2581
HTTP/3: Everything you need to know about the next-generation web protocol
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
2582
CORS is not meant to secure an API endpoint
CORS does not secure your API: why browser-side API keys are unsafe, and how to protect Drupal JSON:API endpoints with proper authentication.
2583
Understanding Google’s File System (2020)
These paper reviews can be delivered weekly to your inbox , or you can subscribe to the Atom feed . As always, feel free to reach out on Twitter with feedback or suggestions!
2584
Reverse engineering Xiaomi air purifier NFC stickers
For a very thorough write-up on how this all works , please visit : https://unethical.info/2024/01/24/hacking-my-air-purifier/
2585
Expectations of professional software engineers
In a 2019 talk/rant titled “Everyone Watching This Is Fired”, games industry veteran Mike Acton rattled off a sample of 50 things he expects of developers he works with. The title refers to his tongue-in-cheek suggestion that anyone who doesn’t meet all these requirements would be immediately fired.
2586
How on earth I became an entrepreneur
The email landed in my inbox around 10:05/am, alerting us of an all-hands meeting in 15 minutes. “Guess we got acquired”, we all thought. 16 minutes later, we were all laid off. This was February of 2001. I was first alerted of my uselessness in 1995, when ~ fresh out of college ~ I worked ... Read more
2587
RSS Feed Best Practices
These are some technical tips for publishing a blog. These have nothing to do with good content, just how to share that content. The recommendations are roughly in order of importance and have rationale for why they are that important.
2588
Running the Steam Deck’s OS in a virtual machine using QEMU
The Steam Deck is a handheld gaming computer that runs a Linux-based operating system called SteamOS. The machine comes with SteamOS 3 (code name “holo” ), which is in turn based on Arch Linux.
2589
Syntax Design (2014)
A programming language gives us a way structure our thoughts . Each program, has a kind of internal structure, for example:
2590
An Introduction to Generics
An introduction to generics in Go.
2591
The Guide to Onboarding Software Engineers
Learn how to onboard engineers with an empathetic and structured approach. Includes a 30-60-90-day check-in template.
2592
I quit caffeine
Enough is enough.
2593
In Response to My first impressions of Web3
This a response to Moxie Marlinspike’s “My First Impression of Web3” Both gave me a feeling for how the space works. To be clear, there is nothing particularly “distributed” about the apps themselves: they’re just normal react websites. The “distributedness” refers to where the state and the logic/
2594
The world is run by people no smarter than you
This post was written as a reflection at the first Dev Writers Retreat. It's been really weird doing this in the PermaParty city while the world seemingly falls apart outside.…
2595
Why CVE-2022-3602 was not detected by fuzz testing
So recently a very hyped memory corruption security vulnerability was discovered in the OpenSSL punycode parser. Some folks including Hanno ...
2596
Why I still recommend Julia
Yuri Vishnevsky wrote that he no longer recommends Julia. This caused lengthy discussions at Hacker News, Reddit and the Julia forum. Yuri argues that Julia shouldn't be used in any context where corr...
2597
What it feels like to be bullied out of a job you love
Wesley Faulkner’s story
2598
Meta Myths
Meta deserves a bit of a discount off of its recent highs, but a number of myths about its business have caused the market to over-react.
2599
Write documentation first, then build
The best way to build a great product is to write the whole idea out first.
2600
Request bodies in GET requests
12 years ago I asked on Stack Overflow: Are HTTP GET requests allowed to have request bodies? . This got a 2626 upvotes and a whopping 1.6 million views, so clearly it’s something lots of people are still curious about, and in some cases disagree with the accepted answer.
2601
Why is selling software so weird?
Building software looks a lot like building a house, but selling the two couldn't be more different.
2602
Yes, the 8086 wanted to be mechanically translatable from the 8080, but
So many addressing modes, so little space.
2603
2604
2605
We found critical vulnerabilities in Hive Social
Dieser Artikel ist auch auf deutsch erschienen. Update: The vulnerabilities are currently no longer exploitable because Hive deactivated their servers. More details Following the Twitter takeover, a number of services promising to be an alternative gained traction. One of those is “Hive Social”, which reached more…
2606
Typography is impossible (2016)
The practical guide to why laying out type never quite does what you want
2607
Roman Egypt was a strange province
Bret Devereaux (A Collection of Unmitigated Pedantry)2022219 points53 commentscited by 3History & Retro Computing details
Welcome back! We are back from our November hiatus and thus back to regular weekly posts! This week we’re going to answer the runner-up question in the last ACOUP Senate poll (polls in which …
2608
Hanami 2.0
Hanami 2.0 opens a new chapter for the Ruby community.
2609
I built my own Sega Genesis (Mega Drive) hardware dev kit from scratch
How I built a Sega Mega Drive dev kit from scratch: reverse engineering the cartridge slot, a homemade logic analyzer, a RAM cartridge and boot firmware.
2610
Datasette Lite: a server-side Python web application running in a browser
Datasette Lite is a new way to run Datasette: entirely in a browser, taking advantage of the incredible Pyodide project which provides Python compiled to WebAssembly plus a whole suite …