💯

Show Post

The macOS built-in curl, git, pip, python3, perl, ruby, and openssl all read /etc/ssl/cert.pem, which still has the emSign root, but they don't check revocation like Apple's Secure Transport libraries. This is, uh, a problem. git and pip especially. I added a short-term workaround to this page.

Show Post

Preview: New SIMD #compression mode in #golang minlz that uses pivco entropy coding on top of LZ matching. Compression like ZStandard with 2-5x faster decompression. Currently implemented with AVX2, AVX512 and NEON (untested). Independent blocks, giving seekable streams. Silensia, single threaded:

Show Post

Two major PHP remote code execution vulnerabilities fixed today: www.php.net/archive/2026... If you run PHP, take your site down until you can update. And be ready to do this again in a few days. ("If you see two ants in your kitchen, you don't have a two-ant problem.")

Show Post

Last year you told us what to fix. This year we shipped a new go fix. Coincidence? Not entirely. The 2026 Go Developer Survey is open through Nov 3 -- tell us what’s next: blink.qualtrics.com/jfe/form/SV_...

Show Post