Htmx does not play well with content security policy(sjoerdlangkemper.nl)

71 points by Tangiest 2 years ago | 29 comments

String Comparison Timing Attacks(sjoerdlangkemper.nl)

22 points by todsacerdoti 2 years ago | 10 comments

Supporting org.apache.xml.security in graalVM(guust.ysebie.be)

23 points by whizzx 1 year ago | 3 comments

Stop using JSON Web Tokens for user sessions(ds-security.com)

63 points by Moneysac 2 years ago | 98 comments

Visual explanation of SAML authentication (2020)(sheshbabu.com)

70 points by rkwz 2 years ago | 27 comments

PostgreSQL and FIPS Mode(peter.eisentraut.org)

65 points by chmaynard 2 years ago | 23 comments

Good software knows when to stop(ogirardot.writizzy.com)

519 points by ssaboum 7 months ago | 261 comments

Blog post by Olivier Girardot arguing that good software should know when to stop adding features, opening with a hypothetical surprising change to the ls command.

Today's PHP security release, and how we're strengthening security(thephp.foundation)

761 points by ejohnso49 5 days ago | 394 comments

PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.

Backups Aren't Simple(filipovski.net)

318 points by afilipovski 1 month ago | 190 comments

Personal blog post by Aleksandar Filipovski arguing that backups are more complex than they seem, starting from a family story of losing photos to a reformatted drive.

Artificial intelligence is losing hype(economist.com)

453 points by bx376 2 years ago | 663 comments

An Economist Free exchange column arguing that artificial intelligence is losing hype and asking whether that signals the technology will eventually succeed.

JavaScript dates are about to be fixed(docs.timetime.in)

328 points by thunderbong 2 years ago | 237 comments

Blog post from TimeTime.in explaining the ECMAScript Temporal proposal and its ZonedDateTime object as a fix for JavaScript date handling.

AI will make formal verification go mainstream(martin.kleppmann.com)

782 points by evankhoury 10 months ago | 394 comments

Martin Kleppmann blog post predicting that AI will bring formal verification with proof assistants like Rocq, Isabelle and Lean into mainstream software engineering.