|
When I was a kid, I would assemble binders with information about topics I was interested in. My favorite one was about airplanes and their specifications. I find that collecting information helps me ...
|
|
The Marginalia Search index has recently seen some design tweaks to make it perform better, primarily the introduction of postings list compression. Last year, the index was partially re-implemented with SSDs in mind . This was largely a success, but left some lingering issues with tail latencies that sometimes weren’t what they needed to be. To ensure predictable execution times, the query execution is provided a timeout value, after ..
|
|
Security cameras are a type of product especially prone to enshittification , and Wyze is a notable case study of this phenomenon. Introduced as super-affordable, reliable cameras with free cloud storage, they immediately won the love of millions. Then the company kind of realized that the low-margin/free-service business model was unprofitable from the start (surprise!), and tried all types of annoying monetization. That failed (obvious....
|
|
After going through the topic of SRS I have to admit: it feels like a totally different game. It is incredible how much this rule set pays into the tetris experience! It definitely took a while to find a good way to implement it; but pretty happy with the outcome. Your browser doesn't support embedded videos, but don't worry, you can download it and watch it with your favorite video player! Oh, and you can now save blocks for lat..
|
|
Happy 25th birthday to the manifesto for agile software development!
-
www.sicpers.info
-
3 months ago
-
eng
11th-13th February 2001 is the occasion of the most famous skiing holiday in software. Don’t take my word for it; Jim Highsmith was there and wrote the history. It’s pretty astounding that, in a field where everyone tries to remind … Continue reading →
|
|
Code hosts like GitHub don't necessarily show the correct source of Go modules. pkg.geomys.dev is a new convenient viewer for module source.
|
|
I read this and then had trouble finding it for a year, I'm writing about it so I have a way to find it... The proposal here is so obviously correct that it's shocking it doesn't come up more often when people discuss the NBA Draft... basically the idea is that you assign a high […]
|
|
AppSec is often stalled by a lack of trust: will this fix break my app? Snyk’s new Breakability Risk feature solves this by identifying which security updates are safe to merge and which require caution. By focusing on low-risk fixes first, developers can clear backlogs four times faster and reduce security debt without increasing their workload.
|
|
AI agents introduce new security risks like prompt injection and data exfiltration. Learn how guardrails, hook-based controls, and Arcade’s Contextual Access secure AI agent tool calls in real time.
|
|
While AI accelerates software delivery, it also scales security risks by turning minor errors into systemic vulnerabilities. Learn how to transform AI from a potential liability into a secure engine for growth through robust governance and control.
|
|
Travel brings up amazing contrasts. Sometimes you are eating croissants on a high-speed train zooming through Europe. Sometimes you sipping wine in a huge metal tube flying over Greenland's icecaps....
|
arent forum sites supposed to be crawling with weirdos bro im bored where are all the weird gross ol...
|
|
A CLI, REST API, and MCP server for fast audio transcription on Apple Silicon, built on parakeet-mlx and the Parakeet TDT model.
|
|
A CLI, REST API, and MCP server for fast audio transcription on Apple Silicon, built on parakeet-mlx and the Parakeet TDT model.
|
|
Unified command-line interface and MCP server for Z.AI services: image generation, OCR, vision, web search, web reader, and Zread code research.
|
|
Unified command-line interface and MCP server for Z.AI services: image generation, OCR, vision, web search, web reader, and Zread code research.
|
|
I was today years old when I learned, that my approach to dropping blocks is super naive. Hell, there is even an official Tetris guide on how blocks have to behave under certain conditions. They call it the Super Rotation System !😅 It even seems to be some kind of common sense among Tetris conoceurs. Guess I will implement it, as this would mean blocks in the game would behave as in every other modern Tetris game. Also things like T-Sp..
|
|
Get precise results for searches on US addresses. Enhanced preprocessing of our Search now handles "messy" inputs such as floors, suites, and apartments.
|
|
I was today years old when I learned, that my approach to dropping blocks is super naive. Hell, there is even an official Tetris guide on how blocks have to behave under certain conditions. They call it the Super Rotation System !😅 It even seems to be some kind of common sense among Tetris conoceurs. Guess I will implement it, as this would mean blocks in the game would behave as in every other modern Tetris game. Also things like T-Sp..
|
|
Is your test in the business of calculating the expected output from the inputs? Then your test is duplicating the logic from the code under test. There is a reason why too much logic in tests is frowned upon : If you implement the same logic twice, you are prone to repeat the same mistakes in the test which you already made in the real implementation . for c in [ Case(socket_type=SOCK_STREAM, fruit="Apple"), Case(socket_type=SOCK_....
|
|
Is your test in the business of calculating the expected output from the inputs? Then your test is duplicating the logic from the code under test. There is a reason why too much logic in tests is frowned upon : If you implement the same logic twice, you are prone to repeat the same mistakes in the test which you already made in the real implementation . for c in [ Case(socket_type=SOCK_STREAM, fruit="Apple"), Case(socket_type=SOCK_....
|
|
Is your test in the business of calculating the expected output from the inputs? Then your test is duplicating the logic from the code under test. There is a reason why too much logic in tests is frowned upon : If you implement the same logic twice, you are prone to repeat the same mistakes in the test which you already made in the real implementation . for c in [ Case(socket_type=SOCK_STREAM, fruit="Apple"), Case(socket_type=SOCK_....
|
|
Mickaël’s FOSDEM talk about the Island sandboxing tool : https://fosdem.org/2026/schedule/event/EW8M3R-island/ (with 📽️ video!) The Island sandboxing tool comes with tight integration with the zsh, to make sandboxing a part of the everyday workflow. When you use that integration, the directory that you are in determines the Landlock policy which is then applied to the commands that you run. 🐚
|
|
Mickaël’s FOSDEM talk about the Island sandboxing tool : https://fosdem.org/2026/schedule/event/EW8M3R-island/ (with 📽️ video!) The Island sandboxing tool comes with tight integration with the zsh, to make sandboxing a part of the everyday workflow. When you use that integration, the directory that you are in determines the Landlock policy which is then applied to the commands that you run. 🐚
|
|
Mickaël’s FOSDEM talk about the Island sandboxing tool : https://fosdem.org/2026/schedule/event/EW8M3R-island/ (with 📽️ video!) The Island sandboxing tool comes with tight integration with the zsh, to make sandboxing a part of the everyday workflow. When you use that integration, the directory that you are in determines the Landlock policy which is then applied to the commands that you run. 🐚
|
|
Heroku and GitHub Enterprise Server: Stronger Security, Seamless Delivery
-
www.heroku.com
-
3 months ago
-
eng
Today, we are thrilled to announce the General Availability (GA) of the Heroku GitHub Enterprise Server Integration. For our Enterprise customers, the bridge between code and production must be more than just convenient. It must be resilient, secure, and governed at scale. While our legacy OAuth integration served us well, the modern security landscape demands […] The post Heroku and GitHub Enterprise Server: Stronger Security, Seamless ..
|
Introduction In our earlier article “How Many Chess Games are Possible?” we derived that the number of typical short chess games is around 10151. This turned out to be much larger than the “Shannon number” 10120 side-note from Shanon’s remarkable 1950 paper “Programming a Computer for Playing Chess” Philosophical Magazine, […]
|
Next month, Discord is going to start requiring age verification. The backlash from gamers everywhere has been predictable and justified. I guess their company name checks out. I’ve had a few people reach out to me because of my prior vulnerability disclosures and criticism of encrypted messaging apps. (Thanks, Toggart.) Unfortunately, asking a cryptography-focused security […]
|
|
Eve v2.2.5 was just released on PyPI. It brings the pagination fix discussed in a previous post . Many thanks to Calvin Smith per contributing to the project.
|
|
Yesterday a pull request came in proposing a fix for a small pagination bug in Eve , the REST API framework I maintain. The intervention is small, precise, and comes with a well-crafted test. Two things stood out: the PR is in draft, and it includes an AI disclosure: the fix and the test were created by Claude. I don’t have mongo available or all the necessary python versions for testing, so I’m making this a draft PR so that I can..
|
|
Are "Skill Scanners" on ClawHub actually safe? We tested popular community tools like Skill Defender and SkillGuard against real malware. The results were alarming.
|
|
Building Yomu: Safari, furigana, and why “plain text” often isn’t plain
-
blog.kulman.sk
-
3 months ago
-
eng
This is the third part of a short series about building Yomu, an iOS app for reading Japanese text with adaptive furigana. In the previous post, I described how the app tokenizes text, renders furigana, and works with an offline dictionary. This post focuses on a much lower-level problem: getting usable input text in the first place. It turned out to be one of the most frustrating parts of the project.
|