Why I distrust Google Cloud more than than AWS or Azure
As of April/2021 for people planning on integrating deeply with a Cloud provider services (not going for cloud-agnostic-solutions) choosing to depend on Google Cloud instead of AWS or Azure will more often than not prove to be an expensive mistake.
My NAS exposes itself over the internet without permission
The Terramaster NAS decided to expose itself to the public internet without asking. Let's see what we can do about it.
Vizio makes more money spying on people who buy TVs than TVs themselves
In the simplistic account of what many call "surveillance capitalism," the original sin was swapping our attention for free content, summed up in the pithy phrase, "If you're not paying for the product, you're the product."
It’s mostly a demand shock, not a supply shock, and it’s everywhere
Monetary Policy 3 created a self-reinforcing demand explosion that is getting harder, not easier, for supply to keep up with.
Dark Patterns at Scale: Findings from a Crawl of 11K Shopping Websites (2019)
Dark patterns are user interface design choices that benefit an online service by coercing, steering, or deceiving users into making unintended and potentially harmful decisions. We conducted a large-scale study, analyzing ~53K product pages from ~11K shopping websites to characterize and quantify the prevalence of…
Sealed U.S. Court Records Exposed in SolarWinds Breach
The ongoing breach affecting thousands of organizations that relied on backdoored products by network software firm SolarWinds may have jeopardized the privacy of countless sealed court documents on file with the U.S. federal court system, according to a memo released Wednesday by the Administrative Office (AO) of the…
I wrote one of the fastest DataFrame libraries
At the time of writing this, the coronavirus has been in our country for a year, which means I have been sitting at home for a very long time. At the start of the pandemic, I had a few pet projects in Rust under my belt and I noticed that the “are we DataFrame yet” , wasn’t anywhere near my satisfaction. So I wondered…
How to win at CORS
The 'how' and 'why' of CORS, from start to finish.
Firefox 87 introduces SmartBlock for Private Browsing
Today, with the launch of Firefox 87, we are excited to introduce SmartBlock, a new intelligent tracker blocking mechanism for Firefox Private Browsing and Strict Mode. SmartBlock ensures that strong ...
Ubiquiti developer charged with extortion, causing 2020 “breach”
Last year, I posted a series of articles about a purported “breach” at Ubiquiti. My sole source for that reporting was the person who has since been indicted by federal prosecutors for his alleged wrongdoing – which includes providing false information to the press.
Bigger vehicles are directly resulting in more deaths of people walking
Smart growth is an approach to community design that connects housing, transportation, and land use to create healthy, prosperous, and resilient neighborhoods.
Don't encode POST bodies like GitHub Copilot, use URLSearchParams
Don't do it like GitHub Copilot!
WebContainers: Run Node.js natively in the browser
Today we're excited to announce WebContainers, a new type of WebAssembly-based operating system that boots instantly and enables Node.js environments to run natively in-browser.
We bootstrapped to $11M in ARR
This year Thinkst Canary crossed the line to $11M in ARR. That number is reasonably significant in the startup world, where Lemkin refers to it as “initial scale”. For us; it’s a happy reminder of Canary's spread into the market. $11M ARR certainly isn’t our end goal, but it provides the fuel for us to…
API Tokens: A Tedious Survey
Documentation and guides from the team at Fly.io.
‘Dancing molecules’ successfully repair severe spinal cord injuries
Researchers have developed an injectable therapy based on nanofibers that has enabled paralyzed mice with severe spinal cord injuries to regain the ability to walk.
Remote code execution in Homebrew by compromising the official Cask repository
この記事は日本語でも投稿されています: https://blog.ryotak.net/post/homebrew-security-incident/ (もし日本語が読める場合、筆者は英語がそこまで得意ではないため、日本語の記事を読むことをお勧めします。) (Official blog post about this incident is available here: https://brew.sh/2021/04/21/security-incident-disclosure/) Preface Homebrew project is running a “Vulnerability Disclosure Program”…
It doesn't take much public creativity to stand out as a job candidate
I’ve spent nearly twenty years blogging, giving talks and releasing open source code. It’s been fantastic for my career, and a huge amount of work. But here’s a useful secret: …
My Logging Best Practices (2020)
If you are a backend developer like me, logging is the window to your application. Unlike in the frontend, there’s not much to see except of your log messages. Here are some of my personal guidelines I use when I write logs.
The SaaS Org Chart
You've raised a new funding round. You need to staff up. Here's what that looks like.
Seven Years of Factorio Friday Facts (2020)
This entry focuses on Wube Software's long-running Factorio Friday Facts; a seven-year labor of love documenting the creation of the titular video game.