|
In December 2022, Adobe, through the Computer History Museum (CHM), released the source code for PostScript®, version 1.0. PostScript is one of the foundational technologies of the desktop publishing revolution of the early 1980s, along with laser printers, the graphical user interface of the Apple Macintosh, and Aldus PageMaker. PostScript is a programming language and a page description format for translating visual content into printed d....
|
In practice this already happened a couple of years ago, now we are just making it official. For those who don’t know, Hawkpost is a side project that I started while at Whitesmith back in 2016 (8+ years ago). I’ve written about it here in the blog on several occasions. To sum it up, it […]
|
|
How to prevent log injection vulnerability in JavaScript and Node.js applications
-
snyk.io
-
1 year ago
-
eng
Fortify your Node.js applications against log injection attacks! This guide dives deep into the dangers and solutions to protect your logs from malicious manipulation. Stop attackers and build secure Node.js applications today.
|
|
Fearless Concurrency Ep.2: Managing Threaded Programs and Data Races in Rust
-
www.ardanlabs.com
-
1 year ago
-
eng
Introduction: Welcome to Episode 2 of the Fearless Concurrency in Rust series! In this episode, Herbert Wolverson dives into the fundamentals of threading in Rust, demonstrating how to use Rust’s threading capabilities effectively while maintaining safety. The focus is on using std::thread to spawn threads, preventing data races, and ensuring efficient, reliable multithreaded execution. Creating Threads in Rust: How to spawn and ma..
|
|
I got to visit the Stasi museum in Berlin this week, and it gave me a newfound appreciation for why it’s important to resist surveillance. Interestingly, surveillance is not exclusively limited to one kind of government: it can appeal to both left- and right-wing governments, and corporations in the digital age use surveillance to make money. In every form, surveillance is evil and must be resisted. Stasi = Abbreviation of Stadt Sicher....
|
|
I got to visit the Stasi museum in Berlin this week, and it gave me a newfound appreciation for why it’s important to resist surveillance. Interestingly, surveillance is not exclusively limited to one kind of government: it can appeal to both left- and right-wing governments, and corporations in the digital age use surveillance to make money. In every form, surveillance is evil and must be resisted. Stasi = Abbreviation of Stadt Sicher....
|
|
Introduction Today, TLS certificates in the Web public key infrastructure (PKI) have long validity: almost all remain valid for at least three months! An attacker compromising a certificate early enough in its lifetime 1 keeps it compromised for months. Certificate revocation addresses this problem: a client must know to distrust a certain key for a domain, even if the valid key hasn’t expired yet. The issue? Billions of clients use....
|
The book discusses the fundamentals of systems theory, emphasizing interconnectedness, stock, and flow dynamics. It highlights systemic problems, such as addiction and resource management, and explores how common misconceptions can lead to ineffective approaches. It underscores the importance of understanding system behavior and structural change for driving impactful outcomes and sustainable solutions.
|
|
Youtube Video, via JS Party podcast episode Building LLM agents in JS Notes Non Agentic workflow: Do it start to finish. Mostly zero shot prompts. Agentic workflow: Revise, iterative, reflect, use tools if you need to…. Four design patterns. 1. Reflect: Produce one thing and ask another chat thread with different system prompt to evaluate it. E.g. Create a code, than ask a rubberduck debugger to read it line by line, or run the test suite a..
|
|
Youtube Video, via JS Party podcast episode Building LLM agents in JS Notes Non Agentic workflow: Do it start to finish. Mostly zero shot prompts. Agentic workflow: Revise, iterative, reflect, use tools if you need to…. Four design patterns. 1. Reflect: Produce one thing and ask another chat thread with different system prompt to evaluate it. E.g. Create a code, than ask a rubberduck debugger to read it line by line, or run the test suite a..
|
|
Learn how to create secure applications using Deno. Explore the default security measures provided by Deno, understand potential vulnerabilities such as Server-Side Request Forgery (SSRF), and uncover the best practices for minimizing risks. Enhance your application's security by leveraging Deno's advanced features.
|
|
Using a Cloudflare Tunnel and connecting to a local service serving via self-signed certificates forced me to enable No TLS verify in that tunnel’s TLS settings. Not ideal! Thankfully Cloudflare thought about that and allows you to create an origin certificate . For this to work properly, I had to install Cloudflare’s Origin Root CA certificate on my server running Ubuntu 22.04.5 LTS. First I downloaded one of the two origin r..
|
|
Upload PNGs to your maps to use as icons and patterns. You can add photos to use as icons for landmarks.
|
|
Do you ever wonder what exactly Reflect is for, and why you'd use it? You're not alone. In fact, there's a good chance a lot of people you work with have never heard of it. Reflect's documentation covers a lot of lower-level, seemingly abstract ideas, which leads to it being unclear as to why you'd use it. This isn't because you're not catching on or understanding; it's because its functionality is narrow yet its capabilities are extrem....
|
|
When building web applications, unit testing your individual components is certainly important. However, end-to-end testing provides assurance that the final user experience of your components chained together matches the expected behavior. Testing web application behavior locally in your browser can be helpful, but this approach isn’t efficient or reliable, especially as your application grows more […] The post Testing a React App in Ch..
|
Emacs #TIL : I learned about save-interprogram-paste-before-kill - which saves the existing system clipboard text into the kill ring before replacing it. This ensures that Emacs kill operations do not irrevocably overwrite existing clipboard text. A common workflow for me is to copy some text from a different application and paste it inside Emacs. But, if I want to first delete a word or region …
|
|
Emacs #TIL : I learned about save-interprogram-paste-before-kill - which saves the existing system clipboard text into the kill ring before replacing it. This ensures that Emacs kill operations do not irrevocably overwrite existing clipboard text. A common workflow for me is to copy some text from a different application and paste it inside Emacs. But, if I want to first delete a word or region …
|
|
Recently, I had to configure some security headers in GitLab. GitLab uses Nginx as its web server, and it allows for easy configuration changes for some settings. For instance, enabling HTTP to HTTPS redirection can be done simply by setting nginx['redirect_http_to_https'] = true in the gitlab.rb configuration file. However, adding custom headers for security, particularly those that control cross-origin policies, requires a bit mo....
|
|
Discover how to secure your C and C++ code with Snyk. Learn about common vulnerabilities like memory leaks and buffer overflows in C and C++ and how Snyk’s static code analysis tool can help you identify and fix them. Protect your critical software from security threats.
|
|
Comment on Serializing/deserializing Matlab data by Cookie
-
undocumentedmatlab.com
-
1 year ago
-
eng
If you have the parallel toolbox there is a method
byteArray = distcompserialize64(myData) which appears to function the same as getByteStreamFromArray()> but does not seem to have data size limitations. MATLAB\R2017b\toolbox\distcomp\distcomp\distcompserialize64.mexw64 There is a function distcompdeserialize() which reconstructs the matlab data from the bytes. Fwiw, getArrayFromByteSt..
|
|
After more than a year, the blog is getting an update. This is a short summary of what is getting changed
|
|
After more than a year, the blog is getting an update. This is a short summary of what is getting changed
|
|
via) It’s not their fault. They enrolled in a master’s program to get a job in tech. Why? Let’s be candid: tech has promised job security and agreeable (sometimes borderline perverse) financial returns for a couple of decades. Many tech employers also spin a yarn about “saving the world” and coast on the reputational allure of “if you work here, you’re a genius.” Sounds great, doesn’t it? Except, now that students have invested five figures..
|
|
via) It’s not their fault. They enrolled in a master’s program to get a job in tech. Why? Let’s be candid: tech has promised job security and agreeable (sometimes borderline perverse) financial returns for a couple of decades. Many tech employers also spin a yarn about “saving the world” and coast on the reputational allure of “if you work here, you’re a genius.” Sounds great, doesn’t it? Except, now that students have invested five figures..
|
|
Visualizing and Comparing Embedding Vectors as Heatmaps (Videos)
-
tanelpoder.com
-
1 year ago
-
eng
Following my earlier Visualizing and Comparing Embedding Vectors as Heatmaps article, here are the launch & demo videos. You might want to read this article first, these short demo videos should make more sense then! Visualizing Vision Transformer Embedding Vectors as HeatMaps In this video I’ll peek around cat vectors and then find outliers from both the cat photo dataset and aircraft dataset. Installing CatBench Vector Visualiz..
|
|
Visualizing and Comparing Embedding Vectors as Heatmaps (Videos)
-
tanelpoder.com
-
1 year ago
-
eng
Following my earlier Visualizing and Comparing Embedding Vectors as Heatmaps article, here are the launch & demo videos. You might want to read this article first, these short demo videos should make more sense then! Visualizing Vision Transformer Embedding Vectors as HeatMaps In this video I’ll peek around cat vectors and then find outliers from both the cat photo dataset and aircraft dataset. Installing CatBench Vector Visualiz..
|
|
I wrote last month that what you want to do is one of the most useful motivations in life. I want to follow that up by saying that the only thing more important than wanting to do something is to actually do something. The most valuable trait you can develop for yourself is to be consistent. It is absolutely something you can develop. And moreover it's kind of hard to believe that for anyone it is innate. I meet so many people who....
|
|
My presentation for HighEdWeb 2024 was an overview of many recent and forthcoming additions to the web platform, specifically HTML and CSS. Description CSS is Awesome Over the past few years, CSS has been gaining features at a rate that is almost impossible to follow. Features that once required pre-processors are now native to the platform. Variables? Check. Nesting? Check. And now there’s even whispers of mixins. During this presen....
|