Nearly all UK drivers say headlights are too bright

nearly-all-uk-drivers-say-headlights-are-too-bright

Nearly all UK drivers said they thought headlights were too bright and that they have been dazzled by oncoming vehicles, according to a major study. The government said last week that it will take a closer look at the design of cars and headlamps after concerns about lights dazzling drivers. A study commissioned by the […]

Experiment: Making TypeScript Immutable-by-Default

I like programming languages where variables are immutable by default. For example, in Rust, let declares an immutable variable and let mut declares a mutable one. I’ve long wanted this in other languages, like TypeScript, which is mutable by default—the opposite of what I want! I wondered: is it possible to make TypeScript values immutable […]

Ruby 4.0.0 Preview2 Released

ruby-40.0-preview2-released

Posted by naruse on 17 Nov 2025 We are pleased to announce the release of Ruby 4.0.0-preview2. Ruby 4.0 updates its Unicode version to 17,0.0, and so on. Language changes *nil no longer calls nil.to_a, similar to how **nil does not call nil.to_hash. [[Feature #21047]] Core classes updates Note: We’re only listing notable updates of […]

Do Not Put Your Site Behind Cloudflare If You Don’t Need To

do-not-put-your-site-behind-cloudflare-if-you-don’t-need-to

At the time of writing 12:43 UTC on Tue 18 Nov, Cloudflare has taken many sites down. I’m trying to browse the web, but about half of the sites show an error: Most of these sites are not even that big. I expect maybe a few thousand visitors per month. This demonstrates again a simple […]

GoSign Desktop RCE flaws affecting users in Italy

Pasquale “sid” Fiorillo discovered a critical vulnerability in GoSign Desktop = 2.4.0 that allows an attacker to execute arbitrary code on the system through insecure updates and a TLS bypass. The exploit leverages the deactivation of TLS certificate verification when a proxy is configured, together with an update mechanism based on unsigned manifests. The vendor, […]

Cloudflare Global Network experiencing issues

cloudflare-global-network-experiencing-issues

Subscribe to updates for Cloudflare Global Network experiencing issues via email and/or text message. You’ll receive email notifications when incidents are updated, and text message notifications whenever Cloudflare creates or resolves an incident. VIA SMS: Enter mobile number

Cloudflare Global Network experiencing issues

Ahmedabad, India – (AMD) Operational Almaty, Kazakhstan – (ALA) Operational Bangalore, India – (BLR) Operational Bangkok, Thailand – (BKK) Operational Bandar Seri Begawan, Brunei – (BWN) Partial Outage Cebu, Philippines – (CEB) Operational Chandigarh, India – (IXC) Operational Changde, China – (CGD) Operational Chennai, India – (MAA) Operational Chittagong, Bangladesh – (CGP) Operational Colombo, Sri […]

The Miracle of Wörgl

the-miracle-of-worgl

Wörgl was the first in town in Austria that effectively managed to eliminate the extreme unemployment caused by the Great Depression. Its local currency experiment was such a success that it gained worldwide attention. That effort became known as the “Miracle of Wörgl .” For the full details, go here. Here is the summary of […]

Okta’s NextJS-0auth troubles

okta’s-nextjs-0auth-troubles

In October, I reported two security issues to Okta’s auth0/nextjs-auth0 project, here and here. The latter bug, an oauth parameter injection, allows for a range of types of abuse, like scoping tokens for unintended services, setting redirect_uri and scope to arbitrary values to leak tokens, and so on. The patch was simple enough, so I […]