Lessons from Creating a VSCode Extension with GPT-4
Lately, I've been playing around with LLMs to write code.
Learnings from kCTF VRP's 42 Linux kernel exploits submissions
Tamás Koczka, Security Engineer In 2020 , we integrated kCTF into Google's Vulnerability Rewards Program (VRP) to support researchers evalu...
CRDT-richtext: Rust implementation of Peritext and Fugue
Made in Notion, the connected workspace where AI agents and teams organize docs, projects and knowledge together.
Many public Salesforce sites are leaking private data
A shocking number of organizations — including banks and healthcare providers — are leaking private and sensitive information from their public Salesforce Community websites, KrebsOnSecurity has learned. The data exposures all stem from a misconfiguration in Salesforce Community that allows an unauthenticated user to…
Understanding every byte in a WASM module
In my last post, we explored how to build WASM modules, both with and without WASI support, using Clang. In a comment on Reddit, it was mentioned that much of the setup I walked through in that post could be avoided by just leveraging Zig’s WASI supprt. This is a great point, and I would recommend doing the same. The…
Chesterton's Fence: A lesson in second order thinking (2021)
A core component of making great decisions is understanding previous decisions. If we don’t understand how we got “here,” we run the risk of making things much worse.
New C features in GCC 13
The GNU Compiler Collection 13 release implemented a number of interesting features in its C front-end. This article summarizes the most interesting ones.
Shutting down nuclear power could increase air pollution: study
An MIT study shows that if U.S. nuclear power plants are retired, the burning of coal, oil, and natural gas to fill the energy gap could cause more than 5,000 premature deaths.
Jailbroken iOS can't run macOS apps – I spent a week to find out why (2021)
I ran command line macOS tools, such as Bash and Geekbench, on a jailbroken iPhone by replacing iOS’s dyld shared cache (all of iOS’s code) with macOS’s. However, graphical apps will never work: macOS’s WindowServer won’t start, since iOS’s drivers are too different.
Carl Sagan's Rules for Bullshit-Busting and Critical Thinking
Necessary cognitive fortification against propaganda, pseudoscience, and general falsehood.
Coffee grounds make concrete 30% stronger
Engineers in Australia have found a way of making stronger concrete with roasted used-coffee grounds, to give the drink-additive a “double shot” at life.
Everyday uses for PVC water pipe
[ Home ] [ Publications ] [ Resume ] [ Family ] [ Projects ] [ The Others ] [ Sitemap ]
TIL: You Can Stop Updating Copyright Attribution Years (2021)
Every January 1st, an army of open source developers rushes out to update their copyright attributions in licenses and documentation. Why? Because we’ve always done it that way.
Pixel Binary Transparency: verifiable security for Pixel devices
Jay Hou, Software Engineer, TrustFabric (transparency.dev) Pixel Binary Transparency was originally announced in 2021; the following blog ...
Tomb Raider
If you have to stare at someone’s bum, it’s far better to look at a nice female bum than a bloke’s bum!
I’ll never be an astronaut
Developing Aortic Stenosis due to a Bicuspid Aortic Valve This is one doctor’s experience as an explainer to friends, family and anyone who has a bicuspid aortic valve or who, for whatever re…
OpenCore Legacy Patcher – Use new macOS versions on old hardware
Experience macOS just like before
OpenWrt 23.05
Anubis could not load its JavaScript. The server may be overloaded. Please reload the page to try again.
How to speed up the Rust compiler
It has been five months since my last general update on the Rust compiler’s performance. Let’s see what has happened in that time.
How to own your own Docker Registry address
As you may have seen, Docker Hub made a dramatic shift in policy this week, and effectively gave a 30 day eviction notice to almost all community-run images. ...
Spyware vendors use 0-days and n-days against Android, iOS and Chrome
Google’s Threat Analysis Group (TAG) tracks actors involved in information operations (IO), government backed attacks and financially motivated abuse. For years, TAG has…