24091
MongoBleed Explained Simply
CVE-2025-14847 allows attackers to read any arbitrary data from the database's heap memory. It affects all MongoDB versions since 2017, here's a simple explanation:
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 80,925 posts.
24092
Why Dart is not the language of the future.
The spec has even a chapter on factories (static constructors). (Oh my, factories? it's like 1997 and design patterns all over again!) I should note that the integration of popular design patterns at the syntax level is disappointing: design patterns tend to emerge to work around a language design's weaknesses…
24093
Security advisory: Breach and Django
Posted by Jacob Kaplan-Moss on Aug. 6, 2013
24094
Gmail: Introducing Actions in the Inbox
Search engines have been using structured data for years to understand the information on web pages and provide richer search results. Today...
24095
Losing Money
I remember back in the mid 90s, I used to say with some pride that I had not lost money on any of my VC investments. Then one day, someone told me “then you are not taking enough risk.” I ended that streak of not losing money on VC investments in the late 90s in […]
24096
Cognitive Biases in Software Development
A couple of years ago, I started my first job as a programmer. On the first day, I entered the office, sat in my new chair, turned on the computer, checked out a project from the version control system and opened it in IDE. The first-ever piece of the code I saw looked like that: // TODO it works, but it's ugly…
24097
AI browser extensions are a security nightmare
AI-powered browser extensions come with alarming security risks, but most companies still don't have policies for how their employees can use them.
24098
The deck we used to raise our seed funding
We thought the deck we used for our seed round could be helpful to some companies, especially those that are open source or developer tools.
24099
24100
MinIO: A Bare Metal Drop-In for AWS S3
Benchmarks & Tips for Big Data, Hadoop, AWS, Google Cloud, PostgreSQL, Spark, Python & More...
24101
China issues new encryption import control
On November 2, 2021, Ministry of Commerce of China (“MOFCOM”) officially released the revised Catalogue of Technologies Subject to Import Prohibition and Restriction (“Technology Catalogue”), effective immediately, which identifies, among others, foreign “data encryption technology employing a key length greater than…
24102
Buying a single character domain – and 3 character FQDN – for £15
Short domains are useful for security testing. If you only have a limited number of characters, you need to be able to reference code on a remote server in as few characters as possible. A few years ago, I tried to find a Minimum Viable XSS. The conclusion that I (and others) came to is that 20 characters is the bare…
24103
24104
A little story about the `yes` Unix command
What’s the simplest Unix command you know?<br /…
24105
The curious case of the disappearing Polish S (2015)
One keyboard bug three decades in the making
24106
Bitwarden second security audit report
Bitwarden will continue to uphold high cybersecurity standards through annual third-party security audits of the Bitwarden product and service.
24107
The goal of standards is to improve our future actions
A common failure mode is to consistently set your standards for yourself too high, and to always feel guilty for falling short. I diagnose why I think this is a major problem, and outline some of my tools for overcoming this
24108
Some new snippets from the Snowden documents
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
24109
24110
Does your mind jump around, stay on task or get stuck?
Analysis of mind-wandering studies offers new perspective on mental disorders
24111
24112
24113
Tracking my phone's silent connections
FOSS and life. Kushal Das talks here.
24114
The embedded YouTube player told me what you were watching
David Schütz's bug bounty writeups
24115
Introducing a16z START
Introducing the a16z START program, which fuels founders at the earliest stages with 1:1 support, network introductions, and up to $1M in funding.
24116
What's Hiding Inside Haribo's Power Bank and Headphones?
CT scans reveal severe battery defects inside Haribo’s 20,000 mAh power bank and earbuds, explaining their quiet removal from Amazon.
24117
Tog's Paradox
Tog’s Paradox (also known as The Complexity Paradox or Tog’s ComplexityParadox) is an observation that products aiming to simplify a task for users tend toinspire new, more complex tasks. It’s one ...
24118
How to Synthesize a House Loop
Code music in the browser.
24119
24120
A Recycled IP Address Caused Me to Pirate Books by Accident
Let me tell you a story on how a subdomain of mine managed to serve 390,000+ PDF books without any of my servers being compromised.