Researchers Find RCE Vulnerability in GitHub.com (CVE-2026-3854)
https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854
https://redd.it/1syaqsc
@programmingreddit
https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854
https://redd.it/1syaqsc
@programmingreddit
wiz.io
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown | Wiz Blog
A CVSS 8.7 vulnerability in GitHub Enterprise Server allows remote code execution. Read the threat brief and find vulnerable GHES instances from Wiz.
Bugs Rust Won't Catch
https://corrode.dev/blog/bugs-rust-wont-catch/
https://redd.it/1syrgku
@programmingreddit
https://corrode.dev/blog/bugs-rust-wont-catch/
https://redd.it/1syrgku
@programmingreddit
Corrode Rust Consulting
Bugs Rust Won't Catch | corrode Rust Consulting
In April 2026, Canonical disclosed 44 CVEs in uutils, the Rust reimplementation of GNU coreutils that ships by default since 25.10. Most of them came out of an external audit commissioned ahead of the 26.04 LTS.
I read through the list and thought th…
I read through the list and thought th…
FastCGI: 30 Years Old and Still the Better Protocol for Reverse Proxies
https://www.agwa.name/blog/post/fastcgi_is_the_better_protocol_for_reverse_proxies
https://redd.it/1sz6j93
@programmingreddit
https://www.agwa.name/blog/post/fastcgi_is_the_better_protocol_for_reverse_proxies
https://redd.it/1sz6j93
@programmingreddit
www.agwa.name
FastCGI: 30 Years Old and Still the Better Protocol for Reverse Proxies
For FastCGI's 30th birthday, let's look at how it avoids the security problems inherent in HTTP reverse proxying
Someone compromised SAP's npm packages and used the CI pipeline against itself
https://safedep.io/mini-shai-hulud-and-sap-compromise/
https://redd.it/1sz094x
@programmingreddit
https://safedep.io/mini-shai-hulud-and-sap-compromise/
https://redd.it/1sz094x
@programmingreddit
SafeDep - Real-time Open Source Software Supply Chain Security
Mini Shai Hulud and SAP Compromise
Four SAP npm packages published on April 29, 2026 contain a two-stage credential-stealing payload targeting GitHub tokens, AWS keys, and CI/CD pipelines. The packages share SAP-affiliated maintainers, pointing to a publisher account compromise.
Copy Fail: an exploit for all Linux distributions since 2017
https://copy.fail
https://redd.it/1szrkre
@programmingreddit
https://copy.fail
https://redd.it/1szrkre
@programmingreddit
Xint
Copy Fail — 732 Bytes to Root
CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.
Microsoft open-sources "the earliest DOS source code discovered to date"
https://arstechnica.com/gadgets/2026/04/microsoft-open-sources-the-earliest-dos-source-code-discovered-to-date
https://redd.it/1t058mu
@programmingreddit
https://arstechnica.com/gadgets/2026/04/microsoft-open-sources-the-earliest-dos-source-code-discovered-to-date
https://redd.it/1t058mu
@programmingreddit
Ars Technica
Microsoft open-sources "the earliest DOS source code discovered to date"
Old 86-DOS source code dates back to the time before Microsoft bought it.
You can beat the binary search
https://lemire.me/blog/2026/04/27/you-can-beat-the-binary-search/
https://redd.it/1t08t7r
@programmingreddit
https://lemire.me/blog/2026/04/27/you-can-beat-the-binary-search/
https://redd.it/1t08t7r
@programmingreddit
Daniel Lemire's blog
You can beat the binary search
We sometimes have to look for a value in a sorted array. The simplest algorithm consists in just going through the values one by one, until we encounter the value, or exhaust the array. We sometimes call this algorithm a linear search. In C++, you can get…
How Containers Work: Building a Docker-like Container From Scratch
https://labs.iximiuz.com/tutorials/container-filesystem-from-scratch
https://redd.it/1t0w811
@programmingreddit
https://labs.iximiuz.com/tutorials/container-filesystem-from-scratch
https://redd.it/1t0w811
@programmingreddit
iximiuz Labs
How Container Filesystem Works: Building a Docker-like Container From Scratch | iximiuz Labs
Learn how Linux containers are built from the ground up. Starting with the mount namespace and a root filesystem, see why PID, cgroup, UTS, and network namespaces naturally follow - and how this foundation makes concepts like bind mounts, volumes, and persistence…
For Linux kernel vulnerabilities, there is no heads-up to distributions
https://www.openwall.com/lists/oss-security/2026/04/30/10
https://redd.it/1t0m1pn
@programmingreddit
https://www.openwall.com/lists/oss-security/2026/04/30/10
https://redd.it/1t0m1pn
@programmingreddit
Reddit
From the programming community on Reddit: For Linux kernel vulnerabilities, there is no heads-up to distributions
Posted by Either_Collection349 - 97 votes and 11 comments
Approaching zero bugs? - Daniel Stenberg
https://daniel.haxx.se/blog/2026/04/30/approaching-zero-bugs/
https://redd.it/1t1uplj
@programmingreddit
https://daniel.haxx.se/blog/2026/04/30/approaching-zero-bugs/
https://redd.it/1t1uplj
@programmingreddit
daniel.haxx.se
Approaching zero bugs?
In this era of powerful tools to find software bugs, we now see tools find a lot of problems at a high speed. This causes problems for developers, as dealing with the growing list of issues is hard. It may take a longer time to address the problems than to…
Unsigned sizes: a five year mistake
https://c3-lang.org/blog/unsigned-sizes-a-five-year-mistake/
https://redd.it/1t20rdz
@programmingreddit
https://c3-lang.org/blog/unsigned-sizes-a-five-year-mistake/
https://redd.it/1t20rdz
@programmingreddit
C3 Programming Language
Unsigned sizes: a five year mistake
C3 is the ergonomic, safe evolution of C. Familiar syntax, full ABI compatibility, optionals, slices, contracts and zero-cost abstractions.
Enabling ai co author by default by cwebster-99 · Pull Request #310226 · microsoft/vscode
https://github.com/microsoft/vscode/pull/310226
https://redd.it/1t2f3h5
@programmingreddit
https://github.com/microsoft/vscode/pull/310226
https://redd.it/1t2f3h5
@programmingreddit
GitHub
Enabling ai co author by default by cwebster-99 · Pull Request #310226 · microsoft/vscode
Visual Studio Code. Contribute to microsoft/vscode development by creating an account on GitHub.
The peril of laziness lost
https://bcantrill.dtrace.org/2026/04/12/the-peril-of-laziness-lost/
https://redd.it/1t3712i
@programmingreddit
https://bcantrill.dtrace.org/2026/04/12/the-peril-of-laziness-lost/
https://redd.it/1t3712i
@programmingreddit
The Observation Deck
The peril of laziness lost
In his classic Programming Perl — affectionately known to a generation of technologists as "the Camel Book" — Larry Wall famously wrote of the three virtues of a programmer as laziness, impatience, and hubris:
If we’re going to talk about good software design…
If we’re going to talk about good software design…
When 'if' slows you down, avoid it
https://easylang.online/blog/branchless
https://redd.it/1t3glxw
@programmingreddit
https://easylang.online/blog/branchless
https://redd.it/1t3glxw
@programmingreddit
easylang.online
Branch‑Avoidant Programming
Update on "Co-authored-by: Copilot" in commit messages · Issue #314311 · microsoft/vscode
https://github.com/microsoft/vscode/issues/314311
https://redd.it/1t49srb
@programmingreddit
https://github.com/microsoft/vscode/issues/314311
https://redd.it/1t49srb
@programmingreddit
GitHub
Update on "Co-authored-by: Copilot" in commit messages · Issue #314311 · microsoft/vscode
What happened? In 1.110, we added a setting to add Copilot as coauthor in commit messages by appending Co-authored-by: Copilot copilot@github.com. The setting git.addAICoAuthor has three different ...
Formatting an entire 25 million line codebase overnight: the rubyfmt story
https://stripe.dev/blog/formatting-an-entire-25-million-line-codebase-overnight-the-rubyfmt-story
https://redd.it/1t47018
@programmingreddit
https://stripe.dev/blog/formatting-an-entire-25-million-line-codebase-overnight-the-rubyfmt-story
https://redd.it/1t47018
@programmingreddit
stripe.dev
Formatting an entire 25 million line codebase overnight: the rubyfmt story
This is the story of how our Developer Productivity team extended and rolled out rubyfmt, our Rust-based zero-config, ultra-fast autoformatter across the world's largest Ruby codebase.
Bun is being rewritten to Rust
https://github.com/oven-sh/bun/commit/46d3bc29f270fa881dd5730ef1549e88407701a5
https://redd.it/1t480nm
@programmingreddit
https://github.com/oven-sh/bun/commit/46d3bc29f270fa881dd5730ef1549e88407701a5
https://redd.it/1t480nm
@programmingreddit
GitHub
docs: add Phase-A porting guide · oven-sh/bun@46d3bc2
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one - docs: add Phase-A porting guide · oven-sh/bun@46d3bc2