345 private links
La meilleure application gérant les OTPs pour de l'authentification deux facteurs que j'ai trouvé jusqu'à maintenant.
Firefox can recover from all processes crashes except the main process if a memory allocation fails on Windows
If a content process died we would need to reload it if it was the GPU process instead the browser would briefly flash while we relaunched it; either way, the result is less disruptive than a full browser crash.
And the OS provides more commit space than before. It reduced more than 70% of the crashes.
The book is available as website https://www.techinterviewhandbook.org/
HashiCorp co-founder and Ghostty creator Mitchell Hashimoto, now a co-founder of Superlogical, takes it even further. He thinks “the future is that large open source projects will close contributions completely.”
Ruiz responded, “It just makes less sense to have people contributing code if the issue is decently well-specified and the code can be written by agents.”
and this is how the open source could die by closing itself and "the code can be written by agents".
Developing issues instead of MRs may be a solution.
Yes because:
- it helps practice writing
- providing variety (another source different from books, docs, videos and academic papers)
- to cement understanding
Ideas to write about:
- process, failure and successes to figuring something out
- hack on some major open source project
- in-depth comparison of projects or approaches, down to source code
- building minimal versions of some production system
- mistakes you made in structuring organizations, or production architecture, or testing
To teach and share, to encourage others, for the community
Three Rings is a secure, online volunteer management system, designed to let volunteers give their time to the causes they care about without the hassle.
The UI seems a bit old though, but the project seems to be very valuable, because of its market.
how do people blog for thirty years without running out of things to say? I think I was approaching it from the wrong direction. Nobody sits down with thirty years’ worth of material ready to go. They just keep finding things interesting for thirty years.
Blogging for three decades requires to stay curious.
TL;DR: we spend more CPU cycles rendering commits for scrapers than we spend on all other kinds of legitimate access, including git clones. At any one time, across 5 geo-distributed nodes, there are 14 CPU cores doing nothing but rendering git commits as html.
AI crawlers are idiot: their are consuming the HTML diff of the commits insteadof cloning the repository locally...
Comment éviter le .env, un fichier en clair
Open Apps is a directory of real open-source applications you can run, study, compare, and contribute to. It started from the public-domain Open Source Flutter Apps collection and has grown into a multi-stack directory of mobile, web, and desktop apps.
and its blog post: Why Astro matters
La CNIL est signalée par PURR au Comité Européen pour la Protection des Données le 7 août 2026.
Le signalement est disponible à l'adresse https://asso-purr.eu.org/assets/media/20260807-cepd-incoherences.pdf
It's bad civic hygiene to build technologies that could someday be used to facilitate a police state. - Bruce Schneier
The paper describe child sexual abuse material (CSAM) on the Fediverse. It relates CSAM exists across essentially every sufficiently large online communications environment. Rather, the researchers argue that federation creates a distinctive set of technical, organizational, and legal problems for detecting, reporting, and removing CSAM: removing content (or stopping content propagation), different rules are used accross the Fediverse,
The existing child-safety technologies designed for centralized platforms do not map cleanly onto federated networks. The researchers conducted an investigation 325 000 posts during two post days.
Human moderators are important for the Fediverse but it's also a burden placed on volunteer administrators. CSAM detection is not enough and account enforcement is also difficult because one user can create another account on another instance.
The report promotes:
- easier access to CSAM hash-matching technologies;
- standardized reporting procedures;
- better tools for volunteer moderators;
- training and support for administrators;
- mechanisms for sharing threat information;
- stronger cross-instance blocking;
- better detection of abusive accounts and repeat offenders; and
- improved coordination with organizations and authorities responsible for child protection.
In this post, I’ll walk through a set of common misconceptions that drive teams to introduce new infrastructure when they don’t need to. All of these can be solved with vanilla PostgreSQL 18 using standard extensions available on RDS, with no special infrastructure and no distributed-systems cosplay.
The database can be used for many things people often miss:
- user roles (finance) for modularity. In particular, a proper role can be used for defining very precise interfaces on top of database objects
- domains can be defined as an application of the abtract data type to database management
- a table for transfers can be stored with a system-time temporal table
- account audits (store old versions for logs)
- transaction state machine with functions
- record size estimation
- Heap-Only Tuple to avoid write amplification when primary keys are aligned with immutable columns. It enables faster updates. See https://ebellani.github.io/blog/2026/all-you-need-is-postgresql/#introduction:~:text=Enabling%20HOT%20Updates%20for%20Transfers,-By
- excellent OLTP (quick read and write individual rows) with a primary key reflecting the access pattern
- view to reuse queries from multiple tables
- excellent OLAP: large volumes of data while allowing quick query response times: a
finance.balance_ledgertable stores a snapshot of both balances after every transaction. - incremental maintenance via triggers
- correct isolation with
alter role finance set default_transaction_isolation = 'serializable';. If a cyclic transaction is detected, then one of the transaction fails. The application must be prepared to retry aborted transactions, but the invariants are never violated.
Key takeaways:
- 766 TPS overall with 0 failed transactions. The startup target of 10,000 transfers/day is ~0.12 TPS. We exceed that by over 6,000x, confirming massive headroom on modest hardware.
- 0 serialization failures: Despite 10 concurrent clients writing to 100 accounts under SERIALIZABLE isolation, no transactions were aborted. The working set is distributed across enough accounts that write contention is negligible at this scale.
- 8ms average read latency: The UNION ALL view over 4 tables plus the balance ledger lookup completes well within interactive response time, even as the tables grow throughout the 60-second run.
- 33ms average write latency: Each write transaction exercises the full constraint set that implements complex business logic (audit trails, time constraints, balances, etc) all within 33ms. This is the true cost of enforcing every business rule at the data level, and it is more than acceptable.
The full SQL is provided at the end.
Different algorithms can be used:
Full jitter:
sleep = random(0, min(cap, base * 2 ** attempt)
Equal jitter:
temp = min(cap, base * 2 ** attempt)
sleep = temp / 2 + random_between(0, temp / 2)
Decorrelated Jitter (based on the last sleep value):
sleep = min(cap, random_between(base, sleep * 3)The official CSV file contains comment in parentheses. Why not using a dedicated field per row for it?
If the line is longer, then the text is split to multiple line. The postcode, names are repeated.
issues. There are catch-all postal codes for many areas, where the neighborhood is given as "except the following", and the only thing to do is look for that exact string and exclude it.
The separate romaji file is of low quality.
That's why posuto aims to simplify this.