Critical Google Account Flaw Allowed Phone Number Extraction

2025-06-09
Critical Google Account Flaw Allowed Phone Number Extraction

A security researcher discovered a critical vulnerability in Google accounts that allowed attackers to easily obtain users' phone numbers through brute-forcing. The exploit leveraged Google Looker Studio's document ownership transfer feature, allowing attackers to guess phone numbers without the victim's knowledge. Google has since patched the vulnerability and awarded the researcher $5,000. This flaw poses a significant risk to SIM swappers, enabling them to steal various accounts, including cryptocurrency and email, through identity theft.

Read more
Tech

Homa Network Protocol: A New Challenger to TCP/UDP

2024-12-30

Homa is a novel network transport protocol designed for data center applications, aiming to reduce the overhead of transmitting numerous small messages. Unlike traditional TCP/UDP, it eliminates connection setup, employing a unique request-response mechanism and prioritized queues to minimize latency. Currently, Homa is striving for inclusion in the Linux kernel, but its future may heavily rely on hardware acceleration within network devices.

Read more

Boosting Ruby Ractor Performance: Tackling the `object_id` Bottleneck

2025-04-27

Ruby's Ractor concurrency model suffers from performance limitations due to global locks. This post dives deep into a performance bottleneck caused by the `object_id` method, stemming from historical design choices and improvements to garbage collection. By optimizing `object_id`'s implementation, storing it directly within objects instead of using a global hash table lookup, the author significantly improves Ractor performance, resulting in a two-fold speed increase in JSON benchmarks. While challenges remain, such as handling special object types, this work represents a crucial step towards making Ractors truly parallel.

Read more
Development

NixOS Network Installation with nixos-anywhere: A Declarative Approach

2025-06-01
NixOS Network Installation with nixos-anywhere: A Declarative Approach

After a decade-long hiatus, the author revisits NixOS and shares their experience with network installation using nixos-anywhere. Unlike graphical or manual methods, nixos-anywhere allows declarative configuration and installation of NixOS on remote machines. Configuration files are version-controlled, ensuring reproducibility and system integrity. The article details building a custom installer ISO and using nixos-anywhere for remote installation, highlighting the benefits of NixOS's declarative configuration and version control.

Read more

Armbian's Major Update: OpenMediaVault Integration and More

2025-05-12
Armbian's Major Update: OpenMediaVault Integration and More

This week's Armbian update brings significant improvements across the board. The highlight is the integration of OpenMediaVault, allowing users to easily turn supported single-board computers into network-attached storage (NAS) devices. Other enhancements include removing a redundant wireless hotspot prompt, upgrading bootloaders on Orange Pi 5 Max and PocketBeagle2, and optimizing performance and stability on the Rockchip64 platform. Armbian also continues infrastructure refinement, cleaning up unused code, and preparing for future testing initiatives.

Read more

NASA's X-59 Quiet Supersonic Jet Completes First Taxi Tests

2025-07-22
NASA's X-59 Quiet Supersonic Jet Completes First Taxi Tests

NASA's X-59 experimental quiet supersonic aircraft successfully completed its first low-speed taxi tests on July 10th at U.S. Air Force Plant 42 in Palmdale, California. This marks a significant step towards the aircraft's first flight, with further high-speed taxi tests planned in the coming weeks. The tests focused on validating critical systems like steering and braking, ensuring the aircraft's stability and control. The X-59 is part of NASA's Quesst mission to demonstrate quieter supersonic flight, aiming to replace the sonic boom with a softer 'thump'. Data collected will inform the development of new noise regulations for supersonic commercial flights.

Read more
Tech

Software Engineer Needed: Building the Future of Neural Data

2025-07-19
Software Engineer Needed: Building the Future of Neural Data

Piramidal is seeking a software engineer to build and maintain the backend infrastructure for their groundbreaking neural data platform. This role involves close collaboration with ML engineers to deploy cutting-edge models and working directly with product and internal teams to solve critical problems. The ideal candidate has 5+ years of experience at a product-focused company, proficiency in Python and other backend languages, expertise in containerization (Kubernetes), relational databases (Postgres/MySQL), and web technologies (JavaScript, React). Piramidal is committed to using technology to enhance human potential and supports cognitive liberty.

Read more
Development

Sipeed NanoKVM-PCIe: A Budget-Friendly KVM over IP Solution

2024-12-24
Sipeed NanoKVM-PCIe: A Budget-Friendly KVM over IP Solution

Sipeed has launched the NanoKVM-PCIe, a low-cost KVM over IP solution with optional WiFi 6 and PoE support. Based on the SOPHGO SG2002 SoC, it features multiple interfaces, including Ethernet, USB-C, and HDMI, supporting 1080p60 video output. The device supports UEFI/BIOS control, emulated USB keyboard/mouse, IPMI, and more, with a web frontend for management. NanoKVM-PCIe can be powered via PCIe slot or USB-C, and is priced between $55 and $70.

Read more
Hardware Embedded System

Recreating Game Boy Sounds with the Web Audio API: Fourier Series vs. Wave Shaper

2025-04-07

While building a web-based Game Boy style music tracker, the author encountered the challenge of faithfully recreating the iconic Game Boy square wave sounds. Game Boy's pulse channels supported variable duty cycles, but the Web Audio API's OscillatorNode only provides a 50% duty cycle square wave. The article explores two solutions: generating a custom waveform using the Fourier series and shaping a sawtooth wave with a WaveShaperNode. The Fourier series approach offers higher accuracy but is computationally expensive; the WaveShaperNode method is simpler but might introduce some noise. The author ultimately prefers the WaveShaperNode approach for its simplicity and its ability to produce a more authentic Game Boy sound.

Read more
Development Sound Synthesis

ERP Therapy: It Sucks, But It Works

2025-09-16
ERP Therapy: It Sucks, But It Works

After an OCD diagnosis, the author started Exposure and Response Prevention (ERP) therapy. Unlike talk therapy, ERP involves purposefully provoking fear and anxiety, preventing the usual coping mechanisms. The author found it incredibly difficult but effective, suggesting its potential benefits extend beyond OCD. They propose using LLMs to experiment with self-guided ERP and emphasize the value of professional guidance. Despite the unpleasantness, the results are worth it.

Read more

Glue Work Considered Harmful: A Survival Guide for Effective Engineers

2025-01-02

This article explores the concept of "glue work" in software engineering. While crucial for team efficiency (e.g., updating documentation, addressing technical debt), this unglamorous work often goes unrewarded, disadvantaging engineers who prioritize it. The author argues that companies don't reward glue work because they want engineers focused on feature delivery, not overall efficiency improvements. The efficient strategy is to apply glue work tactically to projects you're accountable for, ensuring their success, rather than spreading efforts thinly. This isn't cynical office politics; it's based on the reality of low efficiency in large companies and the prioritization of growth over short-term efficiency gains.

Read more

Haskell's IO Monad and the Value Restriction: A Surprising Connection

2025-05-26

This article explores how Haskell's IO Monad cleverly avoids type safety issues stemming from polymorphic references. Despite Haskell's reputation for purity, the design of the IO Monad implicitly incorporates a mechanism similar to the 'value restriction' found in other ML languages. The article analyzes the risks of polymorphic references, compares Haskell's approach to other languages, and delves into the internal implementation of the IO Monad, revealing its similarity to the State Monad and why directly manipulating the IO constructor is dangerous. Finally, it demonstrates how to use the MonadGen type class to circumvent IO's restrictions, but also emphasizes the risks involved.

Read more
Development

Lambda Calculus Interpreter in 383 Bytes

2025-01-15
Lambda Calculus Interpreter in 383 Bytes

This blog post introduces a brand new 383-byte implementation of a binary lambda calculus interpreter as an x86-64 Linux ELF executable. This tiny interpreter manages to achieve garbage collection, lazy lists, and tail recursion. Programs are encoded in a remarkably small binary format; for example, its metacircular evaluator is only 232 bits. The author provides friendly portable C code and pre-built binaries for other platforms. This project is a fun learning tool for lambda calculus and showcases the possibility of implementing complex computation in extremely resource-constrained environments.

Read more
Development Lambda Calculus

Deep-Sea Hydrothermal Vent and Cold Seep Ecosystems: A Research Review

2025-08-03
Deep-Sea Hydrothermal Vent and Cold Seep Ecosystems: A Research Review

This review summarizes recent advances in research on deep-sea hydrothermal vent and cold seep ecosystems, covering biogeochemical observations and studies of biological communities in several regions, including the Japan Trench and Mariana Trench. Studies reveal unique chemosynthetic-based biological communities in these extreme environments and illuminate the complex relationship between deep-sea methane cycling, fluid venting, and biodiversity. These findings are crucial for understanding deep-sea ecosystems and the global carbon cycle.

Read more

Vibe Coding: Hype vs. Reality

2025-03-22
Vibe Coding: Hype vs. Reality

The recent social media trend of "Vibe Coding," which relies on Large Language Models (LLMs) to generate code, is criticized in this article. While LLM agents like Cursor can quickly produce code prototypes, the author argues this is merely the surface of Vibe Coding. In reality, LLMs struggle with complex projects, lack attention to detail, and are unsuitable for production software development. The author uses personal experiences and examples to illustrate the limitations of LLM agents, such as making elementary mistakes, handling multiple contexts poorly, and lacking long-term memory. Although LLMs can improve development efficiency, they cannot fully replace human developers, especially in scenarios requiring high reliability and security. The author concludes that Vibe Coding might quickly build prototypes, but reliable software still needs experienced programmers.

Read more
Development

China's 'Thousand Sails' Megaconstellation Faces Major Delays

2025-07-27
China's 'Thousand Sails' Megaconstellation Faces Major Delays

China's ambitious 'Thousand Sails' (G60 Starlink) constellation, aiming for over 15,000 satellites by 2030 to provide global internet access, is facing significant delays. Only 90 satellites have been launched, far short of the 648 target for the end of 2025. The shortfall stems from a severe rocket shortage, hindering the project's ability to compete with SpaceX's Starlink. To meet its goals, the project needs to launch over 30 satellites per month, a pace currently unattainable.

Read more

Terminal Image Viewer: A Programmer's Odyssey

2025-01-19

A programmer embarks on a challenging journey to create the perfect terminal image viewer. Starting with simple pixel display, he delves into the intricacies of loading and rendering various image formats (JPEG, PNG, GIF, AVIF, JPEG XL, HEIC, ETC, BC, OpenEXR, etc.), encountering unexpected hurdles along the way: inconsistent format standards, poorly documented libraries, the complexities of HDR image processing, the subtleties of color management, and the limitations of terminal output protocols. He ultimately overcomes these challenges to build a powerful image viewer, gaining a deep appreciation for the complexities and fascinations of computer graphics.

Read more
Development terminal display

Run Python like a Local Function in Go: No CGO, No Microservices

2025-09-16
Run Python like a Local Function in Go: No CGO, No Microservices

pyproc is a Go library enabling you to call Python functions as if they were local, eliminating the need for CGO or microservices. Leveraging Unix Domain Sockets for inter-process communication, it offers zero network overhead, process isolation, and true parallelism to bypass Python's GIL. Ideal for integrating existing Python ML models, data processing, and gradually migrating from Python microservices to Go, pyproc boasts high performance handling thousands of requests per second.

Read more

Sub-100MB LLM Now Pip-installable: Introducing llm-smollm2

2025-02-07
Sub-100MB LLM Now Pip-installable: Introducing llm-smollm2

A new plugin, llm-smollm2, bundles a quantized SmolLM2-135M-Instruct LLM under 100MB, making it pip-installable. The author details the creation process, from finding a suitable sub-100MB model (limited by PyPI size restrictions) to suppressing verbose logging from llama-cpp-python and packaging for PyPI. While the model's capabilities are limited, it's presented as a valuable learning tool for understanding LLM technology.

Read more
Development Model Quantization

Zig•EM: A Novel Embedded Programming Framework in Zig

2025-06-24

Zig•EM is a new embedded programming framework built on the Zig programming language. This article details its installation, build system (leveraging Zig's cache for speed), project structure (featuring a unique package, bucket, and unit hierarchy), and core code constructs. Zig•EM uses a two-stage compilation process: META (host-based configuration and code generation) and TARG (target-hardware compilation) for efficient embedded development. The article also shows how to install the Zig•EM VS Code extension and provides example programs for quick onboarding.

Read more
Development Programming Framework

Roto: A Statically-Typed Embedded Scripting Language for Rust

2025-05-21
Roto: A Statically-Typed Embedded Scripting Language for Rust

Roto is an embedded scripting language for Rust applications, designed to be simple, fast, and reliable. Born from the need for more flexible filtering in Rotonda, a Rust-based BGP engine, Roto allows users to write complex filters with ease. It's statically typed, JIT-compiled, and hot-reloadable, ensuring performance and safety. Roto seamlessly integrates with Rust, allowing direct registration of Rust types and methods, eliminating costly serialization. While still under development, Roto offers documentation and examples for those interested in experimenting.

Read more
Development

Sun Ships, Coltrane, and Interstellar Dreams: A Cosmic Musings on Speed and Distance

2025-06-26

Inspired by John Coltrane's album *Sun Ship*, the author connects the Parker Solar Probe's incredible speed with interstellar travel. The article compares the speeds of Apollo 10, Voyager 1, and New Horizons, highlighting Parker's record-breaking velocity at perihelion. It delves into the timescales involved in interstellar journeys, drawing parallels to the ancient Egyptian Pharaoh Khufu's 'solar boat', bridging ancient cosmic perspectives with modern technological exploration. The piece concludes with a hopeful vision of interstellar flight and the need for long-term technological breakthroughs.

Read more

Nvidia Open-Sources Run:ai After $700M Acquisition

2024-12-30
Nvidia Open-Sources Run:ai After $700M Acquisition

Nvidia completed its $700 million acquisition of Run:ai, a software company simplifying GPU cloud orchestration for AI, and immediately open-sourced the software. This move is likely a strategic response to antitrust concerns, allowing wider access to the technology and mitigating potential regulatory issues stemming from Nvidia's market dominance. Run:ai's software will help companies efficiently manage GPU resources for AI development, fostering growth within the broader AI ecosystem.

Read more
AI

German ICE Train Sets New Speed Record: 405 km/h

2025-06-30
German ICE Train Sets New Speed Record: 405 km/h

Deutsche Bahn (DB) and Siemens Mobility achieved a new speed record of 405 km/h on the Erfurt–Leipzig/Halle high-speed line using an ICE test train. This speed demonstrates the capabilities of existing infrastructure and provides valuable data for future high-speed rail maintenance and technological advancements. The test train, Velaro Novo, showcased its energy efficiency and high performance, paving the way for future innovations in high-speed rail technology. The test was conducted on an existing line during scheduled maintenance, which included upgrading bridge supports to ensure long-term reliable operation.

Read more

NIH's New Director: A Tumultuous Start and the Erosion of Scientific Freedom

2025-06-04
NIH's New Director: A Tumultuous Start and the Erosion of Scientific Freedom

The tenure of Jay Bhattacharya, the new director of the National Institutes of Health (NIH), has been marked by chaos, leadership failures, and widespread layoffs. Bhattacharya's controversial statements and restrictions on research have angered staff, sparking protests and concerns about scientific freedom. Insiders describe Bhattacharya as arrogant and clueless, pointing out contradictions between his actions and his publicly stated commitment to scientific freedom. Mass layoffs, research budget cuts, and restrictions on research topics have created an atmosphere of fear within the NIH, with many fearing damage to American scientific research.

Read more

Tesla's AI VP Milan Kovac Departs After a Decade of Leading FSD and Optimus

2025-06-07

Tesla's VP of AI and Optimus Engineering, Milan Kovac, announced his departure this week, marking another significant executive exit. Kovac, a key figure in the development of Tesla's FSD technology and Optimus robot, cited family reasons. His nearly decade-long tenure saw him navigate the transition from Autopilot 1.0 to the in-house FSD chip, HW 3.0, and lead engineering efforts across multiple vehicle platforms. While executive departures are common at Tesla, Kovac's departure is notable given his contributions and role as one of the Autopilot 'Three Musketeers'. Ashok Elluswamy will now oversee both FSD and Optimus. The article also details a past conflict with Elon Musk over an AI Day presentation, highlighting the intense pressure within Tesla's executive environment.

Read more
Tech

Breakthrough: Ambient RF Energy Harvesting Module Powers Small Electronics

2025-03-02
Breakthrough: Ambient RF Energy Harvesting Module Powers Small Electronics

Researchers from the National University of Singapore have developed a novel energy harvesting module capable of converting ambient radio frequency (RF) signals into direct current (DC) voltage, powering small electronics without batteries. This technology overcomes the low efficiency of existing rectifiers at low power levels, utilizing nanoscale spin-rectifiers for high sensitivity and compact design. Successfully powering a commercial temperature sensor, the module opens possibilities for IoT devices and wireless sensor networks in remote areas. Published in Nature Electronics, this research marks a significant advance in ambient energy harvesting.

Read more

Beyond Sorting: Deep Learning for Order-Independent Transparency

2025-05-22
Beyond Sorting: Deep Learning for Order-Independent Transparency

Traditional transparency rendering relies on depth sorting, which can lead to artifacts in complex scenes. This Eurographics 2025 paper explores Order-Independent Transparency (OIT), a technique that accurately renders transparent objects without depth sorting. It covers traditional OIT approaches (exact, approximate, and hybrid) and deep learning methods, analyzing their scope, performance, and accuracy for more realistic transparency in games, simulations, and film visual effects.

Read more

Open Source's Coordination Problem: Lessons from Linux Desktop and LSP

2025-06-20

The author uses their experience with NixOS and a KDE application as a starting point to discuss the challenges of coordinating open-source software in the Linux desktop environment. They highlight the lack of a unified API standard in the Linux desktop, leading to a fragmented software ecosystem, described as an "Escher-like perpetual motion machine." This is contrasted with the release of the Language Server Protocol (LSP) by Microsoft a decade ago. While the implementation was mediocre, its mere existence solved the coordination problem for IDE features, driving industry progress. The author argues that the open-source community's lack of coordination led to the missed opportunity to create a unified IDE protocol before LSP. Linux's success, however, is attributed to the pre-defined API standard provided by POSIX, reducing coordination difficulties. This article prompts reflection on the open-source community's coordination mechanisms and software ecosystem development models. Category: Tech

Read more
Tech

Slow Social Media: A Critique and a Proposal

2025-09-17
Slow Social Media: A Critique and a Proposal

The author criticizes current social media platforms for being advertisement-driven content mills that prioritize engagement over genuine connection. They propose an alternative social media platform focused on fostering real relationships with friends and family. Key features include a limit on connections, a chronological feed with pagination, and a daily post limit. This design aims to combat addictive features and algorithm manipulation. While acknowledging the challenges of funding and adoption, the author expresses hope for a healthier social media experience.

Read more
Misc
1 2 157 158 159 161 163 164 165 596 597