Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

Developer-first security was invented at Snyk. Which is why the NSA, CISA, and ODNI’s recent publication piqued our interest. While the information was good, we felt it missed the mark on being a practical guide for developers. So, here are our suggestions on how to improve guides that address developers directly.

Taking the time to breathe consciously, as simple as that is, provides significant improvements to body and spirit.



How does a code completion tool work? What is an Abstract Syntax Tree, and how is it created in Python? How does an AST help you write programs and projects that inspect and modify your Python code? This week on the show, Meredydd Luff, co-founder of Anvil, shares his PyCon talk, "Building a Python Code Completer."

Imagine your job is to personalize search results on an e-commerce site for returning customers, classify the presence or absence of pedestrians in street photos, or develop an app that translates languages. In all of these cases, a basic ingredient is a dataset of annotations provided by a human. For any company seeking to personalize experience for its customers, combining human computation with algorithmic computation is essential. T....

Robin Rendle quoting Neil Gaiman, who is quoting G.K. Chesterton: Fairy tales, as G.K. Chesterton once said, are more than true. Not because they tell us that dragons exist, but because they tell us that dragons can be defeated. I read somewhere that he based the Gilbert character from The Sandman on Chesterton, so it’s no surprise to find Gaiman quoting Chesterton in Smoke and Mirrors . Wanting to find the work in which the ..



Liran Tal discusses real-world incidents that demonstrate how even the mightiest of open source projects can be defeated. He also addresses the continuous struggles of open source software sustainability, maintainer burnout, and how these things affect the greater developer community.


Unfortunately not what this post is about. Credit: katiebcartoons.com I came across Roaring bitmaps when I learned about this fun hack to do retention analyses at scale with bitmaps. Using Roaring bitmaps instead of traditional bitmaps in that application reduced memory usage from ~125GB to 300MB, an impressive 99.8% savings. But… how? You can learn about Roaring bitmaps over two research papers: This one proposes the data structure. This o..



Hack The Box (HTB) is a platform that gamifies cybersecurity training. In this article, we’ll discuss how Snyk can help you solve Hack the Box and other CTF challenges.

On Windows, NVDA is more capable but Narrator + Edge is more secure. Narrator and Edge were designed to work without giving Narrator access to the content process, using the UI Automation API (UIA). Edge’s UIA was merged into upstream Chromium but it was only enabled in Edge. Matt Campbell wrote about it on the orange site in January 2021 ; I don’t know if the situation has changed since then. Try both. If Narrator works for you I’d stic..

No need for expensive Tableau subscriptions. Ditch Microsoft Excel. Just use native PostgreSQL to quickly visualise your data! Here’s an idea I had for a while. As you may know, jOOQ can produce fancy charts from your jOOQ results. But that requires you use jOOQ, and you may not be using jOOQ, because you’re not … Continue reading How to Plot an ASCII Bar Chart with SQL →

Client-side storage (cookies, cache, etc.) is one of many things worth disabling during site testing. The Tor Browser’s “safest” level blocks SVG, remote fonts, JS, and other features; many textual browsers don’t support anything besides a subset of (X)HTML. Most non-mainstream search engines are similar. Personally, I try to keep sites curlable . It should be possible to use a plain curl URL command to get all the necessary markup, co..

Vcpkg and Cmake - studiofreya.org - 4 years ago - eng

After ignoring WebP for years, I finally decided to check it out. For a long time I thought PNG, GIF, JPG, and MP4 would be enough. Not anymore.

This post announces the preprint on quantile absolute deviation as a flexible robust scale estimator. Pragmastat recommends Spread — the Shamos estimator — as a more efficient robust scale alternative with a 29% breakdown point. Confidence intervals are available via SpreadBounds . pragmastat.dev github.com/AndreyAkinshin/pragmastat I have just published a preprint of a paper ‘Quantile absolute deviation’. It’s based on a ser....


This post announces the preprint on quantile absolute deviation as a flexible robust scale estimator. Pragmastat recommends Spread — the Shamos estimator — as a more efficient robust scale alternative with a 29% breakdown point. Confidence intervals are available via SpreadBounds . pragmastat.dev github.com/AndreyAkinshin/pragmastat I have just published a preprint of a paper ‘Quantile absolute deviation’. It’s based on a ser....

This is a monthly email about what I'm up to! ✨ Highlights of last month - Had a relaxing, Walden-esque week in Mexico City, spent mostly in Parque México. I spent a lot of time reading - includi...

This is a monthly email about what I'm up to! ✨ Highlights of last month - Had a relaxing, Walden-esque week in Mexico City, spent mostly in Parque México. I spent a lot of time reading - includi...



In this post, we’ll cove some best practices for containerizing .NET applications — including those on the 4.x version framework. We’ll also discuss using small images and image scanning, to reduce security risks and remove unnecessary components from our containers.

Given one is vegan for the animals, should a vegan not seek to create more vegans when the opportunity arises?

Last month we shipped the biggest change to our core website editing experience in ten years: Fluid Engine. This blog post addresses how we arrived at the implementation, in addition to walking through a few technical and user experience issues that were core to the development of this feature.

Here's my horoscope for today: > Things should improve for you as the day progresses, Taurus. You shouldn't depend on something that may not pan out the way you want. As you can see, it's useless, ...

If you have played Ragnarok Online before, you might want to listen to this song while reading. I got into programming at the age of 14. At that time, my friends and I used to play an online MMORP...

Here's my horoscope for today: > Things should improve for you as the day progresses, Taurus. You shouldn't depend on something that may not pan out the way you want. As you can see, it's useless, ...

If you have played Ragnarok Online before, you might want to listen to this song while reading. I got into programming at the age of 14. At that time, my friends and I used to play an online MMORP...


Friends, I come to inform you that due to health conditions, the developer of this website had comp...

As part of his captivating Hidden Heroes series, Steven Johnson publishes an account of the mother of all demos. More than 50 years ago, Douglas Engelbart gave the “mother of all demos” that transformed software forever. The computer world has been catching up with his vision ever since. More here

In one of the previous posts , I suggested a new measure of dispersion called the standard quantile absolute deviation around the median ($\operatorname{SQAD}$) which can be used as an alternative to the median absolute deviation ($\operatorname{MAD}$) as a consistent estimator for the standard deviation under normality. The Gaussian efficiency of $\operatorname{SQAD}$ is $54\%$ (comparing to $37\%$ for MAD), and its breakdown point is $....

In one of the previous posts , I suggested a new measure of dispersion called the standard quantile absolute deviation around the median ($\operatorname{SQAD}$) which can be used as an alternative to the median absolute deviation ($\operatorname{MAD}$) as a consistent estimator for the standard deviation under normality. The Gaussian efficiency of $\operatorname{SQAD}$ is $54\%$ (comparing to $37\%$ for MAD), and its breakdown point is $....

In this article you’ll learn, how to build a Slack bot integration, create Triggers and Actions workflows in Zapier to post messages to a Slack channel, use a Reddit API key to access posts using native Reddit Access Tokens and Refresh Tokens, and more.

We are excited to share that now, when using the snyk container test/monitor commands, we will scan for application vulnerabilities by default.


A short overview for strategies on how to get better at debugging. In short: know the code know your tools know yourself know how to approach problems

A short overview for strategies on how to get better at debugging. In short: know the code know your tools know yourself know how to approach problems

24 visitors online