Popular：
Virtualization DNS security formal verification reachability analysis compiler errors macro conflict web extension development framework Bitmap Graphics API inconsistencies All Tags

Solidity Compiler Crash: A Perfect Storm of Ancient Bugs

2025-08-16
Solidity Compiler Crash: A Perfect Storm of Ancient Bugs

A perplexing crash in the Solidity compiler has recently emerged: it segfaults even when compiling perfectly valid code. The root cause was traced to a 12-year-old overload resolution bug in G++ versions below 11.4, interacting with C++20's implicit comparison rewrite rules when handling Boost's `boost::rational` type. This combination leads to infinite recursion and a stack overflow. The issue isn't in the Solidity code itself, but a surprising interaction between G++, Boost, and the C++20 specification. The solution is upgrading Boost to 1.75 or higher, or upgrading G++ to version 14 or later.

Read more
(osec.io)
Development Compiler Bug

Systemd: Red Hat's Stealth Takeover of the Linux Ecosystem?

2025-01-20

This article delves into the true motivations behind systemd, revealing how Red Hat leveraged its business interests in embedded devices to transform systemd from a simple init system into a core component of the Linux operating system. The author alleges that Red Hat used various tactics, including lobbying open-source projects to depend on systemd and poaching developers from other distributions, to exert control over the Linux ecosystem, sparking a backlash within the open-source community and leading to the resignation of several Debian developers. Systemd is described as a monolithic system with privacy concerns, and Red Hat's ambition is portrayed as creating the next Windows. The article concludes by advocating a return to community-driven development and recommending alternatives to systemd, such as runit and s6.

Read more
(unixdigest.com)
Development

Four Surprising Limitations of Rust's Borrow Checker

2024-12-24

This article delves into four surprising limitations of Rust's borrow checker encountered even by experienced Rustaceans. The first limitation involves the borrow checker's inability to fully account for match and return statements, leading to redundant checks when working with HashMaps. The second limitation concerns asynchronous programming, where Rust currently lacks the ability to express certain asynchronous callback type signatures. The third centers around FnMut closures not allowing re-borrowing of captured variables, restricting access to mutable state in async operations. Finally, the Send checker's lack of control flow awareness results in some Futures that should be Send being incorrectly flagged as non-Send. The author illustrates these limitations and their challenges with concrete code examples and workarounds, advocating for improvements to Rust's type system to enhance developer productivity.

Read more
(blog.polybdenum.com)
Development borrow checker async programming

Google Cuts Code Migration Time in Half with AI

2025-01-16
Google Cuts Code Migration Time in Half with AI

Google reports using its AI tools to halve the time required for code migrations. This involved projects like migrating 32-bit IDs to 64-bit IDs in the Google Ads codebase, upgrading JUnit testing libraries, and replacing the Joda time library. While human review is still necessary, the AI significantly sped up the process, reducing what would have taken hundreds of engineering years to just months. Google emphasizes the AI should be used in conjunction with traditional methods for optimal efficiency and cost management.

Read more
(www.theregister.com)
Development Code Migration

Beyond Two-Week Sprints: Exploring ShapeUp, Plan>Build>Ship, and GSD

2025-02-16
Beyond Two-Week Sprints: Exploring ShapeUp, Plan>Build>Ship, and GSD

Tired of the traditional two-week Scrum sprint? This article explores three alternatives: ShapeUp, Plan>Build>Ship, and GSD. ShapeUp emphasizes a six-week development cycle, starting with a thorough 'Shaping' phase, followed by a 'Betting table' decision-making process, and finally the 'Building' phase, avoiding the rush of short sprint cycles. Plan>Build>Ship is a simplified waterfall model where each feature is handled by a dedicated team from planning to delivery. GSD (Get Shit Done), popularized by Shopify, emphasizes efficient execution, using the internal tool Vault to track project progress, focusing on projects rather than tasks, and promoting team collaboration. These three methods each have unique characteristics, offering product teams more choices and helping them find the development process best suited to their circumstances.

Read more
(www.departmentofproduct.com)
Development product development

The Enigma of Julius and the Rise of AI

2024-12-23
The Enigma of Julius and the Rise of AI

The author recounts the story of Julius, a college classmate who, despite a lack of actual technical skills, rose through the ranks of various companies due to charisma and self-assurance. His success is mirrored in the author's current experience with seemingly productive AI tools that require extensive manual corrections. The narrative explores the parallels between Julius's career trajectory and the complexities of AI's impact on the workplace.

Read more
(ploum.net)
Misc workplace

Bay Area Cult: Ziz and the AI Safety Movement

2025-02-01

This article exposes a secretive Bay Area online cult led by Ziz, who uses her blog to spread distorted ethical and decision theories, targeting AI risk researchers. Zizian doctrine promotes radical veganism and plans for post-singularity trials of the 'non-good'. Through manipulative techniques like unihemispheric sleep, Ziz isolates members, leading to tragic consequences including suicide. The article warns against Ziz's influence and involvement with this potentially dangerous group.

Read more
(zizians.info)
Misc AI risk mind control

Coding Without Bugs: A Viable Approach for Small Teams and Startups

2025-01-23
Coding Without Bugs: A Viable Approach for Small Teams and Startups

A senior engineer shares their experience of pursuing 'bug-free coding' at Telegram and various projects. While seemingly inefficient, they argue that this approach avoids massive maintenance costs and team burnout in the long run. The author uses personal anecdotes and project examples to demonstrate that focusing on code quality and maintainability alongside product velocity leads to efficient development and high-quality products.

Read more
(korshakov.com)
Development Code Quality

Seven Years Post-Google: Selling My Company & Becoming a Dad

2025-02-04
Seven Years Post-Google: Selling My Company & Becoming a Dad

Seven years ago, Michael Lynch left his job at Google to bootstrap his own software company. This year's update covers the sale of his million-dollar-revenue remote computer control device company, TinyPilot, for $600k, and the arrival of his first child. The sale allowed for better work-life balance; he's since refined a previous blogging course, started a book on writing for developers, and explored new technologies like Nix, htmx, and Zig, improving his fuzz testing workflow with Nix. He remains enthusiastic about independent founding.

Read more
(mtlynch.io)
Startup

F-Droid Security Issues: Open Source Doesn't Guarantee Security

2025-01-20
F-Droid Security Issues: Open Source Doesn't Guarantee Security

This article delves into the security vulnerabilities of the popular Android open-source app store, F-Droid. F-Droid's unique signing mechanism introduces an additional trusted party, increasing security risks. Its strict inclusion policy leads to slow app updates and the use of outdated libraries. A low target API level and lack of good practices further exacerbate security concerns. The article also highlights F-Droid's misleading permission displays and confusing user experience, comparing it to Google Play Store. Ultimately, it advises users to use F-Droid cautiously, emphasizing that open source does not guarantee security.

Read more
(privsec.dev)
Tech Android security open-source software

Proton Raises Over $1 Million to Support a Better Internet

2025-01-14
Proton Raises Over $1 Million to Support a Better Internet

Proton's annual charity fundraiser, a raffle for Lifetime Accounts, raised over $1 million, a record-breaking amount, to support organizations fighting for privacy, freedom of expression, and human rights worldwide. This brings the total raised over seven years to over $4 million. The funds will go to 10 organizations chosen by the Proton community, in addition to those supported in previous years. Beyond financial contributions, Proton provides free services in regions with privacy threats, supports open-source projects, and actively combats online censorship. This success highlights the power of community action towards building a better digital future.

Read more
(proton.me)
Tech Charity Online Privacy

Playwright MCP: Headless Browser Automation for LLMs

2025-03-26
Playwright MCP: Headless Browser Automation for LLMs

The Playwright Model Context Protocol (MCP) server provides browser automation capabilities for LLMs using Playwright. It allows LLMs to interact with web pages through structured accessibility snapshots, eliminating the need for screenshots or visually-tuned models. It's fast, lightweight, and LLM-friendly, using Playwright's accessibility tree rather than pixel-based input. Features include web navigation, form filling, data extraction, and automated testing. Supports headless and headed modes. Installation is straightforward via VS Code CLI.

Read more
(github.com)
Development

Port of Coherent UNIX's `lc` Command

2025-01-10
Port of Coherent UNIX's `lc` Command

This GitHub project is a port of the `lc` command-line utility from Mark Williams Company's Coherent UNIX. `lc` lists files in categories and columns. This port adds support for symbolic links. It's a handy tool for managing and viewing files.

Read more
(github.com)
Development

GOG Joins Forces for Game Preservation: A European Collaboration

2025-01-15
GOG Joins Forces for Game Preservation: A European Collaboration

GOG, a leading European digital game distribution platform, has joined the European Federation of Game Archives, Museums, and Preservation Projects (EFGAMP), significantly expanding its game preservation efforts. GOG's Preservation Program, already boasting over 100 revitalized classic games, has been lauded by players and the industry alike. This partnership bridges the private sector with cultural organizations across Europe, uniting to safeguard gaming's rich history.

Read more
(gog.prowly.com)
Game

ChatGPT Sent Me to the ER: A Life-Saving AI Interaction

2025-02-25
ChatGPT Sent Me to the ER: A Life-Saving AI Interaction

The author experienced unsettling symptoms and, despite seeing a doctor, their condition worsened. Using ChatGPT to analyze their symptoms and lab results, the AI identified critically low platelet counts, urging immediate medical attention. Initially hesitant, the author followed ChatGPT's advice, going to the ER where tests revealed a platelet count of zero. Doctors credited ChatGPT with enabling timely intervention, potentially preventing a severe outcome. The article explores AI's role in healthcare, highlighting its potential as a bridge between patients and doctors, aiding in crucial medical decisions.

Read more
(hardmodefirst.xyz)
Tech AI in healthcare medical crisis

From Devil's Pact to Skeletal Remains: The Evolving Perceptions of Alcohol's Harm

2025-02-01

This article traces the evolution of perceptions surrounding alcohol's dangers in Western societies from the 17th to 19th centuries. Early views linked excessive drinking to supernatural consequences like pacts with the Devil and physical transformations. By the 18th century, the focus shifted to alcohol's physical damage, portraying it as a cause of premature aging, disease, and death, fueling temperance movements. However, the article also highlights a counter-narrative questioning the validity of these claims and the possibility of moderate alcohol consumption.

Read more
(theappendix.net)
Misc history of alcohol temperance movement social perceptions

Keeling Labs: Pioneering ML for Complex Energy Control

2025-01-17
Keeling Labs: Pioneering ML for Complex Energy Control

Keeling Labs is a mission-driven startup in Venice, Los Angeles, pioneering machine learning solutions for complex control problems in the energy sector. The team boasts experience from companies like Rivian, DeepMind, and boasts a collaborative in-person work environment emphasizing whiteboarding and brainstorming. If you're passionate about energy trading and machine learning and want to join a growing startup, Keeling Labs might be the perfect fit.

Read more
(www.keelinglabs.com)
Startup energy trading

Terraform Docker Provider: Handling Image Attribute Changes Gracefully

2025-03-27

When managing Docker containers with Terraform, the Docker provider transforms the `image` attribute into a SHA digest. This leads to subsequent Terraform refreshes incorrectly detecting image changes and forcing container rebuilds. Simply using `lifecycle { ignore_changes = [image] }` masks actual image changes, creating a potential risk. This article presents a solution: leverage a `null_resource` as a trigger. When the `image` attribute changes, the `null_resource` rebuilds, indirectly triggering a container rebuild, ensuring image updates while avoiding unnecessary container recreation.

Read more
(blog.mattsbit.co.uk)
Development

Indian Apps Secretly Accessing Your Installed Apps: A Privacy Nightmare

2025-03-29
Indian Apps Secretly Accessing Your Installed Apps: A Privacy Nightmare

A recent investigation reveals a shocking privacy breach by numerous popular Indian apps. Researchers discovered that apps like Swiggy and Zepto, among others, secretly access lists of other installed apps on users' phones via their AndroidManifest.xml files, far beyond what's needed for core functionality. This includes not only payment apps and competitors but also seemingly unrelated apps like games and calendars. Even more alarming, many apps exploit an Android system loophole, using the `ACTION_MAIN` filter to access all apps without requiring special permissions. This severely compromises user privacy, enabling user profiling for targeted advertising and potentially price discrimination. The investigation also uncovered loan apps circumventing Play Store policies by listing hundreds or even thousands of app package names. This highlights a serious flaw in Android's package visibility policy and raises concerns about data security.

Read more
(peabee.substack.com)
Tech Android apps

78% of Hardware Companies Lack Security.txt

2025-03-03

A developer maintaining a public list of companies using libexpat in hardware found that 78% (39 out of 50) of the companies tested in 2025 did not serve a /.well-known/security.txt file as specified by RFC 9116. This reveals a concerning lack of proactive security posture in many companies, making it difficult to contact their security teams. The author urges affected companies to fix this issue and share a link to securitytxt.org.

Read more
(blog.hartwork.org)
Hardware security.txt

Will AI Deliver a 'Compressed 21st Century'? One Researcher's Doubts

2025-03-10

The author challenges the notion that AI will soon bring about a rapid surge in scientific breakthroughs. Drawing on personal experience and examples of historical scientific geniuses, they argue that true scientific progress stems not from mastering existing knowledge, but from challenging established beliefs and posing disruptive questions. Current AI models excel at 'filling in the blanks' rather than generating original ideas. The author suggests that new evaluation metrics are needed to measure AI's ability to pose challenging questions and drive paradigm shifts, rather than simply focusing on its accuracy in answering known questions.

Read more
(thomwolf.io)
AI Scientific Breakthrough Paradigm Shift

83% Latency Reduction with Obscure Linux Process Flags

2025-03-06
83% Latency Reduction with Obscure Linux Process Flags

An engineer optimizing Recall.ai's Output Media encountered a perplexing issue: random Chromium process termination within a sandboxed environment. Deep debugging revealed the root cause: Linux kernel's prctl(PR_SET_PDEATHSIG, SIGKILL), which tracks parent threads, not processes. Tokio's thread management interacted unexpectedly, causing parent thread reaping and triggering SIGKILL, terminating the child process. Removing Bubblewrap's --die-with-parent flag resolved the issue, resulting in an 83% latency reduction.

Read more
(www.recall.ai)
Development process latency optimization

Minimalist Agentic Coder in 200 Lines of TypeScript

2025-03-25

A minimalist agentic coder, mycoder-mini, built using Anthropic's Claude 3 LLM, is implemented in just 200 lines of TypeScript. It receives user prompts, generates shell commands via Claude 3, executes them, and iterates until the task is finished. While limited by synchronous execution, lack of browser integration, and a restricted toolset, mycoder-mini clearly demonstrates the core principles of agentic coding, providing a great starting point for learning and exploring more sophisticated systems.

Read more
(benhouston3d.com)
Development Agentic Coding

Another Baltic Sea Undersea Cable Severed; Latvia Deploys Warship

2025-01-26
Another Baltic Sea Undersea Cable Severed; Latvia Deploys Warship

Another undersea data cable, this time connecting Sweden and Latvia, has been cut in the Baltic Sea, prompting Latvia to dispatch a warship. Officials from both countries suspect external factors caused the damage. The incident follows a series of similar events in recent months, raising concerns about potential sabotage and increasing geopolitical tensions in the region. A suspect vessel has been identified, headed towards Russia. The damage disrupts data transmission, but alternative routes have been established, minimizing impact on end-users.

Read more
(www.france24.com)
Tech

Agrivoltaics: A Win-Win Strategy Against Climate Change

2025-03-03
Agrivoltaics: A Win-Win Strategy Against Climate Change

A new study reveals that combining solar power generation with agriculture significantly boosts crop yields, conserves water, and generates low-carbon electricity for climate-vulnerable regions. This method, known as agrivoltaics, creates a microclimate by shading crops with solar panels, enabling plants like beans and maize to thrive with less irrigation. Agrivoltaics also provides clean energy for rural communities, addressing food insecurity, water scarcity, and energy poverty. The research found that partial shade reduces water evaporation, improving water use efficiency, and allows for rainwater harvesting to supplement irrigation.

Read more
(www.sheffield.ac.uk)
Tech

Silent Builders: Real Stories from Federal Employees

2025-02-21

This blog post shares real stories from federal employees who work tirelessly behind the scenes, simplifying tax filing, veterans' benefits, and financial aid applications. They aided refugees, vaccine distribution, and baby formula access during crises. They strive to improve government websites while protecting personal information. However, they're largely ignored while facing the threat of government technology dismantling. The blog highlights their contributions and warns of the dangerous consequences of undermining government technology.

Read more
(www.wethebuilders.org)
Misc government employees public service technological disruption

PubPeer Review: TRF2-S Protein Regulates Axonal mRNA Transport

2025-01-16

A PubPeer post discusses a research article on TRF2-S, a novel RNA- and FMRP-binding protein crucial for regulating axonal mRNA transport and presynaptic plasticity. Published in Nature Communications, the study reveals how TRF2-S influences neuronal growth and function by impacting mRNA trafficking and local translation. This research sheds light on neural mechanisms and potentially offers new avenues for neurological disease treatment.

Read more
(pubpeer.com)
Tech Neuroscience RNA-binding protein Axonal transport

EU-US Data Deal: Built on Shifting Sands?

2025-02-06
EU-US Data Deal: Built on Shifting Sands?

The EU-US Data Privacy Framework (TADPF) faces criticism for relying on potentially revocable US executive orders. The European Court of Justice previously ruled US law incompatible with EU data protection standards. Despite this, the EU Commission approved TADPF, allowing EU businesses to freely transfer data to US providers. However, a new US administration could overturn the executive orders underpinning TADPF, leaving many EU businesses in legal limbo. Experts warn EU companies should develop contingency plans to address the potential legal risks.

Read more
(noyb.eu)
Tech cross-border data transfer US-EU relations

Proton VPN: The Digital Resistance Against Censorship

2025-01-27
Proton VPN: The Digital Resistance Against Censorship

In the face of escalating internet censorship, Proton VPN has become a crucial tool for millions seeking freedom of information under authoritarian regimes. This article details Proton VPN's battle against internet firewalls in Russia, Venezuela, and China, and how they navigate government crackdowns and blockades. Proton CEO Andy Yen points out that Big Tech companies contribute to autocratic control of the internet by removing VPN services from app stores. With its technological prowess and unwavering commitment to internet freedom, Proton VPN stands as a vanguard in the defense of online liberty, engaged in a continuous 'arms race' against censorship.

Read more
(www.compiler.news)
Tech Internet Censorship Digital Freedom
1 2 … 554 555 556 558 560 561 562 … 596 597