OAuth Attack Vectors
Intro The OAuth2 authorization protocol has been under fire for the past ten years. You've probably already heard about plenty of "return_uri" tricks, token leakages, CSRF-style attacks on clients, an
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 5,820 posts.
Intro The OAuth2 authorization protocol has been under fire for the past ten years. You've probably already heard about plenty of "return_uri" tricks, token leakages, CSRF-style attacks on clients, an
I’ve stated before that one of the unique features of Emacs Lisp is that its closures are readable . Closures can be serialized by the printer and read back in with the reader. I am unaware of any other programming language that has this feature. In fact it’s essential for Elisp byte-code compilation because…
Japan's greatest inventor whose life span a formative period in the nation's history, Tanaka Hisashige built the Myriad Year Clock, a 1000-part masterpiece that's today a national treasure.
Introduction to `lmgrep`: what is it and what it isn't. My a motivation to build it.
There is no shortage of package managers. Each tool makes its own set of tradeoffs regarding speed, ease of use, customizability, and reproducibility. Guix occupies a sweet spot, providing reproducibility by design as pioneered by Nix , package customization à la Spack from the command line, the ability to create…
If you read Programming books, then your goal is to learn. If you write Programming books then your goal is to teach. When I wrote my book…
Classic strategy games rebuilt for the modern era
Announcing Passport, the new infrastructure supporting Stratechery.
Why we're joining the Git community and updating "master" to "main".
On World Password Day, we’re providing a sneak peek at a future in which, one day, you won’t need a password at all.
It depends on what you mean by homogeneity.
The untold story of the hole in Bitcoin's heart
Five years to the day after I criticized Uber for testing its self-proclaimed "self-driving" vehicles on California roads without complying with the testing requirements of California's automated driving law, I find myself criticizing Tesla for testing its self-proclaimed "full self-driving" vehicles on California…
In 2018, Andrew Schober was digitally mugged for approximately $1 million worth of bitcoin. After several years of working with investigators, Schober says he’s confident he has located two young men in the United Kingdom responsible for using a clever piece of digital clipboard-stealing malware to siphon his crypto…
(This text is very long. Maybe too long. You can find a PDF and an EPUB of it below.The current version of this text will always live at https://web3.tante.ccSatya has created an audio version of this essay. Eine deutsche Version findet sich hier. Una versione italiana di questo testo è qui – grazie Nebbia! En […]
Capture all changes to an application state as a sequence of events.
Listen to WWV announcement recorded 0008UTC 11/4/2021 from WWV 10MHz broadcast, receiver IC-7300 13.7km from the station.
Continuing in our tradition of being a crypto currency trailblazer, we are now accepting DOGE payments for all services. We were the first ICANN registrar to accept Bitcoin... ...the first to accept Ethereum, ...the first to accept Litecoin and now ... DOGE. Remember who was there first, again. (and it…
What is React? What is it used for? Why React? This is an interactive guide for complete beginners. The only prerequisite is some knowledge of HTML.
How this memory leak probably occurs, which apps it affects, and what you can do to avoid it completely.
Some browsers use your data in ad networks, push promoted content or use other invasive methods to fund their development. We don’t.
The Apple M1 available in the MacBook Air, MacBook Pro 13", and Mac Mini has been the focus of a ton of benchmarking writeups and blog posts about the new chip. The performance overall, and especially performance/watt, that Apple has achieved with the chip is very impressive. As a ray tracing person, what caught my…
Just how safe is your personal information? With more than thousand reported data breaches since 2004, the odds are not in your favor.
Struggling with IndexedDB performance? Discover hidden bottlenecks, advanced tuning techniques, and next-gen storage like the File System Access API.