New
The latest blog posts to take off on Hacker News. 6,153 posts.
New plant-derived composite is tough as bone and hard as aluminum
A new woody composite engineered by an MIT team is tough as bone and hard as aluminum, and might pave way for naturally derived plastics.
Testing Distributed Systems
Curated list of resources on testing distributed systems
A Hairy PostgreSQL Incident
It was 5:17pm today, just as I was wrapping up work for the day, and my manager pinged me with the following chat: <manager>: Hi Jeremy – we have a <other team> ticket – esc…
Key senators have voted for the anti-encryption EARN IT act
Earlier today, the Senate Judiciary Committee voted to advance the dangerous EARN IT bill. We’re disappointed to see the committee advance this misguided bill. If enacted, EARN IT will put massive legal pressure on internet companies both large and small to stop using encryption and instead scan...
A decade of major cache incidents at Twitter
This is a collection of information on severe ( SEV-0 or SEV-1 , the most severe incident classifications) incidents at Twitter that were at least partially attributed to cache from the time Twitter started using its current incident tracking JIRA (2012) to date (2022), with one bonus incident from before 2012. Not…
Cloudflare announces fourth quarter and fiscal year 2021 financial results
Fourth quarter revenue totaled $193.6 million, representing an increase of 54% year-over-year; fiscal year 2021 revenue totaled $656.4 million, representing an increase of 52% year-over-year Record dollar-based net retention of 125%, representing an increase of 600 basis points year-over-year, driven by continued…
An update on AirTag and unwanted tracking
Apple announced it has identified even more ways to update AirTag safety warnings and help guard against unwanted tracking of people and property.
A look inside the chips that powered the landmark Polaroid SX-70 instant camera
The revolutionary Polaroid SX-70 1 camera (1972) was a marvel of engineering: the world's first instant SLR camera. This iconic camera wa...
Attacking an Ethereum L2 with Unbridled Optimism
On 2/2/2022, I reported a critical security issue to Optimism—an "L2 scaling solution" for Ethereum—that would allow an attacker to replicate money on any chain using their "OVM 2.0" fork of go-ethereum (which they call l2geth).
A walk through Project Zero metrics
Posted by Ryan Schoen, Project Zerotl;drIn 2021, vendors took an average of 52 days to fix secur...
AMD Receives Approval for Acquisition of Xilinx
View the press release archives from AMD.
The world of PostgreSQL wire compatibility
A wire protocol is the format for interactions between a database server and its clients. It encompasses authentication, sending queries, receiving responses, and so on. It is a description of the exact bytes sent and received by servers and clients. It does NOT encompass the actual query language itself, let alone…
Use of Google Analytics declared illegal by French data protection authority
In reaction to the invalidation of the Privacy Shield in July 2020 by the Court of Justice of the European Union (CJEU), US President Joe Biden adopted on 7 October 2022 a new legal framework (Executive Order) to strengthen safeguards on the collection and use of personal data by US intelligence agencies.
Web hacking techniques of 2021
Welcome to the Top 10 (new) Web Hacking Techniques of 2021, the latest iteration of our annual community-powered effort to identify the most significant web security research released in the last year
SSH into private machines from anywhere using Cloudflare Tunnel
SSH to machines in private networks using an SSH key, from anywhere in the world, using Cloudflare Tunnel.
Life, school, and the 80:20 rule (2019)
Most people sense that school today is poor preparation for the world of work. I think there is a fundamental reason why: linearity. School is a
10 Years of Nukemap
NUKEMAP was released into the world a decade ago, believe it or not.
Lock-In and Multi-Cloud
Alone in a room with the customer’s CTO, I said “So, I spent this morning talking to your people, and it looks like you’re using low-level generic tech for everything and managing it yourself. You could save a shit-ton of money by using high-level managed services and get load-scaling for free.” “Yeah,” he said, “but…
Racket 8.4
_posted by John Clements_ Racket version 8.4 is now available from https://download.racket-lang.org. Command-line Racket provides a new expression editor by default for its read-eval-print loop (REPL). The new REPL is based on the Chez Scheme expr...
Aspect-ratio is great
Maybe it’s just me, but I feel like a lot of the time learning new CSS features doesn’t involve just learning a what a single property does, more like getting to grips with a collection of properties and how they work together — even learning a whole specification. That’s certainly not a complaint from me: it makes…
How PostgreSQL stores rows
poking inside postgres pages
BeyondCorp is dead, long live BeyondCorp
No organization has fully implemented zero trust architecture. Many advocates, including the US government, overlook devices as a key BeyondCorp component.
Interview questions to ask your interviewer
An interview should be a two-way street. Here are some questions you can ask the company during a software engineering interview.
Grad school is worse for public health than STDs (2019)
(The way you can *really* tell something is horribly wrong is that grad students find PhD Comics darkly funny, not just dark.)