Developer's Guide to SaaS Compliance
This article reviews what kinds of compliance certifications and regulations exist, what they mean for developers, and how to begin the certification process.
Heroku: Core Impact
It’s been a rough month for Heroku. On April 15th, they opened a security notice that’s been active ever since – the status page, designed for incidents measured in hours rather than days or weeks, dutifully reads off a duration of “478 hours, 9 minutes” 1 .
Microsoft open sources Salus software bill of materials (SBOM) generation tool
Salus is a general purpose, enterprise-proven, build-time SBOM generator. It works across platforms including Windows, Linux, and Mac, and uses the standard Software Package Data Exchange (SPDX) format.
A 74xx-Defined Radio (2021)
Video Appetizer TLDR I built a shortwave radio receiver from scratch using only cheap and easily available components, i.e. standard transistors, op-amps and 74xx logic chips. No typical radio part…
PostgreSQL views and materialized views and how they influenced TimescaleDB
Continuous aggregates are one of Timescale's most popular features, but you can’t fully understand them without some context on Postgres views and materialized.
To stop building heat islands, stop overbuilding parking lots
Parking lots amplify high temperatures. Why are we still requiring them to be larger than they need to be?
Former officials say big tech monopoly power is vital to national security
When the U.S. security state announces that Big Tech's centralized censorship power must be preserved, we should ask what this reveals about whom this regime serves.
How to Drop Out (2004)
People who work get bored when they don't work. People who don't work never get bored.
The Canon Cat
A software design framework for humans, distilled from Jef Raskin's Humane Interface.
Psychedelics and mental illness
The science of psychedelics is everywhere – but we should treat it with serious scepticism
My next main browser: a review of Orion
Orion is currently my favourite browser, and has replaced Safari entirely on one of my primary Macs. Here's why.
A guide to getting started with embedded systems
In this article, I share a beginner friendly guide to learning the basics of embedded systems and how they work. I talk about micontrollers, electronics, and software. I also share my motivation for working on embedded systems.
Don't force users to register before they can buy (2015)
Guest checkout with optional registration on e-commerce sites simplifies the purchase process and invites users to register when they feel comfortable, rather than forcing unwanted registration.
Qantas ferried an engine on the wing of a 747 (2016)
When Qantas 747 VH-OJU had engine trouble in Johannesburg, VH-OJS came to the rescue ferrying a spare Rolls Royce engine from Sydney to Johannesburg for the stricken plane. We wanted to find out more, so we talked with Qantas about how they go about carrying an extra engine across the ocean. After considering its…
The Linux scheduler: A decade of wasted cores (2016)
The Linux Scheduler: a Decade of Wasted Cores – Lozi et al. 2016 This is the first in a series of papers from EuroSys 2016. There are three strands here: first of all, there’s some grea…
Police CyberAlarm Uses Alarming Cryptography
Today we’re going to be talking about this code, shared on Twitter by Paul Moore. It’s worth noting that this code snippet was after Paul attempted to alert them to security issues with…
A Closer Look at the Lapsus$ Data Extortion Group
Microsoft and identity management platform Okta both this week disclosed breaches involving LAPSUS$ , a relatively new cybercrime group that specializes in stealing data from big companies and threatening to publish it unless a ransom demand is paid. Here’s a closer look at LAPSUS$, and some of the low-tech but…
Wolvic, a new browser project picking up where Firefox Reality leaves off
Igalia is an open source consulting firm specialised in the development of innovative projects and solutions. Our engineers have expertise in a wide range of technological areas, including browsers and client-side web technologies, graphics pipeline, compilers and virtual machines. We have the most WPE, WebKit…
Incremental Parsing in Go
This post is an attempt to explain the incremental parsing algorithm aretext uses for syntax highlighting. Like the rest of aretext, parsers are implemented in Go for portability and performance. Most people do not consider Go a functional programming language; nonetheless, aretext’s parsers rely on functional…
Speeding up this site by 50x (2014)
I've seen all these studies that show how a 100ms improvement in page load time has a significant effect on page views, conversion rate, etc., but I'd never actually tried to optimize my site. This blog is a static Octopress site, hosted on GitHub Pages. Static sites are supposed to be fast, and GitHub Pages uses…
Mona Sans and Hubot Sans
Learn how to use and express yourself with GitHub’s open source variable fonts, Mona Sans and Hubot Sans.
I decided to build a nine-bit computer
The first nerdy dispatch from my Quixotic Hardware Project, QIXOTE-1
Japanese vegetable cutting techniques (2021)
Want to improve your knife skills? Take a look at this list of Japanese vegetable cutting techniques. Start from the basics, and work your way up to master.
MikroTik authentication revealed
A deep-dive into MikroTik's hand-rolled Elliptic Curve Secure Remote Protocol (EC-SRP) cryptography used in client-server authentication
Using an Amiga in 2021: Making an intro
Every once in a while, someone asks about my interests. I usually just say I'm into home computers from the 1980s and, since most people are very nice and polite, they then ask what I do with them. I usually say something about competing in computer graphics at "digital art festivals," because explaining what the…
I decided to move away from big tech for my children and myself
I have two children, 7 and 9, and they have friends who have phones. I've read 'digital vegan' and I'm convinced social media has a net negative effect (even if you disregard the terrible effect of being monitored). So they are starting to ask for a phone, and while we won't give it to them anytime soon, they are at…
I/O 2022
Check out this year’s Google I/O announcements.