New
The latest blog posts to take off on Hacker News. 49,223 posts.
Building Remote Teams for Startups
Most of the companies in the last year had to try out remote work in one way or the other. These are my highly notes on #remote #teams.
Running your own email is increasingly an artisanal choice, not a practical one
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
Street Fighter II, Spin when you can't
This article is part of a series about Street Fighter II and the CPS-1. It is recommended to read the previous entries before reading this one.
Is It Even Worth Working on FOSS Anymore?
With companies taking advantage of Free and Open Source Software far more often than they contribute back, and harming users in the process, is it even worth working on anymore?
The Sucker Complex
One is killed every minute
Advent of Code Surveys: Results
Results dashboard with the yearly (unofficial) Advent of Code participant survey
Be curious, not judgmental
The trigger
Step Away from Stack Overflow
Notes that I mostly write for myself, but you can read if you want.
Lua: Good, Bad, and Ugly Parts (2012)
I have been programming in Lua for about 9 months and it seemed like a good time to pause and reflect on my experience with it. I have used various languages over the years -- Perl ( soaplite.com and other projects, including my current consulting work), C ( a DHCP /DNS server for Arduino and a ping-pong juggling…
Saying goodbye to an old friend
Our tracker blocker for iOS and macOS, Better, was poisoned by a rotten apple and died.
Street Fighter II paper trails – allocating sprite space by hand
The late 90s saw the emergence of Capcom in the world of arcades. The Osaka based company seemed to produce one hit after another with Ghouls'n Ghosts in 1988, Final Fight in 1989 and Street Fighter II in 1991 among a myriad of other excellent games.
Cache Poisoning at Scale
Identifying and exploiting over 70 cache poisoning vulnerabilities across major bug bounty programs, including GitHub, GitLab, Shopify and HackerOne.
Three Minor Features in Go 1.18
Okay, but apart from generics and fuzzing, what has Go 1.18 ever done for us?
How to draw S-curved arrows between boxes
When I was building the spatial “tool for thought”, Jade, one frequently requested feature was drawing arrows between blocks, so we could make mind maps, flowcharts, etc. Here’s how I made it.
Raspberry Pi holds its own against low-cost ARM NAS
Earlier this year, I pitted the $549 ASUSTOR Lockerstor 4 NAS against a homebrew $350 Raspberry Pi CM4 NAS, and came to the (rather obvious) conclusion that the Lockerstor was better in almost every regard. Well, ASUSTOR introduced a new lower-cost NAS, the $329 Drivestor 4 Pro (model AS3304T—pictured above), and sent…
Generics facilitators in Go
Go 1.18 is going to be released with generics support . Adding generics to Go was a multi-year effort and was a difficult one. Go type system is not a traditional type system and it was not possible just to bring an existing generics implementation from other language and be done. The current proposal was accepted…
FreeBSD Jails for Fun and Profit (2020)
Docker has recently stormed into software development. While its concepts are powerful and valuable, similar tools have been used in systems for decades. FreeBSD’s jails in one of those tools which build upon even older chroot(2). To put it shortly, with these tools, you can make a safe environment separated from the…
Tinder just permabanned me or the problem with big tech
Banned by algorithm with no explanation - the dark side of big tech's automated moderation.
DNA seen through the eyes of a coder
Updates: 12th of September 2021: I’m writing a book on DNA! If you want to become a beta reader, or have suggestions, I’d love to hear from you! 8th of January 2021: This article has been revised and updated, scientifically and in terms of dead links. Revision made by Tomás Simões (@putadagravidade /…
Everything I've seen on optimizing Postgres on ZFS
Looking to run Postgres on ZFS? I've gathered some of the information and sage advice out there to give you a head start on figuring out how to do it safely and efficiently.
Isolating Xwayland in a VM
In my last post, Qubes-lite with KVM and Wayland, I described setting up a Qubes-inspired Linux system that runs applications in virtual machines. A …
Dear self: we need to talk about social media
Last year I discovered, much to my chagrin, that always-on internet socializing was costly for me. This was inconvenient both because I’d spent rather a lot of time singing the praises of social me…
5 Important Things to Do Before the Market Bubble Bursts
Yes, you are living through a bubble in the financial markets. No, this is not an article about how to time the market. No, you don’t know when the bubble will burst (and neither do I). Yes, there are still things that you can do that will set you up for investing success.
Apple and NeXT, 25 Years Ago this week
Remembering the merger of Apple and NeXT and how anxious we …
Faster Linux 2.5G Networking with Realtek RTL8125B
Since the Raspberry Pi Compute Module 4 was introduced last year, I've been testing a variety of PCI Express NICs with it. One of the main types of NIC I'm interested in is cheap 2.5 Gigabit Ethernet adapters. 2.5 Gigabits is about the highest reasonable bandwidth you can get through the PCI Express Gen 2.0 x1 lane on…
Hidden Networks in TP-Link Routers
I was debugging my WiFi settings this week when I noticed something strange. WiFi Analyzer was showing two hidden networks coming from my router, one for each frequency: 2.4GHz and 5GHz. Networks which I haven't configured and didn't appear in my router's admin interface. WTF?
Moral lessons from free software and GNU Emacs
Video blog on the five lessons I learnt in my life as a computer user, including when I switched to free software and GNU Emacs.
RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit
The Visual Studio Code server in Windows Subsystem for Linux uses a local WebSocket WebSocket connection to communicate with the Remote WSL extension. JavaScript in websites can connect to this server and execute arbitrary commands on the target system. Assigned CVE-2021-43907 and zero bounty. I paid 5 USD for the EC2…