Stuff shared and sometimes created by me.
ALT Saturday The Fast and the Spurious: Congestion Control Experimentation in Firefox’s QUIC stack Building QUIC Multipath Invisible Hypervisors: Stealthy Malware Analysis with HyperDbg All Your Keyboards Are Belong To Us! The invisible key: Securing the new attack vector of OAuth tokens Running Wikipedia on Bare Metal, Open Source, and a Healthy Dose of Caching What happened to RubyGems and…
AI often feels powerful because it hides the complexity, but as an engineer, your job is to manage that complexity, not ignore it. The tools have changed, but the fundamental requirement for engineering rigour has never been higher. — Chris Gregori in Code Is Cheap Now. Software Isn’t.
Saturday The state of Go Build a Great Business on Open Source without Selling Your Soul Pick My Project! Lessons Learned from Interviewing and Writing 20+ End User Case Studies Stratoshark Living the SBOM life - the good, the bad and the evil parts 14 Years of systemd Sunday The OpenAPI Standards Landscape RDE: Tools for managing reproducible development environments Minimalist web application…
Communication is paramount. You must be willing to spend whatever time is needed to bring your coworkers up to speed—to help others understand—where you are going. Sometimes you will spend most of a day talking with your coworkers, not programming. — Rasmus has started a company and is hiring
Saturday The state of Go The secret life of a goroutine Effortless Bug Hunting with Differential Fuzzing Maintaining Go as a day job - a year later Using chroots in a single Linux Container as an alternative to docker-compose Soft Reboot: keep your containers running while your image-based Linux host gets updated A front-end journey back to Rails Besides Web: a Worker story. The world of Passkeys…
When looking at the talks for FOSDEM 2024, I saw Efficient Integration Testing in Go: A Case Study on Dapr . I’m pretty sure I’ve seen Dapr mentioned before. The talk page links to github.com/dapr/dapr . It states Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. That’s still very abstract but the README on GitHub mentions gRPC…
Measuring smartphone slow-mo It seems that fake/interpolated high-framerate video, in it’s numerous consumer forms (“ultra slow-mo” & friends), is just the current target of marketing lies and needs to receive the same treatment. I feel absolutely no shame in pointing fingers to Motorola/Lenovo for deceiving advertising in the official “technical specifications”, especially when the Lenovo support…
Who Writes OpenSSL? So in conclusion, we found that 87% of the non-trivial commits to OpenSSL in the last 12 months were from 56 people paid by their employer to work on OpenSSL. This result shouldn’t be too surprising, Open Source projects such as OpenSSL rely on commercial organisations contributing their employees’ time in order to survive.
“AWS Snowmobile is an Exabyte-scale data migration device used to move extremely large amounts of data to AWS. Migrate up to 100PB in a 45-foot long ruggedized shipping container, pulled by a semi-trailer truck.” - AWS Snow Family – Move petabytes of data to and from AWS
Orders of magnitude (data) - Wikipedia : Amazing page, some tidbits 1.2×1020 bits (15 exabytes) – estimated storage space at Google data warehouse as of 2013 I wonder what their scale is today, 10 years later? 3.4×1021 bits (0.36 zettabytes) – amount of information that can be stored in 1 gram of DNA The future of storage?
Saturday Enabling FIDO2/WebAuthn support for remotely managed users Kubernetes and Checkpoint/Restore Exploring Database Containers Passwordless Linux – where are we? Winners and Losers in FOSS Sunday Zero Knowledge Cryptography and Anonymous Engineering So you want to build a deterministic networking system Hole punching in the wild Decentralized Social Media with Hachyderm Matrix 2.0
Shopify/ruby-lsp: An opinionated language server for Ruby : Picked this up from Year in Review 2022: Tenderlove’s Ruby and Rails Reflections and Predictions by tenderlove on Shopify’s Engineering blog. Seems like they been working on it, and using it internally, for a while. It is part of their Visual Studio Code Shopify Ruby effort. I was wondering how this project differs from Solargraph . It…
In the Hacker News thread about Pitchfork , I spotted a link to Grumpy: Go running Python! , a blog post from Google in 2017: Google runs millions of lines of Python code. The front-end server that drives youtube.com and YouTube’s APIs is primarily written in Python, and it serves millions of requests per second! So we asked ourselves a crazy question: What if we were to implement an alternative…
Apple is adding end-to-end encryption to iCloud backups : Apple is also improving its two-factor authentication support by letting users secure their accounts with hardware keys starting early next year. Hardware keys, like YubiKeys, have become increasingly popular tools to provide an extra layer of security for your online accounts, and soon, you’ll be able to use a key with your iCloud account…
C2PA : At East Sweden Innovation Day 2022 , when Mathias Cederholm spoke, I learned about the C2PA specification: a form of PKI (“TLS certificates”) for media files. It was mentioned as a way to battle deepfakes . The Evidential value of cryptographic integrity section on Wikipedia is a good read: The cryptographic integrity of a C2PA-compliant file does not provide evidence that it contains an…
Re: More creative than mere humans by DHH . Because why would we assume that AI won’t actually be more creative than mere humans? AI chess and go competitors are in part so superior now because they’re capable of wild leaps of ingenuity that stump human players. Moves that would never have been considered by a mere human because of their out-of-norm “thinking”. In this…
Mermaid diagrams can be displayed within Markdown · Issue #372 · github/roadmap : Currently planned for Q1 2022 – Jan-Mar according to the roadmap issue. I wonder if it will be supported by the /markdown endpoint in the REST API? (If it will include the SVG code for it.)
“These assistants are all deeply flawed.” - John Gruber comments on Alexa tells 10-year-old girl to touch live plug with penny
I recently discovered the Apple Data & Privacy website , launched May 2018 . A few days ago I initiated an export and downloaded the zip files with my data. After unziping, while transfering the files to my FreeBSD/ZFS server, I noticed rsync reporting errors: rsync: [generator] failed to set permissions on "ActivitySharing/Activities.json": Inappropriate file type or format (79) Turns out some of…
“Unix time numbers are repeated in the second immediately following a positive leap second. The Unix time number 1483142400 is thus ambiguous: it can refer either to start of the leap second (2016-12-31 23:59:60) or the end of it, one second later (2017-01-01 00:00:00). In the theoretical case when a negative leap second occurs, no ambiguity is caused, but instead there is a range of Unix time…