In association with the release of curl 8.4.0, we publish a security advisory and all the details for CVE-2023-38545. This problem is the worst security problem found in curl in a long time. We set it to severity HIGH. While the advisory contains all the necessary details. I figured I would use a few additional ……
Go 1.21 RC brings language improvements, new standard library packages, PGO GA, backward and forward compatibility in the toolchain and faster builds.
The bug lies in closed-source Google-proprietary code so it’s a bit hard to inspect, but after some patch-diffing I concluded that the root cause was due to this horrible bit of API ‘design’: https://issuetracker.google.com/issues/180526528 .
For the past year, we have been working on a new architecture for CheerpJ: our implementation of the JVM in HTML5/WebAssembly, designed to run Java applications on the browser. CheerpJ 3.0 will be released in the late summer of 2023, and will be easier to use, faster, and more compatible than ever before. Our live…
I spend most of my time writing code in a full screen terminal. I like to read books on my breaks and I'm a big fan of Project Gutenberg, which has over 70...
It is often said that Imitation is the Sincerest Form of Flattery. Also, remember libcrurl? That was the name of the thing Google once planned to do: reimplement the libcurl API on top of their Chrome networking library. Flattery or not, it never went anywhere. The other day I received an email asking me about ……
tl;dr annotated AHK scripts here. Anybody who’s spent time with me knows how much I love AutoHotKey, the flat-out best Windows automation tool in the world. Anybody’s who’s tried to use AutoHotKey knows how intimidating it can be. So to help with that, I’m sharing (almost) all of my scripts along with extensive…
It’s official: Ferrocene is ISO 26262 and IEC 61508 qualified! You can even find the certificate in TÜV SÜDs certificate database. This means we achieved qualification for the open source Ferrocene toolchain. Ferrocene 23.06.0, based on Rust 1...
Slides and videos explaining a functional approach to error handling
After needing to do a deep dive on the venv module (which I will explain later in this blog post as to why), I thought I would explain how virtual environments work to help demystify them. Why do virtual environments exist? Back in my the day, there was no concept
An overview of Rust GUI libraries and frameworks, focused on WASM. Discover the latest GUI toolkit options for Rust, increase your programming skills, and create efficient WebAssembly bundles that will help you build comprehensive applications.
Dear Community, In a world where massive AI projects are closed-source, and a handful of companies are set to control the future of AI, people are rightfully asking, where is OpenCV 5? OpenCV has been the standard for publicly available, free-for-commercial use, open-source computer vision for over 20 years. We have…
I am using C for a professional project. I believe in memory safety. Yes, I'm a hypocrite, but please, let me explain.
On uniform vs. specific syntax.
Today, Amazon CodeWhisperer, a real-time AI coding companion, is generally available and also includes a CodeWhisperer Individual tier that’s free to use for all developers. Originally launched in preview last year, CodeWhisperer keeps developers in the zone and productive, helping them write code quickly and securely…
And then telling it to not generate those images!
Seriously, I don't. I'd prefer SQL.
This post is about why we need a coroutine package for Go, and what it would look like. But first, what are coroutines?
Support for npm workspaces, DNS lookups, database drivers, and lots of improvements to bun install.
Update: This post sparked a lot of excellent discussion and debate on workarounds, and there are now multiple working solutions to allow certificate injection...
Rails 7.1 will include a Dockerfile to help ease production deployments
Elixir is the thing I do most of my public writing and speaking about. It is my default programming language for the last 5-6 years. It suits my brain. Performs well for the kind of work I typically do. And using it I have experienced very few drawbacks. Rather than writing yet another post trying to widely summarize…
The build step helps Node.js/npm run in the browser, optimize end-user performance, etc. But long build times limit productivity. With modern tooling, do we still need a build step?
We are excited to ship the first version of pgroll, a command line tool that offers safe and reversible schema migrations for PostgreSQL
A small team within Mozilla’s innovation group recently undertook a hackathon to build a trustworthy internal chatbot prototype.
Posted by Dana Jansens (she/her), Chrome Security Team We are pleased to announce that moving forward, the Chromium project is going to s...
How Canva does hand-drawn shape recognition in the browser
Why and how we continuously invested the team bandwidth to pay back tech debt and what were the results?
