Popular：
Virtualization DNS security formal verification reachability analysis compiler errors macro conflict web extension development framework Bitmap Graphics API inconsistencies All Tags

Subaru Starlink Flaw Lets Hackers Unlock Cars, Track Location

2025-01-28
Subaru Starlink Flaw Lets Hackers Unlock Cars, Track Location

Security researchers discovered a critical vulnerability in Subaru's Starlink connected services, allowing hackers to access location data, remotely unlock doors, and more. By compromising Subaru employee accounts and exploiting an admin panel, attackers gained access to vehicle information. While the vulnerability has been patched, it highlights the serious security risks associated with connected cars.

Read more
(jalopnik.com)
Tech Subaru

Infinity's Size: Mathematicians Get Closer to Answering How Many Real Numbers Exist

2025-01-09
Infinity's Size: Mathematicians Get Closer to Answering How Many Real Numbers Exist

For decades, mathematicians believed determining the total number of real numbers was an unsolvable problem. A new proof suggests otherwise. The article details how mathematicians Asperó and Schindler proved that two axioms previously considered competing foundations for infinite mathematics actually imply each other. This finding strengthens the case against the continuum hypothesis and indicates an extra size of infinity exists between the two that, 143 years ago, were hypothesized to be the first and second infinitely large numbers. While this result has generated excitement and debate within the mathematical community, the arguments surrounding the sizes of infinite sets are far from settled.

Read more
(www.quantamagazine.org)
Math continuum hypothesis infinity

Building Your Own Userspace TCP/IP Stack: From Ethernet Frames to ARP

2025-03-04
Building Your Own Userspace TCP/IP Stack: From Ethernet Frames to ARP

This blog post, the first in a series, details building a minimal TCP/IP stack in Linux userspace. The goal is hands-on learning of network and system programming. It covers using TUN/TAP devices for intercepting network traffic, a deep dive into Ethernet frame format and parsing (MAC addresses, ethertype, CRC), and a thorough explanation of the Address Resolution Protocol (ARP), including packet format and the resolution algorithm. The post culminates in verifying the custom stack's ARP reply functionality using arping.

Read more
(www.saminiir.com)
Development

Full-Text Search Engine in 150 Lines of Python

2025-01-24

This article demonstrates building a functional full-text search engine using less than 150 lines of Python code. It starts by downloading English Wikipedia abstracts, then uses an inverted index and TF-IDF (Term Frequency-Inverse Document Frequency) for indexing and ranking. The process covers data preparation, tokenization, filtering, index construction, and search functionality, explaining each step's principles. The result is a surprisingly fast search engine capable of searching and ranking millions of documents, showcasing the core mechanics of full-text search in a concise manner.

Read more
(bart.degoe.de)
Development

2024 Good Tech Awards: AI's Ascent and the Unsung Heroes of Open Source

2025-01-06
2024 Good Tech Awards: AI's Ascent and the Unsung Heroes of Open Source

2024 saw breakneck AI advancements, but also regulatory battles and political turmoil in the tech world. This year's Good Tech Awards celebrate achievements in AI: Epoch AI for providing reliable AI data; open-source maintainers for safeguarding our digital infrastructure; and organizations like the Arc Institute, Lichtman Lab, and SyntheMol for leveraging AI in healthcare and scientific research. The awards also recognize NASA's Voyager 1 support, Bluesky's innovative social network, and useful AI applications like NotebookLM and Coloring Book Hero, highlighting technology's positive impact.

Read more
(www.thestar.com.my)
Tech Tech Awards

DataTables.net Suffers Major Outage Due to Domain Hijacking

2025-09-17

The DataTables.net website experienced a significant outage due to a domain hijacking attack. The attacker, using a sophisticated phishing campaign and forged identification documents, successfully transferred the domain. While the server and code remained untouched, the disruption to the CDN severely impacted users. The author has since restored services and encourages users to adopt security measures like Subresource Integrity (SRI).

Read more
(datatables.net)
Development domain hijacking

Musk-Linked Engineer Gains Full Control Over US Payment Systems: Treasury Officials in Panic

2025-02-04
Musk-Linked Engineer Gains Full Control Over US Payment Systems: Treasury Officials in Panic

A 25-year-old engineer with ties to Elon Musk has been granted full read-and-write access to the US Treasury Department's payment systems, sparking alarm among insiders. This access encompasses nearly all government payments, including Social Security and tax refunds, raising concerns about potential for irreversible changes or security breaches. Sources express worry about data leaks to Musk allies within the General Services Administration (GSA) and a lack of reporting channels. The incident highlights critical vulnerabilities in government IT systems and potential threats to crucial infrastructure.

Read more
(www.rawstory.com)
Tech Government IT

VPTERNLOG: The Surprising Efficiency of Ternary Operators

2025-01-22

Paul Khuong's blog post explores VPTERNLOG, a novel instruction using ternary operators for bitvector reduction. Compared to binary operators, ternary operators reduce two values at a time, doubling efficiency. This means half the operations are needed when processing bitvectors, without sacrificing throughput or latency. The author praises VPTERNLOG as a cute, lightweight, and highly efficient instruction.

Read more
(pvk.ca)
Development ternary operator bitvector instruction optimization

Network States: Utopian Fantasy or Dystopian Nightmare?

2025-02-05
Network States: Utopian Fantasy or Dystopian Nightmare?

Balaji Srinivasan's new book, *The Network State*, envisions a new social contract powered by Web3 technology, proposing the creation of 'startup countries' via blockchain. These 'network states' would consist of highly aligned online communities crowdfunding territory globally, eventually gaining diplomatic recognition. Critics argue this model resembles an archipelago of 'privatopias', exacerbating inequality and suppressing democratic participation with its simplistic 'one-commandment' governance. Instead of fragmented network states, leveraging network technology to build a more inclusive and participatory network society to solve real-world problems is proposed as a more viable solution.

Read more
(www.cip.org)
Tech Network Governance

Authors Guild Launches 'Human Authored' Certification to Combat AI-Generated Books

2025-01-31
Authors Guild Launches 'Human Authored' Certification to Combat AI-Generated Books

In response to the surge of AI-generated books on platforms like Amazon, the Authors Guild has launched a 'Human Authored' certification. This initiative aims to provide readers with clarity on authorship, distinguishing human-written books from AI-generated content. Currently limited to Guild members and single-author books, the certification will expand to include non-members and multiple authors in the future. While minor AI assistance like grammar checks is permissible, the certification emphasizes that the core literary expression must be of human origin. The Guild frames this not as anti-technology, but as a push for transparency and the recognition of the unique human element in storytelling.

Read more
(www.theverge.com)
AI

Resurrecting a Vintage JavaStation: A NetBSD Network Boot Adventure

2025-03-05
Resurrecting a Vintage JavaStation: A NetBSD Network Boot Adventure

Driven by nostalgia for childhood dreams, the author acquired a vintage JavaStation network computer. After a long wait and some initial setbacks, the author discovered the problem was a dead NVRAM battery and a lack of patience. Through serial port debugging and clever network configuration (RARP, TFTP, DHCP, NFS), the author successfully booted NetBSD on the JavaStation, completing a thrilling retro tech resurrection.

Read more
(fatsquirrel.org)
Hardware network boot

Cloudflare Prevents DNS Conflicts with Formal Verification

2025-01-07
Cloudflare Prevents DNS Conflicts with Formal Verification

Cloudflare uses Topaz, a system that formally verifies the correctness of its internal DNS addressing behavior. Topaz encodes DNS business objectives as declarative programs, each with a match function, a response function, and a configuration. Before deployment, a custom model checker verifies these programs for conflicts and bugs, ensuring reliable and consistent DNS configuration. This improves internet reliability by preventing inconsistencies in IP address resolution.

Read more
(blog.cloudflare.com)
Tech Formal Verification

GLP-1s: The Insurance Industry's Mirage of Health

2025-07-14
GLP-1s: The Insurance Industry's Mirage of Health

The widespread adoption of GLP-1 weight-loss drugs presents a significant challenge to the insurance industry. Because GLP-1s dramatically improve health metrics correlated with mortality risk, insurers are facing 'mortality slippage,' misclassifying users as low-risk. This leads to potentially massive payouts. Insurers are reacting by refining assessment methods and seeking partnerships with pharmaceutical companies. However, the author argues that a simple fix – extending medication refill cycles (e.g., from 30 to 90 days) – could significantly improve patient adherence, mitigating risk for insurers and creating a massive opportunity for companies focusing on patient retention. The first movers in this space will capture a significant market share.

Read more
(www.glp1digest.com)
Tech

Hilbert Curve: A Beautiful Space-Filling Curve and its Visualization

2025-01-18

This article delves into the Hilbert curve, a space-filling curve with excellent clustering properties. The author creatively visualizes it by projecting a 3D RGB color space Hilbert curve onto a 2D plane. The visualization is aesthetically pleasing and intuitively demonstrates the clustering characteristics of the Hilbert curve. The article also explains the algorithm implementation of the Hilbert curve and provides a Python project for generating and visualizing various space-filling curves.

Read more
(corte.si)
Development Hilbert curve space-filling curve

The Undocumented 68030 Instruction That Saved the Mac Classic II

2025-01-25

While debugging a Macintosh Classic II in MAME, the author discovered a bus error causing a 'Sad Mac' in 32-bit addressing mode. Reverse engineering revealed an out-of-bounds jump in the ROM, leading the CPU to execute an undocumented 68030 instruction. Surprisingly, this instruction corrected the value of register A1, preventing a crash and allowing the Classic II to boot successfully. The author validated this by repairing a vintage Classic II and modifying its ROM. This case highlights the power of emulators in uncovering hardware quirks and showcases how a software bug was inadvertently fixed by hardware.

Read more
(www.downtowndougbrown.com)
Hardware

DoubleClickjacking: Bypassing All Clickjacking Protections

2025-01-17
DoubleClickjacking: Bypassing All Clickjacking Protections

DoubleClickjacking is a novel attack exploiting the timing of double-click events to bypass all known clickjacking protections, including X-Frame-Options, CSP's frame-ancestors, and SameSite cookies. Attackers trick users into double-clicking a seemingly benign button, rapidly switching windows in milliseconds to hijack actions like authorizing malicious apps or changing account settings. It leverages the subtle timing difference between `mousedown` and `onclick` events, making it effective regardless of double-click speed. While some sites mitigate this by disabling buttons until user interaction (mouse movement or keyboard input) is detected, this requires client-side protection. Long-term solutions require new browser standards to defend against this.

Read more
(www.paulosyibelo.com)
Tech clickjacking doubleclickjacking

A Life-Changing Lecture: Frameworks for History, Engineering, and Life

2025-09-06
A Life-Changing Lecture: Frameworks for History, Engineering, and Life

The author attended a lecture on the Cold War where the professor's analytical framework—thesis, counter-argument, rebuttal—proved insightful. Applying this framework to software engineering and personal life, the author seeks optimal states through research and experimentation. The article explores building sustainable systems and improving well-being through lifestyle adjustments and reflection, highlighting continuous learning and self-assessment.

Read more
(www.valstech.blog)
Misc learning frameworks

60% Faster Substring Search in Zig using SIMD

2025-08-11
60% Faster Substring Search in Zig using SIMD

This article details how the author achieved a ~60% speedup in substring search within the Zig programming language using SIMD instructions. A SIMD-friendly algorithm was implemented, extracting the first and last characters of the target substring and leveraging SIMD parallel comparisons to significantly reduce memory accesses. Benchmarks show an 80% reduction in CPU cycles and substantial speed improvements, especially with large texts. While gains are less significant with smaller texts, the potential of SIMD is clearly demonstrated. The article also explores performance variations with different character selections and SIMD instruction sets (AVX2, AVX-512), and discusses why this optimization wasn't integrated into Zig's standard library.

Read more
(aarol.dev)
Development Substring Search

APL Challenge: Win $100!

2025-02-05
APL Challenge: Win $100!

The Dyalog Ltd APL Challenge is on! Four rounds a year, each with ten problems running for three months. Win one of three $100 prizes! No prior programming experience needed; the problems teach you APL as you go. Even if you just want to learn about APL, register to stay updated on future rounds. Start your coding journey and compete for a chance to win!

Read more
(challenge.dyalog.com)
Development prize money

Beyond print debugging: 7 superpowers of debuggers

2025-09-10
Beyond print debugging: 7 superpowers of debuggers

Tired of endless print statements for debugging? This article unveils seven hidden advantages of debuggers: inspecting the entire call stack, dynamically evaluating expressions (like a REPL), precisely catching exceptions, altering execution flow without code changes, standardizing project setup, simplifying collaboration, and providing a smoother onboarding experience for new contributors. Debuggers are not just code tracing tools; they're powerful weapons for boosting development efficiency and code quality, leading you from tedious print debugging to efficient development.

Read more
(mahesh-hegde.github.io)
Development

App-Enabled Price Fixing: How Big Tech Masks Monopoly Power

2025-01-26

Big Tech uses apps to mask price-fixing schemes, exacerbating inflation. The article exposes how food industry giants manipulate prices through data brokers and tacit collusion, citing examples in eggs, frozen potatoes, and meat. These companies leverage information asymmetry and technology to squeeze out smaller businesses and reap exorbitant profits. This isn't limited to food; similar issues plague real estate and fire equipment sectors, prompting discussions on antitrust laws and regulatory action.

Read more
(pluralistic.net)
Tech inflation price fixing

Mermaid Chart Visual Editor Update: Effortless Class Diagram Editing

2025-01-17
Mermaid Chart Visual Editor Update: Effortless Class Diagram Editing

Mermaid Chart recently updated its visual editor to make creating and editing class diagrams significantly easier. New features include changing rendering direction, adding classes and relationships, adding titles and notes, updating diagram configuration, and changing themes and layouts. Users can now easily create and update class diagrams via drag-and-drop, eliminating the need for manual Mermaid syntax. The visual editor also provides a powerful dialog interface for modifying class properties, such as adding attributes and methods, setting visibility modifiers and data types. These improvements make creating and maintaining complex class diagrams more efficient and accessible, especially for team members less familiar with Mermaid's syntax.

Read more
(docs.mermaidchart.com)
Development Class Diagram Visual Editor

Calculator Forensics: Uncovering Chip Design Secrets

2025-01-19

This article introduces 'calculator forensics,' a technique that analyzes the results of embedded algorithms in calculators to identify the origins and evolution of different calculator chip designs. The author devised a standardized algorithm and compiled results from numerous calculators, creating comparison tables to trace the design history and technological lineage of calculator chips. This technique is significant for studying calculator history and chip design, particularly useful when official documentation is scarce, enabling researchers to understand the relationships between different calculators.

Read more
(www.rskey.org)
Hardware chip design

JReleaser: Effortless Project Releases

2025-01-21

JReleaser simplifies the project release process, supporting numerous languages like Java, Go, and Node.js. It effortlessly creates packages for various platforms (Homebrew, Snapcraft, etc.), publishes them to services like GitHub and GitLab, and even auto-generates changelogs and announces releases on Twitter. Whether you use CLI, Maven, Gradle, or Ant, JReleaser streamlines your workflow, letting you focus on development.

Read more
(jreleaser.org)
Development project release automation tool multi-language support

The Myth of High IQ: Just How Smart Was Einstein?

2025-02-23
The Myth of High IQ: Just How Smart Was Einstein?

This article challenges the common fantasy of assigning high IQ scores to historical figures, particularly Einstein's supposed IQ of 160. By analyzing Einstein's academic record and the limitations of modern IQ tests, the author argues that extremely high IQ scores (e.g., above 160) are unreliable. High-range IQ tests suffer from significant measurement error, and the correlation between such scores and real-world achievements is weak. The author critiques flawed studies, such as Anne Roe's estimations of Nobel laureates' IQs. The conclusion is that the obsession with stratospheric IQ scores is unfounded; true genius lies in creativity, deep thinking, and drive, not a single number.

Read more
(www.theseedsofscience.pub)
AI Einstein Scientific Research

AI Agent Learns to Use Computers Like a Human

2025-02-06
AI Agent Learns to Use Computers Like a Human

The r1-computer-use project aims to train an AI agent to interact with a computer like a human, encompassing file systems, web browsers, and command lines. Inspired by DeepSeek-R1's reinforcement learning techniques, it eschews traditional hard-coded verifiers in favor of a neural reward model to evaluate the correctness and helpfulness of the agent's actions. The training pipeline involves multiple stages, from expert demonstrations to reward-model-guided policy optimization and fine-tuning, ultimately aiming for a safe and reliable AI agent capable of complex tasks.

Read more
(github.com)
AI Computer Interaction

GitHub Repo Visualization Tool: GitDiagram

2024-12-27
GitHub Repo Visualization Tool: GitDiagram

GitDiagram is a powerful tool that transforms any GitHub repository into an interactive diagram for quick and intuitive project visualization. Simply replace 'hub' with 'diagram' in any GitHub URL to generate the diagram. It supports popular frameworks like FastAPI, Streamlit, and Flask, making it easy for developers to use.

Read more
(gitdiagram.com)
Development

Databricks in Talks to Acquire Open-Source Database Startup Neon for $1B+

2025-05-05
Databricks in Talks to Acquire Open-Source Database Startup Neon for $1B+

Data and AI unicorn Databricks is in advanced talks to acquire Neon, a maker of an open-source database engine, for approximately $1 billion, according to four sources familiar with the matter. While some believe the deal is done, sources say negotiations are ongoing and could still fall apart. The final price could exceed $1 billion when employee retention packages are included. Neon and its CEO declined to comment, and Databricks did not respond to a request for comment.

Read more
(www.upstartsmedia.com)
Tech Database Acquisition

2.87 Billion Twitter Users' Data Leaked: Largest Social Media Breach Ever?

2025-03-29
2.87 Billion Twitter Users' Data Leaked: Largest Social Media Breach Ever?

A massive data leak affecting a staggering 2.87 billion Twitter (now X) users has been reported on the Breach Forums. The leak allegedly stems from a disgruntled former employee who stole the data during recent layoffs. While this would be the largest social media data breach in history, X hasn't publicly acknowledged the incident. The leaked data includes user IDs, usernames, profile information, and follower counts, but notably, not email addresses. The source of the leak and the identity of the leaker remain unknown, raising significant concerns about user privacy and data security.

Read more
(hackread.com)
Tech
1 2 … 574 575 576 578 580 581 582 … 596 597