When str.lower() is a security vulnerability in Python — Seth Larson

When str.lower() is a security vulnerability in Python — Seth Larson

🚀 Explore this must-read post from Hacker News 📖 📂 **Category**: 📌 **What You’ll Learn**: Some internet standards only support ASCII characters, but the world uses much more than the Latin alphabet. Thus, a mapping from Unicode to ASCII for use in domain names is required. NamePrep was part of that solution, defined in RFC 3491 as a profile of StringPrep, and is crucially a component of Internationalizing Domain Names in Applications (IDNA), also known as “IDNA 2003”. The StringPrep algorithm is defined in RFC 3454. IDNA 2003 has been obsoleted by IDNA 2008 defined in RFC 5890, 5891, 5892,…
Read More
Actually Queryable Executables | Farid Zakaria’s Blog

Actually Queryable Executables | Farid Zakaria’s Blog

🔥 Discover this trending post from Hacker News 📖 📂 **Category**: 📌 **What You’ll Learn**: I was pleasantly surprised and happy to see that my article ‘Your executable is a SQLite database’ resonated with people. It is a format I have been thinking about for a while, and the idea seems to have struck a chord with others. A quick recap: SELF, a format where the program is a SQLite database. We can use binfmt_misc to trigger a custom interpreter that maps the rows in the segments table and jumps to the entry point, and a whole class of binary…
Read More

python’s pre-declared constants are kinda weird

🚀 Read this awesome post from Hacker News 📖 📂 **Category**: ✅ **What You’ll Learn**: python has 6 pre-declared "constants": True, False, None, __debug__, Ellipsis (or equivalently ...), and NotImplemented. but they all behave slightly differently, for some reason. True, False, and None True, False, and None are keywords. they aren't identifiers, they're just straight up their own lexical tokens. which is really weird; nothing else is like this in python. usually stuff is resolved during regular name resolution, not in the lexer itself. an interesting side effect of this is that expressions like x.True raise a SyntaxError. i'm curious…
Read More
runetes/maiao: Seamless GitHub PR management from the command-line · GitHub

runetes/maiao: Seamless GitHub PR management from the command-line · GitHub

✨ Read this insightful post from Hacker News 📖 📂 **Category**: 📌 **What You’ll Learn**: Note: This is a community fork of adevinta/maiao. The original maintainers are no longer at Adevinta and the upstream repository is no longer actively maintained. This fork continues development under runetes/maiao. Gerrit-style code review workflow for GitHub, GitLab, Gitea, Forgejo, Bitbucket Cloud, and Cursor Origin Maiao brings the power of stacked pull requests (or merge requests) to your git hosting provider, enabling you to break large features into small, reviewable commits where each commit becomes its own PR/MR. Maiao provides the git review command that:…
Read More
swimmingbrain/texbrain: FOSS browser-based latex editor with live preview, real-time collaboration, and git integration. · GitHub

swimmingbrain/texbrain: FOSS browser-based latex editor with live preview, real-time collaboration, and git integration. · GitHub

✨ Explore this trending post from Hacker News 📖 📂 **Category**: ✅ **What You’ll Learn**: A free, open-source LaTeX editor that runs entirely in your browser.No accounts. No installs. No servers. Just open a tab and write. Try it now → tex.swimmingbrain.dev I built this because I was tired of paying for features that should be free. I wrote my thesis last year in LaTeX and spent more time fighting tooling than actually writing. Online solutions lock git sync behind a paywall. Local setups break between machines. I wanted something that just works. Open a browser, write LaTeX, get a…
Read More

Ripping Off the HEY.com Band-aid

💥 Discover this must-read post from Hacker News 📖 📂 **Category**: 📌 **What You’ll Learn**: When I was a teenager, years before I had dedicated myself to studying computer science, I wanted to learn how to make websites. Out of the many competing options, I found Ruby on Rails to be incredibly enticing. The purported speed with which high-quality websites could be developed was a big draw. It rested firmly on the shoulders of convention over configuration. I inspected the conventions and they taught me much about how websites were, or at least could have been, built. It all seemed…
Read More

Intent to ship: JPEG XL

✨ Check out this must-read post from Hacker News 📖 📂 **Category**: ✅ **What You’ll Learn**: As of Firefox 157 I intend to turn JPEG XL decoding on by default on all platforms. It has been developed behind image.jxl.enabled, which today is on by default on Nightly only, and has had a Firefox Labs checkbox on every channel since 152. The decoder is jxl-rs, in Rust.Bug to turn on by default: https://bugzilla.mozilla.org/show_bug.cgi?id=2065096Standard: ISO/IEC 18181, https://www.iso.org/standard/85066.htmlStandards body: ISO/IECPlatform coverage: allPreference: image.jxl.enabledStandards position: https://github.com/mozilla/standards-positions/issues/522 (neutral)TAG review: https://github.com/w3ctag/design-reviews/issues/633 (satisfied with concerns)Intent to prototype: https://groups.google.com/a/mozilla.org/d/msgid/dev-platform/53b4e3e0-5eee-4768-a1ba-b069e1e85244n%40mozilla.orgOther browsers: Safari shipped in 17.0 in 2023. Chrome has…
Read More
FDA Authorizes First Wearable Device That Continuously Monitors Both Ketone Levels and Blood Sugar

FDA Authorizes First Wearable Device That Continuously Monitors Both Ketone Levels and Blood Sugar

✨ Discover this insightful post from Hacker News 📖 📂 **Category**: ✅ **What You’ll Learn**: For Immediate Release: August 25, 2026 The U.S. Food and Drug Administration today authorized the Libre Duo 10 Day Continuous Dual Glucose Ketone Monitoring System for people aged 2 years and older living with diabetes. The Libre Duo 10 Day is the first wearable device in the U.S. that continuously monitors ketone levels, and the first in the world to continuously monitor both ketones and blood sugar (glucose) together in a single device.“Today’s authorization is a breakthrough for the safety of children and adults living…
Read More
Dolly Parton, country star, actor and philanthropist, dies aged 80 | Dolly Parton

Dolly Parton, country star, actor and philanthropist, dies aged 80 | Dolly Parton

🚀 Check out this must-read post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: Dolly Parton, one of the greatest singer-songwriters in country music who was also much cherished for her philanthropy, has died aged 80.Her death was announced by nephew Brian Seaver on Instagram. “I have imagined the heaviness of this moment but haven’t truly felt it until now,” he said. “It is an honour, an honour that is mixed with absolute pride and great sadness.”So gifted that she wrote two of the 20th century’s greatest songs – Jolene and I Will Always Love You – in…
Read More
Founding full-stack growth Engineer at Clara

Founding full-stack growth Engineer at Clara

💥 Read this awesome post from Hacker News 📖 📂 **Category**: 💡 **What You’ll Learn**: You'll own Clara's growth engine, supporting our mission by helping more patients discover Clara and turn to it for their day-to-day primary care needs. Landing pages, onboarding funnel, experimentation, attribution, and lifecycle messaging all belong to you. You'll work across the entire funnel - from the first ad impression or search result, through signup and onboarding, into first chat, subscription and long-term retention. You'll write the code, ship the pages, wire the events, run the tests, and read the results yourself. You'll partner closely with…
Read More