On job security, institutional knowledge and the unexpected downside of becoming the person everyone depends on.

The private keys of eight eMudhra intermediate CA certificates, trusted by major root programs, have been compromised. Check whether your client is affected and how to protect it.

One of eMudhra's certificate authority private keys is the number 4.

Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from…

PHP2Shell is a family of critical vulnerabilities in core PHP that can allow unauthenticated attackers to execute code or disclose sensitive process memory.

Tov is a programming language that claims to perform significantly better than Rust. This blog post debunks tricks used in their unfair benchmarks.

Yapfast freed 23 MiB and kept.. all of it. Where it went, and how I got glibc to give it back.

An out-of-bounds write in Google's Brotli decoder reaches Node.js, Python and more. Affected versions, checks and fixes.

Einstein's moving train, Leslie Lamport's clocks and a 2,500-year-old idea explain the core problem of leaderless replication: ordering writes when no clock can be trusted.

SwiftUI-like components, styles as modifiers, and a compiler that catches broken links before visitors do. How this site is made, and why I love working on it.

Sending an email is essentially the same as making an HTTPS request, so how can companies charge $15 to send 1000 emails?

Sharing my experience to get a faster CI: caching, test parallelism, and path filtering took one project's GitHub Actions build from 27 minutes to 4

Explore this post and more from the programming community

A real VLC video filter, ported line by line to C# and raced against the original C inside VLC 4, then optimized on both sides, with byte-identical output throughout.

My attempt to reverse engineer a decade-long bug in an airline reservation system

It seems like we're in a golden age of software documentaries. As a card-carrying computer history nerd I'm having the time of my life, so I figured I'd shar...

Python's experimental just-in-time (JIT) compiler, which was added to CPython in 2024 for the 3 [...]