miniblog.

← Back to all posts
Nov 11, 2021 at 06:43
Unicode attacks creating invisible variables in JS: https://certitude.consulting/blog/en/invisible-backdoor/ Unicode in string literals or comments seems worthwhile, but non-ASCII in variable names seems fraught.

Related Posts

Apr 2, 2026 at 09:44
2
Some excellent safety improvements in C++26: hardening the standard library against out-of-bounds bugs, and a safer semantics for uninitialised local variables:
C++26 is done! — Trip report: March 2026 ISO C++ standards meeting (London Croydon, UK) – Sutter’s Mill
Apr 5, 2023 at 05:24
An incredible 7 minute demo of APL, going from constructing an array to visualising Conway's Game Of Life, built incrementally without loops or temporary variables: https://www.youtube.com/watch?v=a9xAKttWgP4
Mar 28, 2023 at 05:13
What piece of syntax has the most different meanings? I realised today that `as` is extremely overloaded. It can be used for aliasing imports (Python), type casts (Rust), binding pattern match variables (OCaml), type assertions (Hack) and probably many others.