Node.js, Java, Go, and Rust, including transactions and concurrency- Cloud-native workflows: querying S3, Azure, and GCS directly; Iceberg and Delta Lake; dbt, Airflow, and Dagster pipelines; MotherDuck- Performance tuning: profiling with EXPLAIN ANALYZE, data layout strategies, and real benchmark results- Advanced extension: building custom extensions, UDFs, geospatial analytics, and machine learning feature engineeringWho It's Meant ForThis book is written for: - Data engineers tired of spinning up heavy infrastructure for jobs that fit on one machine- Backend developers who want a genuinely fast embedded database inside their applications- Data analysts and scientists ready to move past Pandas' limits without learning a whole new stack- Anyone comfortable with basic SQL, looking for a serious, practical upgradeNo prior DuckDB experience is assumed. A working knowledge of SQL is all you need to start.Every day you keep provisioning infrastructure for problems a laptop could solve is a day you are working harder than you need to. The tool is free, open source, and already faster than what you are using now.The only question left is whether you start today, or after your next deadline forces your hand.Open Chapter 1. Find out what your data has been waiting to tell you.…

Taschenbuch. Zustand: Neu. Neuware - Every padlock icon, every 'secure' connection, every trusted login your users rely on is powered by one system working quietly in the background: Public Key Infrastructure. Most developers use it every single day without ever really understanding it. They copy a certificate file, paste it into a config, and hope it works. When it doesn't, they're stuck. This book changes that. You'll go from copying commands blindly to actually understanding what's happening underneath.Picture this: a certificate error shows up in production. Users can't log in. Your team is guessing, trying random fixes, hoping one of them works. Nobody actually knows what's wrong.Now picture the opposite. You look at the error, and within seconds you know exactly what it means. Missing intermediate certificate You've seen it before. Expired root You already have monitoring for that. A pinning mismatch after a routine renewal You know exactly how to fix it, calmly, without panic.That difference isn't luck. It's understanding. And that's exactly what this book gives you.What's inside- The real difference between symmetric and asymmetric encryption, and why both matter- What's actually inside a digital certificate, field by field- How certificate chains and trust actually work, not just in theory- The full certificate lifecycle: requests, renewal, and revocation- A complete, practical walkthrough of the TLS handshake- Writing code to load, parse, and validate certificates yourself- Mutual TLS, client authentication, and zero trust architecture- Designing and running a private certificate authority- Protecting private keys with hardware security modules- Real failure cases, and how to avoid repeating themWho it's meant forThis book is for you if you write backend code, manage servers, or build systems that need to talk to each other securely. You don't need a background in cryptography. You just need curiosity and a willingness to actually understand the 'why' behind the tools you already use. Whether you're debugging your first certificate error or designing internal PKI for your organization, this book meets you where you are and takes you further.You can keep treating certificates like a black box, hoping errors never happen on your watch. Or you can finally understand the system protecting everything you build.The next certificate error is coming. The only question is whether you'll be ready for it.Open this book, and make sure you are.…