Emacs arbitrary code execution and how to avoid it
A post by Eshel Yaron with details and advice about a long standing arbitrary code execution vulnerability in Emacs
The latest blog posts to take off on Hacker News. 21,819 posts.
A post by Eshel Yaron with details and advice about a long standing arbitrary code execution vulnerability in Emacs
Inspired by Jack Wrenn’s post on Undroppable Types in Rust, I set out to see if it’s possible to create types that must be used exactly once. From my understanding, those things are called linear types, but don’t quote me on that1. Unless you are quoting the title of this article which explicitly says linear types… I…
Yes I know I'm technically on vacation but if I go too long without writing I die from a witch's curse and I don't want to work on longform projects For...
Update 2024-12-02 : There was a lively discussion about the post on Hacker News you might also find interesting: link to thread.
I wrote a book. It’s called Janet for Mortals, and it’s free, and it’s on the internet, and you can read it right now. And you should read it right now, instead of reading this blog post, because this blog post is not very interesting if you haven’t read the book. Heck, this blog post is not very interesting even if…
Unleash your creativity with the full power and Python, without the hassle of learning a new templating language or dealing with its limitations!
Virtualization is a powerful technique for code obfuscation, and reversing it can be challenging. In this post, we cover the work done during an internship on developing an automated devirtualization tool. We explore a simplified taint-based approach and discuss its limitations. For a more in-depth analysis, the full…
Dmitrii Kovanikov writes posts about enterprise software development and functional programming, both entertaining and serious. I never used a functional programming language (such as Haskell or OCaml) at work, but several ideas from functional programming have become popular in mainstream general-purpose programming…
Oracle is holding the JavaScript trademark hostage, and we’re pursuing legal means to #FreeJavaScript. Here’s a brief update.
A deep dive into the complexities of optimizing code for SIMD instruction sets across multiple platforms.
Why are database DELETEs complex and inefficient? Uncover challenges from physical data removal to autovacuum, and find strategies for managing large deletions.
This may be overkill, but it works on my machine
Date: March 7, 2111
This blog post summarises a new garbage collection algorithm called Mark-Scavenge, which highlights how using reachability as a proxy for liveness in moving GCs leads to unnecessary data movement and how we can address this. This work is from the latest paper within the research collaboration between Oracle and…
As software engineers, we're constantly making detailed, elaborate plans for computers to execute. Isn't it weird that we rarely give a moment's thought to the program for our own careers?
Mac's Tech Blog
Tap, Click, Launch
Print good, not bad!
This blog post is meant to an iteration on the tutorial and introduction to garbage collection implementation presented in this classic blog post . We are still working with simple garbage collectors, but this time another one with a bit more complexity.
Writing an interpreter for a custom bytecode opens the door for rendering interactive custom Winamp skins in the browser
Whether you have to do with data in the form of CSV, JSON or a full-blooded programming language like C, JavaScript, Scala, or maybe a query language like SQL, you always transform some sequence of characters (or binary values) into a structured representation. Whatever you’ll do with that representation depends on…
I ran across two surprising sources of code execution in bash (and probably other shells) recently.
Low level software usually has lots of .cc or .rs files. Even lower-level software, like your cryptography library, probably has .S containing assembly, my least favorite language for code review.
To celebrate ChipWits' 40th Anniversary, the original FORTH source code has been open sourced! Learn about the game's history and source code
Update : I forgot that I did a brief analysis on this many years ago, using ROT13 as example.
PHP 8.4 is a major update of the PHP language. It contains many new features, such as property hooks, asymmetric visibility, an updated DOM API, performance improvements, bug fixes, and general cleanup.
Occurrence of Hyrum's law in Golang
In this post we take you on a walkthrough on how you can use DataFusion to build your own developer experience for databases.