New
The latest blog posts to take off on Hacker News. 4,414 posts.
Mr. Robot Blind SQL Injection Vulnerability
So the other day I saw this article TheHackerNews and in Forbes how a hacker found a XSS vulnerability on Mr Robot Tv series official website. since I’m a big fan of the TV Series I went and …
Thousands of Hip Hop Mix Tapes, Why Not
For the past couple of weeks, I’ve been uploading thousands of Hip-hop Mixtapes into the archive. The resulting collection still has a way to go before it’s everything I have acquired a…
Size cost of C++ exception handling on embedded platforms
Introduction There is a common stereotype, that C++ exception handling code will significantly increase binary image size ("up to 100kb")...
Powering the Python Package Index
The Python Package Index, or as most call it “PyPI” is a central part of the ecosystem of Python. It serves as a central registry of names, helping to prevent collision between different projects as well as the default repository that most Python users go to when looking for software. Though it has its issues (of…
A Historical Tour of Silicon Valley
A tour of Silicon Valley
Shuffleboard at McMurdo
Somewhere below the Antarctic circle, I catch Tatiana, the waitress from the port side dining room, in a moment of leisure.
Enabling HTTP/2 for Dropbox web services: experiences and observations
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
Updating classic workplace sabotage techniques
Back to: Three Unexpectedly Good Things VR Will Probably Cause | Forward to: Upcoming Appearances: Washington DC and Baltimore
Am I really a developer or just a good Googler?
I got a very earnest and well-phrased email from a young person overseas ...
Advanced Ping: httping, dnsping, smtpping
I really love ping! It is easy to use and directly reveals whether the network works or not. Refer to Why Ping is no Security Flaw! (But your Friend) and Advanced Tracerouting . At least outgoing pings (from trust to untrust) should be allowed without any security concerns. However, many companies are denying these…
Helix: Rust and Ruby, Without the Glue
Rust + Ruby, Without The Glue. This post is a write-up of the talk I gave at RailsConf 2016. You can find the slides [https://speakerdeck.com/chancancode/turbo-rails-with-rust] here. -------------------------------------------------------------------------------- There's a lot to love about Ruby – the sweet syntax…
A fundamental introduction to x86 assembly programming
The x86 instruction set architecture is at the heart of CPU s that power our home computers and remote servers for over two decades. Being able to read and write code in low-level assembly language is a powerful skill to have. It enables you to write faster code, use machine features unavailable in C, and…
How I found a data leak of a company during a college lecture
A few weeks ago I gave a guest lecture at the Windesheim University of Applied Sciences in The Netherlands. Being a Windesheim graduate myself I’ve always kept in touch with my former teachers. One of them told me recently that a lot of students want to learn more about IT security & hacking and invited me to give a…
Google Chrome 51 disables HTTP/2 on most Linux distros due to old OpenSSL
Chrome drops NPN for ALPN on May 31st, requiring OpenSSL 1.0.2+. CentOS, Debian, and most Ubuntu versions can't support it, breaking HTTP/2 for millions.
Folding Paper with a Hydraulic Press
What happens when you ignore the math
A Guide to Naming Variables
Names Considered Useful Software is written for people to understand; variable names should be chosen accordingly. People ...
SyntaxNet in Context: Understanding Google's New TensorFlow NLP Model
Yesterday, Google open sourced their Tensorflow-based dependency parsing library, SyntaxNet. The library gives access to a line of neural network parsing models published by Google researchers over the last two years. I've been following this work closely since it was published, and have been looking forward to the…
The Panic Sign
After many many years of writing apps and doing things, Panic finally feels like a real company. Why now? Well, we put our name on a building. That’s right, we’re hittin’ the small big leagues, baby! But this isn’t just for show or ego — it’s a little bit cooler than that. Read on.