331
332
How I Could Steal Money from Instagram, Google and Microsoft
TL;DR: Instagram ($2000), Google ($0) and Microsoft ($500) were vulnerable to direct money theft via premium phone number calls. They all offer services to supply users with a token via a computer-voiced phone call, but neglected to properly verify whether supplied phone numbers were legitimate, non-premium numbers…
333
Unnecessariat
I remember AIDS. I’m older than you probably think I am, and I remember what AIDS in America meant in the eighties, when William F. Buckley suggested all “carriers” be tattooed, a…
334
Notes on Google's Site Reliability Engineering Book
The book starts with a story about a time Margaret Hamilton brought her young daughter with her to NASA, back in the days of the Apollo program. During a simulation mission, her daughter caused the mission to crash by pressing some keys that caused a prelaunch program to run during the simulated mission. Hamilton…
335
D'Oh My Zsh – How I unexpectedly built a monster of an open source project
Story of how I unexpectedly built a monster of an open source project
336
What ORMs have taught me: just learn SQL (2014)
I’ve come to the conclusion that, for me, ORMs are more detriment than benefit. In short, they can be used to nicely augment working with SQL in a program, but they should not replace it.
337
Neal Stephenson: Why I Am a Sociomediapath (2015)
The personal website of author Neal Stephenson, unless it's been hacked.
338
Write a Shell in C (2015)
A tutorial on how to write a Unix shell in C.
339
340
Jepsen: RethinkDB 2.1.5
In this Jepsen report, we’ll verify RethinkDB’s support for linearizable operations using majority reads and writes, and explore assorted read and write anomalies when consistency levels are relaxed. This work was funded by RethinkDB, and conducted in accordance with the Jepsen ethics policy .
341
Updating classic workplace sabotage techniques
Back to: Three Unexpectedly Good Things VR Will Probably Cause | Forward to: Upcoming Appearances: Washington DC and Baltimore
342
Fizz Buzz in Tensorflow
interviewer: Welcome, can I get you coffee or anything? Do you need a break? me: No, I've probably had too much coffee already! interviewer: Great, great. And are you OK with writing code on the...
343
344
345
346
I don't understand Python's Asyncio
A little confession that I have no idea how asyncio works in Python 3.
347
348
349
350
Why I won’t give talks about being a woman in tech
You can now find it at /posts/2016/why-i-wont-talk-about-being-a-woman-in-tech-and-neither-should-you/ . If you don't do anything, you'll be redirected automatically (if your browser supports that).
351
352
There are no secure smartphones
Modern smartphones have a CPU chip, and a baseband chip which handles radio network communications (GSM/UMTS/LTE/etc.) This chip is connected to the CPU via DMA. Thus, unless an IOMMU is used, the baseband has full access to main memory, and can compromise it arbitrarily.
353
354
Twitter's Fucked
The Twitter product is defective, broken beyond all hope of repair
355
If your code accepts URIs as input, filter out “file://”
There are many online sites that accept reading input from remote locations. For example a site might try to extract all the text from a webpage, or show you the HTTP-headers a given server sends back in response to a request.
356
357
358
359
Teaching C
I was hoping you would mention the dynamic checkers, ASAN etc. My fear is people will start using these but not understand how to really use them properly. Since they’re dynamic checkers you really need a good testing harness and test cases to go with it. The bugs ASAN/TSAN etc catch are usually strange boundary…
360