3271
Parse, Don’t Validate – Some C Safety Tips
“A good programmer is someone who looks both ways before crossing a one-way street.” – Doug Linder
New
The latest blog posts to take off on Hacker News. 6,220 posts.
3272
Is the doc bot docs, or not?
What are we even doing here??
3273
Most RESTful APIs aren't really RESTful
When talking about REST, it is worth reading the dissertation of Roy Thomas Fielding. The original paper that describes RESTful web, “Architectural Styles and the Design of Network-based Software Architectures” Roy T. Fielding (2000), introduces the Representational State Transfer (REST) architectural style as a…
3274
Phrase origin: Why do we "call" functions?
On StackExchange, someone asks why programmers talk about “calling” a function. Several possible allusions spring to mind: Calling a function is like calling on a friend — we go, we stay a while, we come back. Calling a function is like calling for a servant — a summoning to perform a task. Calling a function is like…
3275
Bulgaria to join euro area on 1 January 2026
The European Central Bank (ECB) is the central bank of the European Union countries which have adopted the euro. Our main task is to maintain price stability in the euro area and so preserve the purchasing power of the single currency.
3276
Frame of preference A history of Mac settings, 1984–2004
A story of early Mac settings told by 10 emulators.
3277
The lethal trifecta for AI agents: private data, untrusted content, and external communication
If you are a user of LLM systems that use tools (you can call them “AI agents” if you like) it is critically important that you understand the risk of …
3278
3279
Breaking Git with a carriage return and cloning RCE
tl;dr: On Unix-like platforms, if you use git clone --recursive on an untrusted repo, it could achieve remote code execution. Update to a fixed version of Git and other software that embeds Git (including GitHub Desktop).
3280
Supabase MCP can leak your entire SQL database
Indirect prompt injection through support-ticket data lets an MCP-enabled assistant cross trust boundaries and query private tables with Supabase’s privileged service role.
3281
GlobalFoundries to Acquire MIPS
Acquisition will expand GF portfolio with cutting-edge RISC-V processor IP and software tools for real-time computing in autonomous mobility, industrial automation, datacenter and intelligent edge applications MALTA, N.Y., and San Jose, Calif., July 8, 2025 – GlobalFoundries (Nasdaq: GFS) (GF) today announced a…
3282
Blind to Disruption – The CEOs Who Missed the Future
How did you go bankrupt?” Two ways. Gradually, then suddenly.” Ernest Hemingway, The Sun Also Rises Every disruptive technology since the fire and the wheel have forced leaders to adapt or di…
3283
Why LLMs Can't Write Q/Kdb+: Writing Code Right-to-Left
In my previous post I showed how LLMs struggle with coding in q/kdb+; having immediate feedback loops using the q-MCP server does help a…
3284
SVGs that feel like GIFs
The moving image below is only 49Kb and has an incredibly high resolution. It's similar to a GIF but instead of showing moving images, it shows moving SVGs!
3285
Leveraging Elixir's hot code loading capabilities to modularize a monolithic app
How hot code loading solves client-specific engineering problems in my startup Alzo
3286
Analyzing database trends through 1.8M Hacker News headlines
We analyzed 1.8 million Hacker News headlines spanning February 2007 to June 2025 to examine database engine popularity trends. Using camelAI connected to a ClickHouse database, we uncovered which databases the HN...
3287
Bootstrapping a side project into a profitable seven-figure business
Bootstrapping a side project into a profitable seven-figure business in four years.
3288
LookingGlass: Generative Anamorphoses via Laplacian Pyramid Warping
Anamorphosis refers to a category of images that are intentionally distorted, making them unrecognizable when viewed directly. Their true form only reveals itself when seen from a specific viewpoint, which can be through some catadioptric device like a mirror or a lens. While the construction of these mathematical…
3289
Running a Certificate Transparency log
Maybe you, yes you, should run a Certificate Transparency log. It’s cheaper, easier, and more important than ever.
3290
Serving a half billion requests per day with Rust and CGI
In my previous post Serving 200 million requests per day with a cgi-bin, I did some quick performance testing of CGI using a program written in Go. Go works excellently for CGI programs, for many of the same reasons it works so well for CLI programs and system daemons. But, out of curiosity, I decided to do a bit more…
3291
3292
Thunderbird 140 “Eclipse”
Our future's so bright, we need ISO-approved shades. Find out what's shiny in our new Extended Security Release, Thunderbird 140 "Eclipse."
3293
Batch Mode in the Gemini API: Process More for Less
Discover how Batch Mode in Gemini API allows developers to submit large jobs, offload processing, and get results in 24 hours, offering simplicity, convenience, and cost-savings.
3294
The era of exploration
This post explores the idea that the next breakthroughs in AI may hinge more on how we collect experience through exploration, and less on how many parameters and data points we have.
3295
Adding a feature because ChatGPT incorrectly thinks it exists
At Soundslice, our sheet music scanner digitizes music from photographs, so you can listen, edit and practice. We continually improve the system, and I keep an eye on the error logs to see which images are getting poor results.
3296
Postgres LISTEN/NOTIFY does not scale
Learn why Postgres LISTEN/NOTIFY doesn't scale for high-throughput use cases and what architectural alternatives Recall.ai uses in production.
3297
3298
I used o3 to profile myself from my saved Pocket links
Welp, Pocket shuts down tomorrow despite our pleas for it to stay. While migrating1 all of my saved articles, I noticed that I’ve got almost 900 saved articles spanning nearly 7 years. That’s a goldmine of stuff-I-like data! Some quick analysis using xsv2: 𝄢 unzip pocket.zip && xsv headers part_000000.csv 1 title 2…
3299
Deno 2.4
Deno bundle is back, alongside the addition of bytes and text imports, stabilized built-in OpenTelemetry, a new --preload flag, simplified dependency management with deno update, and more.
3300
Swedish Campground (2004)
We thought it was important for the user to be able to invoke every menu command directly from the keyboard, so we added a special key to the keyboard to invoke menu commands, just like our predecessor, Lisa. We called it the "Apple key"; when pressed in combination with another key, it selected the corresponding menu…