If someone asks you how many people were at a concert, you don’t count them one by one: you look, make a rough guess and say “about five thousand”. You might be off by a few hundred, but it took you two seconds and you didn’t need to write down anyone’s name. Probabilistic data structures …
The cuckoo doesn’t build a nest: it lays its egg in another bird’s, which incubates and feeds it as its own. Nobody checks what’s inside the egg, only that it’s in the nest. Something similar has …
Some people plant four lettuces and water them whenever they remember, and then there’s Javier de la Torre, founder of CARTO, who plants four lettuces and ends up building a lakehouse, eight moisture probes, a …
Some tools you use so often that you stop seeing them, like a light switch: nobody stops to wonder who made it or when. That’s what happens to me with curl. I type it several times a day to test an API, check some …
Researchers at Apiiro have found over 100,000 .claude/settings.local.json files pushed to public GitHub repositories. Of those, around 1,100, from 63 different organisations, had secrets inside: database passwords, API …
Since November 5, Outlook.com (and with it Hotmail, Live and MSN) has been bouncing part of the mail sent from domains that don’t publish a DMARC record. Thomas A. Johnson, from MailRoute, spotted it in their own …
Daniil Gentili has announced Psalm 7, the new version of the PHP static analyser. The list of changes is huge, but one stands out above the rest: security analysis is on by default and runs in the same pass as type …
This Friday, at our “backend bi-weekly”, we spent several hours talking about AI and how it will affect us in the future: whether it will change our jobs (not as some grim hypothetical, but as a short-term …
Ozgun Kultekin, from Wakefield, has published sshhole, a flaw in OpenSSH on Linux systems that use musl as their C library instead of glibc. On those systems, under certain conditions, sshd accepts any password longer …
The Go team has published A new Go API for JSON, announcing that the encoding/json/v2 and encoding/json/jsontext packages are stable as of Go 1.27. It’s the first time Go’s standard library ships a version 2 …
Postman is one of those tools that has been installed on almost every developer’s machine for years. That’s why an issue opened in its support repository caught my attention, with a rather blunt title: the …
A couple of days ago I wrote that Postgres 19 is late and that three big features were dropped along the way. Fortunately, among what does make it there’s something many people who run Postgres have been waiting …
