1351
New
The latest blog posts to take off on Hacker News. 6,299 posts.
1352
How I Made a Heap Overflow in Curl
In association with the release of curl 8.4.0, we publish a security advisory and all the details for CVE-2023-38545. This problem is the worst security problem found in curl in a long time. We set it to severity HIGH. While the advisory contains all the necessary details. I figured I would use a few additional ……
1353
Scaling SQLite to 4M QPS on a Single Server (EC2 vs Bare Metal)
Discover how Expensify achieved remarkable scaling: 4M QPS on one server! Dive into optimizing SQLite for impressive performance gains.
1354
Log is the "Pro" in iPhone 15 Pro
Free LUTs for iPhone 15 Pro Log Video
1355
Replit's new AI Model now available on Hugging Face
At Replit, our mission is to empower the next billion software creators. Yesterday, we strengthened our commitment by announcing that Replit AI is now free for all users. Over the past year, we’ve witnessed the transformative power of building software collaboratively with the power of AI. We believe AI will be part…
1356
Going faster by duplicating code
This function doesn't know the value being multiplied until it is called. The compiler (gcc, O2) emits a generic integer multiply instruction in its loop body.
1357
HAProxy is not affected by the HTTP/2 Rapid Reset Attack
HAProxy products are unaffected by CVE-2023-44487, which could allow a DoS attack against web servers, reverse proxies, and more. Stay tuned for updates.
1358
The Evolution of Tunnel Boring Machines
Tunneling is an important technology for modern civilization, as a tunnel is often the only reasonable way to create a direct path between two points.
1359
Engineered material can reconnect severed nerves
Rice neuroengineers designed the first self-rectifying magnetoelectric material and showed it can not only precisely stimulate neurons remotely but also reconnect a broken sciatic nerve in a rat model.
1360
Lit 3.0
We're launching the next major version of Lit
1361
Scheme in the browser: A Hoot of a tale
Hey there, it’s been a while! We’re back to share some more exciting news about Guile Hoot , a WebAssembly toolchain and Scheme→WASM compiler. In our last post we demonstrated that the Guile Hoot toolchain can be used to assemble programs written in WebAssembly Text (WAT) format, which allowed us to develop for the…
1362
2000Ad announces retirement of John M. Burns
Earlier this week, John M. Burns, one of Britain’s great comic artists, whose work has thrilled and amazed for more than six decades, announced his retirement from comics. John M. Burns is, without a doubt, a legendary British comics creator. His extensive body of work across the last six decades and more has brought…
1363
Passkeys are now enabled by default for Google users
Google is making it even easier to get started with passkeys by offering the ability to set them up for all users — by default.
1364
ElevenLabs Launches Voice Translation Tool to Break Down Language Barriers
Voice AI platform ElevenLabs unveils new AI Dubbing feature - the biggest milestone yet in the company’s efforts to remove language barriers
1365
Building a collaborative pixel art editor with CRDTs
CRDTs sound cool, but how are they actually used? Let's learn by building a collaborative pixel art editor.
1366
1367
The largest DDoS attack to date, peaking above 398M rps
Google Cloud stopped the largest known DDoS attack to date, which exploited HTTP/2 stream multiplexing using the new “Rapid Reset” technique.
1368
HTTP/2 Rapid Reset: deconstructing the record-breaking attack
This post dives into the details of the HTTP/2 protocol, the feature that attackers exploited to generate the massive Rapid Reset attacks
1369
HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks
The “HTTP/2 Rapid Reset” attack exploits a weakness in the HTTP/2 protocol to generate enormous, hyper-volumetric DDoS attacks. Cloudflare has mitigated a barrage of these attacks in recent months, including an attack three times larger than any previous attack we’ve observed
1370
The novel HTTP/2 'Rapid Reset' DDoS attack
Learn how the new DDoS attack technique Rapid Reset works, and how to mitigate it
1371
A student asked how I keep us innovative – I don't
Last week, I did a Q&A session for a friend's security class. One of the students asked a question that I loved. They asked something like, "As a principal engineer, how do you make sure your company stays at the forefront of innovation?"
1372
Lego MRI Scanners donated to hospitals to help children cope with anxiety (2022)
The LEGO Foundation to donate LEGO® MRI Scanners to hospitals globally
1373
Wayfire 0.8
Hello everyone! It has been nearly three years since I last wrote to this blog. Fortunately, that does not mean Wayfire’s development has stopped! Quite the opposite, in fact I am happy to announce the release of Wayfire 0.8.0. There have been many changes and plugin API breakages since the Wayfire 0.7.x series, so I…
1374
Simulation Islands
Island management is a fundamental low level feature of physics engines and can have a big impact on solver design and performance. This was one of the first problems I decided to work on for Box2D version 3 (v3). Since I began working on v3 I’ve been comparing several algorithms for island management. My goal has…
1375
FTX – The fraud was in the code
The jury got a taste of code review as they examined a falsified "insurance fund" and the infamous FTX → Alameda Research "backdoor".
1376
ECC RAM on AMD Ryzen 7000 Desktop CPUs
Getting ECC memory working on desktop CPUs.
1377
The Future of CSS: Easy Light-Dark Mode Color Switching with Light-Dark()
A function that computes to the first color if the used color scheme is light or unknown, or to the second color if the used color scheme is dark.
1378
Why AutoGPT engineers ditched vector databases
AutoGPT decided to drop the support for vector databases: Pinecone, Milvus, Redis, Weaviate - all gone. What has happened to the original idea of efficiently storing agent's memories?
1379
1380
LLMs can't self-correct in reasoning tasks, DeepMind study finds
A study by Google's DeepMind and the University of Illinois at Urbana-Champaign has found that self-correction in large language models (LLMs) isn't universally effective.