5761
Understanding the Worst .NET Vulnerability
In this post I discuss request smuggling, the recent vulnerability in ASP.NET Core with a severity score of 9.9, and how attackers could exploit it
Topics /
Software Engineering
The most popular blog posts about software engineering on Hacker News. 14,540 posts.
5762
Finding Java Thread Leaks with JDK Flight Recorder and a Bit of SQL
The other day at work, we had a situation where we suspected a thread leak in one particular service, i.e. code which continuously starts new threads, without taking care of ever stopping them again. …
5763
Perils of Constructors
One of my favorite blog posts about Rust is Things Rust Shipped Without by Graydon Hoare. To me, footguns that don't exist in a language are usually more important than expressiveness. In this slightly philosophical essay, I want to tell about a missing Rust feature I especially like: constructors.
5764
TLA+ model checking made symbolic
TLA+ model checking made symbolic Konnov et al., OOPSLA’19 TLA+ is a formal specification language (Temporal Logic of Actions) particularly well suited to reasoning about distributed algorith…
5765
Demystifying Apache Arrow (2020)
Demystifying Apache Arrow - some observations from a data scientist. Learning more about a tool that can filter and aggregate two billion rows on a laptop in two seconds
5766
Rustc_codegen_GCC can now bootstrap rustc
Antoyo's Personal Blog
5767
5768
Astronomical Calculations for Hard SF in Common Lisp
Hard SF worldbuilding with the HYG database, Dijkstra's algorithm, and Lisp.
5769
Chess@home: Building the largest Chess AI ever (in JavaScript)
Update: We’ve won Node Knockout in the “Completeness” category ! Congrats to the team!
5770
5771
Building your own CLI coding agent with Pydantic-AI
How to build a CLI coding agent
5772
RailsCasts Retrospective Part 1: The Fuel
Sixteen years ago to the day, I started RailsCasts, a screencast series teaching web development using Ruby on Rails. It began with free weekly episodes…
5773
Using JDK 9 Memory Order Modes
This guide is mainly intended for expert programmers familiar with Java concurrency, but unfamiliar with the memory order modes available in JDK 9 provided by VarHandles. Mostly, it focuses on how to think about modes when developing parallel software. Feel free to first read the Summary .
5774
Overview of Running an Online Game for 3 Years
It’s been roughly 3 years since DDraceNetwork (DDNet) started in the summer of 2013. Last year I wrote a non-technical History of DDNet . Today in this post we will dive into the technical side of what makes DDNet run.
5775
PICO-8 lighting, part 1: thin dark line
How I rolled up my sleeves and got a real-time lighting engine working under the constraints of PICO-8.
5776
Concurrency Glossary
🦑 Informal definitions of terms used in concurrency modeling
5777
Clojure 2015 Year in Review
Another year, another year-in-review post. To be honest, I feel like any attempt I make to summarize what happened in the Clojure world this year is largely moot. Clojure has gotten so big, so — dare I say it? — mainstream that I can’t even begin to keep up with all the interesting things that are happening. But it’s…
5778
New Elixir 1.12 – The developer’s point of view
The Elixir 1.12 version introduced some significant changes. The main one is the ability to create scripts and import dependencies via Mix.install. The interactive console can be more helpful in the software development, prototyping and debugging processes.
5779
5780
5781
5782
5783
The Internals of Postgres – Concurrency Control
Concurrency Control is a mechanism that maintains atomicity and isolation, which are two properties of the ACID, when multiple transactions run concurrently in a database.
5784
5785
I'm not a fan of strlcpy(3)
strlcpy(3) is an OpenBSD function which is often hailed as a safer replacement for strcpy(3) and/or strncpy(3) . One of the obvious issues with strlcpy is that it's not safe if src isn't null-terminated. However, that's not the reason I don't like strlcpy. In fact despite knowing this, I used to think it was an okay…
5786
In Defense of C++
I really like C++. It's not the right tool for every job, but it's what I reach for when I need to do any kind of systems programming. Unfortunately, C++ has often been cited as a "bad" language, and I feel like that reputation has worsened over time. Recent languages like Go and Rust have taken over a lot of mind…
5787
5788
Java's records, Lombok's data, and Kotlin's data classes
While all three remove boilerplate, the similarities don't go much further. Records have stronger semantics with important downstream benefits, which makes them better*. (* not always; depends on circumstances; excuse the clickbait)
5789
Don’t teach during code reviews
In this post, I'll show you a common pitfall you should avoid when teaching during code reviews.
5790
Catching Native Apps
If you imagine a world where the sum of all things you can do with a computer is exactly matched, and locked down for all time with what you can do inside a browser, then the arguments for the web are persuasive. Why write for a specific platform when you can write for all platforms at once and gain the other…