Top all-time · #1606
Salesforce Engineering Blog
Company blog · engineering.salesforce.comprogrammingsystems
Salesforce Engineering Blog is the company blog at engineering.salesforce.com, writing about programming and systems. Since 2017, 45 different Hacker News readers have linked it 80 times, most often “TLS Fingerprinting with JA3 and JA3S”. It is still writing: the last post was on 2026-10-08, and you can follow it by feed.
Read the latest articles on the Salesforce Engineering blog. Go behind the cloud with Salesforce Engineers.
Most-linked posts?
- TLS Fingerprinting with JA3 and JA3S5 people · 5 mentions · first linked 2022-09-03
- How we continuously profile tens of thousands of production servers3 people · 3 mentions · first linked 2020-01-21
- Open Sourcing TransmogrifAI – Automated Machine Learning for Structured Data3 people · 3 mentions · first linked 2018-08-16
- TLS Fingerprinting with JA3 and JA3S2 people · 3 mentions · first linked 2020-11-16
- Oclif: Heroku CLI Extracted into CLI Framework2 people · 2 mentions · first linked 2018-03-20
- Making life easier with immutable deployment2 people · 2 mentions · first linked 2019-08-29
- Application Log Intelligence and Performance Insights at Salesforce Using Flink2 people · 2 mentions · first linked 2020-02-13
- Easily Identify Malicious Servers on the Internet with JARM2 people · 2 mentions · first linked 2020-11-17
- A Generic Sidecar Injector for Kubernetes2 people · 2 mentions · first linked 2020-02-18
What Hacker News says?
>Restricting the language to its target use: systems programming, not applications or data science or AI... The only Go I ever touched in industry was the backend of a web-app at Salesforce. I'm not sure this counts as "systems programming". https://engineering.salesforce.com/einstein-analytics-and-go...
Comment linking /einstein-analytics-and-go-24e5aed2981f/
on “Go: What we got right, what we got wrong”Submitted Easily Identify Malicious Servers on the Internet with JARM as a story · 48 points
HN discussionTLSv1.2 traffic contains the hostname of the site you're connecting to, and the list of ciphers. This can be fingerprinted to identify your browser, and the server-side software. [1] TLSv1.3 on the other hand sometimes encrypts the hostname (eSNI) and most of the TLS handshake, so there's much less data to fingerprint. It's not as widely supported, but support is growing... [1] https://engineering.salesforce.com/tls…
Comment linking /tls-fingerprinting-with-ja3-and-ja3s-247362855967
on “Brave, the false sensation of privacy”Submitted API Federation: growing scalable API landscapes as a story · 11 points
HN discussion> It's not a lie. Cloudflare is the nameserver, and the CDN. So after resolution the end user still has just a Cloudflare IP. > In 2011 Google wrote an IETF draft to send Client IP information using the EDNS0 extension and this is usually called ‘edns-client-subnet’. As a DNS client, it means that a truncated version of your IP address will be added into the DNS request. The DNS server will use this truncated IP add…
Comment linking /why-is-edns-important-for-content-delivery-85f5690744ba
on “Comcast, Mozilla strike privacy deal to encrypt DNS lookups in Firefox”Submitted How we continuously profile tens of thousands of production servers as a story · 7 points
HN discussionI don't know if there's a simple solution to deploy this but JA3 fingerprinting is sometimes used to identify similar clients even if they're spread across IPs: https://engineering.salesforce.com/tls-fingerprinting-with-j...
Comment linking /tls-fingerprinting-with-ja3-and-ja3s-247362855967/
on “The internet is no longer a safe haven”Submitted AsyncAPI and OpenAPI: An API Modeling Approach as a story · 6 points
HN discussionOnly sort of. You still have some HOL blocking problems with HTTP2 because you're still running on top of TCP. I recall this explicitly being one of the selling points of QUIC. First resource I found on this matter from a quick search: https://engineering.salesforce.com/the-full-picture-on-http-...
Comment linking /the-full-picture-on-http-2-and-hol-blocking-7f964b34d205
on “TCP BBR congestion control comes to GCP”Submitted Managing Availability in Service Based Deployments with Continuous Testing as a story · 5 points
HN discussionSome systems use a CA cert on endpoints and a CA key on the web proxy portion of the IDS, so it's able to intercept and decrypt all traffic that passes through. This isn't as common anymore since it has massive security risks associated with a 'godmode' TLS cert. But there are still ways to inspect encrypted traffic. TLSv1.2 and lower expose the SNI in the handshake. Even on TLSv1.3 there is plenty of metadata excha…
Comment linking /tls-fingerprinting-with-ja3-and-ja3s-247362855967
on “Achieving 100Gbps intrusion prevention on a single server”Submitted Open Sourcing TransmogrifAI – Automated Machine Learning for Structured Data as a story · 5 points
HN discussionGreat point! I haven’t tried it yet, but Sales Force just opensourced Transmogrifai, a platform that does just this: https://engineering.salesforce.com/open-sourcing-transmogrif...
Comment linking /open-sourcing-transmogrifai-4e5d0e098da2?gi=f2653bb323b3
on “Open-Source Machine Learning Repos to Inspire Your Next Project”Submitted TLS Fingerprinting with JA3 and JA3S as a story · 4 points
HN discussionFor managing difrerent workloads, check out this blogs and this videos from Shopify, Salesforce, Goldman Sachs, and Electronic Arts, respectively: - https://engineering.salesforce.com/how-to-etl-at-petabyte-sc... - https://shopify.engineering/faster-trino-query-execution-inf... - https://trino.io/episodes/33.html - https://www.youtube.com/watch?v=-5mlZGjt6H4 All use the Lyft "Presto but really Trino"-Gateway project…
Comment linking /how-to-etl-at-petabyte-scale-with-trino-5fe8ac134e36/
on “The SQL query engine Trino (formerly PrestoSQL) recaps a decade of innovation”Submitted Evolution of Machine Learning Infrastructure at Salesforce as a story · 4 points
HN discussionSimilar: https://ja3er.com/ which is formed by taking a bunch of (stable) attributes from your TLS handshake, appending them into a string, and hashing it. They've also done the correlation with User Agent and it's surprisingly accurate. Original post by Salesforce security team: https://engineering.salesforce.com/tls-fingerprinting-with-j...
Comment linking /tls-fingerprinting-with-ja3-and-ja3s-247362855967?gi=f77290b060b7
on “View your browser's TLS fingerprint”Submitted A Generic Sidecar Injector for Kubernetes as a story · 4 points
HN discussion> That requires client-side SSL authentication, I do not think it requires client side SSL. See: https://engineering.salesforce.com/tls-fingerprinting-with-j... What is been fingerprinted is the TLS negotiation between client and server.
Comment linking /tls-fingerprinting-with-ja3-and-ja3s-247362855967/
on “CircleCI says hackers stole encryption keys and customers’ source code”Submitted Salesforce Open Sources Centrifuge, JVM Process Warmup Engine as a story · 4 points
HN discussionSubmitted Using Synthetic Data Modeling to Enhance Machine Learning as a story · 4 points
HN discussionSubmitted Open Sourcing Violet – A Voice Application Framework as a story · 4 points
HN discussionSubmitted Salesforce's problems on the way to a near perfect log pipeline as a story · 4 points
HN discussionSubmitted TLS Fingerprinting with JA3 and JA3S as a story · 3 points
HN discussionSubmitted Hyperforce: Salesforce's Infrastructure for the Public Cloud as a story · 3 points
HN discussionSubmitted MuleSoft’s Online Migration on DynamoDB as a story · 3 points
HN discussionSubmitted Under the hood of machine learning pipelines at Salesforce as a story · 3 points
HN discussionSubmitted Big Data, Big Decisions: Finding the Right Technology for Interactive Analytics as a story · 3 points
HN discussionSubmitted Open Sourcing HASSH a Profiling Method for SSH Clients and Servers as a story · 3 points
HN discussionSubmitted Open Sourcing TransmogrifAI – AutoML for Structured Data as a story · 3 points
HN discussion
