New
The latest blog posts to take off on Hacker News. 4,419 posts.
Practical Web Cache Poisoning
In this paper I'll show you how to compromise websites by using esoteric web features to turn their caches into exploit delivery systems
Portability benchmark of Dota2 on MacOS
gfx-rs is a project bringing efficient cross-platform graphics to rust. This blog supposedly hosts the major milestones, concepts, and recaps of the project.
What the interns have wrought, 2018 edition
Yet again, intern season is coming to a close, and so it’s time to look back at what the interns have achieved in their short time with us. I’m always impres...
Jobs Inside the API
If someone is worse at their job than a drunk person with Google, why do they still have their job?
Solving the first FSF RYF hurdle for the Librem 5
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
A Guide to Python's Magic Methods (2012)
A guide to all the Magic Methods in Python
What the f*** is the edge?
The edge - or edge-computing has become the latest installment in a never ending chain of tech-buzzwords electrifying investors and managers alike. But beyond the hype lies a fairly simple concept - with enormous potential"
Julia 1.0
Announcing the release of Julia 1.0. The much anticipated 1.0 release of Julia is the culmination of...
The Orange Juice Test (1985)
The key to hiring quality employees is with using the Orange Juice Test, which is designed to sort through candidates based on how they can handle difficult situations and tasks.
Smoking around the world
Tobacco smoking is one of the world’s largest health problems today.
A little bump in the wire that makes the Internet faster
My parents live in a rural area, where the usual monopolist Internet service provider provides the usual monopolist Internet service: DSL, r...
Systemd's DynamicUser feature is currently dangerous
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
A timesyncd failure and systemd's lack of debugability
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
The Secret API of Banks
Interacting with bank data often requires trusting 3rd parties with your credentials. What if there were a more secure way to explore transactions?
Python 3 is now available on App Engine standard environment
Python 3.7 is available today in beta on the App Engine standard environment.
µUBSan: clean-room reimplementation of the Undefined Behavior Sanitizer runtime
Over the past month, I've implemented from scratch a clean-room version of the UBSan runtime. The initial motivation was the need of developing one for the purposes of catching undefined behavior reports (unspecified code semantics in a compiled executable) in the NetBSD kernel. However, since we need to write a new…