CircleCI incident report for January 4, 2023 security incident
CircleCI incident report for January 4, 2023 security incident On January 4, 2023, we alerted customers to a security incident. Today, we want to share with you what happened, what we’ve learned, and what our plans are to continuously improve our security posture for the future. We would like to thank our customers for your attention to rotating and revoking secrets, and apologize for any disrupti
At Airplane, we collect observability data from our own systems as well as remote “agents” that are running in our customers’ infrastructure. The associated outputs, which include the standard “three pillars of observability” (logs, metrics, and traces) are essential for us to monitor our infrastructure and also help customers debug problems in theirs. Over the last year, we’ve made a concerted ef
How Back/forward Cache Helped Yahoo! JAPAN News Increase Revenue by 9% on Mobile Stay organized with collections Save and categorize content based on your preferences. Back/forward cache (or bfcache) is a browser optimization that enables instant back and forward navigation. It significantly improves the browsing experience for users, especially for websites that involve many back and forth naviga
Last updated on July 30, 2020, at 5:45 PM PT with new sections below on “What we know now” and “What we’re doing to protect our service”. ---------------------------------------------------------------------------------------------------------- July 30, 2020 As our investigation continues, we’re sharing an update to answer some of the remaining questions based on what we’ve discovered to date. We
Modern CSS in Real Life
Hey! Chris Coyier here. This is a blog-itized version of a presentation I created. It started life as a Keynote file which I presented in person at RenderATL in June of 2023. I put a lot of work into it! I’m so grateful to everyone who came and saw it. But you can’t beat the reach of websites! I decided I should get some more mileage out of it by sharing it here in an adapted form. I suppose you s
Release: Yarn 4.0 🪄⚗️ | Yarn
Today is the day! After more than a year of work, our team is excited to finally put a fancy "stable" sticker on the first release from the 4.x release line! To celebrate, let's make together a tour of the major changes; should you look for a more itemized list, take a look at the changelog. Breaking ChangesHere's what you need to know when upgrading from 3.x projects: We now require Node.js 18+.N
Apple’s new iCloud Private Relay service allows users to hide their IP addresses and DNS requests from websites and network service providers. In this article, we’ll demonstrate how this security feature can be circumvented and discuss what users can do to prevent their data from being leaked. You’ll need to turn on iCloud Private Relay to test the vulnerability. At the moment iCloud Private Relay
The values of Emacs, the Neovim revolution, and the VSCode gorilla
In 2018 Bryan Cantrill gave a brilliant talk where he shared his recent experiences with the Rust programming language. More profoundly, he explored a facet of software that is oftentimes overlooked: the values of the software we use. To paraphrase him slightly: Values are defined as expressions of relative importance. Two things that we're comparing could both be good attributes. The real questio
How to speed up the Rust compiler one last time – Nicholas Nethercote
Due to recent changes at Mozilla my time working on the Rust compiler is drawing to a close. I am still at Mozilla, but I will be focusing on Firefox work for the foreseeable future. So I thought I would wrap up my “How to speed up the Rust compiler” series, which started in 2016. Looking back I wrote ten “How to speed up the Rust compiler” posts. How to speed up the Rust compiler.The original pos
Highlights from Git 2.34
EngineeringOpen SourceHighlights from Git 2.34To celebrate this most recent release, here's GitHub's look at some of the most interesting features and changes introduced since last time. The open source Git project just released Git 2.34 with features and bug fixes from over 109 contributors, 29 of them new. We last caught up with you on the latest in Git back when 2.33 was released. To celebrate
The Maturing of QUIC
The Maturing of QUICIt’s no secret Fastly loves QUIC. Not only because we believe it is a necessary step toward a better, more trusted internet. But also because some of us here have been actively involved in the process of taking QUIC from an experiment to an internet standard for more than six years. QUIC continues to evolve through a collaborative and iterative process at the IETF — of adding f
South Korea’s ‘Sender Pays’ Policy Is a Threat to the Internet
The “sender pays” model is poised to create fragmentation of digital rules and standards, compromising the digital ecosystems that have been at the heart of the internet’s innovation and growth. When the presidents of South Korea and the United States met in May, they highlighted their shared belief in the benefits afforded by an open, global, interoperable, reliable, and secure internet. They com
It’s always been a bit of a balancing act to decide which games I write about in detail here — a matter of balancing my level of personal interest in each candidate against its historical importance. In the early years of this project especially, when I still saw it as focusing almost exclusively on narrative-oriented games, I passed over some worthy candidates because I considered them somewhat o
J.K. Rowling Writes about Her Reasons for Speaking out on Sex and Gender Issues - J.K. Rowling
10 June 2020 J.K. Rowling Writes about Her Reasons for Speaking out on Sex and Gender Issues Warning: The below content is not appropriate for children. Please check with an adult before you read this page. To go back to the children’s page, please click here. This isn’t an easy piece to write, for reasons that will shortly become clear, but I know it’s time to explain myself on an issue surrounde
An iOS zero-click radio proximity exploit odyssey
Posted by Ian Beer, Project Zero NOTE: This specific issue was fixed before the launch of Privacy-Preserving Contact Tracing in iOS 13.5 in May 2020. In this demo I remotely trigger an unauthenticated kernel memory corruption vulnerability which causes all iOS devices in radio-proximity to reboot, with no user interaction. Over the next 30'000 words I'll cover the entire process to go from this ba
Order Toltem 4mg Low Price - Where to Order Tolterodine Safely - Cars and Car Parts Answers
Order Toltem 4mg Low Price - Where to Order Tolterodine Safely Wholesale Toltem Order Online Where To Buy Toltem Melbourne Australia. Cheapest Online Pharmacy Toltem. Buy Toltem Leads BUY Toltem ONLINE! - CLICK HERE! toltem buy xl, buy toltem us pharmacy, buy toltem safely, buy toltem portland, discount canadian drugs toltem generic, is tolterodine legal to order online, toltem where safe to buy,
The importance of a handbook-first approach to communication
A handbook-first approach to communication is sneakily vital to a well-run business. While it feels skippable — inefficient, even — the outsized benefits of intentionally writing down and organizing process, culture, and solutions are staggering. Conversely, avoiding structured documentation is the best way to instill a low-level sense of chaos and confusion that hampers growth across the board. G
As the IETF nears completion of the QUIC version 1 specification, we see renewed interest in extensions such as “forward error correction” or “unreliable streams”. In both cases, the goal is to mitigate the effect of packet losses, either by using redundancy to correct them, or by delivering the data to the application immediately to reduce latency. But before we devise such schemes, I think we sh
700,000 lines of code, 20 years, and one developer: How Dwarf Fortress is built - Stack Overflow
[Ed. note: While we take some time to rest up over the holidays and prepare for next year, we are re-publishing our top ten posts for the year. This is our number one post of 2021! Thanks for reading and we'll see you in the new year. ] Dwarf Fortress is one of those oddball passion projects that’s broken into Internet consciousness. It’s a free game where you play either an adventurer or a fortre
This page was originally created on 10-Mar-2021 and last edited on 28-Jun-2022. Introduction Manuel Matuzović wrote a blog post Building the most inaccessible site possible with a perfect Lighthouse score as a concept to show the limitations of automated testing tools. This idea came from a Tweet from Zach Leatherman, in which he suggested Free blog post idea: How to Build the Slowest Website with
An Uyghur instructor stands near a window during a class at the Xinjiang Islamic Institute as a Chinese flag flies outside, as seen during a government organized visit for foreign journalists, in Urumqi in western China’s Xinjiang Uyghur Autonomous Region on April 22, 2021. Credit: AP Photo/Mark Schiefelbein Over recent months, China’s government has been in overdrive to combat allegations of huma
Modern Web Development on the JAMstack: Modern Techniques for Ultra Fast Sites and Web Applications
Really pause and think about how much time and effort web teams around the world have spent building and managing infrastructure. For many years, launching a site or web application has been as much about deploying complex server environments as it’s been about building actual application code. The cloud made provision- ing all these resources faster but no less complicated. The JAMstack was born
この文章はアントグループの各KPI数字、財務構造、株主構造、組織構造の順を追って説明します。 ーーーーーーーーーーー アリペイの親会社であるアントグループは、世界の投資家の注目を集めているスーパーユニコーンのIPOスプリントで最新の進展を見せ、8月25日夜、証券取引所のCRE委員会と香港証券取引所にそれぞれ上場申請書を提出し、目論見書を発表しました。 これは、アントグループが上場に向けて重要な一歩を踏み出したことを意味しています。 目論見書の文書は、総資本の発行後のアントグループは30,038.97万株、1株当たりの発行価格と目標評価額はまだ決定されていませんが、業界関係者は一般的にアントが近年世界最大級のIPOを記録する可能性が高いと考えています。 2年前、2018年にアントグループがシリーズCラウンドを調達したとき、公開されたレポートによると1500億ドルと評価されていました。 500
2021 Trafficking in Persons Report - United States Department of State
Message From the Secretary of State Dear Reader: This year’s Trafficking in Persons Report sends a strong message to the world that global crises, such as the COVID-19 pandemic, climate change, and enduring discriminatory policies and practices, have a disproportionate effect on individuals already oppressed by other injustices. These challenges further compound existing vulnerabilities to exploi
How a Docker footgun led to a vandal deleting NewsBlur’s MongoDB database
tl;dr: A vandal deleted NewsBlur’s MongoDB database during a migration. No data was stolen or lost. I’m in the process of moving everything on NewsBlur over to Docker containers in prep for a big redesign launching next week. It’s been a great year of maintenance and I’ve enjoyed the fruits of Ansible + Docker for NewsBlur’s 5 database servers (PostgreSQL, MongoDB, Redis, Elasticsearch, and soon M
Google Fires Another Worker for Exercising her Rights and Protecting Coworkers from Illegal…
My name is Kathryn Spiers. I was at Google for just under 2 years. I worked on the Platform Security team, focusing on Chrome’s use within Google. Part of my job was to write browser notifications so that my coworkers can be automatically notified of employee guidelines and company policies while they surf the web. I was very good at my job and Google has acknowledged this. My last three performan
Why does DARPA work?
Stay in the Loop This is hopefully only the beginning of a larger project! How can we enable more science fiction to become reality? If you want to do something, it usually pays to study those who have done that thing successfully in the past. Asking ‘what is this outlier’s production function?’ can provide a starting point. DARPA is an outlier organization in the world of turning science fiction
We, the leaders of the Group of Seven, met in Cornwall on 11-13 June 2021 determined to beat COVID-19 and build back better. We remembered everyone who has been lost to the pandemic and paid tribute to those still striving to overcome it. Inspired by their example of collaboration and determination, we gathered united by the principle that brought us together originally, that shared beliefs and s
マスク氏がTwitterのCEOに就任してから、マスク氏は「Twitterが過去に行った悪いことを表面化する」と宣言し、Twitterの社内文書をまとめた暴露情報「Twitterファイル」の拡散を手伝っています。2022年12月21日に公開された「Twitterファイル」の第8弾では、Twitterがアメリカ軍のプロパガンダ形成に協力していた実態が明らかになりました。 1. TWITTER FILES PART 8 *How Twitter Quietly Aided the Pentagon’s Covert Online PsyOp Campaign* Despite promises to shut down covert state-run propaganda networks, Twitter docs show that the social media giant dire
Out of the Tar Pit [pdf]
Out of the Tar Pit Ben Moseley ben@moseley.name Peter Marks public@indigomail.net February 6, 2006 Abstract Complexity is the single major difficulty in the successful develop- ment of large-scale software systems. Following Brooks we distinguish accidental from essential difficulty, but disagree with his premise that most complexity remaining in contemporary systems is essential. We identify comm
Post-Cookie Apocalypse, IAB Unveils 'Project Rearc' | AdExchanger
Without cookies, digital advertising needs to be rebuilt. The IAB wants to partner across brands, agencies, publishers and tech companies to develop a new way to power digital advertising, IAB CEO Randall Rothenberg told members at the IAB Annual Leadership Meeting in Palm Springs, California, Monday. Dubbed “Project Rearc,” for re-architecture, a critical part of this multi-phase plan calls for I
IAPによるハゲタカジャーナル・学会についての調査報告書 名古屋大学附属図書館・大平司（おおひらつかさ） 2022年3月，140以上の科学アカデミー等が加盟している世界的な国際学術団体InterAcademy Partnership（IAP）が，いわゆるハゲタカジャーナル・学会（predatory journals and conferences）に関する調査報告書“Combatting Predatory Academic Journals and Conferences”（以下「報告書」）を公開した。 本報告書は，2020年に設置されたIAPの国際ワーキンググループによる2年間の研究プロジェクトの結果として作成された。その目的は，学術的なコミュニティがハゲタカジャーナル・学会（CA1960参照）についての認識・理解を促進し，それらへの対応方法を提示することである。 本稿では本報告書の内
Opinion: Sorry, banning plastic bags won’t save our planet
This article was published more than 4 years ago. Some information may no longer be current. Bjorn Lomborg is president of the Copenhagen Consensus Center. Last week, Prime Minister Justin Trudeau announced a plan to reduce plastic pollution, which will include a ban on single-use plastics as early as 2021. This is laudable: plastics clog drains and cause floods, litter nature and kill animals and
As Elixir's Machine Learning (ML) ecosystem grows, many Elixir enthusiasts who wish to adopt the new machine learning libraries in their projects are stuck at a crossroads of wanting to move away from their existing ML stack (typically Python) while not having a clear path of how to do so. I would like to take some time to talk to WHY I believe now is a good time to start porting over Machine Lear
With Great Power Comes Great Responsibility: Platforms Want To Be Utilities, Self-Govern Like Empires
With Great Power Comes Great Responsibility: Platforms Want To Be Utilities, Self-Govern Like Empires Believe the Hype After decades of hype, it’s only natural for your eyes to skate over corporate mission-statements without stopping to take note of them, but when it comes to ending your relationship with them, tech giants’ stated goals take on a sinister cast. Whether it’s “bringing the world cl
By 422737 Googleが、「特定のウェブサイトを訪れるたびに団結権に関する文章を通知する社内向けChrome拡張機能」を開発したセキュリティエンジニアの女性を解雇しました。 Google Fires Another Worker for Exercising her Rights and Protecting Coworkers from Illegal Company Retaliation https://medium.com/@ksspiers/google-fires-another-worker-for-exercising-her-rights-and-protecting-coworkers-from-illegal-b86c41ef91b9 Security engineer says Google fired her for trying to notify c
Maybe you hesitate. Is it a fact that if Trump loses, he will reject defeat, come what may? Do we know that? Technically, you feel obliged to point out, the proposition is framed in the future conditional, and prophecy is no man’s gift, and so forth. With all due respect, that is pettifoggery. We know this man. We cannot afford to pretend. Trump’s behavior and declared intent leave no room to supp
Python For Feature Film
This post was originally part of my series on Python for Feature Film on my personal site, but is being ported here with minor changes. The dates have been adjusted to match release dates for the projects. Python is a programming language that has become integral to the movie making process over the last few years. There’s rarely an animated feature or visual effects film, if any, that hasn’t had
The More You Know, The More You Know You Don’t Know
A Year in Review of 0-days Used In-the-Wild in 2021 Posted by Maddie Stone, Google Project Zero This is our third annual year in review of 0-days exploited in-the-wild [2020, 2019]. Each year we’ve looked back at all of the detected and disclosed in-the-wild 0-days as a group and synthesized what we think the trends and takeaways are. The goal of this report is not to detail each individual exploi
Zack Beauchamp is a senior correspondent at Vox, where he covers ideology and challenges to democracy, both at home and abroad. Before coming to Vox in 2014, he edited TP Ideas, a section of Think Progress devoted to the ideas shaping our political world. There've been demonstrations around the world over the war between Israel and Hamas, often against Israel's role in the conflict. So clearly som
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Migrating to OpenTelemetry | Airplane
How Back/forward Cache Helped Yahoo! JAPAN News Increase Revenue by 9% on Mobile | web.dev
An update on our security incident
iOS 15 iCloud Private Relay Vulnerability Identified
» Lode Runner The Digital Antiquarian
Parsing QUIC logs and assessing packet losses
Making the slowest 'fast' page
What Do Chinese People Think Is Happening in Xinjiang?
アントグループの上場目論見書ダイジェストーー世界一のユニコーンの財務構造いち早く理解する｜Lucheng LI
CARBIS BAY G7 SUMMIT COMMUNIQUÉ | The White House
Twitterは国防総省が極秘に進める中東プロパガンダ・キャンペーンを2017年から支援していたと内部文書で発覚
E2542 – IAPによるハゲタカジャーナル・学会についての調査報告書
From Python to Elixir Machine Learning
Googleが「労働者の権利を通知する社内向けChrome拡張機能」を開発した女性を解雇
The Election That Could Break America
How the world sees Israel, in one chart