Defending a website with Zip bombs
Personal Blog of Christian Haschek
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 822 posts.
Personal Blog of Christian Haschek
Our survey also reveals that a majority of Americans do not trust the government to protect Internet access There’s something that Americans of varied
I was wondering recently after poring through yet another data breach how many people actually use multi-step verification. I mean here we have a construct where even if the attacker has the victim's credentials, they're rendered useless once challenged for the authenticator code or SMS which is
ESO’s fleet of telescopes in Chile have detected the first visible counterpart to a gravitational wave source. These historic observations suggest that this unique object is the result of the merger of two neutron stars. The cataclysmic aftermaths of this kind of merger — long-predicted events called kilonovae …
One fine day in January 2017 I was reminded of something I had half-noticed a few times over the previous decade. That is, younger hackers don’t know the bit structure of ASCII and the meaning of the odder control characters in it.
Did I mention how awesome it is to live 30 minutes from a ski lift?In March of 2016, I launched a course called The Complete Guide to Rails Performance. Sinc...
Update: Note that the capture method I use needs to read pixels back from the GPU which can be slow. This means the Windows 10 results are probably worse than they should be. However, without external hardware this seems to be the only way to measure keyboard to screen latency.
I've also ended up using Emacs along side Jetbrains IDEs (PyCharm & Webstorm). It is an odd combo but it works great. Emacs for mind-control level text editing, and the IDE works great for mouse-oriented poking around and small edits.
Andrey Nikolaevich Kolmogorov was one of the giants of 20th-century mathematics. I’ve always found it amazing that the same man was responsible both for establishing the foundations of …
It's common knowledge that Android device tend to be more out of date than iOS devices, but what does this actually mean? Let’s look at android marketshare data to see how old devices in the wild are. The x axis of the plot below is date, and the y axis is Android marketshare. The share of all devices sums to 100%…
Last week, for about three days, the macOS video transcoding app HandBrake was compromised . One of the two download servers for HandBrake was serving up a special malware-infested version of the app, that, when launched, would essentially give hackers remote control of your computer.
With the holiday, gift-giving season upon us, many people are about to experience the ease and power of new speech-enabled devices. Technical advancements
Welcome to engineering management. It’s fun, it’s exhausting, it’s rewarding — but most importantly it’s new! What worked for you before won’t work now. You’ll have to acquire a new set of skills, and shed some bad habits in the process. Here is a short guide to get you started.
Compare Elixir and Go for high concurrency solutions. Understand their differences in programming styles, concurrency models, and error handling. Learn more!
The demoscene is about producing cool real time works (as in “runs on your computer”) called demos . Some demos are really small, say 64 kilobytes or less, and these are called intros . The name comes from “crack intros”. So an intro is just a demo that’s small.
In this article, you can find how setting the TZ environment variable can prevent thousands of system calls.
We loved what Apple used to do about security. During the past years, the company managed to build a complete, multi-layer system to secure its hardware and sof
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
Proton Mail is a private email service takes a radically different approach to security. Find out how Proton Mail security compares to Gmail security.
I've used Linux containers directly and indirectly for years, but I wanted to become more familiar with them. So I wrote some code. This used to be 500 lines of code, I swear, but I've revised it some since publishing; I've ended up with about 70 lines more.
A Japanese approach to watchmaking, executed by hand.
Signal Desktop is now available in a new, standalone form, and the Chrome App has been deprecated.
The non-profit Multidisciplinary Association for Psychedelic Studies (MAPS) today announced that the U.S. Food and Drug Administration (FDA) has granted Breakthrough Therapy Designation to MDMA for the treatment of posttraumatic stress disorder (PTSD). MAPS and the FDA have also reached agreement under the Special…
You might have used Google’s new AMP project without even knowing. It’s a technology that makes mobile page results load very quickly on Google, it
Matrix, the open protocol for secure decentralised communications
[https://ycombinator.wpengine.com/wp-content/uploads/2017/03/SSYC_Logo.png] We’re excited to announce our new online Startup School, with classes beginning on April 5. Anyone can sign up at StartupSchool.org [http://startupschool.org/] for the 10-week massively open online course (MOOC), starting today. We want to…
Dear YC Community: In response to a comment on Hacker News, I’m going to try writing an annual letter to the YC community with an update on our progress. Our mission is to enable the most...