Official jscrambler npm Package Compromised at 8.14.0
https://safedep.io/jscrambler-npm-supply-chain-compromise/
https://redd.it/1utqclm
@programmingreddit
https://safedep.io/jscrambler-npm-supply-chain-compromise/
https://redd.it/1utqclm
@programmingreddit
SafeDep - Real-time Open Source Software Supply Chain Security
Official jscrambler npm Package Compromised Across Multiple Releases
The official jscrambler npm package (60K monthly downloads) was trojanized starting at 8.14.0 through an npm account or CI compromise. The attacker…
VINs: The Encoding Stamped Into Steel
https://cargurus.dev/2026/04/29/vins-the-encoding-stamped-into-steel/
https://redd.it/1uvb8bc
@programmingreddit
https://cargurus.dev/2026/04/29/vins-the-encoding-stamped-into-steel/
https://redd.it/1uvb8bc
@programmingreddit
Revved | The CarGurus Engineering Blog
VINs: The Encoding Stamped Into Steel
Do I have a favorite standard? Silly question. How could I not? There are so many great ones, each with its own weirdly fascinating story. In a previous job, I spent a lot of time getting to know E…
HTTP gets a QUERY method so complex searches can stop pretending to be POST
https://www.theregister.com/devops/2026/07/13/http-gets-a-query-method-so-complex-searches-can-stop-pretending-to-be-post/5270192
https://redd.it/1uvszuq
@programmingreddit
https://www.theregister.com/devops/2026/07/13/http-gets-a-query-method-so-complex-searches-can-stop-pretending-to-be-post/5270192
https://redd.it/1uvszuq
@programmingreddit
theregister
HTTP gets a QUERY method so complex searches can stop pretending to be POST
New verb carries request content while remaining safe, idempotent, and cacheable
Cloudflare Identifies Race Condition in hyper’s HTTP/1 Implementation
https://www.infoq.com/news/2026/07/cloudflare-hyper-bug-fix/
https://redd.it/1uvfzlz
@programmingreddit
https://www.infoq.com/news/2026/07/cloudflare-hyper-bug-fix/
https://redd.it/1uvfzlz
@programmingreddit
InfoQ
Cloudflare Identifies Race Condition in hyper’s HTTP/1 Implementation
Cloudflare recently documented how its development team identified and fixed a rare bug in the widely used Rust HTTP library hyper that could silently truncate large HTTP responses while still returning a successful 200 OK status. The issue had existed for…
The git history command deserves more attention
https://lalitm.com/post/git-history/
https://redd.it/1uvwlql
@programmingreddit
https://lalitm.com/post/git-history/
https://redd.it/1uvwlql
@programmingreddit
Lalit Maganti
The git history command deserves more attention
Working with lots of changes in parallel on git can be painful. You end up juggling branches and commits, and running scary rebase -i commands that can leave your tree in a half-broken state if you so …
I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.
https://bobdahacker.com/blog/fifa-hack
https://redd.it/1uwapaj
@programmingreddit
https://bobdahacker.com/blog/fifa-hack
https://redd.it/1uwapaj
@programmingreddit
Bobdahacker
I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.
How I found that anyone could register on FIFA's public Agent Platform, gain access to the Football Data Platform's Streaming Management panel, and get RTMP ingest URLs and stream keys for every live FIFA World Cup 2026 camera feed. I then spent hours calling…
How we rebuilt our notification platform to fanout millions of notifications without timing out
https://www.patreon.com/engineering/posts/how-we-scaled-notifs-with-fanout-162544709
https://redd.it/1uwj90b
@programmingreddit
https://www.patreon.com/engineering/posts/how-we-scaled-notifs-with-fanout-162544709
https://redd.it/1uwj90b
@programmingreddit
Patreon
How We Scaled Notifications with Fanout | Engineering at Patreon
At Patreon, we send billions of notifications per year to fans whenever creators publish posts, start livestreams, or perform other fan-faci
Cursor 0day: When Full Disclosure Becomes the Only Protection Left
https://mindgard.ai/blog/cursor-0day-when-full-disclosure-becomes-the-only-protection-left
https://redd.it/1uxjm12
@programmingreddit
https://mindgard.ai/blog/cursor-0day-when-full-disclosure-becomes-the-only-protection-left
https://redd.it/1uxjm12
@programmingreddit
mindgard.ai
Cursor 0day: When Full Disclosure Becomes the Only Protection Left - Mindgard
The vulnerability nobody seems interested in fixing
The most expensive instruction might be… cmov
https://questdb.com/blog/cmov-vs-branch-perf/
https://redd.it/1uyt0tf
@programmingreddit
https://questdb.com/blog/cmov-vs-branch-perf/
https://redd.it/1uyt0tf
@programmingreddit
QuestDB
The Most Expensive Instruction Might Be… cmov | QuestDB
A trip through HotSpot's C2 branch-to-cmov heuristic: it measures branch bias, not predictability, and in a tight loop that mismatch is worth up to 2.9x.
Maintaining the code of the man who wrote "How To Write Unmaintainable Code"
https://github.com/lexvalo/mini-pad-submitter-revived
https://redd.it/1uzadz5
@programmingreddit
https://github.com/lexvalo/mini-pad-submitter-revived
https://redd.it/1uzadz5
@programmingreddit
GitHub
GitHub - lexvalo/mini-pad-submitter-revived: Reviving Roedy Green's Mini PAD Submitter 23.6 for the modern web. Restores HTTPS…
Reviving Roedy Green's Mini PAD Submitter 23.6 for the modern web. Restores HTTPS, TLS/SNI compatibility and brings a forgotten Java utility back to life. - lexvalo/mini-pad-submitter-revived
After 7 years in production, Scarf has reluctantly moved away from Haskell
https://avi.press/posts/2026-07-10-after-7-years-in-production-scarf-has-reluctantly-moved-away-from-haskell.html
https://redd.it/1uzj6u2
@programmingreddit
https://avi.press/posts/2026-07-10-after-7-years-in-production-scarf-has-reluctantly-moved-away-from-haskell.html
https://redd.it/1uzj6u2
@programmingreddit
Avi Press
After 7 years in production, Scarf has reluctantly moved away from Haskell
What surprised an engineer after spending 13 years on SQL Server and then working on Postgres? on the Talking Postgres podcast
https://talkingpostgres.com/episodes/working-on-postgres-after-13-years-on-sql-server-with-panagiotis-antonopoulos
https://redd.it/1uzerp7
@programmingreddit
https://talkingpostgres.com/episodes/working-on-postgres-after-13-years-on-sql-server-with-panagiotis-antonopoulos
https://redd.it/1uzerp7
@programmingreddit
Talking Postgres with Claire Giordano
Talking Postgres with Claire Giordano | Working on Postgres after 13 years on SQL Server with Panagiotis Antonopoulos
What happens when a database engineer spends 13 years on SQL Server and then starts working on Postgres? In Episode 41 of Talking Postgres, Distinguished Engineer Panagiotis “Panos” Antonopoulos of...
The Java Story | The Official Documentary of Java
https://youtu.be/ZqGSg4b_cZA?si=WS4vF7GKZ7HVUkzQ
https://redd.it/1uzkqdg
@programmingreddit
https://youtu.be/ZqGSg4b_cZA?si=WS4vF7GKZ7HVUkzQ
https://redd.it/1uzkqdg
@programmingreddit
YouTube
The Java Story | The Official Documentary
From its humble beginnings as a project code-named "Oak" at Sun Microsystems to becoming a global standard for enterprise software and billions of devices, Java's journey is one of radical innovation, strategic pivots, and enduring community strength.
…
…