New
The latest blog posts to take off on Hacker News. 7,293 posts.
PyPI now supports digital attestations
Announcing support for PEP 740 on the Python Package Index
A memory leak in Apple's Network Extension framework
Is it normal for the Little Snitch Network Extension to consume Gigabytes of memory? No it isn’t. Unfortunately that’s another new bug in the Network Extension framework of macOS. It’s a memory leak in Apple’s framework, which developers…
Netflix's Distributed Counter Abstraction
By: Rajiv Shringi, Oleksii Tkachuk, Kartik Sathyanarayanan
From BSP to ESP – How S3ctor Abused Quake Editors to Redefine the Morrowind Mod
S3ctor is a core developer of OpenMW, and has, like most of us to be fair, odd interests. This is the incredible story how he mixed two immensely cool things: Quake, and Morrowind, narrated by our …
Spin 3.0 – open-source tooling for building and running WASM apps
Read some of the latest blog posts from Akamai Developers.
Steve Jobs, NeXTSTEP, and early object-oriented programming (2016)
Since 2008, over a hundred billion apps have been downloaded from Apple’s App Store onto users’ iPhones or iPads. However, the technology and tools powering the mobile “app revolution” are not themselves new, but rather have a long history spanning over thirty years, one which connects back to the beginnings of…
SST: Container Support
SST now natively supports building containerized applications.
Typesetting Engines: A Programmer's Perspective
Pros and cons for different typesetting engines from engineering perspective and why PPReseume chose LaTeX.
How we built the Black Friday Cyber Monday 2023 globe
Every year for Black Friday Cyber Monday (BFCM), we put together a real-time visualization of purchases made through Shopify-powered merchants worldwide. This year we're cooking up something big, and in anticipation we wanted to show you how we built the globe last year. Video of BFCM 2023 Globe Besides going for…
Early Cascade Injection: From Windows process creation to stealthy injection
Get an introdcution to Early Cascade, a novel process injection technique that is effective against top tier EDRs while avoiding detection.
The case of a program that crashed on its first instruction
Didn't even make it out of the gate.
Rails 8.0 Released
Deploying modern web apps – with all the provisions needed to be fast and secure while easily updateable – has become so hard that many developers don’t dare do it without a PaaS (platform-as-a-service). But that’s ridiculous. Nobody should have to pay orders of magnitude more for basic computing just to make…
Monorepo – Our Experience
Nine months ago, we switched to a monorepo. Here's a detailed look at what led to the change, how we approached it, and what the experience has been like.
What has case distinction but is neither uppercase nor lowercase?
It has one foot in each world but belongs to neither.
State of Python 3.13 performance: Free-threading
Python 3.13 is out and it's time to run some benchmarks to see how well it performs with the new free-threaded mode.
Limitations of frame pointer unwinding
Explore 3 limitations of using frame pointers for stack unwinding and profiling in Linux that are often overlooked, plus possible future alternatives.
Do you need Redis? PostgreSQL does queuing, locking, and pub/sub (2021)
It's a common architecture to have PostgreSQL and Redis serve as the backbone of your app, but PostgreSQL may be capable of everything you use Redis for.
Next Generation Out of Band Garbage Collection
In this post we look at the impact of a new feature of Ruby 3.4 on Shopify’s monolith.
Venvstacks: Virtual Environment Stacks for Python
An open source utility for packaging Python applications and all their dependencies into a portable, deterministic format based on Python's `sitecustomize.py`.
Fuzzing between the lines in popular barcode software
Fuzzing—one of the most successful techniques for finding security bugs, consistently featured in articles and industry conferences—has become so popular that you may think most important software has already been extensively fuzzed. But that’s not always the case. In this blog post, we show how we fuzzed the ZBar…
SSH Remoting
From the Zed Blog: Zed can now be used to edit over SSH.
Async Rust is not safe with io_uring
The demo shows that even though the behavior appears similar, TCP connections leak when using the io_uring driver but not with the epoll driver. I've also tested this across various io_uring runtimes, and it turns out to be a common issue across all of them.
Wasmer 5.0
We are thrilled to announce the release of **Wasmer 5.0**, the latest milestone in our journey to make WebAssembly the greatest tool for executing softw...
We're forking Flutter
The Flutter team has a labor shortage. We're forking Flutter so that the community can accelerate Flutter's development.
A deep dive into Linux's new mseal syscall
If you love exploit mitigations, you may have heard of a new system call named mseal landing into the Linux kernel’s 6.10 release, providing a protection called “memory sealing.” Beyond notes from the authors, very little information about this mitigation exists. In this blog post, we’ll explain what this syscall is…
Why Safety Profiles Failed
As for dangling pointers and for ownership, this model detects all possible errors . This means that we can guarantee that a program is free of uses of invalidated pointers.