blog.yossarian.net on Hacker News

Dates That Don't Exist (2015)(blog.yossarian.net)

107 points by EndXA 2 months ago | 74 comments

How many registers does an x86-64 CPU have? (2020)(blog.yossarian.net)

90 points by tosh 8 months ago | 66 comments

We should all be using dependency cooldowns(blog.yossarian.net)

460 points by todsacerdoti 11 months ago | 259 comments

Blog post arguing that dependency cooldowns, via tools like Dependabot and Renovate, are a cheap, effective way to mitigate most open source supply chain attacks.

Dear GitHub: no YAML anchors, please(blog.yossarian.net)

155 points by woodruffw 1 year ago | 123 comments

Fun with Finite State Transducers(blog.yossarian.net)

39 points by woodruffw 1 year ago | 3 comments

Bypassing GitHub Actions policies in the dumbest way possible(blog.yossarian.net)

224 points by woodruffw 1 year ago | 108 comments

Be Aware of the Makefile Effect(blog.yossarian.net)

385 points by thunderbong 1 year ago | 298 comments

A blog post coining the "Makefile effect": complex or unfamiliar tools get configured by copy-pasting and tweaking known-good examples instead of being written from scratch.

Zizmor would have caught the Ultralytics workflow vulnerability(blog.yossarian.net)

74 points by campuscodi 1 year ago | 20 comments

Software-defined (Internet) radio with Liquidsoap (2023)(blog.yossarian.net)

42 points by walterbell 1 year ago | 8 comments

Approximating sum types in Python with Pydantic(blog.yossarian.net)

149 points by woodruffw 2 years ago | 82 comments

Hiding messages in x86 binaries using semantic duals (2020)(blog.yossarian.net)

23 points by woodruffw 2 years ago | 3 comments

Python wheel filenames have no canonical form(blog.yossarian.net)

47 points by woodruffw 2 years ago | 51 comments

totally_safe_transmute, Line-by-Line (2021)(blog.yossarian.net)

70 points by iafisher 2 years ago | 32 comments

You don't need analytics on your blog(blog.yossarian.net)

48 points by woodruffw 2 years ago | 39 comments

GitHub Actions could be so much better(blog.yossarian.net)

386 points by woodruffw 3 years ago | 208 comments

A blog post by a longtime GitHub Actions user listing frustrations with the CI service and suggesting how GitHub could improve or fix them.

Show HN: Shaq, a CLI for Shazam(blog.yossarian.net)

132 points by woodruffw 3 years ago | 27 comments

PGP signatures on PyPI: worse than useless(blog.yossarian.net)

74 points by woodruffw 3 years ago | 71 comments