Hunting for Nginx alias traversals in the wild
Research beyond the obvious
Research beyond the obvious
Three different cybercriminal groups claimed access to internal networks at communications giant T-Mobile in more than 100 separate incidents throughout 2022, new data suggests. In each case, the goal of the attackers was the same: Phish T-Mobile employees for access to internal company tools, and then convert that…
In my day job, I work on a JavaScript framework (LWC). And although I’ve been working on it for almost three years, I still feel like a dilettante. When I read…
Relational (inner) joins are really common in the world of databases, and one weird thing about them is that it seems like everyone has a different idea of what they are. In this post I’ve aggregated a bunch of different definitions, ways of thinking about them, and ways of implementing them that will hopefully be…
PostgreSQL provides the necessary building blocks for you to combine and create your own search engine for full-text search. Let's see how far we can take it.
I found some details about Apple’s new predictive text model, coming soon in iOS 17 and macOS Sonoma.
If you don't often look beyond established comfortable defaults, you might be surprised to learn just how far the world of frontend has moved away from React, and how big that gap continues to grow.
Besök Ostindiefararen Götheborg i Göteborg och upptäck världens största oceanfärdiga träskepp. Boka biljetter och utforska historien bakom detta unika fartyg.
Claude 2.1 brings a 200K token context window, a 2x reduction in hallucination rates, beta tool use, and system prompts.
What AirGradient learned while making a plastic injection mold in China, from DFM and tooling quotes to samples, revisions, and production risk.
Last week, I had a fascinating conversation with a reader around frustration and unhappiness at work. Much of it was totally obvious to both of us, but it occurred to me that this probably isn't to everyone, which is why almost all of my colleagues (in very cushy, non-stressful jobs) nonetheless need therapy. And if…
I’m sorry, but I don’t want to be an emperor. That’s not my business. I don’t want to rule or conquer anyone. I should like to help everyone - if possible - Jew, Gentile - black man - white. We all want to help one another. Human beings are like that. We want to live by each other’s happiness - not by each other’s…
A tribute to the book by Oliver Burkeman, an exploration of time management in the face of human finitude, and addressing the anxiety of “getting everything done.”
We just released version 1.16 of the official F-Droid client app for Android which includes many radical changes under the hood as well as many bug fixes for...
Should AI systems treat different demographic groups unequally?
The software industry is learning once again that complexity kills
At Shopify, we have spent the last year writing a new Ruby parser, which we’ve called YARP (Yet Another Ruby Parser). As of the date of this post, YARP can parse a semantically equivalent syntax tree to Ruby 3.3 on every Ruby file in Shopify’s main codebase, GitHub’s main codebase, CRuby, and the 100 most popular gems…
Two years ago, Red Hat killed CentOS, a widely-used free version of their Enterprise Linux distribution. The community of CentOS users—myself included—were labeled as 'freeloaders', using the work of the almighty Red Hat corporation, without contributing anything back. Don't mind all the open source developers, Linux…
Back in December, we wrote an article detailing three different options for CSS Nesting.
Accelerating Protomaps with a CDN for fast and affordable maps
A curated list of resources we’ve relied on to get smarter about modern AI, including generative AI, LLMs, and transformer models.
The company, which ranks among the top corporate philanthropists in the U.S., will continue to pursue and invest in other areas where it can make meaningful change—from building affordable housing to providing access to computer science education for students in underserved communities.
Reflections on the benefits of tweaking an existing app, instead of starting from scratch.