I wish Rust were easier to pick up | How Linkerd became resilient to CVE-2023-44487, a HTTP/2 DDOS vulnerability, six months prior to its disclosure
Yesterday, CVE-2023-44487, a DDOS vulnerability in many HTTP/2 implementations, was disclosed. This is a very interesting attack involving the specifics of how HTTP/2 multiplexes concurrent requests on the same TCP connection, and there are several great writeups on how it works—see e.g. Cloudflare’s HTTP/2 Rapid Reset: deconstructing the record-breaking attack and Google’s How it works: The novel HTTP/2 ‘Rapid Reset’ DDoS attack for details of how this attack works and the consequences.
Ubuntu Desktop 23.10 ISOs Recalled Due To Malicious User Translations
Hours after the release of Ubuntu 23.10, Canonical has pulled the ISOs and is re-spinning them after user-submitted translations for the Ubuntu installer turned out to contain hate speech.
iamadamdev/bypass-paywalls-chrome: Bypass Paywalls web browser extension for Chrome and Firefox.
Bypass Paywalls web browser extension for Chrome and Firefox. - iamadamdev/bypass-paywalls-chrome: Bypass Paywalls web browser extension for Chrome and Firefox.
jinyus/related_post_gen: Data Processing benchmark featuring Rust, Go, Swift, Zig, Julia etc.
Data Processing benchmark featuring Rust, Go, Swift, Zig, Julia etc. - jinyus/related_post_gen: Data Processing benchmark featuring Rust, Go, Swift, Zig, Julia etc.
mogenius/punq: A slim open-source workload manager for Kubernetes with team collaboration, WebApp, and CLI.
A slim open-source workload manager for Kubernetes with team collaboration, WebApp, and CLI. - mogenius/punq: A slim open-source workload manager for Kubernetes with team collaboration, WebApp, and...
ossf/malicious-packages: A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format. - GitHub - ossf/malicious-packages: A reposi...
Scrollbars. Ever heard of them? They’re pretty cool. Click and drag on a scrollbar and you can move content around in a scrollable content pane. I love that shit. Every day I am scrolling on my computer, all day long. But the scrollbars are getting smaller and this is increasingly becoming a problem. I would show you screenshots but they’re so small that even screenshotting them is hard to do. And people keep making them even smaller, hiding them away, its like they don’t want you to scroll! “Ah”, they say, “that’s what the scroll wheel is for”. My friend, not everyone can use a scroll wheel or a swipe up touch screen. And me, a happy scroll-wheeler, even I would like to quickly jump around some time.
Been waiting for this! | Release Alpha 0.1.0 · spacedriveapp/spacedrive
After 15 months of development we are extremely excited to be releasing the first version of Spacedrive as an early public alpha.
This is an MVP, and by no means feature complete. Please test out t...
Ruby Central's OSS Work Now Supported by Sovereign Tech Fund
We’re excited to announce our second partnership with the German Sovereign Tech Fund (STF) to support Ruby Central’s open source maintenance, development, and security work on Bundler and RubyGems. These tools are critical infrastructure which hundreds of thousands of Ruby developers rely on to do their work every