The SaaS CTO Security Checklist Redux
Learn how to protect your SaaS applications with the SaaS CTO security checklist. Doing the basics goes a long way in keeping your company and product secure.
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 11,903 posts.
Learn how to protect your SaaS applications with the SaaS CTO security checklist. Doing the basics goes a long way in keeping your company and product secure.
Hi! I’m Steve Feldman, Senior Ad Ops Manager at Stack Overflow. My whole life I’ve been fascinated by advertising. Even as a kid, I wondered what a company was trying to tell me by using one word instead of another in an ad. Over time, I developed a strong (read: subjective) opinion of what makes an ad ’good,’ and…
How my quest to make a business card sized raytracer got a little out of hand.
<p>For years I’ve noodled around with various setups for a Python development environment. A couple of years ago <a href="https://jacobian.org/2018/feb/21/python-environment-2018/">I wrote about a setup I finally liked</a>; this is an update to that post.</p> <p>Bad news: this stuff still isn’t stable, and…
Use the Decisions API to check conditions, select from fixed options, and score text, images, and JSON against a rubric.
To bootstrap Rust, no cost is too great.
EFF is fighting for vehicle owners’ rights to inspect the code that runs their vehicles and to repair and modify their vehicles, or have a mechanic of their choice do the work. At the moment, the anti-circumvention prohibition in the Digital Millennium Copyright Act arguably restricts vehicle...
YOLOv5 license and commercial-use guide: AGPL-3.0 terms, specs, resources, and alternatives. Compare YOLOv5 against other vision models free.
I run FreeBSD as my daily driver on both my main workstation and on all my servers and I have been running FreeBSD since about 1999 because I consider it an amazing operating system. In this article I will address some of the technical reasons for choosing FreeBSD over a GNU/Linux distribution.
This post describes how to write a simple Hello world bootloader
Smudge.ai is a Chrome extension that gives you ChatGPT-powered shortcuts in your right-click menu.
Hi, I wrote my new favorite hash table. This came about because last year I wrote the fastest hash table (I still make that claim) and this year one of the organizers of the C++Now conference asked…
For those who just want the survey itself, not the backstory, it’s here. (Note: Partly because of the feedback I’ve gotten on this blog, it’s now expanded to 121 pages!) Upda…
I regularly hear people asking which programming language to learn, and then reeling off a list of very similar languages (“Should I learn Java, C#, C++, Python, or Ruby?”). In response I usually tell them that it doesn’t really matter, as long as they get started. There are fundamentals behind them.
How we upgraded from Postgres 11.9 to 15.3 with zero downtime
For the past few years, we have seen a lot of discussions around the concept of the Software Supply Chain. These discussions started around the time of LeftPad and escalated with multiple incidents in the past few years. The problem of all the work in this domain is that it forgets a fundamental point.
The 'how' and 'why' of CORS, from start to finish.
A capital-intensive, high-risk way to revolutionize global commerce
Whoever leaked the Mossack Fonseca papers appears motivated by a genuine desire to expose the system that enables the ultra wealthy to hide their massive stashes, often corruptly obtained and all involved in tax avoidance. These Panamanian lawyers hide the wealth of a significant proportion of the 1%, and the massive…
Duolingo’s newest subscription, Duolingo Max, offers a powerful AI-backed learning experience.
With a heavy heart Debian mourns the passing of Ian Murdock, stalwart proponent of Free Open Source Software, Father, Son, and the 'ian' in Debian. Ian started the Debian project in August of 1993, releasing the first versions of Debian later...
One fine day in January 2017 I was reminded of something I had half-noticed a few times over the previous decade. That is, younger hackers don’t know the bit structure of ASCII and the meaning of the odder control characters in it.
I read a blog post by Alex Muscar, “Beautiful Binary Search in D”. It describes a binary search called “Shar’s algorithm”. I’d never heard of it and it’s i…
ESET researchers have discovered the first in-the-wild UEFI rootkit. Dubbed LoJax, the research team has shown that the Sednit operators used different components of the LoJax malware to target a few government organizations in the Balkans as well as in Central and Eastern Europe.
elementary founder: "I might take some time off from Linux or join another community maybe"
Spoiler: Our app template makes it possible.