Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 11,894 posts.
Xz/liblzma: Bash-stage Obfuscation Explained
Yesterday Andres Freund emailed oss-security@ informing the community of the discovery of a backdoor in xz/liblzma, which affected OpenSSH server (huge respect for noticing and investigating this). Andres' email is an amazing summary of the whole drama, so I'll skip that. While admittedly most juicy and interesting…
Principles of Rich Web Applications
7 actionable principles for websites that want to make use of JavaScript to control their UI and deliver the best performance
OK, I can partly explain the LLM chess weirdness now
(“make LLMs play better with one weird trick”)
How We built a $1M ARR open source SaaS
We’ve reached a significant milestone of $1 million in annual recurring revenue (ARR) with Plausible Analytics. This post is a recap of how we got to this point.
Mistral Large 4: "Le Chonk"
The most powerful AI platform for enterprises. Customize, fine-tune, and deploy AI assistants, autonomous agents, and multimodal AI with open models.
10 years since Google said to “hang tight” about Linux support for Google Drive
We've been waiting since April 24, 2012 for a Google Drive Linux client.
Apple's Browser Engine Ban Persists, Even Under the DMA
Apple's rules and technical restrictions are blocking other browser vendors from successfully offering their own engines to users in the EU.
WebAssembly’s post-MVP future
People have a misconception—they think that the WebAssembly that landed in browsers back in 2017—is the final version. In fact, we still have many use cases to unlock, from heavy-weight ...
A Social Filesystem
Formats over apps.
The little ssh that (sometimes) couldn't
Preface This is a technical article chronicling one of the most interesting bug hunts I’ve had the pleasure of chasing down. At AdGear Technologies Inc. where I work, ssh is king. We use it for management, monitoring, deployments, log file harvesting, even some event streaming. It’s solid, reliable, has all the…
NIST’s new password rules – what you need to know
The Sophos Blog
Unity plan pricing and packaging updates
After deep consultation with our community, customers, and partners, we’ve made the decision to cancel the Runtime Fee, effective immediately.
O(n^2), again, now in Windows Management Instrumentation
I recently hit some multi-minute delays on my workstation. After investigating I found that the problem was due to a lock being held for five minutes, and during that time the lock-holder was mostl…
State of the Windows: How many layers of UI inconsistencies are in Windows 10?
We’ve all heard this riddle: if you dig down deep enough in Windows 10, you’ll find elements that date from Windows 3.x days. But is it actually true? In this article we’ll discov…
A Quantum Leap for the Web
Over the past year, our top priority for Firefox was the Electrolysis project to deliver a multi-process browsing experience to users…
Turbo, an Improved Rainbow Colormap for Visualization
Posted by Anton Mikhailov, Senior Software Engineer, Daydream False color maps show up in many applications in computer vision and machine learni...
Mistral: Our first AI endpoints are available in early access
The most powerful AI platform for enterprises. Customize, fine-tune, and deploy AI assistants, autonomous agents, and multimodal AI with open models.
Auditing GitHub users’ SSH key quality
If you have just/as of late gotten an email about your keys being revoked, this is because of me, and if you have, you should really go through and make sure that no one has done anything terrible to you, since you have opened yourself to people doing very mean things to you for what is most likely a very long time.
We should all be using dependency cooldowns
See cooldowns.dev for up-to-date information on cooldown adoption across various languages and package ecosystems.
Reflections on Palantir
A retrospective of an eight-year stint.
DTrace for Linux 2016
DTrace for Linux 2016: announcing a major milestone: the final kernel capabilities have merged in Linux 4.9-rc1 to enhanced BPF (eBPF) to provide an advanced programmable dynamic tracer similar to DTrace.
What is money, anyway?
Editor’s Note: This topic is now comprehensively covered in my book, Broken Money. Money is a surprisingly complex subject. People spend their lives seeking money, and in some ways it seems so straightforward, and yet what humanity has defined as money has changed significantly over the centuries. How could something…
How to Safely Store Your Users' Passwords in 2016
Salted Password Hashing with Argon2, Scrypt, Bcrypt, and PBKDF2
Is Every Speed Limit Too Low?
Americans nearly universally speed, and excess speed is a factor in many accidents. But what if higher speed limits made roads safer?
AI Mania Is Eviscerating Global Decision-Making
Note: This has been cross-posted to my company's blog, in case you think there is some use in sharing with someone in a format that looks more authoritative. Link here .