1681
You can't contain me: elevation-of-privilege vulnerability in Docker for Windows
I have been continuing my journey of searching for windows breakout vulnerabilities in popular applications and one that I discovered in March I found intere...
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 2,560 posts.
1682
1683
Monitoring and Tuning the Linux Networking Stack: Receiving Data
This post guides you through monitoring and tuning the Linux network stack with the focus on receiving data.
1684
Living Without Atomic Clocks
If someone knows even a little about Spanner, the first question they have is: "How does CockroachDB provide external consistency without atomic clocks?"
1685
Cutting down Rust compile times from 30 to 2 minutes with one thousand crates
How we split Feldera into a thousand crates to use every core rustc can get, cutting compile times from 30 minutes to 2.
1686
The Bw-Tree: A B-tree for New Hardware
Explore research at Microsoft, a site featuring the impact of research along with publications, products, downloads, and research careers.
1687
Wayfire 0.8
Hello everyone! It has been nearly three years since I last wrote to this blog. Fortunately, that does not mean Wayfire’s development has stopped! Quite the opposite, in fact I am happy to announce the release of Wayfire 0.8.0. There have been many changes and plugin API breakages since the Wayfire 0.7.x series, so I…
1688
1689
1690
The case of the UI thread that hung in a kernel call
I did tell you not to do that.
1691
Building the Firefox browser for Firefox OS
As soon as the Boot to Gecko (B2G) project was announced in July 2011 I knew it something I wanted to contribute to. I'd already been working on the idea ...
1692
1693
Outage post-mortem
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
1694
Qubes OS 4.0 has been released
After nearly two years in development and countless hours of testing, we’re pleased to announce the stable release of Qubes OS 4.0! Major changes in version 4.0 Version 4.0 includes several fundamental improvements to the security and functionality of Qubes OS: The Qubes Admin API Qubes...
1695
Lunatic brings Erlang's principles to WebAssembly
In this month’s episode of the Functional Futures podcast, our guest is Bernard Kolobara – the creator of Lunatic, an Erlang-inspired runtime for WebAssembly. Listen to the episode to find out how Erlang's guiding principles helped Bernard create a runtime that's fast, robust, and scalable.
1696
A Collection of Examples of 64-bit Errors in Real Programs
A portfolio of HPC tools help data scientists, researchers, and developers efficiently build cross-architecture applications.
1697
Optimal Shard Placement in a Petabyte Scale Elasticsearch Cluster
At the heart of Meltwater’s and Fairhair.ai’s information retrieval systems lies a collection of Elasticsearch clusters containing billions of social media posts and editorial articles. The index shards in our clusters vary greatly in their access pattern, workload and size which presents some very interesting…
1698
1699
1700
We scaled the GitHub API with a sharded, replicated rate limiter in Redis
Adventures in leveling up our API rate limiting infrastructure
1701
Streaming Combinators and Extracting Flat Parallelism
A high-performance and high-level purely functional data-parallel array programming language that can execute on the GPU and CPU.
1702
Quantum Up Close: What is a browser engine?
A web browser is a piece of software that loads remote files and displays them locally, allowing for user interaction. Quantum is the code name for an project we’ve undertaken ...
1703
The Year of Linux on Everything but the Desktop
Beyond its status as a world leader in hackathon organization, BeMyApp has been supporting its customers' digital transformation for 10 years. We are committed to accelerating the development of their innovations by animating internal and external communities around the world, through in-person, virtual, or hybrid…
1704
Buffer overflow when pwfeedback is set in sudoers
Sudo’s pwfeedback option can be used to provide visual feedback when the user is inputting their password. For each key press, an asterisk is printed. This option was added in response to user confusion over how the standard Password: prompt disables the echoing of key presses. While pwfeedback is not enabled by…
1705
Blockchains Considered Harmful: Is Brute-Force Processing Replacing Good Design?
Emerging cryptocurrencies, such as Bitcoin and Ethereum have reached market capitalizations in the billions of U.S. dollars and transactions volumes in the hundreds of millions of U.S. dollars per …
1706
Comparison of C/POSIX standard library implementations for Linux
The table below and notes which follow are a comparison of some of the different standard library implementations available for Linux, with a particular focus on the balance between feature-richness and bloat. I have tried to be fair and objective, but as I am the author of musl , that may have influenced my choice of…
1707
Windows Protected Print Mode
Over the past year, the MORSE team has been working in collaboration with the Windows Print team to modernize the Windows Print System. This new design,...
1708
Stremio OS Is Now Available for Raspberry Pi 5 and 4
We are happy to announce that Stremio is now available for Raspberry Pi 5 and 4, installable on an SD card (of at least 8GB). Note: While the Raspberry Pi 5 is fully capable of smooth 4K playback, Raspberry Pi 4 will not be able to play 4K content due to hardware limitations. This release...
1709
Unusual speed boost: size matters
One of my concerns last year was that while WebKit was getting faster on common benchmarks, some operations were getting slower as a byproduct of new features and optimizations.
1710
Bringing Clang to Windows
As you may know, Visual Studio now supports building Android and iOS applications using Clang. We realize the need of our users to write cross-platform