29 November 2021

51 links ยท Monday

Data Exfiltration via CSS + SVG Font

This post will show that the SVG fonts and CSS can be used for reading the page's text contents. There are several known ways to read the pa...

TPM remote attestation over Bluetooth

How can you be sure that the software running on your computer has not been tampered with since you installed it? Even if your disk is encrypted, how can you be sure that the password prompt at boot is not a trap planted by an evil third-party that will exfilt…

How to Backup to Backblaze B2 with Rclone and keep the network alive

I'm living in a place with not the fastest internet download/upload (39/12 Mbps) speeds. It took some time to tune all the parameters of the Rclone to successfully create an initial backup (around 400GB) and keep the network alive during the upload to Backblaz…

Writing for the Web

A guide for writing better technical articles + blog posts.

I have no idea what I’m doing

A few days ago, David Heinemeier Hansson (who generally goes by DHH) wrote a blog post titled Programmers should stop celebrating incompetence: I disagreed with the post, but for different reasons …

Simplicity always wins

Software engineers love complexity. Complexity is an inherent part of writing software because the medium itself (programming languages) is complex on its own. When you put together with it the discipline of doing software engineering, where you add time const…

Introduction

3rd Workshop on the Evolution, Performance and Interoperability of QUIC

Introducing Buy now, pay later in Microsoft Edge

“Buy now, pay later,” or BNPL, lets shoppers break their purchases into equal installment payments, often interest-free, which can allow shoppers to get their purchase upfront, instead of having to wait until it’s paid in full.   Usually, BNPL is offered in sp…

Kavita

Lighting fast with a slick design, Kavita is a rocket fueled self-hosted digital library which supports a vast array of file formats. Install to start reading and share your server with your friends. book reader, self hosted, manga, comics, free, manhwa, e rea…

Get to Know EF Core 6

EF Core 6: improved support for Azure Cosmos DB, increased performance, first-class APIs, SQL Server temporal tables and more!

The Schemaverse

The Schemaverse is a space-based strategy game implemented entirely within a PostgreSQL database. Compete against other players using raw SQL commands to command your fleet. Or, if your PL/pgSQL-foo is strong, wield it to write AI and have your fleet command i…

CONIGUERO/winamp

Winamp. Contribute to CONIGUERO/winamp development by creating an account on GitHub.

JasperFx OSS Plans for .Net 6 (Marten et al)

I’m going to have to admit that I got caught flat footed by the .Net 6 release a couple weeks ago. I hadn’t really been paying much attention to the forthcoming changes, maybe got cocky…

The Case of the Recursive Resolvers - Slack Engineering

On September 30th 2021, Slack had an outage that impacted less than 1% of our online user base, and lasted for 24 hours. This outage was the result of our attempt to enable DNSSEC — an extension intended to secure the DNS protocol, required for FedRAMP Moderat…

RavenDB Subscriptions & Messaging patterns

RavenDB is a database, not a queue or a service bus. That said, you can make use of RavenDB subscriptions to get a very similar behavior to a service bu...

Firefox is the Only Alternative

Supposedly today we have a lot of browsers to choose from - Google Chrome, Safari, Microsoft Edge, Firefox, Brave, Opera, Vivaldi, etc. Having choices is a good thing, right? Nobody wants to relive the time of almost complete Internet Explorer domination again…

Tiny | We buy wonderful internet businesses

We give founders simple exits that protect their team and keep their businesses operating. Offers in 7 days, close in 30.

282: Automating Protocols

Custom schemes, http schemes, protocols, they are a pain to develop for, but are so powerful! After years of using them, we finally figured out how to automate it and we have a lot of ideas!

The newest Docker VS Code extension feature you’re not using

As Docker usage has grown, Docker Compose has become the leader in running multi-service applications locally. Unfortunately, as your application expands and more services must communicate, we’ve found authoring these Compose files can become arduous, time con…

Released: General Availability of Microsoft.Data.SqlClient 4.0

We have released for general availability Microsoft.Data.SqlClient 4.0. This .NET Data Provider for SQL Server provides general connectivity to the database and supports all the latest SQL Server features for applications targeting .NET Framework, .NET Core, .…

Cake v2.0.0 RC 2 released

Version 2.0.0 RC 2 of Cake has been released. Take it for a spin and give us feedback on our discussion board.

Why are German numbers backwards?

Latin languages, as well as English, speak numbers from left to right, in the same direction in which they are written, e.g. forty-two, quarante-deux, but in German, you write from left to right but

Alexandre Nédélec - Organize your GitHub stars with Astral

Do you often star a GitHub repository and later when you want to get back to it struggle to find it on your stars page? I do! Well, I did... until I discovered Astral, the web application that allows you to Organize Your GitHub Stars With Ease. That is what we…