20 April 2022

45 links · Wednesday

Handling concurrency attacks in laravel

A harsh truth many developers do not realize early is that for every application you move to production, there are people who only seek ways to exploit your product for their own benefit.This consciousness is one that is required in building truly se...

🚫 Top 10 mistakes selling to SMB owners like me

I own ~50 restaurants, have sat through hundreds of pitches, and have spent millions on new software and hardware solutions. Here are the biggest mistakes I see over and over again.

CVE-2022-21449: Psychic Signatures in Java

The long-running BBC sci-fi show Doctor Who has a recurring plot device where the Doctor manages to get out of trouble by showing an identity card which is actually completely blank. Of course, thi…

Projects - Josh Pigford

I've worked on an absurd number of things in the past. This is a database of all 62 of those things!

Fundamentals

Last Update: 2022-03-18

The Ethereum Merge

Since a few years, the Ethereum Foundation and Community are working on a massive upgrade of the Ethereum protocol, that will switch Proof of Work consensus to Proof of Stake and introduce Sharding to scale the Ethereum chain. One of the step of this upgrade i…

The Cliffs of Inanity

A year or so ago I was asked to debug a crash in the Firefox devtools.  Crashes are easy!  I fired up gdb and reproduced the crash… which turned out to be in some code JITted by SpiderMonkey.  I was immediately lost; even a simple bt did not work.  Someone mor…

Azure Container Apps

Microsoft recently announced Azure Container Apps in Preview – a new serverless container platform. The idea behind this offering is to run your microservices style applications without needing to focus on the infrastructure and is built on top of industry sta…

Favicons for HN

Favicons for HN. GitHub Gist: instantly share code, notes, and snippets.

Introducing a New Way to Search Your Code and Visual Studio Features

All developers search within their code, in one way or another. Some might use code search to explore their code and understand how some components work; others might use code search to get to a very specific location they have in mind.

April 20, 2022

It's all or nothing, and sometimes you don't have all.

SPAs in ASP.NET Core - Another Attempt

After discussing this topic with a client, I realized that my old method of hosting SPAs in ASP.NET Core didn't handle resources correctly, so I dug in and came up with **yet another** technique. This one is the simpliest and the least intrusive and works bet…

Planting Undetectable Backdoors in Machine Learning Models

Given the computational cost and technical expertise required to train machine learning models, users may delegate the task of learning to a service provider. We show how a malicious learner can plant an undetectable backdoor into a classifier. On the surface,…

WebAssembly Core Specification

This section describes the status of this document at the time of its publication. A list of current W3C publications and the latest revision of this technical report can be found in the W3C technical reports index at https://www.w3.org…

Monsters Weekly 247 - HTML Template Element

We don’t always need a framework like React/Vue/Angular to add interactive behaviour to our web pages. The browser provides some handy features that can make it easy to add simple interactions. One ex

Modeling Relationships in a DDD Way

Let’s talk about modeling of relationships, including the dreaded many-to-many relationships, in a DDD way.

The List monad

Lists, collections, deterministic Iterators form a monad. An article for object-oriented programmers.

Emacs Configuration Generator

Some people claim that Emacs is difficult to start with. The main problem is probably the chicken-and-egg situation: To make the most use of Emacs, you probably need to understand Emacs (Lisp), but to grok Emacs Lisp you pretty much neeed to understand the fu…

Simulate your Financial Future. Plan for Financial Independence.

Plan, model and simulate your personal finances with ProjectionLab. Free planning and projection tools that will never ask to link your financial accounts. Define and prioritize goals, compare outcomes between plans, and chart your own course towards towards t…