A script

Hacker news thread: https://news.ycombinator.com/item?id=46092338

(via https://shaarli.zoemp.be/shaare/xtCl-Q)

Landlock shines when an application has a predictable set of files or directories it needs. For example, a web server could restrict itself to accessing only /var/www/html and /tmp.

The author reminds Linux has security issues on most major distributions and each tools trying to improve the state of securit on Linux has drawbacks: Containerization, Flatpak, Firejail, seccomp, SELinux, AppArmor and Landlock.

Landlock fills a major gap: a simple, self-cotnained unprivileged sandboxing tool.

Read more on the landlock.io

How to serve typescript file?

Using a proxy mounted on a route that did a passthrough to a vite front-end app And in production we switched out that proxy for a StaticDir.

I use vite. In development vite dev server proxies requests to (axum) backend, for production vite compiles the frontend bits into a bundle that can be served by axum in a specific route. I'm sure ServeDir would work with this setup, but I actually include the bundle in my executable with a small macro which makes deployments stupid simple.

How to optimize a rust program to squeeze maximum performance and as little RAM as possible

We performed an empirical study to investigate whether the context of interruptions makes a difference. We found that context does not make a difference but surprisingly, people completed interrupted tasks in less time with no difference in quality. Our data suggests that people compensate for interruptions by working faster, but this comes at a price: experiencing more stress, higher frustration, time pressure and effort. Individual differences exist in the management of interruptions: personality measures of openness to experience and need for personal structure predict disruption costs of interruptions. We discuss implications for how system design can support interrupted work.

The devlog
https://plok.sh/harmoneer/taman

Taman is a TUI Pomodoro productivity app where your focus sessions literally grow plants!

• Amazon to build massive data center for the government: https://www.theregister.com/2025/11/25/aws_federal_investment/
• Google wins AI and security management contract for NATO: https://www.computerweekly.com/news/366634759/Google-wins-multimillion-pound-contract-to-supply-sovereign-cloud-services-to-Nato

Maybe there is more to come

Testing sucks because you try to test implementation details. This results in you writing tests to pass your code. That’s not useful, because…

Instead, you should…

1. Write an empty test, with one comment for each external behavior your code should display.
2. Write the code to test each comment below it.
3. Then write the actual code to make it so.

Rust is not just great, it's inevitable. [...] like solar

If you compare this map of solar energy potential from Global Solar Atlas to this table of current solar capacity, you will easily see that we are still at the beginning of the solar revolution.

The same is true for Rust. Improved reliability, reduced time-to-market, far lower costs. Which rational actor wouldn't want that? As the Cloudflare, Proton and Signal case studies have demonstrated, investing in Rust today will yield far better returns than other technological investments you can make

Comment fonctionne donc le paiement par carte bancaire en 14 minutes

m.wikipedia.org is merged with the main domain. It reduces the complexity, and two versions of the website.

• Copy and paste blocked?
• Contextual menu blocked?
• Keyboard shortcuts blocked?
• Autoplaying videos?
• URL tracking parameters?

Inconsistencies spotted. The URL scheme are hidden or displayed without clear rules

But the bigger problem, the ultimate cause, behind today's chaos is the creeping centralisation of the internet and a society that is sleepwalking into assuming the net is always on and always working.

Outages like today's are a good thing because they're a warning.

As the same result as a monoculture of banana, the internet need different actors and diversity of services.

It uses an S3 bucket for it.

les chercheurs ont réussi à fabriquer une substance dont la densité est inférieure à celle de l’hélium et à peine supérieure à celle de l’hydrogène. Cet exploit ne se limite pas à un simple record inscrit dans les livres d’histoire ; il ouvre la porte à des révolutions technologiques concrètes, allant de la dépollution des océans à la conception des batteries du futur, en passant par l’isolation des prochaines missions martiennes.

Sa structure est un motif hexagonal parfait de l'épaisseur d'un seul atome.
Cette configuration bidimensionnelle confère au graphène des propriétés extraordinaires : il est extrêmement conducteur, flexible et théoriquement deux cents fois plus résistant que l’acier à poids égal.

Grâce à l'Université du Zhejiang en Chine, la méthode de liophilisation puis de sublimation permet d'obtenir une mousse de carbone pur, ayant une densité de 0.16 milligramme par centimètre cube (à comparer avec la densité de l'air ambiant de 1.2 milligramme); soit sept fois plus léger.

Le matériau est élastique, comprimable jusqu'à 80% son volume initial. Il peut absorber les chocs, donc ce serait un matériau très pertinent pour l'industrie aérospatiale.

Au vu de sa structure, ce serait aussi un isolant excellent.

Le matériau est hydrophobe mais lipophile: il peut donc attirer les huils et hydrocarbures. [...] Un gramme d’aérogel de graphène peut absorber jusqu’à 900 fois son propre poids en pétrole.

Il semble aussi intéressant pour stocker l'énergie en allégeant le poids des batteries. De même en biomédecine, le matériau pourrait être utilisé comme "échafaudage" pour faire crôitre des cellules osseuses ou nerveuses.

Le principal frein du matériau est le coût de production, mais le procédé de fabrication semble s'industrialiser.