Nearly all UK drivers say headlights are too bright

Nearly all UK drivers said they thought headlights were too bright and that they have been dazzled by oncoming vehicles, according to a major study. The government said last week that it will take a closer look at the design of cars and headlamps after concerns about lights dazzling drivers. A study commissioned by the […]
Experiment: Making TypeScript Immutable-by-Default
I like programming languages where variables are immutable by default. For example, in Rust, let declares an immutable variable and let mut declares a mutable one. I’ve long wanted this in other languages, like TypeScript, which is mutable by default—the opposite of what I want! I wondered: is it possible to make TypeScript values immutable […]
Ruby 4.0.0 Preview2 Released

Posted by naruse on 17 Nov 2025 We are pleased to announce the release of Ruby 4.0.0-preview2. Ruby 4.0 updates its Unicode version to 17,0.0, and so on. Language changes *nil no longer calls nil.to_a, similar to how **nil does not call nil.to_hash. [[Feature #21047]] Core classes updates Note: We’re only listing notable updates of […]
Do Not Put Your Site Behind Cloudflare If You Don’t Need To

At the time of writing 12:43 UTC on Tue 18 Nov, Cloudflare has taken many sites down. I’m trying to browse the web, but about half of the sites show an error: Most of these sites are not even that big. I expect maybe a few thousand visitors per month. This demonstrates again a simple […]
GoSign Desktop RCE flaws affecting users in Italy
Pasquale “sid” Fiorillo discovered a critical vulnerability in GoSign Desktop = 2.4.0 that allows an attacker to execute arbitrary code on the system through insecure updates and a TLS bypass. The exploit leverages the deactivation of TLS certificate verification when a proxy is configured, together with an update mechanism based on unsigned manifests. The vendor, […]
Cloudflare Global Network experiencing issues

Subscribe to updates for Cloudflare Global Network experiencing issues via email and/or text message. You’ll receive email notifications when incidents are updated, and text message notifications whenever Cloudflare creates or resolves an incident. VIA SMS: Enter mobile number
Cloudflare Global Network experiencing issues
Ahmedabad, India – (AMD) Operational Almaty, Kazakhstan – (ALA) Operational Bangalore, India – (BLR) Operational Bangkok, Thailand – (BKK) Operational Bandar Seri Begawan, Brunei – (BWN) Partial Outage Cebu, Philippines – (CEB) Operational Chandigarh, India – (IXC) Operational Changde, China – (CGD) Operational Chennai, India – (MAA) Operational Chittagong, Bangladesh – (CGP) Operational Colombo, Sri […]
Gemini 3 Pro Model Card [pdf]
Download PDF
The Miracle of Wörgl

Wörgl was the first in town in Austria that effectively managed to eliminate the extreme unemployment caused by the Great Depression. Its local currency experiment was such a success that it gained worldwide attention. That effort became known as the “Miracle of Wörgl .” For the full details, go here. Here is the summary of […]
Okta’s NextJS-0auth troubles

In October, I reported two security issues to Okta’s auth0/nextjs-auth0 project, here and here. The latter bug, an oauth parameter injection, allows for a range of types of abuse, like scoping tokens for unintended services, setting redirect_uri and scope to arbitrary values to leak tokens, and so on. The patch was simple enough, so I […]