The Ken Thompson Hack(wiki.c2.com)

98 points by stephc_int13 2 years ago | 27 comments

Short session expiration does not help security(sjoerdlangkemper.nl)

653 points by ColinWright 3 years ago | 388 comments

Blog post by Sjoerd Langkemper arguing that short session expiration times in web applications do not meaningfully improve security.

2FA or Not 2FA(mikhailian.mova.org)

35 points by sam_lowry_ 1 year ago | 66 comments

Safe SIMD in Rust, even on the inside(shnatsel.github.io)

54 points by ravenical 16 days ago | 3 comments

Blog post by Sergey Davidoff on making SIMD abstractions in Rust safe internally, avoiding unsafe raw intrinsics.

Show HN: Lissom.CSS - A classless, minimalist, and themeable CSS library(lissomware.github.io)

43 points by Looky1173 3 years ago | 38 comments

Chromium bug bounty money tree browser(lyra.horse)

332 points by admp 2 years ago | 72 comments

An interactive tree browser that maps Chrome Vulnerability Reward Program bounty payouts to the Chromium source files changed by the corresponding fixes.