backdooring your javascript using minifier bugs https://zyan.scripts.mit.edu/blog/backdooring-js/ compiler bugs are scary.
miniblog.
Related Posts
I carefully document `cargo install --locked` for difftastic users, I carefully use `--locked` for CI, and I've just realised that all my release builds totally ignore it! Oops.
Anyone using my prebuilt binaries have been getting different Unicode width calculations in display.
I find myself just taking photos of documents for submitting forms, rather than scanning.
Scanning still feels more 'official' (a PDF instead of a JPG) but the sheer convenience of using a phone wins every time. I've rarely seen organisations complain about photos.
Today I learnt about yamllint: if you're using YAML, you can at least ensure you're not suffering from the 'Norway problem':