~lobsters | Bookmarks (2111)

Traversal-resistant file APIs - The Go Programming Language

go.dev

Damien Neil 12 March 2025 A path traversal vulnerability arises when an attacker can trick a...
Damien Neil 12 March 2025 A path traversal vulnerability arises when an attacker can trick a program into opening a file other than the one it intended. This post explains this class of vulnerability, some existing defenses against it, and describes how the new os.Root API added in Go 1.24 provides a simple and robu...

go security
2
Migrate Django ID field from int to big int with minimal downtime

charlesoliveira.dev

databases python web
1
Iconography of the PuTTY tools

greenend.org.uk

design windows
2
Inline Evaluation Adventure

rigsomelight.com

games practices
2
Dropping RISC-V support

chimera-linux.org

hardware linux
1
kmx.io blog : Why I stopped everything and started writing C again

kmx.io

programming
2
The Codebase of a National Lab I Worked At

mirawelner.com

bioinformatics data science image processing machine learning mira welner
1
Carefully But Purposefully Oxidising Ubuntu

jnsgr.uk

This article was originally posted on the Ubuntu Discourse, and is reposted here. I welcome comments...
This article was originally posted on the Ubuntu Discourse, and is reposted here. I welcome comments and further discussion in that thread.Last month I published Engineering Ubuntu For The Next 20 Years, which outlines four key themes for how I intend to evolve Ubuntu in the coming years. In this post, I’ll focus on...

linux rust
1
Constant-Time Code: The Pessimist Case

iacr.org

compiler constant-time cryptography jit programming
2
Blend2D

blend2d.com

It's been some time I have written about a High-Performance QOI Codec, which joined other codecs...
It's been some time I have written about a High-Performance QOI Codec, which joined other codecs offered by Blend2D library in 2024. The development of image codecs continued and now I would like to announce a new high-performance PNG codec, which is much faster than other available codecs written in C, C++, and oth...

2d blend2d graphics high performance jit
2
A Perplexing Javascript Parsing Puzzle

hillelwayne.com

crimes historical history javascript
3
Hacking a GPO 746 rotary phone

yaymukund.com

hardware retrocomputing
1
The DuckDB Local UI

duckdb.org

databases visualization web
2
Haiku Activity & Contract Report, February 2025

haiku-os.org

This report covers hrev58584 through hrev58696. Applications jscipione fixed opening folders by double-clicking the “Location” column...
This report covers hrev58584 through hrev58696. Applications jscipione fixed opening folders by double-clicking the “Location” column in query results in Tracker. He also fixed hard-coded values for certain menu item metrics, bringing them in line with standard menu metrics, cleaned up some parts of drag & drop supp...

activity report contractor osdev
1
On The Insecurity of Telecom Stacks in the Wake of Salt Typhoon - Dhole Moments

soatok.blog

security
2
The Art of Formatting Code · mcyoung

mcyoung.xyz

Every modern programming language needs a formatter to make your code look pretty and consistent. Formatters...
Every modern programming language needs a formatter to make your code look pretty and consistent. Formatters are source-transformation tools that parse source code and re-print the resulting AST in some canonical form that normalizes whitespace and optional syntactic constructs. They remove the tedium of matching in...

programming
1
The Future is Niri

ersei.net

linux niri nixos sway wayland
4
Perspectives from the Technical University of Munich

mirawelner.com

bioinformatics data science education image processing machine learning
1
Translating bzip2 with c2rust - Blog - Tweede golf

tweedegolf.nl

The work on the project is kindly funded by NLnet Foundation.This article was originally posted on...
The work on the project is kindly funded by NLnet Foundation.This article was originally posted on the Trifecta Tech Foundation blog, the non-profit backed by Tweede golf and the long-term home for open infrastructure projects.Using c2rustc2rust is an incredibly useful tool developed by Immunant and Galois. It takes...

rust
1
(Re)writing an interpreter in Rust

dannyvankooten.com

Two years ago I wrote my first interpreter for a toy programming language called Monkey, in...
Two years ago I wrote my first interpreter for a toy programming language called Monkey, in C. The thing works and is pretty fast, but I remember a lot of frustration dealing with segfaults or hard-to-track down memory leaks as soon as I introduced heap allocated values. Much of this is undoubtedly due to me not bei...

performance rust
1
How AfterHour built an ultra-scalable chat service in one month with Rama

redplanetlabs.com

"I built my first chat system in 1999 on the IRC protocol, cofounded a startup for...
"I built my first chat system in 1999 on the IRC protocol, cofounded a startup for companies to self-host chat rooms, and have built real time multiplayer games. I am intimately familiar with the challenges inherent in running real time messaging, presence, and pub-sub software. At AfterHour we knew that chat was go...

clojure databases web
1
GitHub - stapelberg/rsync-over-grpc: demo program: rsync file transfer (with the gokrazy/rsync module) over gRPC transport

github.com

go
1
Every line of code is always documented

mislav.net

Every line of code comes with a hidden piece of documentation. Whoever wrote line 4 of...
Every line of code comes with a hidden piece of documentation. Whoever wrote line 4 of the following code snippet decided to access the clientLeft property of a DOM node for some reason, but do nothing with the result. It’s pretty mysterious. Can you tell why they did it, or is it safe to change or remove that call ...

practices vcs
1
On Naming Things

11spades.net

So far as I’ve bothered to think, there are two modes of naming things. The first...
So far as I’ve bothered to think, there are two modes of naming things. The first option, and the most often employed in software engineering, is to use a name as a description. Another route is to simply make a name up. Both mathods have their own characteristics, and it is important to understand them, lest you pe...

practices
3