There's this vulnerability in macOS that allows to rather accurately get first name of a user. In this post you'll find an explanation and a live demo to try it yourself.

#cybersec #vulnerability #macos

This one is funny. Instagram Terms of Use being read with a soothing voice to help you fell asleep. They also have a TikTok version!

#humor #meta #instagram

My man is breaking java.lang.String. To make a String not .equals to itself and stuff like that. Amazing! Just imagine maliciously adding code breaking e.g. interned "id" to some popular lib.

#java #string

Some will advocate new unique DI frawemork. Others will tell you about the APIs to glue any DI approach with the Android framework. I'm with the others.

#di #library #framework

A short humorous essay on the state of our industry.

#humor #rant

Turns out, to write a file to disk correctly is a hard task by itself. And don't even get me started on working with different filesystems in different modes.
Let's thank @dimsuz for the link.

#linux #os #io

A dive into how files are stored on disk, what the heck is inode, and how to access all of that manually.

#linux #os #file

A short piece on a serious task of updating a single constant at a serious corporation.

#humor #rant

New standard - Li-Fi. Nice! Put a lamp above a table and enjoy good connectivity.

#hardware #network

Russ Cox's post about implementing coroutines for go. Yep, coroutines, not goroutines. The main idea is to allow running something on demand, concurrently, but not in-parallel. I don't really understand the use case yet, but can recommend the post, interesting reading.

#golang #coroutine

A bunch of links about DNS have piled up, let's start with them. The 1st one - a talk on what's DNS, how it works, how to poke it, and what the request and response look like.

#dns #network #talk

And here you'll find a step-by-step guide to implementing your own toy DNS resolver in python. Exercises at the end are entertaining too!

#dns #network

And the last one: why it's hard to debug DNS issues, a bit of rant on hardly human-readable output of some tools, and advice on how to approach such tasks.

#dns #network

Google is building Web Integrity API for Chrome. This thing is quite controversial. Several sources to better understand what's going on: eins, zwei, drei.

#google #browser #network

More exciting news from JS world: it turns out that NPM registry doesn't validate package manifest against its content.

#js #cybersec #vulnerability

The story of UTF-8 encoding. Rob Pike and Ken Thompson have built a spec and an implementation for Plan 9 OS literally in a couple of days.

#history #text #encoding

Zero-knowledge proof is a big thing in modern cryptography. Here's a post on how to start playing with it right now, without deep and thorough research. Don't expect deep understanding after it, but code samples and further reading links are truly valuable.

#zk #cryptography

Moderately deep dive into what happens when we ask e.g. python to print a hello world for us. Almost every step is described - search for the binary, process fork, dynamic linking, etc. They also describe the tools you can use to inspect all these things.

#linux #os