Chrome 136 Finally Kills 23-Year-Old Browser History Sniffing Vulnerability

2025-04-12
Chrome 136 Finally Kills 23-Year-Old Browser History Sniffing Vulnerability

A 23-year-old vulnerability allowing websites to sniff users' browsing history through CSS :visited pseudo-class is finally being eradicated in Chrome 136. Previous attempts to mitigate the issue, which involved checking link colors to determine if a page had been visited, proved insufficient. Chrome 136 introduces a novel 'partitioning' mechanism, linking visited history to the link URL, top-level domain, and frame origin, preventing cross-site access to browsing history. This breakthrough represents a significant leap forward in browser privacy and concludes a decades-long arms race between attackers and defenders.

Read more
Tech

Building Your Own Linux Debugger: Part 1 - Getting Started

2025-04-25

This is the first part of a ten-part series on building a Linux debugger from scratch. Learn the core mechanics of debuggers and implement features like launch, halt, continue, breakpoint setting (memory addresses, source lines, function entry), register and memory read/write, and single stepping. The tutorial uses C/C++, Linenoise, and libelfin, with each part's code available on GitHub. Future parts will cover advanced topics such as remote debugging, shared library support, expression evaluation, and multi-threaded debugging.

Read more
Development

Emulating a Ukrainian Retro Computer: Bringing Childhood Games Back to Life

2025-09-22

The author revisited their childhood memories of the Fahivets-85 computer from Ukraine and decided to emulate it. They built a WebAssembly-based emulator that currently runs a simple game called "Rain". The development involved implementing the CPU instruction set, simulating the IO controller, keyboard, and display. AI assistance was used to generate code, and the emulator's functionality was gradually refined until the game successfully ran. While some issues remain, this is an impressive accomplishment.

Read more
Development

arXivLabs: Experimental Projects with Community Collaborators

2025-09-04
arXivLabs: Experimental Projects with Community Collaborators

arXivLabs is a framework enabling collaborators to develop and share new arXiv features directly on the arXiv website. Individuals and organizations working with arXivLabs embrace our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only partners with those who share them. Have an idea for a project that will benefit the arXiv community? Learn more about arXivLabs.

Read more
Development

HDMI 2.2 Officially Unveiled: 96 GB/s Bandwidth, 16K Support

2025-06-25
HDMI 2.2 Officially Unveiled: 96 GB/s Bandwidth, 16K Support

The HDMI Forum has finalized HDMI 2.2, boasting a 96 GB/s bandwidth thanks to new Ultra96 cables. This unlocks support for 16K at 60Hz and 12K at 120Hz (with chroma subsampling), and 4K at 240Hz with 12-bit color depth without compression. While offering a slight edge over DisplayPort 2.1b, HDMI 2.2 provides significant improvements, including backward compatibility and a new audio-video sync technology. AMD's next-gen RDNA GPUs are expected to be among the first to adopt HDMI 2.2, though the extent of bandwidth support remains to be seen.

Read more
Hardware High Resolution

Paradigm: Hiring Founding Engineers for AI-Native Workspace

2025-04-08
Paradigm: Hiring Founding Engineers for AI-Native Workspace

Paradigm, a San Francisco-based AI-native workspace startup backed by Y Combinator and prominent tech founders, is seeking experienced generalist founding engineers. Ideal candidates possess experience building production AI applications, thrive in fast-paced environments, and ideally have experience with GoLang, TypeScript, and related technologies. Competitive salaries and benefits, including equity, are offered.

Read more
Development Founding Engineers

FCC Investigates EchoStar's 2GHz Spectrum Use Amidst SpaceX and VTel Disputes

2025-05-14
FCC Investigates EchoStar's 2GHz Spectrum Use Amidst SpaceX and VTel Disputes

SpaceX's apparent lack of due diligence regarding EchoStar's extensive use of the 2GHz band has prompted an FCC investigation. EchoStar claims over 80% US population coverage with 23,000+ 5G sites deployed. However, VTel Wireless petitioned the FCC, arguing that granting EchoStar more time to complete its 5G network violates prior commitments made during the T-Mobile/Sprint merger. The FCC is now seeking public comment on EchoStar's 2GHz spectrum usage and VTel's petition for reconsideration.

Read more

Chrome Ditches FreeType for Rust-Based Skrifa: A Security and Performance Win

2025-03-19
Chrome Ditches FreeType for Rust-Based Skrifa: A Security and Performance Win

Chrome has replaced its aging FreeType font rendering engine with Skrifa, a new Rust-based library. FreeType's C-based codebase was plagued by security vulnerabilities, demanding significant maintenance resources. Skrifa leverages Rust's memory safety to dramatically reduce vulnerabilities and improve developer productivity. Rigorous testing and comparisons ensure Skrifa matches FreeType's performance and rendering quality. Chrome plans to extend Skrifa's use to more operating systems in the future.

Read more
Development

Open Source QO-100 DATV Solution: SDR Television v1.0 Released

2025-04-26
Open Source QO-100 DATV Solution: SDR Television v1.0 Released

The first public release of SDR Television is now available. This is a DVB-S2/AAC/H264/H265 program for the QO-100 satellite, leveraging many DLLs from SDR Console to control Pluto/LibreSDR. It demonstrates a full-duplex DATV solution on a modern x86 computer. This v1.0 release is a proof of concept; future versions will add H266/AV1/Opus and improved cross-band UI. Requires Windows 10/11 64-bit, 8+ cores recommended.

Read more
Tech

Modeling Open and Closed Universes of Choices in Rust

2025-02-21
Modeling Open and Closed Universes of Choices in Rust

This article explores how to model choices in Rust, distinguishing between closed universes (where all options are known and fixed, like Rust's `Option` type) and open universes (where new options can be added). For closed universes, enums are suitable. Semi-open universes (where library authors can add options but users can't), are best handled with non-exhaustive enums, forcing users to account for wildcard patterns and ensuring API backward compatibility. Fully open universes are best addressed with strings or newtypes, or traits for more flexibility. The article also discusses the pitfalls of using an 'Unknown' variant and explores the use of sealed traits. The author concludes by recommending a case-by-case approach, weighing the trade-offs between the simpler string-based approach and the more powerful, yet more complex, trait-based approach.

Read more
Development Type Systems

C to FlipJump: A Minimalist RISC-V Virtual Machine

2025-01-17
C to FlipJump: A Minimalist RISC-V Virtual Machine

The c2fj project is a compiler that translates C code into FlipJump, a minimalist instruction set virtual machine. It first compiles C code into a RISC-V ELF file, then translates RISC-V instructions into FlipJump instructions, and finally runs the resulting FlipJump program. This process cleverly leverages FlipJump's space optimization, allowing for efficient compilation even of large C codebases. c2fj supports various compilation flags and provides Makefile support for complex projects. It also includes a minimal C library implementing necessary system calls such as `exit`, `getc`, `putc`, and `sbrk`.

Read more
Development

Mastering Dart Compilation: A Deep Dive into `dart compile`

2025-05-12
Mastering Dart Compilation: A Deep Dive into `dart compile`

This guide provides a comprehensive overview of the Dart `dart compile` command, enabling compilation of Dart programs to various target platforms. It details the use of subcommands like `exe` (self-contained executables), `aot-snapshot` (AOT modules), `jit-snapshot` (JIT modules), `kernel` (portable modules), `js` (JavaScript), and `wasm` (WebAssembly), explaining their functionalities and characteristics. The guide covers cross-compilation, code signing, and optimization techniques for production web compilation, offering a complete understanding of Dart compilation.

Read more
Development

Lidar Can Fry Your Phone's Camera

2025-05-23
Lidar Can Fry Your Phone's Camera

A Reddit user recently discovered that car-mounted lidar sensors can permanently damage a phone's camera under certain conditions. While filming a Volvo EX90 with an iPhone 16 Pro Max, the lidar's near-infrared light fried pixels in the camera lens. Volvo has warned against pointing cameras directly at lidar sensors, highlighting the potential risks of increasingly prevalent lidar technology in autonomous vehicles. The incident underscores the growing concerns about the interaction between lidar and consumer electronics.

Read more

Government-Backed Hackers Behind Most Zero-Day Exploits in 2024

2025-04-29
Government-Backed Hackers Behind Most Zero-Day Exploits in 2024

Google's latest research reveals that government-backed hackers were responsible for the majority of attributed zero-day exploits in 2024. While the total number of zero-days decreased from 98 in 2023 to 75 in 2024, Google attributed at least 23 to government actors. Ten were directly linked to government hackers (five to China, five to North Korea), and eight originated from spyware makers like NSO Group, which primarily sell to governments. The remaining attributed zero-days were likely exploited by cybercriminals. Although spyware companies' zero-day production is slowing, Google notes that the industry will continue to thrive as long as government demand persists. Importantly, security features like iOS/macOS Lockdown Mode and Google Pixel's MTE are proving effective against these attacks, highlighting advancements in zero-day defense.

Read more

Graphical Debugging of the Hilbert Curve: A Visual Programming Journey

2025-05-22

The author advocates for a minimalist programming style and uses Lua and LÖVE to graphically debug a recursive function for computing the Hilbert curve. Through iterative visualization improvements, including a text log, replay log, surface drawing, and an 'exploding view' drawing, the author clarifies the algorithm's complexities. The process culminates in a sophisticated debugging UI, offering valuable insights and reusable patterns for future debugging tasks.

Read more
Development graphical debugging

Poka-Yoke: The Japanese Art of Mistake-Proofing

2025-01-09

Poka-yoke, meaning "mistake-proofing" in Japanese, is a lean manufacturing concept originating from the Toyota Production System. It involves designing mechanisms to prevent, correct, or highlight human errors in a process, thereby eliminating defects. A simple example is a car's clutch pedal—it's a poka-yoke, forcing the driver to depress it before starting the engine. This approach not only improves product quality but also reduces training costs, lessens quality control burdens, and ultimately achieves 100% built-in quality control.

Read more

Colossal's 'Dire Wolves': Gene Editing Sparks Controversy

2025-04-08
Colossal's 'Dire Wolves': Gene Editing Sparks Controversy

Colossal Biosciences claims to have resurrected the extinct dire wolf, using gene editing to create grey wolf pups—Remus, Romulus, and Khaleesi—with some dire wolf traits. However, studies show grey wolves and dire wolves diverged 6 million years ago, with significant genetic differences. Colossal's claim of achieving this with only 20 gene edits is controversial. The three gene-edited pups are under observation in a reserve, and breeding is prohibited. This raises questions about species definition and the ethical challenges of gene editing.

Read more
Tech dire wolf

Leaked: Microsoft's Scrapped Dynamic Wallpapers for Windows 11

2025-01-03
Leaked: Microsoft's Scrapped Dynamic Wallpapers for Windows 11

Former Microsoft designer Sergey Kisselev revealed designs for dynamic wallpapers intended for Windows 11. These wallpapers, featuring various animations and still images, were designed to complement the centered Start Menu and Taskbar, primarily targeting educational users. However, the feature never shipped, suggesting cancellation or postponement. While early hints appeared in Insider builds, it didn't make it into the 23H2 release, and its future remains uncertain.

Read more

Internet Map 2010: A BGP Visualization Pioneer

2025-05-12

This 2010 image of the internet, unseen publicly until 2014, represents a groundbreaking visualization. Unlike previous traceroute-based maps, it uses BGP data as its foundation, creating a framework for future internet visualizations using the Route Views table dump archive. The color scheme depicts connection density as incandescence, with hotter colors representing higher connection points. This image was previously only viewable at the Museum of Modern Art (MoMA) and in Discover Magazine.

Read more

Google Gemini 2.5: Faster, Cheaper, and More Powerful

2025-06-17
Google Gemini 2.5: Faster, Cheaper, and More Powerful

Google announces the general availability of its Gemini 2.5 Pro and Flash models, alongside a preview release of the even more cost-effective and faster Gemini 2.5 Flash-Lite. These models achieve a Pareto optimal balance of cost and speed, outperforming their predecessors across various benchmarks including coding, math, science, reasoning, and multimodal tasks. Flash-Lite especially excels in high-volume, low-latency applications like translation and classification. The Gemini 2.5 family boasts features like adjustable reasoning budgets, integration with tools like Google Search and code execution, multimodal input, and a massive 1 million-token context window.

Read more
AI

Fedora's 32-bit Sunset Threatens Popular Handheld Gaming Distro Bazzite

2025-06-26
Fedora's 32-bit Sunset Threatens Popular Handheld Gaming Distro Bazzite

Fedora Linux's proposal to drop 32-bit support has sparked controversy, particularly threatening the popular handheld gaming distribution Bazzite. Bazzite's creator, Kyle Gospodnetich, strongly opposes the change, arguing it would kill projects like Bazzite and damage Fedora's public image. He points out that even with built Steam packages, basic use cases would break, and Flatpak wouldn't solve issues with Bazzite's reliance on 32-bit architecture for Steam Big Picture Mode. Currently, the proposal is unlikely to pass for Fedora 44, but ideally, Valve would port the Steam client to 64-bit, resolving many problems. The issue also impacts OBS Studio game capturing and FEX.

Read more
Development 32-bit support

Larry the Cat: A Political Life at 10 Downing Street

2025-07-05
Larry the Cat: A Political Life at 10 Downing Street

Larry, the Chief Mouser to the Cabinet Office at 10 Downing Street since 2011, has become a beloved British institution. This tabby cat, cared for by Downing Street staff and not the personal property of the Prime Minister, has witnessed six premierships. While his mousing skills have been questioned (earning him the nickname 'Lazy Larry'), his charm and media savvy have made him a star, even outpolling some Prime Ministers in popularity. Larry's duties, officially, involve greeting guests, inspecting security, and testing furniture for nap-worthiness.

Read more

Database Consistency: Beyond the Basics

2025-06-02
Database Consistency: Beyond the Basics

This article delves into the challenges of maintaining database transactional consistency in high-concurrency environments. Using a Spring Boot example, the author demonstrates how default pagination and idempotency checks can lead to data inconsistencies (missing rows or duplicate updates) when processing a large volume of sales data. The article thoroughly explains database isolation levels (READ UNCOMMITED, READ COMMITED, REPEATABLE READ, SERIALIZABLE) and optimistic/pessimistic locking strategies. Ultimately, by employing the REPEATABLE READ isolation level and optimistic locking, the author effectively resolves data inconsistencies and significantly improves performance.

Read more
Development database consistency

The Unsung Heroes Keeping Africa (and the World) Online

2025-09-20
The Unsung Heroes Keeping Africa (and the World) Online

Rest of World profiles the Léon Thévenin, Africa's only permanently stationed undersea cable repair ship. The article highlights the grueling work of its crew, like cable jointer Shuru Arendse, who maintain Africa's internet connectivity. Their demanding jobs, often requiring months away from family, are crucial to global data flow, especially with the rise of AI which relies heavily on high-speed connectivity. The piece details the intricate cable repair process, team dynamics, and the dedication of these individuals in safeguarding global internet access.

Read more

The Hidden Copyright War Behind Windows 95's Plug and Play

2025-06-29
The Hidden Copyright War Behind Windows 95's Plug and Play

Implementing Plug and Play in Windows 95 wasn't easy. To make older hardware work with the new feature, engineers employed ingenious workarounds. One amusing example involved manufacturers adding the string "Not Copyright Fabrikam Computer" to their BIOS. This was a clever trick to fool LitWare Word Processor's licensing check, unlocking the full version without actually being a licensed Fabrikam PC. This highlights the challenges of early PC compatibility and the lengths manufacturers went to for software licensing.

Read more
Development Plug and Play

kapa.ai: AI-Powered Developer Support, Leveling Up User Experience

2025-07-22
kapa.ai: AI-Powered Developer Support, Leveling Up User Experience

kapa.ai empowers tech companies to easily build AI-powered support and onboarding bots for their users. Over 150 leading startups and enterprises, including OpenAI, Mixpanel, Mapbox, Docker, Next.js, and Prisma, use kapa to enhance developer experience and reduce support overhead. It leverages existing technical knowledge sources like docs, tutorials, chat logs, and GitHub issues to create AI bots that automatically answer developer questions. More than 750,000 developers access kapa.ai through website widgets, Slack/Discord bots, API integrations, or Zendesk. kapa.ai is backed by top-tier Silicon Valley AI investors, including Initialized Capital (Garry Tan, Alexis Ohanian), Y Combinator, Amjad Masad and Michele Catasta (Replit), and Douwe Kiela (RAG paper author and founder of Contextual AI), among others.

Read more
Development

Intel Mandates Four Days a Week in Office

2025-04-25
Intel Mandates Four Days a Week in Office

New Intel CEO Lip-Bu Tan announced a return-to-office mandate, requiring employees to work on-site four days a week starting September 1st. This move aims to boost collaboration and revitalize the company amid falling sales and increased competition. While factory and research staff already work on-site, many corporate employees have been working remotely since the pandemic. The policy follows similar mandates from other tech giants and comes alongside a flatter management structure, reduced meetings, and a forthcoming round of job cuts.

Read more
Tech

AI Coding Assistants Need More Context: Experiments and Insights

2025-02-10
AI Coding Assistants Need More Context: Experiments and Insights

Traditional AI coding assistants, while proficient in code generation, often lack crucial context about the broader system environment. This leads developers to spend extra time bridging the gap between code and various information sources. This article details experiments integrating operational context (call graphs, metrics, exception reports) into AI assistants to improve debugging accuracy. Results show structured performance data and error reports enhance AI analysis, but efficiently representing vast amounts of context remains a challenge. The future lies in a knowledge graph encompassing production behavior, system metrics, and more, enabling AI assistants to understand system behavior holistically.

Read more

Zig Software Foundation's 2025 Financial Report & Fundraiser: A Plea for Sustainability

2025-09-03

The Zig Software Foundation released its 2024 financial report, showcasing efficient resource allocation where the majority of funds went directly to compensating contributors. Despite a slight dip in donations, user activity exploded, leading to a surge in issues and pull requests. To address this growing demand, the foundation expanded its core team and is now seeking sustained donations to maintain operations and project momentum. They prefer donations via Every.org, and encourage various support methods including company matching, venture capital investment, and individual contributions.

Read more
1 2 112 113 114 116 118 119 120 596 597