SQL Injection Isn't Dead: Smuggling Queries at the Protocol Level
PDF slides from a presentation by Paul Gerste at DEF CON 32. It turns out some databases have vulnerabilities in their binary protocols that can be exploited by carefully crafted …
The latest blog posts to take off on Hacker News. 5,273 posts.
PDF slides from a presentation by Paul Gerste at DEF CON 32. It turns out some databases have vulnerabilities in their binary protocols that can be exploited by carefully crafted …
You’ve probably seen this Python 101 thing before: @memoized def fib(n): if n <= 1: return n return fib(n - 1) + fib(n - 2) Leaving aside the absurdity of computing Fibonacci numbers recursively, it’s a common first introduction to Python decorators and higher-order functions. fib is just a function, and memoized…
ParadeDB has been licensed under AGPL from day one. Here's our thought process and case study on why we picked AGPL.
Apple requires that Patreon switch to their iOS in-app purchase system, or risk being removed from the App Store. Here’s what’s creators need to know.
Introducing postgres.new, the in-browser Postgres sandbox with AI assistance.
An important announcement There Is No Antimemetics Division has been picked up for publication by Penguin Random House! Find out more here. Everything below is for the original self-published version of the story only. An antimeme is an idea with self-censoring p...
TL;DR: You can use Pydantic’s support for tagged unions to approximate sum types in Python; go right to Sum types in Python (and onwards) to see how it’s done.
A guide to configuring WezTerm using its Lua API. Focuses on appearance, keybindings, multiplexing, workspace navigation, and status bar (powerline) setup.
Always choose the right tool for the job? Nah. I use Go basically everywhere, which either makes me insightful or stupid. Decide for yourself! :D
About eight years ago, I was playing a game of Codenames where the game state was such that our team would almost certainly lose if we didn't correctly guess all of our remaining words on our turn. From the given clue, we were unable to do this. Although the game is meant to be a word guessing game based on word…
Introducing the autonomy, product, and operations teams.
When we are interrupted or need to hastily respond to a new demand, we often make quick decisions about where to place physical items. We always place them in locations which make sense given our current state of mind, but often that state of mind is fleeting, and so we forget where we put our things.
I’ve been reading Pearl’s Causal Inference in Statistics , and one of the exercises poses this problem:
A short explanation of what is preemption and how it works
As a consultant, I have been called in to review and, in many cases, replace dozens of half-finished, abandoned, and sometimes forgotten data infrastructure projects.
OpenStreetMap at 20
How I used my own Rust tool to ship 175 quality pixel fonts.
Entropic Engineering was approached in January ‘24 by the DEFCON Badge Team, who were looking for a small company to partner with. They expressed that they specifically wanted to work with us as a woman-owned, queer- and POC-driven engineering firm to develop an electronic badge with a gaming element for this year’s…
On Tim Peters' recent suspension as a Python core developer
The latest version of this app is now available as a free download on the Mac App Store.More info on my apps website at: gingerbeardman.com/apps/stapler/
Update: This post has been updated to clarify the scope of the compelled assistance provisions and the broad nature of criminalization and electronic evidence gathering. The final version of the draft convention can still be used to expand the reach of repression under the pretext of combating...
Last week's article discussed how the Super Nintendo's Video system feeds the TV's CRT. Today I'll summarize what I understand of the hardware generating these graphics.
Back in 2020, Hal Hickel answered a Quora question with great detail about how we created Grand Moff Tarkin for "Rogue One" (2016), and in t...
Device uses sound waves to gather blood pressure data from blood vessels, monitoring the response with ultrasound.
In this viral post, we explain a new paradigm of building simple clean apps: from prototyping to scaling up.
Nuclear power already has an energy density advantage over other sources of thermal electricity generation. But what if nuclear generation didn’t require a steam turbine? What if the radiation from a reactor was less a problem to be managed and more a source of energy? And what if an energy conversion technology could…