New
The latest blog posts to take off on Hacker News. 4,763 posts.
Run the First Edition of Unix with Docker
In this article you'll see how to run a PDP-11 simulator through Docker to interact with Unix as it was back in 1972.
From Markdown to remote code execution in Atom
Recently I took a look at Atom, a text editor by GitHub. With a little bit of work, I was able to chain multiple vulnerabilities in Atom into an actual Remote Code Execution. The vulnerabiliti…
Improving Ruby Performance with Rust
After rewriting just a few of the slow methods for my Rails site in Rust
Introducing Scrivener 3
Change Logs
How Citus Executes Distributed Transactions on Postgres
Distributed transactions are one of the meanest, baddest problems in relational databases. This post explains why distributed transactions are hard and how the Citus database supports distributed transactions by employing features like distributed deadlock detection, 2PC, and streaming replication in Postgres.
Better Random Number Generation for OpenSSL, Libc, and Linux Mainline
中文版 In 2015, AWS introduced s2n, a new open source implementation of the TLS/SSL protocols that protect the privacy and integrity of data moving over a network. s2n was designed to be secure, simple, small, and fast. The project is thriving, and we use it extensively. In February, our CISO Stephen Schmidt shared that…
Looking at how many sites use vulnerable JavaScript libraries
Last week, we released our first annual State of Open Source Security report. One of the discoveries the report mentions is that an analysis of around 433,000 sites found that 77% of them use at least one front-end JavaScript library with a known security vulnerability. In this post, we take a deep dive into that…
Net Neutrality will die, so let’s take the profit out of killing it
Fighting the FCC is futile at this point, but Bob has a way to (in a way) save Net Neutrality
Demystifying Floating Point Precision
Floating point numbers have limited precision. If you are a game programmer, you have likely encountered bugs where things start breaking after too much time has elapsed, or after something has mov…
Worldwide, Median Household Income About $10,000
New Gallup global income data estimate the median household income across 131 countries at $9,733, and median per-capita income at $2,920. Incomes in the 10 wealthiest countries are more than 50 times those in the 10 poorest.
User experience design for APIs
Writing code is rarely just a private affair between you and your computer. Code is not just meant for machines; it has human users. It is meant to be read by people, used by other developers, maintained and built upon. Developers who produce better code, in greater quantity, when they are kept happy and productive…
AWS Amplify: JavaScript Open Source Library with React, React Native Extensions
The JavaScript ecosystem is thriving. Every day there are new use cases and functionality across web and mobile ecosystems. Developers are building highly interactive and functional applications across social, consumer, and enterprise spaces. We’ve spent a lot of time talking to these developers. They want to scale…
I'm Testifying to Congress about Data Breaches – What Should I Say?
Edit: I'm putting this up front as a lot of people are asking for it - the hearing will be live-streamed on YouTube and there's already an embedded video on the hearing page [https://energycommerce.house.gov/hearings/identity-verification-post-breach-world/] . There's a title I
GTD in 15 Minutes – A Pragmatic Guide to Getting Things Done
GTD—or “Getting things done”—is a framework created by David Allen for organizing and tracking your tasks and projects. Its aim is a bit higher than just “getting things done”, though. (It should have been called “Getting things done in a much better way than just letting things happen, which often turns out not to be…
Desktop compositing latency is real
Update: Note that the capture method I use needs to read pixels back from the GPU which can be slow. This means the Windows 10 results are probably worse than they should be. However, without external hardware this seems to be the only way to measure keyboard to screen latency.
Extensions in Firefox 58
With the release of Firefox Quantum on November 14, 2017, we officially entered a WebExtensions-only world for add-on development. While that event was certainly the news of the day, Firefox ...
Of SVG, Minification and Gzip
Smaller files are downloaded faster, so making an asset file size smaller before sending it to a client is a good thing to do.
Court Rules That EFF's Stupid Patent of the Month Post Is Protected Speech
A federal judge has ruled that EFF need not obey an Australian injunction ordering EFF to take down a “Stupid Patent of the Month” blog post and never speak of the patent owner’s intellectual property again. It all started when Global Equity Management (SA) Pty Ltd (GEMSA)’s patent was featured as...