Just Write
I listened to a podcast about Lena Dunham. I knew nothing about her, had never seen any of her work, and probably never will. But the episode ended with thes...
I listened to a podcast about Lena Dunham. I knew nothing about her, had never seen any of her work, and probably never will. But the episode ended with thes...
I left my own startup after almost 5 years of hard work. It was a tough decision, but a necessary one.
Can we just keep adding more clients until at 150 clients we hit $300k MRR?
The most important step is the first one. Humanity didn't get good at building houses by building the same house a million times. We built lots of different houses and learned from each other's failures. Gravitating away from monopolies is a way everyone can help improve software, regardless of our abilities or needs.
I was reminded by a discussion with a friend why, as a manager, you should be cautious about the relations you develop with the people in your team.
The new research suggests the closest living relatives to mitochondria may belong to a genus of marine bacteria called Iodidimona.
In the old days when I started programming, green programmers trying to build their skills and get experience started out doing maintenance programming. Only the old hands got to write new code. The newbies cut their teeth debugging and fixing musty old code that still worked for the business. I’ve done my share of…
Despite dealing with issues like depression, suicide, domestic violence, and PTSD, these apps share data freely and raise many security concerns
In fall 2022, Trail of Bits audited cURL, a widely-used command-line utility that transfers data between a server and supports various protocols. The project coincided with a Trail of Bits maker week, which meant that we had more manpower than we usually do, allowing us to take a nonstandard approach to the […]
Douglas Adams on Hypercard + New Educational Models
My post Bing: “I will not harm you unless you harm me first” really took off. It sat at the top of Hacker News for a full day, and is …
Knuth knows how to maintain information hygeine.
In this post, we will discuss recent results from Immunant and Galois in extending C2Rust to emit memory-safe Rust in certain cases. With this work we aim to shift a meaningful part of the translation burden from the human to the machine. Up until now, C2Rust has only been able to translate C to unsafe Rust that is no…
Since the change of year, I’ve been using Alpine Linux on my main computing device (a new desktop PC that I assembled in December). These are some notes on in, some niceties and caveats.
Research on programming tools published at CHI 2023.
Finalist #10 in the Book Review Contest
Finding vulnerabilities in global domain infrastructure to take control of ccTLD zones. Vulnerabilities in EPP
HyperRogue version 13.0 is released on Steam and itch.io ! Again, it was quite a long time since the last major update (12.0, from 2021)....
CRDTs sound cool, but how are they actually used? Let's learn by building a collaborative pixel art editor.
Cascade is a RISC-V CPU fuzzer that generates valid , long and complex programs, and relies on a termination cascade-effect for bug detection. It detected 37 new bugs (29 new CVEs) in 5 RISC-V CPUs, which is more than all the existing fuzzers, combined. You can read a paper we wrote on Cascade here and try it out here…
The Compact Calendar presents days as a continuous candy bar of time. Weeks are presented as a stack of available time with no gaps, making it easier to count-out days naturally as you think.
Tutorials and articles of Inigo Quilez on computer graphics, fractals, math, art, demoscene, shaders and more.
UPDATE: Wow, this post has gotten popular! I’ve written a new post that adds new papercuts combined with concrete suggestions for how C++ could improve, if you are interested. Also, if you want to read more about C++’s deeper-than-papercut issues, I recommend specifically my post on its move semantics. Thank you for…
A blog, mostly about programming
Seed generation of Trust Wallet was flawed, the total entropy was only 32 bits. We have created a file containing all possible seeds. Fortunately, the Ledger Donjon discovered the vulnerability very quickly and likely avoided one of the biggest hack in the crypto ecosystem.
I'm sick of it. In the world of mobile development (though likely also elsewhere), we sink so much engineering talent into making tools that are great...
It’s an empirical observation that rail riders who are faced with a transfer are much more likely to make the trip if it’s near their home than near their destination. Reinhard Clever&#…
I've decided to take the blog down. It's come to my attention some of my former colleagues don't enjoy it as much as I thought they would. N...