Wow, @llvmorg just passed half a million commits to the monorepo! Congratulations to all of the 3811 contributors so far! If you love LLVM, consider star'ing the repo: github.com/llvm/llvm-project…

Wow that's right. This was a big day and Swift has come a long way in the intervening decade: Congrats to everyone who has driven it forward to support such an amazing tech platform! 🍎🐣

The wait for macOS 14.4/iOS 17.4 sauce is OVER! 🍝🥫 XNU github.com/apple-oss-distrib… Security github.com/apple-oss-distrib… OBJC github.com/apple-oss-distrib… ld64 github.com/apple-oss-distrib… dyld github.com/apple-oss-distrib…

The linker is in a better position to inject malicious code into your system than xz/liblzma if compromised because it can do whatever it wants with the programs being linked. For example, replacing a specific function during linking openssh would be a pretty easy hack. Therefore, it is important to use a trustworthy linker binary to build your program. But how do you build a trustworthy linker? If you use a malicious linker to link another linker, it can inject code into the new linker which in turn could do something malicious to other programs. This is the well-known chain of trust problem. This is a real issue for us because we distribute mold binary packages on our GitHub release pages. Fortunately, we recently implemented a change in the script to create the binary packages so that the script is reproducible -- meaning that regardless of the environment it's run in, the script always creates bit-for-bit identical output for the same git commit. With the reproducible build, you can independently verify that our binary distributions are actually built from the corresponding release of source files. You can also ensure that no third-party binaries are involved during the build. Thanks to Docker and QEMU, it is pretty easy to write a reproducible build script these days. I'd strongly recommend doing the same if you are distributing binary tarballs. The script for the mold linker is available here: github.com/rui314/mold/blob/…

The xz backdoor was initially caught by a software engineer at Microsoft. He noticed 500ms lag and thought something was suspicious. This is the Silver Back Gorilla of nerds. The internet final boss.

Mojo hit an important milestone today by open sourcing the stdlib, excited to see where it goes from here! 🔥

“Rust teams at Google are as productive as ones using Go, and more than twice as productive as teams using C .” @larsberg_ #RustNationUK

Please let this be true

Have you ever hesitated to try out an API from Azure, AWS or Google Cloud because just the idea of needing to figure out how to get API credentials puts you off?

Making a Macintosh Studio youtu.be/BuEziDm9gQw?si=KP_U… (This person's videos are generally awesome if you like this one)

fwiw so far we think that they are considerably slower even w/o the overhead of SwiftSyntax -- forums.swift.org/t/swift-mac…

Security Tools team at Apple is looking for managers with passion and background in program analysis, compilers, and/or security. Static Analysis Tools Manager (Cupertino, CA): jobs.apple.com/en-us/details… Dynamic Analysis Tools Manager (Seattle, WA): jobs.apple.com/en-us/details…

I'm delighted to announce that it's my first week at @Modular! I'm so excited to work with such a strong team on some really hard problems! 🔥🚀

Duolingo runs a taqueria outside their HQ in Pittsburgh. You get a discount for speaking Spanish. Many reviews say it’s the best Mexican food they’ve ever had! I will def go next time I’m in town.

somebody does that github.com/johnno1962/Instan…

One solution for swift macros build times is if someone (ideally the swift-syntax repo) distributed the required prebuilt xcframeworks instead of requiring everyone built from source (bonus points if someone solves shipping a single framework with muiltiple swiftmodules)

We just opened an Android Engineer role: jobs.ashbyhq.com/The Brows…

After nearly 9 years(!) at Lyft I've decided to move on. I feel so lucky to have worked with so many great folks over the years on such a wide variety of awesome projects. I'm excited to take a few weeks off and then share what's next for me!

Talk is cheap, send patches.

hi folks I’m the reddit ceo just looking for a quick budget check, we’re going to ipo soon but we’re still losing money somehow servers 20 million payroll 60 million office rent 5 million my comp is 193 million someone please help me budget my company. my website is dying