HTTP Security Headers – A Complete Guide
A description of each security header, why it is important, and how to configure your website in a secure way.
RSA is a fragile cryptosystem
Here at Trail of Bits we review a lot of code. From major open source projects to exciting new proprietary software, we’ve seen it all. But one common denominator in all of these systems is that for some inexplicable reason people still seem to think RSA is a good cryptosystem to use. Let me save […]
Microsoft acquires Citus Data (YC S11)
Data and analytics are increasingly at the center of digital transformation, with the most leading-edge enterprises leveraging data to drive customer acquisition and satisfaction, long-term strategic planning, and expansion into net new markets. This digital revolution is placing an incredible demand on technology…
Graying Out
For many years I’ve interacted with my fellow humans, I think perhaps more than any other way, via the medium of Internet chat. But in my chat window, they’re fading, one by one. This problem is technical and personal and I felt it ought not to go unrecognized.
Stripe CLI
The Stripe CLI is a developer tool that helps you build, test, and manage your Stripe integration right from the terminal.
I just had over a thousand Euros stolen and Revolut is siding with the thief
UPDATE : Revolut has refunded me, I will update the post with more details soon.
Building a new Windows 3.1 app in 2019: A Slack Client
In October 2019, my company SP Digital held an internal hackathon. My colleague Subhransu and I worked on a whacky idea of writing a brand-new Windows 3.1 app which was an OS released almost 30 years ago. The idea we chose was a Slack client. After all, Slack clients exist for most platforms but I’m certain one does…
Mozilla releases the largest to-date public domain transcribed voice dataset
Mozilla crowdsources the largest dataset of human voices available for use, including 18 different languages, adding up to almost 1,400 hours of recorded v
Running GitHub on Rails 6.0
On August 26, 2019, the GitHub application was deployed to production with 100% of traffic on the newest Rails version: 6.0. Read more about our process for upgrading, what we learned, and what’s next.
Quantum Supremacy Using a Programmable Superconducting Processor
Posted by John Martinis, Chief Scientist Quantum Hardware and Sergio Boixo, Chief Scientist Quantum Computing Theory, Google AI Quantum Physicist...
Earth and Sun
Interactive article about Earth and Sun.
Why software projects take longer than you think – a statistical model
Anyone who built software for a while knows that estimating how long something is going to take is hard. It's hard to come up with an unbiased estimate of how long something will take, when fundamentally the work in itself is about solving something.
Downsides to working at a tech giant
Hey everyone, new vlog for this morning. I was in Seattle last week and it made me nostalgic. When I lived there, I made a career decision that cost me a lot, so I wanted to share it with you with...
Project Svalbard: The Future of Have I Been Pwned
Back in 2013, I was beginning to get the sense that data breaches were becoming a big thing. The prevalence of them seemed to be really ramping up as was the impact they were having on those of us that found ourselves in them, myself included. Increasingly, I was writing
Details of the Cloudflare outage on July 2, 2019
Almost nine years ago, Cloudflare was a tiny company and I was a customer not an employee. Cloudflare had launched a month earlier and one day alerting told me that my little site, jgc.org, didn’t seem to have working DNS any more.
Belgian programmer solves MIT’s 20-year-old time capsule cryptographic puzzle
This week MIT’s Computer Science and Artificial Intelligence Laboratory (CSAIL) announced that a 20-year-old cryptographic puzzle was just solved by a self-taught programmer from Belgium, 15 years earlier than MIT scientists expected.
Advertising Is a Cancer on Society
A detailed explanation of why I keep saying that advertising is a cancer on modern society.
Why did we wait so long for the bicycle?
The bicycle, as we know it today, was not invented until the late 1800s. Here are some theories about why
93% of Paint Splatters Are Valid Perl Programs
TLDR: read the paper and view the gallery of pretty Perl programs. In this paper, we aim to answer a long-standing open problem in the programming languages community: is it possible to smear paint on the wall without creating valid Perl?
Encoding your WiFi access point password into a QR code
Up until recently, it was a pain to defend againt WPA2 brute-force attacks by using a random 63-character password (the maximum in WPA-Personal ) mode). Thanks to Android 10 and iOS 11 supporting reading WiFi passwords from a QR code, this is finally a practical defense.
How to build a plugin system on the web and also sleep well at night
The solution we found helps us run Figma plugins in a safe way — i.e. not eval(UNTRUSTED_CODE).
Airbnb and security camera disclosure
This post got *a lot* of attention. I’m super happy about that because I had been afraid that we had reached a point where we collectively didn’t care about cameras or meaningful disclosure. Although, to that point here’s a comment someone posted: "I just assume that there will be camera constantly recording when I…
GitHub Actions now supports CI/CD, free for public repositories
GitHub Actions now includes built-in CI/CD. Easily automate how you build, test, and deploy your projects on any platform, including Linux, macOS, and Windows.