The sight of a swollen, slimy leech clamped to your skin sucking away at your blood may evoke a wave of panic and disgust. But resist the temptation to pour salt on it, as folk wisdom recommends, because that could cause … Read more
Imagine you’re writing a project and need a library. Let’s call it libpupa. You look up its current version, which is 1.2.3, and add it to your dependencies: “libpupa”: “1.2.3” In turn, the developer of libpupa, when writing its version … Read more
Background When an user directs their web browser to an HTTP URL, it’s a common practice for the service to redirect the request to a corresponding HTTPS page. This unencrypted part of the communication flow has its flaws. Third parties … Read more
Abstract:Whether you’re a CEO strategizing the future of your company, a tech enthusiast debating your next career move, a high school teacher eager to enlighten your students, or simply tired of the relentless quantum hype, this is crafted just for … Read more
Yes. And they are! This is called the “Angular diameter distance turnaround” (or turnover). In the usual model for expansion $Lambda CDM$, it is at a redshift of about 1.5 or about 15 billion light-years (corresponding to a light travel … Read more
People often suggest that interviewing.io should create a certification that our users can post on their LinkedIn profile, e.g., something like “Top 10% performer on interviewing.io”. Presumably, these certifications would signal to recruiters that this person is a good engineer … Read more
In the IETF we focus on making building blocks, which are then used to create products and deployments. Personally, I generally focus on creating quality building blocks and try to ignore whether those ultimately lead to design wins or not. … Read more
The ls(1) command is pretty good at showing you the attributes of a single file (at least in some cases), but when you ask it for a list of files, there’s a huge problem: Unix allows almost any character in … Read more
Posted by Tavis Ormandy, Project Zero This is an unusual blog post. I normally write posts to highlight some hidden attack surface or interesting complex vulnerability class. This time, I want to talk about a vulnerability that is neither of … Read more
For a long time, setuptools and distutils were the only game in town when it came to creating Python packages, and both of these provided a simple enough interface: you write a setup.py file that invokes the setup() method, you … Read more