Bézier curves are a core building block of text and 2D shapes rendering. There are several approaches to rendering them, but one especially challenging problem, both mathematically and technically, is computing the distance to a Bézier curve. For quadratic curves (one control point), this is fairly accessible, but for…
Notes about creative coding on the Web.
You reset your passkey the same way you reset your password. But you’ll find that passkeys make it harder to switch between password…
An explainer for people who don't know computer science and are mildly curious
O bviously there have been many editorial changes at the formerly venerable Washington Post, a tawdry saga which I don’t intend to recap here.
Thoughts, stories and ideas about of a code poet, bit juggler & logic wizard.
You can make your shell history more useful by removing the typos and false starts.
I’ve been doing relatively frequent sight reading practice using an iPad app for four years. Here’s how I’ve automated some of the steps and what I’ve learned from the experience.
Lessons on maintaining a hobby Android app
Earlier this week, an npm supply chain attack. It’s turn for crates.io, the main public repository for Rust crates (packages). The phishing e-mail looks like this: And it leads to a GitHub login pa...
If you're underwhelmed with AI coding agents or simply want to get more out of them, give parallelization a try. After seeing the results firsthand over the past month, I'm ready to call myself an evangelist. The throughput improvements are incredible, and I don't feel like I'm losing control of the codebase.
Even though the impacts of LLMs have never been seen before, they feel familiar to earlier assumptions.
Django 6.0 introduces a built-in background tasks framework in `django.tasks`. But don't expect to phase out Celery, Huey or other preferred solutions just yet.
These days the internet as a whole is mostly constructed out of point to point ethernet circuits, meaning an ethernet interface (mostly optical) attached directly from one routing device to another routing device.
For the past week, domains associated with the massive Aisuru botnet have repeatedly usurped Amazon , Apple , Google and Microsoft in Cloudflare’s public ranking of the most frequently requested websites. Cloudflare responded by redacting Aisuru domain names from their top websites list. The chief executive at…
Imagine if anyone could punch in a phone number from the largest U.S. cell carrier and instantly retrieve a list of its recent incoming calls—complete with timestamps—without compromising the device, guessing a password, or alerting the user. Now imagine that number belongs to a journalist, a police officer, a…
Cross-Site Request Forgery countermeasures can be greatly simplified using request metadata provided by modern browsers.
On making use of large thinking models.
Windows 10 spies on your use of System Settings
We're discussing a paper that demands attention...
This tension of what customers are asking for vs what customers really need shows up in areas like resilience. Amazon's "Well-Architected Framework" strongly exhorts customers to avoid building production workloads in a single Availability Zone — but Amazon's cross-AZ bandwidth pricing is painful, and Amazon doesn't…
CTO as a Service / Fractional CTO by Sergey Khaladzinski2025155 points114 commentsCareer & Management details
I can't believe it's been five years since my last post… Five years since I decided to join an early stage startup as the CTO / "the tech guy". Five years since I took my last train
We discuss how to make sure that your access to TLS (thread-local storage) is fast, and how the presence of constructors and shared libraries affects the access time.
Someone once told me hardware is hard...
Why the banks really hate fintechs that allow businesses to learn your account number easily.
tl;dr: Microsoft and other email security scanners will visit the links in email you transmit, and run the JavaScript in those links, including calls that lead to POSTs going out. This used to be unacceptable, since POSTs have side effects. Yet here we are. This breaks even somewhat sophisticated single-use sign-on /…
Programming language async runtimes are very focused on handling asynchronous, possibly long running tasks, that might yield for a variety of reasons, that...
Title says it all, I seriously dislike jq 's convoluted, impossible-to-remember ad hoc DSL that instantly joined heaps of misery like CMake and gnuplot in my heart. It should really have been a library with a CLI wrapper around eval in a well-known scripting language like Python.
When I took a look at the history of Quake binaries, they all made sense to me. quake.exe was the original release, able to run on DOS and Windows 95. Then came vquake.exe to support the hardware accelerated chip Vérité 1000. Later, glquake.exe generalized hardware acceleration to any vendor providing OpenGL drivers…
