recent articles

Introduction The other day I came across some code that passes a function to std::sort. Though sort will let you call it with a std::function, there was an admonishment to use the function pointer version of sort instead. Using std::function is almost 4x slower for a trivial float comparison. What’s...

Introduction I conducted a static analysis of DeepSeek, a Chinese LLM chatbot, using version 1.8.0 from the Google Play Store. The goal was to identify potential security and privacy issues. I’ve written about DeepSeek previously here. Additional security and privacy concerns about DeepSeek have been raised. See also this analysis...

The release of the DeepSeek-r1 model by the Chinese AI lab DeepSeek, along with its availability on the App Store, marks a pivotal moment in the AI arms race between the US and China. This development underscores the intensifying competition in AI advancements between these two global powers. A lot...

One code of conduct professionals follow is “The New York Times Test”: you must never put anything in writing that you could be embarrassed to see printed on the front page of the New York Times. The risk is, if your company or business is ever in the news, and...

The OCaml ctypes library along with new support for ctypes stanzas in the dune build system make it a snap to bind C libraries. In this article, we will walk through how to prepare your project to use an external C library. But first, I’d like to try to convince...

It was the year 2003. I was sitting at the FTC office, with some other open source activists, testifying that Microsoft was in violation of its 1995 consent decree. Microsoft, through illegal monopolistic bundling deals, had been forcing laptop manufacturers to sell customers a license for Windows whether they wanted...

In a previous installment we went over deploying a static TLS web-site to Google Compute Engine. It works but you have to click through the disconcerting certificate warning. Wouldn't it be nice if our all-OCaml unikernel application went ahead and obtained a trusted TLS certificate from Let's Encrypt all by...

If tens of millions of lines of C code in your application stack keeps you from sleeping easily at night, as it does me, you may be interested in changing your web services to all-OCaml based Mirage unikernels. The complete argument for considering this can be made elsewhere. What I'd...

Parler was recently kicked off of Amazon AWS for TOS violations. Parler claims that the big tech cloud providers weren't willing to do business with them, and facing no place left to go, the site went offline. Recently the site came back online in limited form. Some have observed they're...

This is such terrible news. As seen on Slate Star Codex: NYT is Threatening my Safety by Revealing my Real Name so I am deleting the blog. I'm posting this mainly as a signal boost, and also to express sadness that if you want to publish ideas that are not...