Let's Encrypt's New Root and Intermediate Certificates

On Thursday, September 3rd, 2020, Let’s Encrypt issued six new certificates: one root, four intermediates, and one cross-sign. These new certificates are part of our larger plan to improve privacy on the web, by making ECDSA end-entity certificates widely…

TenFourFox FPR27b1 available (now with sticky Reader View)

TenFourFox Feature Parity Release 27 beta 1 is now available (downloads, hashes, release notes). The big user-facing update for FPR27 is a first pass at "sticky" Reader View. I've been paying attention more to improving TenFourFox's implementation of…

What’s new in CryptoKit

What’s new in CryptoKit

People expect apps to be secure and their data to be protected. You may need to perform cryptographic operations to implement features such as authentication, message encryption, or to meet regulatory requirements. CryptoKit is a Swift framework that makes…

Checking Data Consistency for RDS for MySQL

Checking Data Consistency for RDS for MySQL

MySQL for RDS and DBaaS, in general, are very controlled environments by the vendors, meaning that there are missing things like a SUPER grant for the root user (and any user in general). This has some implications on operations, one of them being the…

Which GPUs to get for deep learning

Which GPUs to get for deep learning

Deep learning is a field with intense computational requirements, and your choice of GPU will fundamentally determine your deep learning experience. But what features are important if you want to buy a new GPU? GPU RAM, cores, tensor cores? How to make a…

Artificial Intelligence Can Create Sound Tracks for Silent Videos

Artificial Intelligence Can Create Sound Tracks for Silent Videos

Researchers Ghose and Prevost created a deep learning algorithm which, given a silent video, can generate a realistic sounding synchronised soundtrack. They trained the neural network to classify the class of the sound to generate, and they also trained a…

Attackers Found Building Malicious Container Images Directly on Host

Attackers Found Building Malicious Container Images Directly on Host

Aqua’s cyber security research team, ‘Nautilus’ has found a new attack technique targeting misconfigured Docker Daemon API ports to build an image directly on the target host container infrastructure, in order to mine cryptocurrency. Further investigation…

Product Owner Is a Bad Bad Idea

Product Owner Is a Bad Bad Idea

The question of whether the Product Owner role is good or not clearly depends on a lot of factors including team maturity, organisational maturity, organisational type, organisational complexity, and the Product Owner themselves. Some thought leaders are…

Nine iPhone secrets you may not know about

Nine iPhone secrets you may not know about

The iPhone represents technical complexity and usage simplicity combination that just makes it stand apart from the rest. It’s loaded with advanced features that fill most of the needs a phone user will have.

Preserving data integrity: A ZFS-inspired storage system

Preserving data integrity: A ZFS-inspired storage system

When we are storing data, we typically assume that our storage system of choice returns that data later just as we put it in. However what guarantees do we have that this is actually the case? The case made here is the case of bitrot, the silent…

Software defined storage vs. hardware defined storage

Everybody claims to be a software company these days. From the nearly decade old pronouncement by Marc Andressen that “Software Is Eating the World” to the push from Wall Street to produce recurring software revenue; the pressure is on to claim - at least …

Presentation: Lessons from DAZN: Scaling Your Project with Micro-frontends

Presentation: Lessons from DAZN: Scaling Your Project with Micro-frontends

Luca Mezzalira explains how to implement micro-front-ends, enabling to scale up a project with tens of developers without reducing the throughput. Micro-front-ends are a new architectural trend in the development of front-end applications. This style can…

Article: How to Build a Strong Beta Testers Community

Article: How to Build a Strong Beta Testers Community

It is important to involve the real users at the early stages of your development cycle. A strong beta testers community not only improves your product, but also provides context, pain points and ideas while increasing loyalty and engagement. This article…

curl help remodeled

curl 4.8 was released in 1998 and contained 46 command line options. curl --help would list them all. A decent set of options. When we released curl 7.72.0 a few weeks ago, it contained 232 options… and curl --help still listed all available options. What…

A word for a value between 0 and 1 (inclusive)

A word for a value between 0 and 1 (inclusive)

I'm a programmer. I'm so sick of writing documentation for things that should be explainable in a word. When you write a function in a programming language, you get to name its parameters. Most things I can name easy enough, such as "Name" or "URL" or…

Norbert Preining: Multiple GPUs for graphics and deep learning

Norbert Preining: Multiple GPUs for graphics and deep learning

For long time I have been using a good old nvidia GeForce GTX 1050 for my display and deep learning needs. I reported a few times how to get Tensorflow running on Debian/Sid, see here and here. Later on I switched to AMD GPU in the hope that an open source…

Kubernetes: Make your services faster by removing CPU limits

At Buffer, we’ve been using Kubernetes since 2016. We’ve been managing our k8s (kubernetes) cluster with kops, it has about 60 nodes (on AWS), and runs about 1500 containers. Our transition to a micro-service architecture has been full of trial and…

Show HN: asroute - view unique networks traversed by traceroute

Show HN: asroute - view unique networks traversed by traceroute

asroute is a CLI tool for parsing traceroute output to summarize AS's traversed. Ever wondered how your packets get from home to Bhutan? I sometimes like to see it, not at the hop level, but the companies and their networks that carry my data. Or how much…

In Defense of a Switch

Recently I came across a blog post whose author claims, from the perspective of good coding practices, polymorphism is strictly superior to branching. In the post they make general statements about how branching statements lead to unreadable,…

Show HN: DNS-based alternative to the web for structured data

The Namespace Utility Modules (NUM) protocol can be used to store structured data for any domain name or email address. NUM records can be stored in the DNS of the independent NUM zone (e.g. _num.example.com) or in the hosted NUM zone (a DNS-based store of…

Open Service Mesh: a Service Mesh Implementation from Microsoft

Open Service Mesh: a Service Mesh Implementation from Microsoft

Microsoft has released open service mesh (OSM), an alpha service mesh implementation compliant with the SMI specification. OSM covers standard features of a service mesh like canary releases, secure communication, and application insights, similar to other…

The problem with C

The problem with C

In the early 70s, C was created at Bell Labs as a byproduct of the development of UNIX. It quickly became one of the most popular programming languages. But it was not expressive enough for Bjarne Stroustrup. And so, in 1983, as a byproduct of his Ph. D.…

App Review process updates

The App Store is dedicated to providing a great experience for everyone. To continue offering a safe place for users to download apps and helping you successfully develop apps that are secure, high-quality, reliable, and respectful of user privacy, we’ve…

Boost Your Productivity with Split View Mode for macOS (Video)

Boost Your Productivity with Split View Mode for macOS (Video)

If you often find yourself flipping between two app windows on a Mac, you’ll know that it can be really frustrating. Since Mac OS X El Capitan in 2015, Mac users have had the ability to run apps in what’s called Split View. It’s easy to set up and use. In…

CenturyLink Outage Led To a 3.5% Drop in Global Web Traffic

Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading! Slashdot Apparel is back! SHOP NOW!. | Do you develop on GitHub? You can keep using GitHub but automatically sync your GitHub releases to SourceForge quickly and…

LXD 4.5 released

The LXD team has announced the release of LXD 4.5. LXD is a container and VM manager focused on running full Linux distributions. Highlights include virtual networks through OVN, bpf system call interception, a new way to allocate PTS devices, improved…

Deep Dive into PHP 8's JIT

PHP has a Just In Time compiler (JIT) since its most recent major version, PHP 8. Here's a demo of JIT's impact on PHP. The video was recorded by Zeev, a core developer of the php engine, to demonstrate the performance difference between php 7.0 and JIT…

Cloudflare’s 27 Minutes Outage Explained

Cloudflare’s 27 Minutes Outage Explained

Cloudflare recently suffered a partial outage, which lasted for 27 minutes. This outage caused 50% of traffic drop across the network. By Aditya Kulkarni

ProxySQL Overhead — Explained and Measured

ProxySQL Overhead — Explained and Measured

ProxySQL brings a lot of value to your MySQL infrastructures such as Caching or Connection Multiplexing but it does not come free — your database needs to go through additional processing traffic which adds some overhead. In this blog post, we’re going to…

Enabling better curl bindings

I think it is fair to say that libcurl is a library that is very widely spread, widely used and powers a sizable share of Internet transfers. It’s age, it’s availability, it’s stability and its API contribute to it having gotten to this position. libcurl…

Zoom is now critical infrastructure – that’s a concern

Zoom is now critical infrastructure – that’s a concern

It’s a cybersecurity vulnerability that would have been unimaginable as recently as last year: A single California-based company, Zoom, is now the foundation for education access from elementary school up through graduate school. It has also become a…

Set the default branch for newly-created repositories

Set the default branch for newly-created repositories

You can now set the default branch name for newly-created repositories under your username. This setting does not impact any of your existing repositories. Existing repositories will continue to have the same default branch they have now. Organization and…

Apple showing signs it may soon launch a search engine

Apple showing signs it may soon launch a search engine

For several years, it’s been reported that Google pays billions of dollars to Apple to remain the default search engine on Safari for iOS, iPadOS, and macOS. The deal ensures that iPhone, iPad, and Mac users search with Google when they use Safari. That is…

Constant Time LFU

Constant Time LFU

A common strategy to make any system super-performant is Caching. Almost all software products, operating at scale, have multiple layers of caches in their architectures. Caching, when done right, does wonder to the response time and is one of the main…

Show HN: ztext.js – JavaScript library that makes any font 3D

Show HN: ztext.js – JavaScript library that makes any font 3D

There are two ways to use ztext. Pick whichever method is easier for you. There are two ways to use ztext. Pick whichever method is easier for you. Ztext gives the illusion of volume by creating layers from an HTML element. There's no need to spend hours…

High bitrate video streaming with GStreamer RTP

High bitrate video streaming with GStreamer RTP

RTP is the dominant protocol for low latency audio and video transport. It sits at the core of many systems used in a wide array of industries, from WebRTC, to SIP (IP telephony), and from RTSP (security cameras) to RIST and SMPTE ST 2022 (broadcast TV…

What happens when you load a URL? (2015)

I've been hearing this question a lot lately, and when I do, it reminds me how much I don't know. Here are some questions this question brings to mind. How does a keyboard work? Why can’t you press an arbitrary combination of three keys at once, except on…

Building a Home Lab Beginners Guide

Building a Home Lab Beginners Guide

Until recently, and for well over the past decade, my wife and I have been nomads. Moving from the Caribbean to Miami, New York, Las Vegas, Vancouver, and now back home. This has meant that for many of those years, my home office basically comprised of a…

Airbnb Releases Tool to Convert Large Codebases to Typescript

Airbnb Releases Tool to Convert Large Codebases to Typescript

The Airbnb engineering team recently released ts-migrate, a tool to help migrate JavaScript code to TypeScript. While the resulting TypeScript code will compile, manual revision of a few annotations (e.g. any) will still be necessary. An automated process…

TypeScript 4.0 Adds Long-Awaited Variadic Tuple Types

TypeScript 4.0 Adds Long-Awaited Variadic Tuple Types

The TypeScript team announced the release of TypeScript 4.0, which includes long-awaited variadic tuple type support and other improvements without introducing any major breaking changes. By Dylan Schiemann

Paragon submits 27k-line NTFS driver to Linux kernel

Paragon submits 27k-line NTFS driver to Linux kernel

Paragon Software is trying to get its NTFS driver into the Linux kernel, but has submitted it as a single dump of 27,000 lines of code, sparking complaints that it is too large to review. NTFS is the default file system for Windows XP and later. Microsoft…

PHP 8.0.0beta2 Released!

The PHP team is pleased to announce the fifth testing release of PHP 8.0.0, Beta 2. This continues the PHP 8.0 release cycle, the rough outline of which is specified in the PHP Wiki. For source downloads of PHP 8.0.0 Beta 2 please visit…

Why we decided against GraphQL for local state management

Why we decided against GraphQL for local state management

Here at OkCupid, we're pretty big fans of using GraphQL. When it comes to fetching data on any of our client platforms, the abstraction that the query language provides grants the flexibility for us to fetch precisely the data that we need in each…

How Shopify reduced storefront response times with a rewrite

How Shopify reduced storefront response times with a rewrite

In January 2019, we set out to rewrite the critical software that powers all online storefronts on Shopify’s platform to offer the fastest online shopping experience possible, entirely from scratch and without downtime. The Storefront Renderer is a server…

Twitter Launches New Developer API

Twitter Launches New Developer API

Twitter recently released the new Twitter API (early access) to be used by third-party developers. The new Twitter API features three new product tracks: standard, academic research, and business. The new API offers conversation threading, poll results in…

Breaking the D-Link DIR3060 Firmware Encryption – Recon – Part 1

Breaking the D-Link DIR3060 Firmware Encryption – Recon – Part 1

Recently we came across some firmware samples from D-Link routers that we were unable to unpack properly. Luckily we got our hands on an older, cheaper but similar device (DIR882) that we were able to analyze more closely. The goal is to find a way to…

How to contact Google SRE by dropping a shell in Cloud SQL

How to contact Google SRE by dropping a shell in Cloud SQL

Note: The vulnerabilities that are discussed in this post were patched quickly and properly by Google. We support responsible disclosure. The research that resulted in this post was done by me and my bughunting friend Ezequiel Pereira. You can read this…

Zoom on Web: WebAssembly SIMD, WebTransport, and WebCodecs

Zoom on Web: WebAssembly SIMD, WebTransport, and WebCodecs

At the recent web.dev live event, Google V8 product manager Thomas Nattestad explained some of the proposed additions to the web to support Zoom and other video conferencing features within the web browser. By Dylan Schiemann

The API wars – 16 years later

It is more than 16 years since Joel Spolsky wrote How Microsoft Lost the API War. The bonds of the win32 API lock-in is broken and the free web is here to take over. The web has come a long way in the past 16 years. Richer APIs, dramatic performance…

Next.js 9.5 Improves Static Site Regeneration Performance

Next.js 9.5 Improves Static Site Regeneration Performance

Next.js, the open-source React-based framework from Vercel, adds several static site generation performance improvements in the Next.js 9.5 release. The release also allows developers to optionally opt-in to Webpack 5 beta for smaller and faster builds. By…

Next.js 9.5 Improves Static Site Regeneration Performance

Next.js 9.5 Improves Static Site Regeneration Performance

Next.js, the open-source React-based framework from Vercel, adds several static site generation performance improvements in the Next.js 9.5 release. The release also allows developers to optionally opt-in to Webpack 5 beta for smaller and faster builds. By…

Go 1.15 Improves the Go Linker, Small Object Allocation, and More

Go 1.15 Improves the Go Linker, Small Object Allocation, and More

The latest release of the Go language, Go 1.15, focuses on improving the toolchain, runtime, and core libraries. Besides improving the linker and allocation for small objects, Go 1.15 deprecates X.509 CommonName, supports a new embedded tzdata package, and…

Securing MongoDB: Top Five Security Concerns

Securing MongoDB: Top Five Security Concerns

“I think most of the time hackers behind the attacks do it just for fun, because they can and because it’s very simple”, — says Diachenko. Source: “Meowing” attack completely destroyed more than 1000 databases These are the words of Bob Diachenko, one of…

Dropbox Improves Sync Performance Using a Modified Brotli

Dropbox Improves Sync Performance Using a Modified Brotli

After analyzing the performance of several common lossless compression algorithms, Dropbox engineers have slightly modified Google's Brotli encoder to improve their engine sync performance. This reduced median latency and data transfer by more than 30%,…

Adding a fiber link to my home network

Adding a fiber link to my home network

Despite using a FTTH internet connection since 2014, aside from the one fiber uplink, I had always used network gear with 1 Gbit/s links over regular old rj45 cat5(e) cables. I liked the simplicity and uniformity of that setup, but decided it’s time to…

iOS 14: 5 great hidden features you should know about

iOS 14: 5 great hidden features you should know about

When you first upgrade to iOS 14, either in beta or when it releases in the fall, you’ll be treated to some big obvious improvements. The new, more customizable home screen with widgets and the App Library will make an immediate difference in how you use…

Finding a Regression in MySQL Source Code: A Case Study

Finding a Regression in MySQL Source Code: A Case Study

At the Percona engineering team, we often receive requests to analyze changes in MySQL/Percona Server for MySQL behavior from one version to another, either due to regression or a bug fix (when having to point out to a customer that commit X has fixed…

Introducing Firefox Reality PC Preview

Introducing Firefox Reality PC Preview

Have you ever played a VR game and needed a tip for beating the game... but you didn’t want to take off your headset to find that solution? Or, have you wanted to watch videos while you played your game? Or, how about wanting to immerse yourself in a

Article: Retrospectives for Management Teams

Article: Retrospectives for Management Teams

Engaging top management in a recurring retrospective approach can result in long-term value in organizations. Retrospectives can help management teams to explore how they collaborate and cooperate. They can find out whether they should change something and…

Apple's latest acquisition could turn iPhones into payment terminals

Apple's latest acquisition could turn iPhones into payment terminals

iPhone users may be able to accept credit card payments from other people without needing extra hardware in the future. According to Bloomberg, Apple has acquired a startup called Mobeewave Inc., which is behind a technology that can turn iPhones int...

HTTP/3 logo

Simply because it is so hard to find this resource by googling it. Here’s the official HTTP/3 logo hosted: https://github.com/httpwg/wg-materials/tree/gh-pages/badge/http3

IBM Fully Homomorphic Encryption Toolkit Now Available for Linux

IBM Fully Homomorphic Encryption Toolkit Now Available for Linux

A few weeks after becoming available for macOS, iOS, and Android, the IBM Fully Homomorphic Encryption Toolkit can be now installed on various Linux distributions, including Ubuntu, Fedora, and CentOS for x86 platforms, and Ubuntu for IBM's own Z…

Apple Silicon: What the transition from Intel means for developers

Apple Silicon: What the transition from Intel means for developers

Software development for new ARM-based Macs has its own set of challenges and changes for developers. InfoWorld senior writer Serdar Yegulalp joins Juliet to discuss why the transition from Intel to Apple Silicon is so seismic, how the change is affecting…

A Kubernetes/GKE mistake that cost me thousands of dollars

No exaggeration, unfortunately. As a disclaimer, I will add that this is a really stupid mistake and shows my lack of experience managing auto-scaling deployments. However, it all started with a question with no answer and I feel obliged to share my…

Curryfinger – Find the Server Behind the CDN

CURRYFINGER measures a vanilla request for a particular URL against requests directed to specific IP addresses with forced TLS SNI and HTTP Host headers. The tool takes a string edit distance, and emits matches according to a rough similarity metric…

New SIM Card Flaw Lets Hackers Hijack Any Phone Just by Sending SMS

New SIM Card Flaw Lets Hackers Hijack Any Phone Just by Sending SMS

Proven methods to build security awareness in developers. Watch the webinar. The 5 Point Tactical Guide for Secure Developers. Get the whitepaper. New Attack Lets Hackers Decrypt VoLTE Encryption to Spy on Phone Calls. Sign up for cybersecurity…

A Million Digits of Pi in 9 Lines of JavaScript

"Big integers" have landed in Javascript, at least in Firefox and Chrome. One of my favorite things to do with high precision arithmetic is to calculate digits of π. From scratch, that is, using only addition, subtraction, multiplication, and division. …