3
Spectre vulnerabilities remain a problem in browsers, and the PoC even works on new Apple silicon!
miniblog.
Likes
Related Posts
2
Today I learnt about yamllint: if you're using YAML, you can at least ensure you're not suffering from the 'Norway problem':
1
It's really satisfying fixing crashes in rust-analyzer. You can start from a panic message and dig until you've got a tiny Rust program that triggers the problem.
(It's usually an issue with incomplete source files breaking invariants.)
2
Go has an os.Root API that allows you to enforce all paths are subdirectories of a given root. It fixes users accessing foo/../../../etc/passwd and similar.
Seems like a really nice solution for a relatively common problem.