Top all-time · #5641
langui.sh
Personal blog · langui.shsecurityprogramming
langui.sh is a personal blog at langui.sh about security and programming. Since 2012, 14 different Hacker News readers have linked it 29 times, most often “Memory Unsafety in Apple's Operating Systems”. It is still writing: the last post was on 2026-05-04, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
Personal blog of a developer whose posts on Apple's memory-safety work and macOS OpenSSL linking are cited in HN discussions of Rust adoption, security bugs and Homebrew.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Memory Unsafety in Apple's Operating Systems5 people · 5 mentions · first linked 2019-07-25
- How the Simpsons Screenshot Search Engine Frinkiac Works4 people · 5 mentions · first linked 2016-02-02
- Apple’s 2021 memory safety report card2 people · 2 mentions · first linked 2021-12-14
- OS X clang include lib search paths2 people · 2 mentions · first linked 2015-07-28
What Hacker News says?
Pretty consistently [1] [2] [3] [4] it comes out that nearly %80 of security vulnerabilities come from memory safety vulnerabilities. I would consider that largest. Especially Microsoft's doc is pretty telling that this ratio was pretty consistent since 2006 so no amount of external tooling and training solves this. [1] https://langui.sh/2019/07/23/apple-memory-safety/ (albeit apple solving this with an another lang…
Comment linking /2019/07/23/apple-memory-safety/
on “Hard Rust requirements from May onward”Submitted Apple Censoring the News App as a story · 211 points
HN discussionOne of the authors here. I blogged a bit the other day about how we built this: https://langui.sh/2016/02/02/frinkiac-the-simpsons-screensho...
Comment linking /2016/02/02/frinkiac-the-simpsons-screenshot-search-engine/
on “Frinkiac: Simpsons quote search engine”Submitted Set up your own Ruby-powered Certificate Authority as a story · 21 points
HN discussionThis indeed. Small local console app running on trusted data? Maybe an hour to track down some memory corruption if you're particularly unlucky, in which case shuger's kind of got a point: who cares? Large network-exposed app? Individual memory corruption heisenbugs have taken me weeks to track down (and weeks before that for QA to create a reliable repro for) - a needle in a huge haystack. They often predate my emp…
Comment linking /2019/07/23/apple-memory-safety/
on “What it feels like when Rust saves your bacon”Submitted Memory Unsafety in Apple's Operating Systems as a story · 14 points
HN discussionhow about https://www.chromium.org/Home/chromium-security/memory-safet... https://langui.sh/2019/07/23/apple-memory-safety/ these companies apply things like sandboxing and fuzzing to reduce the incidence of memory unsafety bugs, and yet they're finding a majority of their security bugs being memory unsafety. if you can't find memory unsafety in your c++ code, it's because your code isn't worth attacking.
Comment linking /2019/07/23/apple-memory-safety/
on “Rust for Linux redux”Submitted Apple’s 2021 memory safety report card as a story · 13 points
HN discussion2016, and https://langui.sh/2015/07/24/osx-clang-include-lib-search-pa... (linked from the GitHub thread) seems to explain it better - if I understand right: - Apple, in 2015, deprecated the version of OpenSSL they used to ship with the OS, which was the really old version 0.9.8. (The alternative is either Apple-specific crypto APIs or bringing your own OpenSSL.) The specific way they did that was to remove the deve…
Comment linking /2015/07/24/osx-clang-include-lib-search-paths/
on “HomeBrew: Don't Link OpenSSL”Submitted How the Simpsons Screenshot Search Engine Frinkiac Works as a story · 11 points
HN discussionSubmitted 2021 in Memory Unsafety's Operating Systems as a story · 7 points
HN discussionSubmitted 2020 in Memory Unsafety - Apple's OSes as a story · 7 points
HN discussionSubmitted Fish in a Barrel NSA Inspired Memory Unsafety Posters as a story · 6 points
HN discussionSubmitted Data Driven Decisions Using PyPI Download Statistics as a story · 6 points
HN discussionSubmitted Ten Years of Frinkiac as a story · 5 points
HN discussionSubmitted Frinkiac – The Simpsons Screenshot Search Engine as a story · 5 points
HN discussionSubmitted R509 (Ruby Certificate Authority API) v0.9 Released as a story · 4 points
HN discussionSubmitted Ephemeral GHA Apple Silicon Runners with CiderMill as a story · 3 points
HN discussionSubmitted El Capitan System Integrity Protection and Dlopen as a story · 3 points
HN discussionSubmitted Memory Unsafety in Apple's Operating Systems as a story · 2 points
HN discussionSubmitted Frinkiac – The Simpsons Screenshot Search Engine as a story · 2 points
HN discussionSubmitted OS X clang include lib search paths as a story · 2 points
HN discussionSubmitted Wunused-command-line-argument-hard-error-in-future is a harsh mistress as a story · 2 points
HN discussionSubmitted The (Potential) Danger of Trivial Code Examples as a story · 2 points
HN discussionSubmitted Pbpaste and pbcopy in Mac OS X (2010) as a story · 1 points
HN discussionSubmitted Frinkiac – The Simpsons Screenshot Search Engine as a story · 1 points
HN discussionSubmitted Anatomy of a MySQL CVE: X509_NAME_oneline Cert Validation as a story · 1 points
HN discussionSubmitted OS X Universal Libraries but Not Headers as a story · 1 points
HN discussionSubmitted Ruby Elliptic Curve Certificates as a story · 1 points
HN discussion
