211
Bypassing regulatory locks, hacking AirPods and Faraday cages
How we bypassed Apple's regulatory restrictions, built a Faraday cage and enabled georestricted features on the Airpods Pro 2 for our grandparents.
212
In Defense of Simple Architectures (2022)
Wave is a $1.7B company with 70 engineers 1 whose product is a CRUD app that adds and subtracts numbers. In keeping with this, our architecture is a standard CRUD app architecture, a Python monolith on top of Postgres. Starting with a simple architecture and solving problems in simple ways where possible has allowed…
213
Engineers do not get to make startup mistakes when they build ledgers
Practical accounting for fintech engineers, and also how not to repeat my silly mistakes.
214
Inside the "3 billion people" national public data breach
I decided to write this post because there's no concise way to explain the nuances of what's being described as one of the largest data breaches ever. Usually, it's easy to articulate a data breach; a service people provide their information to had someone snag it through
215
Teach Yourself Programming in Ten Years (1998)
Why is everyone in such a rush? Walk into any bookstore, and you'll see how to Teach Yourself Java in 24 Hours alongside endless variations offering to teach C, SQL, Ruby, Algorithms, and so on in a few days or hours. The Amazon advanced search for [ title: teach, yourself, hours, since: 2000 and found 512 such books…
216
Multiple new macOS sandbox escape vulnerabilities
This is a blog post for my presentation at the conference POC2024. The slides are uploaded here.
217
Breaking the 4Chan CAPTCHA
In this blog post, I will talk about my successful experiment in machine learning using TensorFlow to automate solving the 4Chan CAPTCHA.
218
Should I use JWTs for authentication tokens?
Let’s talk about what we’re talking about. JWT stands for JSON Web Tokens, a reasonably well defined standard for authenticated tokens. Specifically they have a header with format information, a payload, and a signature or message authentication code. The core idea is that whoever has the corresponding verification…
219
900 Sites, 125M accounts, 1 Vulnerability
900 Sites, 125 million accounts, 1 vulnerability
220
Linux/4004: booting Linux on Intel 4004 for fun, art, and no profit
Dmitry.GR: Slowly booting full Linux on the intel 4004 for fun, art, and absolutely no profit
221
S3 is files, but not a filesystem
"Deep" modules, mismatched interfaces - and why SAP is so painful
222
Riven
Sometimes success smacks you right in the face. More often, it sneaks up on you from behind.
223
What You Get After Running an SSH Honeypot for 30 Days
Discover what 11,599 SSH login attempts reveal after running a honeypot for 30 days. Learn key cybersecurity insights—read now to protect your systems!
224
Intel's Humbling
Intel under Pat Gelsinger is reaping the disaster that came from a lack of investment and execution a decade ago; the company, though, appears to be headed in the right direction, as evidenced by i…
225
M4 Mac mini's efficiency
I had to pause some of my work getting a current-gen AMD graphics card running on the Pi 5 and testing a 192-core AmpereOne server to quickly post on the M4's efficiency. I expected M4 to be better than M1/M2 (I haven't personally tested M3), and I hoped it would at least match the previous total-system-power…
226
I keep a WTF notebook (2021)
There's a very specific reputation I want to have on a team: "Nat helps me solve my problems. Nat get things I care about done."
227
Using an 8K TV as a Monitor
TLDR: If your job is to write code all day or stare at Excel spreadsheets, buy an 8K TV instead of a multi-monitor setup. You can even use the same TV for 4K 120 Hz gaming or watching movies as a bonus!
228
The UX of Lego Interface Panels (2020)
LEGO interface panels are beautiful, iconic, and great for learning interface design basics. I bought 52 of them from BrickLink to explore the design, layout and organisation of complex interfaces.
229
PuTTY vulnerability vuln-p521-bias
Home | FAQ | Feedback | Licence | Updates | Mirrors | Keys | Links | Team Download: Stable · Snapshot | Docs | Privacy | Changes | Wishlist
230
Extreme Pi Boot Optimization
🚀 3.5 sec to Linux userspace code
231
232
John Carmack on inlined code (2014)
(Here begins a comment written by John Carmack in 2014, about an email he sent to a programmers’ mailing list in 2007.)
233
How Postgres stores data on disk – this one's a page turner
A high-level overview of how PostgreSQL stores data on disk, covering segments, pages and more.
234
The two factions of C++
The dream of a single dialect-free C++ has probably been dead for many years, anyway.
235
The Origins of DS_store (2006)
If you are a Mac user, or if you have transferred files from Mac to Windows, you’re probably familiar with .DS_Store files. But where does this name come from?
236
An intuitive guide to Maxwell's equations (2020)
An Intuitive and Visual Guide to Maxwell's Equations
237
238
WebP: The WebPage Compression Format
I want to provide a smooth experience to my site visitors, so I work on accessibility and ensure it works without JavaScript enabled. I care about page load time because some pages contain large illustrations, so I minify my HTML. But one thing makes turning my blog light as a feather a pain in the ass.
239
Hackintosh is almost dead
While I knew about and even tried various very early attempts to run macOS on non-Apple hardware, it wasn’t until early 2020 that I’ve built my first proper one. Then I built several more which are still seeing daily use.
240
After 3 Years, I Failed. Here's All My Startup's Code
And by "all," I mean everything: core product, failed pivots, miscellaneous