10411
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 49,208 posts.
10412
CSRF is really dead
A little while back I wrote a blog post about how "CSRF is dead". It focused on SameSite cookies, a powerful yet simple feature to protect your website against CSRF attacks. As powerful as it was, and as much as it will kill CSRF, you had to enable it on
10413
I Stored a Website in a Favicon
Words from me as developer, student and human.
10414
10415
Glom – Restructured Data for Python
Thoughts on FOSS and fintech, layered by Mahmoud Hashemi
10416
Disambiguating Arm, Arm ARM, ARMv9, ARM9, ARM64, AArch64, A64, A78, ...
If you’re new to the Arm ecosystem, consider this a quick primer on terms you likely have seen before but might have questions about.
10417
Why Deleting Sensitive Information from GitHub Doesn't Save You
Security and Programming Blog
10418
Hacking the Timex m851
Nope, I think this might be the best ultra-low power consumer digital watch ever produced!
10419
10420
PyTorch for WebGPU
TL;DR I’ve been working on a WebGPU optimized inference and autograd library called webgpu-torch with an API that matches PyTorch. The goal is to run neural networks in the browser at speeds comparable to a Linux workstation. Many kernels have been implemented and its design is easily extensible. It’s available on NPM…
10421
Confessions of a Necromancer
Kind people already sent donations that will make my childrens' lives easier, when I'm not there any more. Thank you enormously! :-)
10422
10423
How We Nearly Lost the Discovery Shuttle
Now that Discovery is safely delivered to the Smithsonian, I think I can tell the story of how we nearly lost her in July of 2005, and how well-intentioned, highly motivated, hard-working, smart p…
10424
Small Tech
I frequently see debates about whether it's better to be a cog at a giant semi-monopoly, or to take investment money in the hopes of one day growing to be head cog at a giant semi-monopoly.
10425
Senate Testimony on Privacy Rights and Data Collection in a Digital Economy
Idle Words > Talks > Privacy Rights and Data Collection in a Digital Economy (Senate hearing)
10426
I spent a week without IPv4 to understand IPv6 transition mechanisms
The time has come to talk about something uncomfortable to a lot of you. You’ve been using legacy methods for far too long. It’s time to move to IPv6. But, of course, there’s a lot more to IPv6 than ‘just’ switching everything over. A lot of systems in the world still haven’t…
10427
We have a year to fix security everywhere
consumer-grade hardware can run an LLM that hacks the planet. we can stop it, but we don't have much time.
10428
10429
“Why We Sleep” Is Riddled with Scientific and Factual Errors
Note: I link to a bunch of paywalled studies in this essay. Please do not use sci-hub to access them for free and do not use this trick (a) to easily redirect papers to sci-hub. For the clearest example of deliberate data manipulation, see how Walker edits out the data that contradicts his argument from the graph…
10430
10431
Nobody cracks open a programming book anymore
A sad look at the state of modern programming books.
10432
We Need New Motherboards Before GPUs Collapse Under Their Own Gravity
You can’t have a 4-slot GPU. You just can’t. We have finally left sanity behind, with nvidia’s 4000 series cards yielding a “clown car” of absurd GPU designs, as GamersNexus put it. These cards are so huge they need “GPU Support Sticks”, which are an actual real thing now. The fact that we insist on relegating the GPU…
10433
RHEL is deprecating KDE
By a strange coincidence the news broke this morning that RHEL is deprecating KDE. The real surprise here is that RHEL supported KDE all. Back in the 90s they were entirely against KDE and put lots of effort into our friendly rivals Gnome. It made some sense since at the time Qt was under a not-quite-free licence and…
10434
The layoffs at Klarna
The FinTech company valued at $45B laid off 10% of its staff. How did it happen, and what can other companies learn from its execution?
10435
10436
Volkswagen and the Blame the Engineer Game
Volkwagen is a house in deep trouble. The dieselgate scandal just doesn’t seem to go away and even though the company is now under new management it seems that things are getting worse and worse as time goes by. What I really don’t get is this: Does Volkswagen actually believe the nonsense that they put out in order…
10437
Forget privacy: you're terrible at targeting anyway
I don't mind letting your programs see my private data as long as I get something useful in exchange. But that's not what happens. A forme...
10438
LLVM Intermediate Representation is better than assembly
The crucial part is IR. It's a common language that sits between the high-level program and the low-level backend . IR is used to express high level concepts and is specific enough that any backend can produce a fast machine code.
10439
Rob Pike got spammed with an AI slop "act of kindness"
Rob Pike (that Rob Pike) is furious. Here’s a Bluesky link for if you have an account there and a link to it in my thread viewer if you don’t. …
10440