Stefán Jökull Sigurðarson - Stefán J. Sigurðarson

Autoscaling Azure SQL HyperScale for better cost management

Troy Hunt has written before about how Have I Been Pwned runs in the cloud, but I wanted to do a little more of a deep dive on how we try to manage our Azure SQL HyperScale cloud costs. We use Azure SQL HyperScale to store all the breach data

c#

Fast ManualResetEventSlim checks when waiting is rarely needed

I was looking at some code optimizations for the RabbitMQ .NET client and noticed that in one place on the hot path the Wait() method was being called on a ManualResetEventSlim which was already set most of the time, and thought that might be overkill.

Security Featured

Using HaveIBeenPwned, Application Insights and Grafana to detect credential stuffing attacks.

Today I want to share with you a method we use to detect and react to credential stuffing attacks in real-time using the PwnedPasswords API, Application Insights and Grafana.

c# Featured

Real world example of reducing allocations using Span<T> and Memory<T>

I have been planning to write this post for a few months now but always seem to have found something new to add. This all started when I decided to look at the RabbitMQ .NET Client source code [https://github.com/rabbitmq/rabbitmq-dotnet-client] to see if I could make improvements

Featured

.NET/Visual Studio Productivity Tips - Part 1

There are many useful shortcuts and methods in .NET and Visual Studio to make coding and debugging a lot easier. I'm going to share some of my favorites.

c#

C# 8 - Null coalescing/compound assignment

There are a lot of cool new features in C# 8 and one of my favorites is the new Null coalescing assignment operator.

.NET Core

You don't need to be a rocket-scientist to contribute to .NET Core!

Sometimes when I'm talking with other .NET developers, the "I don't understand why Microsoft doesn't provide X functionality" or "Why hasn't Microsoft fixed Y yet?" topic comes up. Guess what? You can fix all this yourself! Because .NET Core is open source.

asp.net

Mocking JWT tokens in ASP.NET Core integration tests

As we've been migrating services over to .NET Core we needed to mock JWT tokens in ASP.NET Core integration tests. I finally found a way that worked.

EVEOnline Featured

EVE Online account security - Part 2 - Pwned Passwords details, CSP and HSTS

In my previous post [https://stebet.net/eve-online-and-account-security-part-1-pwned-passwords/] I showed you how we integrated the Pwned Passwords [https://haveibeenpwned.com/Passwords] check from Troy Hunt's https://haveibeenpwned.com into our login pages on the EVE Online SSO, which is used by our game launcher, when logging into our

.NET Core Featured

Monitoring GC and memory allocations with .NET Core 2.2 and Application Insights

With the new event source in .NET Core 2.2, a whole heap of diagnostics information can now be gathered in-process which can help you to gather information about your application behavior and to help you troubleshoot issues.

PwnedPasswords Featured

EVE Online account security - Part 1 - Pwned Passwords

Sitting in our Reykjavik Offices last April, I read one of Troy Hunts [https://troyhunt.com] blog posts about Pwned Passwords [https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/] mentioning how he launched V2 of his API allowing anyone to check their passwords to see if they had been included in known security

Featured

Benchmarking and performance optimizations in C# using BenchmarkDotNet

Hello friends! Long time, no blog, but now it's time to for something fun. I happened upon the awesome BenchmarkDotNet [https://github.com/PerfDotNet/BenchmarkDotNet] library the other day, which makes it incredibly easy to write good and solid .NET benchmarks. You can find a good tutorial on

Add your own performance counters to Application Insights

I have been trying Application Insights [https://azure.microsoft.com/en-us/services/application-insights/] for awhile now and while it is a fantastic tool I do feel it is missing several important performance counters out-of-the-box for .NET applications. Among them are several counters from the .NET CLR Memory category which I&

Using Docker Tools on Windows with Hyper-V instead of Virtualbox

Docker [https://www.docker.com/] is a fantastic tool, and the Docker Toolbox [https://www.docker.com/products/docker-toolbox] is a must to manage it. If you install the Docker Toolbox on a Windows machine, the installer automatically installs Oracle Virtualbox to run the Docker virtual machine. That always annoyed

Using Application Insights with Ghost 0.7

Hello friends! I've been taking a look at Microsoft's Application Insights recently and decided as a test to see how hard it would be to integrate with the Ghost blogging platform. > Application Insights [http://azure.microsoft.com/en-us/services/application-insights/] is Microsoft's application

Microsoft finally fixes Storage Spaces, adds rebalancing command!

Anyone that has used Storage Spaces has probably seen that Storage Spaces does not redistribute files when a new disk is added to the space. Let's say you had a Storage Space with two 1 TB disks. If they filled up and you added a third 1 TB

How to flash a custom Country Variant firmware with the Windows Phone Recovery Tools

This is a way to install a different country variant firmware (or any other official firmware for that matter) to your Windows Phone using the Windows Phone Recovery Tools than the phone says it should install. Note: This is not an officially supported method of recovering to a different country

Google authorship and Google+ custom URLs

I have been trying to get Google Authorship to work properly with this Ghost blog for a while now as per these fine instructions from Christiaan Hendriksen [http://chendriksen.net/google-authorship-ghost/]. I added the necessary links into the footer of my blog pages as well as added link back to

System.Net.HttpClient Best Practices

What is HttpClient HttpClient [https://www.nuget.org/packages/Microsoft.Net.Http] is a Portable Class Library [http://msdn.microsoft.com/library/gg597391.aspx] from Microsoft for HTTP communications. It is completely asynchronous and has excellent features for extensibility. It is absolutely great, especially when communicating with REST based services.

Add New Relic performance monitoring to the Ghost blogging platform

I love New Relic [http://newrelic.com]. It's one of the best performance monitoring tools I have ever used, so when I saw they added support for node.js [https://npmjs.org] I decided I had to see if I could integrate it into my Ghost blog. >

Using extension methods to keep yourself DRY - Part 3

Hi there and welcome to part 3, the final in the series. It's time to put the icing on the cake to simplify our DAL code. In Part 2 [https://stebet.net/blog/2013/08/03/using-extension-methods-to-keep-things-dry-part-2/] we ended up with this code for our DAL: public Person

Using extension methods to keep things DRY – Part 2

So, in Part 1 [https://stebet.net/blog/2013/08/02/using-extension-methods-to-keep-things-dry-part-1/] we used simple, basic and reusable extension methods to make our code a little bit easier to read. Let's do something more advanced. After Part 1 [https://stebet.net/blog/2013/08/02/using-extension-methods-to-keep-things-dry-part-1/] we ended

extension methods

Using extension methods to keep things DRY - Part 1

I'm a big fan of DRY (Don't Repeat Yourself). If you find yourself writing the same code again and again, you should see if you can extract that code out to a method to prevent you from repeating the same code often. A pet peeve of

webapi

ASP.NET WebAPI, load balancers and SSL termination.

I recently encountered an issue in our ASP.NET WebAPI application, which sits behind a load balancer that does SSL termination [http://en.wikipedia.org/wiki/SSL_termination_proxy]. The load balancer gets a HTTPS request, decrypts it, unwraps the original HTTP request and forwards that to the application servers,

entity framework

A way to unit test data access logic when using the Entity Framework.

I've spent a lot of time wondering about the best way to unit test my data logic when my filtering and paging logic is in code, such as when using the Entity Framework, and I finally decided on a strategy that I find "good enough". When