Top all-time · #1310
Julien Voisin
Personal blog · dustri.orgsecurityprogramming
Julien Voisin writes Artificial truth, a personal blog at dustri.org about security and programming. Since 2014, 56 different Hacker News readers have linked it 107 times, most often “Horrible edge cases when dealing with music”. No feed was found, so read it on the site itself.
Personal homepage of Julien (jvoisin) Voisin
Most-linked posts?
- Horrible edge cases when dealing with music5 people · 6 mentions · first linked 2022-04-03
- Carrot Disclosure4 people · 5 mentions · first linked 2024-03-08
- Friends don't let friends write production software in Python (2020)3 people · 3 mentions · first linked 2020-01-07
- Carrot Disclosure: Forgejo3 people · 3 mentions · first linked 2026-04-28
- PHP8, from a Security Point of View3 people · 3 mentions · first linked 2020-12-04
- Firefox, you're supposed to be in my pocket, not the other way around3 people · 3 mentions · first linked 2015-07-13
- Time to Sunset OTR2 people · 6 mentions · first linked 2020-08-06
- The web browser I'm dreaming of2 people · 5 mentions · first linked 2021-05-17
- Spectre exploits in the "wild"2 people · 2 mentions · first linked 2021-03-01
- Playing with Weggli2 people · 2 mentions · first linked 2022-05-09
What Hacker News says?
The same, for Caddy: https://www.dustri.org/b/serving-a-gzip-bomb-with-caddy.html 10T is probably overkill though.
Comment linking /b/serving-a-gzip-bomb-with-caddy.html
on “I use zip bombs to protect my server”Submitted Horrible edge cases when dealing with music as a story · 533 points
HN discussionhttps://dustri.org/b/notes-on-regresshion-on-musl.html
Comment linking /b/notes-on-regresshion-on-musl.html
on “RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems”Submitted Objects should shut up as a story · 490 points
HN discussionOne of my favourites, from a friend of mine: https://dustri.org/b/ Content ranges from security, to programming, to observations about life. I like it because there's usually some good point that is made and I consider it to be well written.
Comment linking /b/
on “Ask HN: Favorite Blogs by Individuals?”Submitted I won’t buy ebooks anymore as a story · 448 points
HN discussionA recent post about that: https://dustri.org/b/the-web-browser-im-dreaming-of.html Gemini might be a good replacement for the web: https://gemini.circumlunar.space/
Comment linking /b/the-web-browser-im-dreaming-of.html
on “Site Isolation in Firefox”Submitted Firefox, you're supposed to be in my pocket, not the other way around as a story · 372 points
HN discussionIt seems hard to "disable" the issues mentioned at https://dustri.org/b/upcoming-hardening-in-php.html
Comment linking /b/upcoming-hardening-in-php.html
on “Upcoming Hardening in PHP”Submitted Upcoming Hardening in PHP as a story · 312 points
HN discussion"Every other browser vendor is a for-profit entity, ..." Not the one that authored the text-only browser I am typing this from. Whether Mozilla turns a profit or not makes little difference in this instance. Mozilla does not survive on donations from users. Its employees are not volunteers working for free to defend user privacy. Its generously compensated executives and staff need money from the online ad business,…
Comment linking /b/mozilla-is-still-screwing-around-with-privacy-in-firefox.html
on “Sensor Tower owns ad blocker and VPN apps that collect user data”Submitted Malwarebytes' privacy VPN is Mullvad in a shady trenchcoat as a story · 293 points
HN discussionlibpas is now in mimalloc-bench ( https://github.com/daanx/mimalloc-bench ). Thanks to Julien Voisin ( https://dustri.org ), which makes about 20 allocators that can be compared on a collection of workloads.
Comment linking /
on “All About Libpas, Phil's Super Fast Malloc”Submitted Glitch effect on text in pure CSS as a story · 206 points
HN discussionI know gitea / forgejo will be a popular suggestion, either self-hosted or via something like Codeberg. Despite also being a GitHub user since 2010 and also "doomscrolling" issues for projects I am involved in, I do host a gitea for personal projects where I don't need the GitHub network effect. It works well and is surprisingly capable! Having said that, I stumbled upon this curious blog post about a security issue…
Comment linking /b/carrot-disclosure-forgejo.html
on “Ghostty is leaving GitHub”Submitted My favourite C++ footgun as a story · 202 points
HN discussion> It's been a few years now and I don't think any Spectre attack has ever been spotted in the wild https://dustri.org/b/spectre-exploits-in-the-wild.html However, I agree on your points. I just hope it makes Intel's share price dip so I can make more money.
Comment linking /b/spectre-exploits-in-the-wild.html
on “Lord of the Ring(s): Side Channel Attacks on the CPU On-Chip Ring Interconnect”Submitted Spectre exploits in the "wild" as a story · 193 points
HN discussionAt Webconverger I've been working on whittling these leaking issues down, by wiresharking Firefox, e.g. https://github.com/Webconverger/webconverger-addon/issues/42 https://github.com/Webconverger/webconverger-addon/issues/41 https://github.com/Webconverger/webconverger-addon/issues/43 Though with things like https://bugzilla.mozilla.org/show_bug.cgi?id=1100304 and anti-features like http://dustri.org/b/firefox-your…
Comment linking /b/firefox-youre-supposed-to-be-in-my-pocket-not-the-other-way-around.html
on “Re: The Spirit of Free Software, or the Reality”Submitted YouTube video embedding harm reduction as a story · 179 points
HN discussionLink is a 404, here's the correct one: http://dustri.org/b/torbundlebrowserorg.html
Comment linking /b/torbundlebrowserorg.html
on “Reverse engineering a fake Tor browser bundle”Submitted Canonicals Interview Process as a story · 164 points
HN discussionThis feature (or the decisions behind it) does harm non-users. Firefox devs have publicly claimed that it will replace Firefox's current reading list. Before Pocket integration, the integration of Reading List into Firefox Sync was planned, which is a end-to-end encrypted service with very strict ToS -- much stricter than Pocket's current ones: http://dustri.org/b/firefox-youre-supposed-to-be-in-my-pocke... Claiming…
Comment linking /b/firefox-youre-supposed-to-be-in-my-pocket-not-the-other-way-around.html
on “User feedback on Pocket submitted to Mozilla”Submitted The web browser I'm dreaming of as a story · 99 points
HN discussionmy friend made a write up before about the inadequecies of python: https://dustri.org/b/friends-dont-let-friends-write-producti... Personally, I’ve been pretty happy with python, I think it works wonderfully as a glue language (like bash); I.E: you shouldn’t write a lot of it, you should use it for plumbing. Its fantastic for that.
Comment linking /b/friends-dont-let-friends-write-production-software-in-python.html
on “Breaking up with Python”Submitted Reverse engineering a fake Tor browser bundle as a story · 89 points
HN discussionOTR uses obsolete insecure crypto unfortunately. https://dustri.org/b/time-to-sunset-otr.html
Comment linking /b/time-to-sunset-otr.html
on “IRC technology news from the first half of 2024”Submitted WireGuard and forward secrecy for clients as a story · 38 points
HN discussion> Internationalisation is hard, like for Пётр Ильич Чайковский (Tchaikovsky) and his 31 different names on MusicBrainz. https://dustri.org/b/horrible-edge-cases-to-consider-when-de... Also from Wikipedia: Pyotr Ilyich Tchaikovsky (note: Often anglicized as Peter Ilich Tchaikovsky; also standardized by the Library of Congress. His names are also transliterated as Piotr or Petr; Ilitsch or Il'ich; and Tschaikowski, Ts…
Comment linking /b/horrible-edge-cases-to-consider-when-dealing-with-music.html
on “EBCDIC Is Incompatible with GDPR”Submitted Big Bird: killing SQL injection with graph homomorphisms as a story · 35 points
HN discussion
