#security (1 post)
Articles from blogs I follow around the net
Package Managers are Evil
n.b. This is a written version of a dialogue from a YouTube video: 2 Language Creators vs 2 Idiots | The Standup Package managers (for programming languages) are evil1. To start, I need to make a few distinctions between concepts a lot of programmers mix u…
via Articles on gingerBillSeptember 08, 2025Podcast: Netstack.fm, story of Rust's networking with hyper
Last week I was a guest on the Netstack podcast. We talked abit about how I got into Rust, how async Rust developed, and the story behind hyper and its surrounding ecoystem. We started (and ended) with my goal of better software: On your about page, y…
via seanmonstarSeptember 02, 2025Recently
I missed last month’s Recently because I was traveling. I’ll be pretty busy this weekend too, so I’ll publish this now: a solid double-length post to make up for it. Listening It’s been a really good time for music: both discovering new albums by bands I…
via macwright.comAugust 29, 2025It’s a Cold Day in Developer Hell, So I Must Roll My Own Crypto
I have several projects in-flight, and I wanted to write a quick status update for them so that folks can find it easier to follow along. Please bear in mind: This is in addition to, and totally separate from, my full-time employment. Hell Frozen Over A wh…
via Dhole MomentsAugust 27, 2025i'm bored, so here's a useless 0day
i either want my US$2.5k professional-grade device backdoored or not at all
via maia blogAugust 20, 2025Embedding Wren in Hare
I’ve been on the lookout for a scripting language which can be neatly embedded into Hare programs. Perhaps the obvious candidate is Lua – but I’m not particularly enthusiastic about it. When I was evaluating the landscape of tools which are “like Lua, but …
via Drew DeVault's blogAugust 20, 2025Status update, August 2025
Hi! This month I’ve spent quite some time working on vali, a C library and code generator for the Varlink IPC protocol. It was formerly named “varlinkgen”, but the new name is shorter and more accurate (the library can be used without the code generator). …
via emersionAugust 16, 2025PRs taking too long to be reviewed
Introduction I think there's something every developer working in an environment where PR must be reviewed has experienced: PRs taking too long to be reviewed. Every company has its own process for assigning reviews and setting the amount of minimum…
via Christian Visintin BlogAugust 14, 2025The PoC Pollution Problem: How AI-Generated Exploits Are Poisoning Detection Engineering
As detection engineers, we live and breathe the cycle of vulnerability disclosure, proof-of-concept (PoC) analysis, and signature development. When CVE-2024-XXXXX drops on a Tuesday morning, we’re already pulling GitHub repositories, scanning blog posts, a…
via GreyNoise LabsJuly 30, 2025Testing multiple versions of Python in parallel
Daniel Roy Greenfeld wrote about how to test your code for multiple versions of Python using `uv`. I follow up with a small improvement to the Makefile.
via Technically PersonalJuly 21, 2025LLDB's TypeSystems Part 2: PDB
In my previous post, I described implementing PDB parsing as a can of worms. That might have been a bit of an understatement. PDB has been one "oh, it's gonna be twice as much work as I thought" after another. Implementing it has revealed many of the same …
via Cracking the ShellJuly 07, 2025Contra Ptacek's Terrible Article On AI
A few days ago, I was presented with an article titled “My AI Skeptic Friends Are All Nuts” by Thomas Ptacek. I thought it was not very good, and didn't give it a second thought. To quote the formidable Baldur Bjarnason: “I don’t recommend reading it, but…
via LudicityJune 19, 2025Elevate hover/focus effects with transitions across multiple elements
You can elevate hover/focus effects by triggering transitions on more than one element. With the right orchestration, you can create more nuanced effects.
via Rob O'Leary | BlogJune 01, 2025Generative AI will probably make blogs better
Generative AI will probably make blogs better. Have you ever searched for something on Google and found the first one, two, or three blog posts to be utter nonsense? That's because these blog posts have been optimized not for human consumption, but rather …
via pcloadletterMay 30, 2025#Rx Writing Challenge 2025
This is a short reflection on my experience of the recent writing challenge I took part in. Over the past two weeks, I have participated in the #RxWritingChallenge 1—a daily, 30-minute writing group starting at 9 AM every morning. Surrounded by fellow doct…
via Ul-lingaApril 05, 2025My coffee workflow
My coffee workflow by Clement Delafargue on April 1, 2025 Tagged as: coffee, espresso, flair58, v60. It is my first April cools’ and I guess I could start by talking about coffee. If you’ve seen me in person, it won’t be a surprise, I guess. This po…
via Clément Delafargue - RSS feedApril 01, 2025Simple Web Augmented Generation
A guide to building a simple web application using augmented generation.
via Ishan WritesMarch 10, 2025Backup Yubikey Strategy
After a local security meetup where I presented about Webauthn, I had a really interesting chat with a member about a possible Yubikey management strategy. Normally when you purchase a yubikey it's recommended that you buy two of them - one primary and one…
via Firstyear's blog-a-logFebruary 28, 2025Generated by openring-rs