~lobsters | Bookmarks (1979)

Archiving and syndicating Mastodon posts

garrido.io

web
2
(¬; Squatting npm for Remote Code Execution | alxndrsn

alxndrsn.com

2024-08-01 Similar to Alex Birsan's "dependency confusion" bug, npm's CLI tool npx allows for RCE via...
2024-08-01 Similar to Alex Birsan's "dependency confusion" bug, npm's CLI tool npx allows for RCE via binary confusion. This is an intentional feature, but in my opinion has surprising negative results. Background npx, which is distributed as part of the npm CLI tool, and is a wrapper for npm exec allows convenient ...

javascript security
1
Supercharged labels – Gleam

gleam.run

erlang release
2
GitHub - jiacai2050/video-compress: Compress video by 90% without losing much quality, similar to what Pied Piper achieves.

github.com

release
1
Formally verifying security properties of CHERI processors

cheriot.org

In 2018, the two infamous attacks Spectre and Meltdown raised awareness of timing side channels in...
In 2018, the two infamous attacks Spectre and Meltdown raised awareness of timing side channels in the microarchitecture of modern processors. In the following years, ensuing research efforts have been made by academia and industry to investigate and mitigate these findings. So far, the focus has been on larger core...

formalmethods hardware security
2
ROMhacking.net Moves to News Only, Database and File Archive Released to Internet Archive

romhacking.net

games
1
C is Turing complete – Tony Finch

dotat.at

compsci
1
Loading...

openjdk.org

Support nullness markers on Java types to indicate that a type rejects or deliberately allows nulls....
Support nullness markers on Java types to indicate that a type rejects or deliberately allows nulls. This is a preview language feature. Goals Enhance Java's reference types to let programmers express whether null references are expected as values of the type Support conversions between types with different nullness...

java plt
2
Simple fast value semantics - Boomla

boomla.com

For more context, this solution is mutable value semantics implementation with implicit copy, optimized for simplicity...
For more context, this solution is mutable value semantics implementation with implicit copy, optimized for simplicity and ergonomics. The language itself is closed but I wanted to show how it solves value semantics as I consider it to be a very interesting point in the solution space. If you want to play with the language try the language docs that includes executable playgrounds: https://lang.boomla.app/types/boolean...

compilers plt
1
GitHub - danthegoodman1/EpicEnv: An epic environment manager to fix local environment variable management among git collaborators.

github.com

devops
2
What are you doing this weekend? | Lobsters

lobste.rs

Feel free to tell what you plan on doing this weekend and even ask for help...
Feel free to tell what you plan on doing this weekend and even ask for help or feedback. Please keep in mind it’s more than OK to do nothing at all too!

ask programming
1
Code and Bitters

codeandbitters.com

I've often wondered about the differences between lazy_static and once_cell, and in Rust 1.70 and 1.80...
I've often wondered about the differences between lazy_static and once_cell, and in Rust 1.70 and 1.80 the standard library is gaining the ability to create one-time-initialized values. Most big projects end up using one of these crates, because lazy initialization is a very convenient way to implement almost-const ...

rust
2
The Effect of CRTs on Pixel Art

datagubbe.se

games hardware
2
Quick bits: realise Nix symlinks — kokada

capivaras.dev

When you are using Nix, especially with Home-Manager, there are times when you want to test...
When you are using Nix, especially with Home-Manager, there are times when you want to test something or maybe debug some issue in your configuration. Those times it would be really convenient if you could avoid a rebuild of your Home-Manager configuration, since this takes time until evaluation and activation. For ...

nix
1
~icefox/pancake - sourcehut hg

sr.ht

//! Ok I'm in the mood to talk about this, so I'm gonna do it in...
//! Ok I'm in the mood to talk about this, so I'm gonna do it in literate //! programming style ig. This is an attempt to write a type checker in datalog. //! //! Having written a (bad) type checker or two by now, they basically seem to be //! constraint and inference systems. The algorithms implementing Hindley-Mil...

plt
1
BSD Jumpstart

bsdjumpstart.org

This website is designed to provide an overview of each BSD system, making it easier for...
This website is designed to provide an overview of each BSD system, making it easier for both newcomers and experienced users to navigate and understand the BSD landscape. I would be honored to have your feedback. Thank you for your time and consideration. Comments

openbsd
1
passing torches to Austin and Cherry

google.com

Hi all,Starting September 1, Austin Clements will be taking over as the tech lead of Go:...
Hi all,Starting September 1, Austin Clements will be taking over as the tech lead of Go: both the Go team at Google and the overall Go project. Austin is currently the tech lead for what we sometimes call the “Go core”, which encompasses compiler toolchain, runtime, and releases. Cherry Mui will be stepping up to le...

go
2
Kinesis consumer balancing | Knock

knock.app

👋 We’re Knock. We provide a set of simple APIs developers use to introduce notifications into...
👋 We’re Knock. We provide a set of simple APIs developers use to introduce notifications into their products, without needing to build and maintain a notification system in-house. TL;DRAt Knock, we rely on AWS Kinesis to handle various high-throughput queues, like our API & workflow logging features.We used to have ...

distributed elixir
1
GitHub Next | Vitale

githubnext.com

javascript nodejs web
2
PSA: Internet Archive “glitch” deletes years of user data & accounts ⌘I Get Info

gingerbeardman.com

Recently at Internet Archive a “glitch” (their choice of word) deleted a great many accounts, including...
Recently at Internet Archive a “glitch” (their choice of word) deleted a great many accounts, including my account that had been at https://archive.org/details/@gingerbeardman since 2015. Somewhat surprisingly, they are not reaching out to affected users but rather waiting for them to create new accounts and silentl...

culture historical security
4
If Novelists Wrote Your Bug Reports

dylnuge.com

When the user puts in a value equal to the number of giggawatts the flux capacitor...
When the user puts in a value equal to the number of giggawatts the flux capacitor from Back to the Future (one of my favorite movies of all time, bar none; I can quote every word) uses, the screen flickers like the lights do in Ghostbusters when they’re capturing the ghost in the hotel (I totally love that scene by...

satire
1
Troubleshoting: ZSH lag and solutions with Nix — kokada

capivaras.dev

Inspired by this blog post from Tavis, I decided to document my own recent journey of...
Inspired by this blog post from Tavis, I decided to document my own recent journey of reducing terminal (ZSH) lag startup. This post is way less interesting than the one from Tavis that uses a debugger to patch applications on the fly, but should still be interesting for some. And it also shows how powerful Nix can ...

nix unix
1
Async Rust Challenges in Iroh

iroh.computer

Iroh is a set of Rust crates for p2p networking and data transfer. You can access...
Iroh is a set of Rust crates for p2p networking and data transfer. You can access iroh through the iroh binary, utilize various FFI bindings, rely on the main iroh crate, or import individual modules to integrate it into other Rust programs. Platforms we need to support Iroh supports all major platforms, including m...

rust
1
Rendering my website with Servo to track progress

arch.dog

browsers web
1