SM Articles from blogs I follow
2022-01-20 – The economist’s $100 bill, and the virtue of consistency
via Arthur O’Dwyer
Two economists are walking down the street. One of them notices what appears to be a $100 bill just lying on the sidewalk, and points it out to the other. “Nonsense,” declares his friend. “If that were a real $100 bill, someone would have picked it up alr…
2022-01-19 – CSRF vulnerabilities: How to exploit and how to defend
via Sylvain Kerkour
The past few weeks I implemented an API that relies on Cookies for authentication. When working with Cookies you should always be extremely careful not to introduce CSRF vulnerabilities.
Usually, I build APIs using a specific Authentication HTTP he…
2022-01-19 – How to securely encrypt a file with an insecure password in Rust (using Streaming Encryption + Argon2)
via Sylvain Kerkour
Last month we saw how to encrypt large files that don’t fit in memory using a streaming cipher. The article presupposes that you already have a secure key generation mechanism.
Today, we are going to see how to securely encrypt data using an insecu…
2022-01-19 – Help Chile write free software values, privacy, and digital sovereignty into their constitution
via Drew DeVault's blog
For those out of the loop, a group which included myself up until recently,1
Chile is in the midst of a revolution. They’re fighting against the increased
cost of living, privatization of essential services, and worsening inequality
— problems facing everyon…
2022-01-18 – Pine64 should re-evaluate their community priorities
via Drew DeVault's blog
Pine64 has a really interesting idea: make cheap hardware with low margins, get
it into the hands of the FOSS community, and let them come up with the software.
No one has ever done this before, at least not on this scale, and it’s a really
neat idea! Pine64…
2022-01-17 – Who Watches Watchmen? - Part 1
via Hauleth's blog
I gave talk about this topic on CODE Beam V Americas, but I wasn't really
satisfied with it. In this post I will try to describe what my presentation was
meant to be about.
If you are wondering about the presentation, the slides are on SpeakerDeck.
Abstra…
2022-01-17 – What's cooking on SourceHut? January 2022
via Blogs on Sourcehut
Hello and happy new year! After a bit of well-deserved rest during the holidays,
our staff (and many of our contributors) have spun our work streams back up and
development continues. Our userbase has grown this month by another 634 users,
bringing the total…
2022-01-17 – Status update, January 2022
via Drew DeVault's blog
Happy New Year! I had a lovely time in Amsterdam. No one had prepared me for the
(apparently infamous) fireworks culture of the Netherlands. I thought it was
really cool.
Our programming language continues to improve apace. Our cryptography suite now
includes…
2022-01-17 – Status update, January 2022
via emersion
Hi all! This month’s status update will be quite shorter than usual, because
I’ve been taking two weeks off. I’ve been in Strasbourg (a city in the east of
France) for New Year’s Eve. We’ve cooked a bunch of local food, including a
Kougelhopf:
But let’s get b…
2022-01-14 – Comparing Static Site Hosts; Which Is The Best Host For A Static Site?
via Kev Quirk
I have compared a number of static site hosts to see which is the best for me in terms of performance, build times and pricing. This post contains the results of that research.
When I recently flipped from WordPress to Jekyll I had to d…
2022-01-12 – Secure and immutable development environments with Dev Containers
via Sylvain Kerkour
“But, it works on my machine”
“If I install this NPM package, is it going to rm -rf / or infect me with a cryptominner?"
“I spent the whole day trying to install $DATABASE on my laptop but it still doesn’t work!"
As we saw 2 months ago, suppl…
2022-01-10 – 10 Years Of Linux
via
With the start of a new year, it’s custom to reflect back on years gone by. This year I’ve seen people posting pictures of various things from a decade ago and now. I thought I’d throw my hat into the ring.
2022-01-10 – Measuring motorcycle lean angle with a single accelerometer
via jes's blog
The naive method of measuring motorcycle lean angle with accelerometers is to put a 2-axis accelerometer on the bike and measure
the angle between the x acceleration and the y acceleration. This only works at a standstill. When the bike
is moving, the measu…
2022-01-10 – SourceHut selected for NLNet NGI Zero funding
via Blogs on Sourcehut
I’m pleased to share that SourceHut has been selected by NLNet to receive
funding as part of the NGI Zero: Search & Discovery fund for the purpose of
completing API 2.0, our GraphQL API development. NLNet is providing monetary
support to SourceHut contri…
2022-01-09 – Disambiguating the ‘Observable Universe’
via Sam Enright
I’ve seen a lot of confusion over what precisely the term ‘observable universe’ refers to. This post is an attempt to remedy that. In 1929, Edwin Hubble discovered that the universe is expanding. He observed that light emitted from distant celestial objec…
2022-01-09 – 100 Days to Offload Part 3
via
HAPPPY NEW YEAR!! I’m going to do this thing again! For the 3rd time!
2022-01-09 – How does SourceHut's FOSS business model work?
via Blogs on Sourcehut
SourceHut makes a profit, but we are not motivated by profit. I founded
SourceHut with the explicit goal of making my free software work sustainable
full-time. As SourceHut grows, we aim to expand and generalize this approach. We
want to make free software b…
Generated by openring