Popular：
Virtualization DNS security formal verification reachability analysis compiler errors macro conflict web extension development framework Bitmap Graphics API inconsistencies All Tags

Category: Development

Mastering TestFlight: A Guide to Beta App Testing

2025-06-21
Mastering TestFlight: A Guide to Beta App Testing

Want to experience the latest apps before anyone else? TestFlight is your key! This guide covers installing, testing, and updating beta apps across iOS, iPadOS, macOS, tvOS, and visionOS. Join via email or public link invitations to install on up to 30 devices. Note that in-app purchases during beta testing don't transfer to the App Store version, and beta builds expire after 90 days. TestFlight also supports automatic updates and testing previous builds for streamlined collaboration between developers and testers.

(testflight.apple.com)
Development

Delta Chat: A Decentralized and Secure Messenger

2025-06-21
Delta Chat: A Decentralized and Secure Messenger

Delta Chat is a decentralized and secure messaging app offering reliable instant messaging with multi-profile and multi-device support. Users can connect to secure fast chatmail servers or utilize classic email servers. Interactive web apps within chats enable gaming and collaboration. Audited end-to-end encryption protects against network and server attacks. Built on open-source principles and internet standards, Delta Chat avoids the pitfalls of centralized platforms.

(delta.chat)
Development secure messaging instant messaging

Go Parser Security Risks: Exploiting Unexpected Behaviors in JSON, XML, and YAML

2025-06-21
Go Parser Security Risks: Exploiting Unexpected Behaviors in JSON, XML, and YAML

Go's JSON, XML, and YAML parsers present security risks, allowing attackers to exploit unexpected behaviors to bypass authentication, circumvent authorization, and exfiltrate sensitive data. The post details three attack scenarios: (1) (Un)marshaling unexpected data: exposing data developers intended to be private; (2) Parser differentials: discrepancies between parsers enabling bypasses; and (3) Data format confusion: exploiting cross-format payload handling. Mitigations include using `DisallowUnknownFields` and custom functions to compensate for vulnerabilities in Go's standard library. The authors provide Semgrep rules to help detect vulnerable patterns.

(blog.trailofbits.com)
Development Go security

Augmented Vertex Block Descent: A Breakthrough in Real-time Physics Simulation

2025-06-21

Researchers have developed Augmented Vertex Block Descent (AVBD), a novel physics simulation method that is unconditionally stable, highly parallelizable, and boasts significantly improved convergence and handling of complex constraints. AVBD efficiently handles complex scenarios such as rigid body stacking, friction, joint constraints, and rigid-soft body interactions. A GPU implementation achieves real-time performance, maintaining stability even with millions of objects interacting through collisions. Compared to state-of-the-art alternatives, AVBD demonstrates superior performance, convergence, and stability, with a 2D online demo available.

(graphics.cs.utah.edu)
Development physics simulation

Chromium Build System Migrating to Siso

2025-06-21

The Chrome Build Infra Team announces that Chromium's build system is switching from Ninja to Siso, a drop-in replacement for Ninja that natively supports remote execution. External developers simply need to continue using autoninja; it will automatically use Siso after running `gn clean` next time. If issues arise, revert to Ninja by setting `use_siso=false` in your `args.gn`. Ninja support ends in late September, along with the removal of Reclient.

(groups.google.com)
Development

Parisian Panic: A Cascade Delete Disaster in Production

2025-06-21
Parisian Panic: A Cascade Delete Disaster in Production

A software engineer working at Joe AI, a Paris-based real estate startup, accidentally deleted a user record in the production database, triggering a cascade delete that wiped out three months of crucial data. While some data was recovered by upgrading to a paid Supabase plan, the incident highlighted the risks of directly manipulating production databases and the critical need for robust backup strategies. The disaster ultimately spurred the team to improve their development workflow, setting up local Supabase instances, leading to increased efficiency. The experience underscores the importance of learning from mistakes and embracing a culture of risk-taking and iterative improvement.

(vince.beehiiv.com)
Development database incident cascade delete production environment

Learn Galois Fields for Great Good! (Part 00)

2025-06-21

This series provides a gentle introduction to Abstract Algebra, focusing on Galois Fields (finite fields) and their applications in computer science. The author addresses the lack of accessible resources for computer scientists, offering a step-by-step approach with practical Rust code examples. Topics covered will include Reed-Solomon codes, AES encryption, and more. The focus is on understandability, not optimization, making it ideal for those new to the subject.

(xorvoid.com)
Development Abstract Algebra Galois Fields

AtomicOS: A Security-First Educational OS

2025-06-21
AtomicOS: A Security-First Educational OS

AtomicOS is an educational operating system built from scratch, prioritizing security over performance. It utilizes a deterministic programming language, Tempo, and implements real memory protection, cryptography (AES-128, SHA-256), and a full MMU. While currently lacking features like a network stack, file system, and drivers, its security-focused design and implementation are noteworthy. The project is open-source but requires attribution and disclosure of modifications.

(github.com)
Development

arXivLabs: Community Collaboration on arXiv Features

2025-06-20
arXivLabs: Community Collaboration on arXiv Features

arXivLabs is a new collaborative framework enabling developers to build and share new arXiv features directly on the arXiv website. Individuals and organizations involved share arXiv's values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners who adhere to them. Have an idea to enhance the arXiv community? Learn more about arXivLabs!

(arxiv.org)
Development

LLMs Exacerbate the Underutilization of Libraries

2025-06-20

Libraries are underutilized, due to factors like the enjoyment of coding over reading documentation, the Dunning-Kruger effect underestimating library complexity, and internal projects competing with libraries. LLMs worsen this. While 'vibe coding' with LLMs is fun and efficient, the output often pales in comparison to battle-tested libraries. LLM-generated code is susceptible to prompt engineering limitations, whereas library creators possess deeper problem understanding and can leverage LLMs to generate higher-quality code. Ironically, excessive reliance on LLMs for code generation can be perceived as innovation, creating perverse incentives and further exacerbating the problem. For complex tasks, prioritizing established libraries over direct LLM usage is crucial.

(makefizz.buzz)
Development Libraries

Proving Memoization Correctness in Lean: A Case Study

2025-06-20
Proving Memoization Correctness in Lean: A Case Study

This blog post demonstrates how to solve a dynamic programming problem using memoization in the Lean theorem prover and formally verify its correctness. The author tackles the Bytelandian Gold Coins problem, initially presenting a memoized solution using a HashMap. The difficulty of directly proving its correctness is highlighted due to challenges in reasoning about data structure invariants. The solution leverages subtypes and dependent pairs to create a `PropMap`, a memoization table that stores not only computed values but also proofs of their correctness. The algorithm's correctness is then proven incrementally within the recursive implementation itself, culminating in a trivial top-level proof. This approach elegantly intertwines code and proof, showcasing a powerful technique for formally verifying dynamic programming algorithms.

(tannerduve.github.io)
Development dynamic programming

arXivLabs: Experimenting with Community Collaboration

2025-06-20
arXivLabs: Experimenting with Community Collaboration

arXivLabs is a framework enabling collaborators to develop and share new arXiv features directly on our website. Individuals and organizations working with arXivLabs embrace our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners who share them. Have an idea for a project that will benefit the arXiv community? Learn more about arXivLabs.

(arxiv.org)
Development

YouTube's New Anti-Adblock Technique: Fake Buffering and How to Bypass It

2025-06-20

YouTube has rolled out another round of anti-adblock measures, one of which is "fake buffering." Videos experience artificially long buffering at the start, proportional to the ad duration. This is because YouTube's InnerTube API, when adblocking is detected, returns video streams from GVS (Google Video Services) with delays. The author found a solution by modifying a uBlock Origin filter to add `isInlinePlaybackNoAd: true` to the JSON request. However, YouTube implemented a locker script, necessitating a workaround by hooking Object.assign.

(iter.ca)
Development adblocking

HashiCorp Deprecates HCP Vault Secrets

2025-06-20
HashiCorp Deprecates HCP Vault Secrets

HashiCorp announced the decommissioning of its HCP Vault Secrets service, effective August 27, 2025, for pay-as-you-go customers. The company will integrate the usability improvements from HCP Vault Secrets into HCP Vault Dedicated. Existing users are encouraged to migrate to HCP Vault Dedicated or Vault Community. Sales end June 30, 2025; existing customers can add new applications until end-of-life. Flex contract customers are unaffected.

(support.hashicorp.com)
Development

Nxtscape: The Open-Source Agentic Browser – Your AI-Powered Productivity Sidekick

2025-06-20
Nxtscape: The Open-Source Agentic Browser – Your AI-Powered Productivity Sidekick

Nxtscape, an open-source browser built on Chromium, offers a privacy-first alternative to closed-source options. It allows users to run agents like Manus locally, boosting productivity with an AI assistant. Unlike Chrome, Nxtscape keeps AI functionality local, prioritizing user privacy. Its vision is to reinvent the browser experience, tackling issues like tab overload and cumbersome form filling. Future features include an MCP store and a built-in AI ad blocker. The project is open-source and community-driven, encouraging user participation.

(github.com)
Development Open-Source Browser

Escape the Data Science Production Nightmare: A Pythonic Solution with Marimo and Bauplan

2025-06-20
Escape the Data Science Production Nightmare: A Pythonic Solution with Marimo and Bauplan

Getting machine learning models from prototype to production remains a significant hurdle for data scientists. Traditional approaches rely on fragile Jupyter Notebooks or expensive, time-consuming DevOps handoffs. This article introduces Marimo and Bauplan, a Pythonic tool combination that provides a seamless transition from prototype to production by keeping the entire workflow within the Python ecosystem. Marimo is a modern open-source notebook that combines the flexibility of Jupyter with the maintainability of scripts, while Bauplan is a cloud data platform supporting Pythonic workflows with built-in data versioning and declarative environments. With these tools, data scientists can directly deploy code from their notebooks to production without complex refactoring or cross-team collaboration, dramatically simplifying the production process and increasing efficiency.

(www.bauplanlabs.com)
Development

Minimal Automatic Differentiation Engine in Rust

2025-06-20
Minimal Automatic Differentiation Engine in Rust

This is a minimal automatic differentiation engine written in Rust. It can train a tiny Multi-Layer Perceptron to learn the XOR function and render a computation graph of a single Perceptron to graph.html. The core is the Scalar struct, storing value, optional gradient, and an Edge describing the operation that produced it. Operator overloads and helper functions build a directed acyclic graph, caching the local derivative for every edge. `backward()` recursively propagates gradients from the output node, accumulating them into leaf nodes created with `Scalar::new_grad`. The graph can be visualized with `plot::dump_graph`.

(github.com)
Development Automatic Differentiation

Klong: A Concise Array Language

2025-06-20

Klong is a concise array language similar to K, but without the ambiguity. It uses mathematical notation for programming, which might seem simplistic to those familiar with K or APL, while posing a challenge to newcomers. Comprehensive documentation is available, including a reference manual, introductory guide, quick reference, and a comparison of Klong and K. Written in pure ANSI C, it's easy to compile and install, and a vectorized version called KlongPy is also available.

(t3x.org)
Development

Phoenix.new: An Elixir-based Online Coding Agent Revolutionizing Real-time App Development

2025-06-20
Phoenix.new: An Elixir-based Online Coding Agent Revolutionizing Real-time App Development

Chris McCord, creator of the Phoenix framework, unveils Phoenix.new, an Elixir-based online coding agent. Running in an isolated VM with root shell access, the agent can install packages, run programs, and interact with applications. Integrated with a browser for front-end testing and interaction, Phoenix.new automates deployment, integrates with Github, and drastically simplifies the development workflow. It can even generate applications based on database schemas. McCord suggests this represents a massive shift in development, with future development likely relying more on agents working in CI environments.

(fly.io)
Development

cursor: AI-Powered PostgreSQL Database Explorer

2025-06-20
cursor: AI-Powered PostgreSQL Database Explorer

cursor is a local desktop app that uses AI to explore your PostgreSQL database in seconds. It generates schema-aware queries instantly, supports any PostgreSQL database, and lets you use your own OpenAI key. While pre-built binaries are coming soon, users currently need to build it from source.

(github.com)
Development Database Exploration

ts-ssh: A Powerful Tailscale SSH/SCP CLI Tool

2025-06-20
ts-ssh: A Powerful Tailscale SSH/SCP CLI Tool

ts-ssh is a streamlined command-line SSH and SCP client leveraging the Tailscale network. It offers powerful multi-host operations, batch command execution, and true tmux integration—all without requiring the full Tailscale daemon. Perfect for DevOps teams needing fast, reliable SSH access across their Tailscale infrastructure, ts-ssh supports multiple authentication methods, interactive SSH sessions, secure host key verification, and direct SCP transfers. Its advanced multi-host capabilities include batch command execution, concurrent command execution, and multi-host file distribution. Cross-platform compatible and offering multiple language support, ts-ssh is a must-have for efficient network management.

(github.com)
Development

The Pitfalls of AI Code Generation: Ignoring Underlying Architecture

2025-06-20
The Pitfalls of AI Code Generation: Ignoring Underlying Architecture

This article explores the risks of blindly using Agile methodologies and AI code generation tools in software engineering. The author argues that current Agile practices overemphasize the speed of feature development, neglecting the underlying work of system maintenance and architecture. AI code generation tools excel at quickly producing surface-level features but fail to address underlying architectural issues. This is akin to building a house focusing only on decoration while ignoring the foundation, ultimately leading to system collapse. The author urges business leaders to value the underlying work of engineering, avoid sacrificing long-term stability for short-term gains, and suggests learning technical accounting methods to better understand and manage engineering teams.

(thoughtfuleng.substack.com)
Development

Best Practices for Writing Robust GNU Makefiles

2025-06-20

This comprehensive guide outlines best practices for crafting efficient, maintainable, and portable GNU Makefiles. It covers Makefile structure, variable usage, rule and target definitions, and strategies for handling large projects and parallel builds. The guide emphasizes using automatic variables, avoiding common pitfalls, and provides techniques for handling various scenarios such as cleanup tasks, dependency management, and multi-file processing. The ultimate goal is to empower developers to write clean, understandable, and easily maintainable Makefiles, thereby boosting development efficiency.

(clarkgrubb.com)
Development

The Wayland Revolution: Accessibility in the Linux Desktop's Future

2025-06-20

With X11's demise looming, Wayland is poised to become the future of the Linux desktop. This presents a significant challenge for users with disabilities who rely on assistive technologies, as early Wayland implementations suffered from severe accessibility issues. However, the situation is improving. GNOME is actively improving Wayland's accessibility support, and screen readers like Orca are becoming more responsive. While challenges remain, such as insufficient headless GUI support and compositor compatibility issues, developers are working to address these and build a more accessible Wayland ecosystem. This post calls for collaborative effort from developers and the community to ensure Wayland's future doesn't leave users with disabilities behind.

(fireborn.mataroa.blog)
Development

Fast Rust Builds: Secrets to Sub-10 Minute CI

2025-06-20

It's a common complaint that Rust compiles slowly, but the author argues that most Rust projects compile far slower than they should. Using rust-analyzer (200k lines of code plus a million lines of dependencies) as an example, they achieve an 8-minute CI pipeline on GitHub Actions. The article details strategies for optimizing build times, including leveraging CI caching, splitting CI tasks, disabling incremental compilation and debug info, reducing dependencies, utilizing `cargo build -Z timings` for profiling, and carefully architecting code to avoid excessive generic instantiation across crate boundaries. The author stresses the impact of build time on developer productivity and recommends regularly optimizing build times to keep CI times for large Rust projects within a reasonable range, e.g., around 10 minutes.

(matklad.github.io)
Development Build Optimization

JavaScript: The Progress That Broke the Web

2025-06-20
JavaScript: The Progress That Broke the Web

This article critiques the overuse of JavaScript frameworks in modern web development. The author argues that the pursuit of app-like experiences has led developers to employ overly complex frameworks and tools, resulting in slow loading times, difficult maintenance, and impaired user experience and SEO. Many website functionalities, the article claims, could be achieved with simpler code, while overly complex architectures reduce efficiency. The author calls for a return to simplicity, prioritizing user experience and performance over technical showmanship.

(www.jonoalderson.com)
Development

Conquering Makefiles: A Comprehensive Guide

2025-06-20

This guide demystifies Makefiles, tackling their often-confusing syntax and hidden rules. It starts with the basics, progressing through syntax, variables, functions, and advanced techniques, all illustrated with runnable examples. The guide culminates in a practical Makefile template for medium-sized projects, making it a valuable resource for developers of all levels.

(makefiletutorial.com)
Development

QFEX is Hiring a Founding Backend Engineer

2025-06-20
QFEX is Hiring a Founding Backend Engineer

QFEX, a fintech company processing billions of dollars in daily trading volume, seeks a founding backend engineer. The role requires experience with high-performance languages (like C++), 3+ years building and running high-traffic, real-time production systems. Responsibilities include designing fault-tolerant, low-latency, high-availability services; setting up CI/CD and monitoring; and guiding technical direction. Ideal candidates possess fintech or low-latency experience, Kubernetes/IaC familiarity, and exceptional responsibility and decision-making skills.

(www.ycombinator.com)
Development

Asterinas: A Rust-based Linux-compatible Kernel Challenging Traditional Designs

2025-06-20

Researchers from Southern University of Science and Technology (SUSTech) in China have developed Asterinas, a new Linux kernel written in Rust using a "framekernel" architecture. This architecture combines the advantages of monolithic and microkernels, encapsulating unsafe Rust code within a library while the rest of the kernel services use safe abstractions. This improves kernel safety while maintaining the high performance of monolithic kernels. Asterinas aims for a system with a small, formally verifiable TCB, Linux ABI compatibility, and a simple shared-memory architecture. Currently supporting x86 and RISC-V, Asterinas is under active development, with future plans to expand architecture support and cloud computing applications.

(lwn.net)
Development
1 2 … 55 56 57 59 61 62 63 … 214 215