recent articles

Replacing Git is in the news, so here’s a story from my time on Google’s source tools team 10 years ago. The #1 question: why does Google use an awful Perforce clone for the monorepo instead of Git? I met people across half the planet to find out. It’s not...

Every now and then I think of this guy that used to post solutions to the weekly Project Euler problems first. In assembler. Are they a madman, or is someone working at that tier of genius just so good they don’t need to use crutches like Python or C or...

Introduction The other day I came across some code that passes a function to std::sort. Though sort will let you call it with a std::function, there was an admonishment to use the function pointer version of sort instead. Using std::function is almost 4x slower for a trivial float comparison. What’s...

Introduction I conducted a static analysis of DeepSeek, a Chinese LLM chatbot, using version 1.8.0 from the Google Play Store. The goal was to identify potential security and privacy issues. I’ve written about DeepSeek previously here. Additional security and privacy concerns about DeepSeek have been raised. See also this analysis...

The release of the DeepSeek-r1 model by the Chinese AI lab DeepSeek, along with its availability on the App Store, marks a pivotal moment in the AI arms race between the US and China. This development underscores the intensifying competition in AI advancements between these two global powers. A lot...

One code of conduct professionals follow is “The New York Times Test”: you must never put anything in writing that you could be embarrassed to see printed on the front page of the New York Times. The risk is, if your company or business is ever in the news, and...

The OCaml ctypes library along with new support for ctypes stanzas in the dune build system make it a snap to bind C libraries. In this article, we will walk through how to prepare your project to use an external C library. But first, I’d like to try to convince...

It was the year 2003. I was sitting at the FTC office, with some other open source activists, testifying that Microsoft was in violation of its 1995 consent decree. Microsoft, through illegal monopolistic bundling deals, had been forcing laptop manufacturers to sell customers a license for Windows whether they wanted...

In a previous installment we went over deploying a static TLS web-site to Google Compute Engine. It works but you have to click through the disconcerting certificate warning. Wouldn't it be nice if our all-OCaml unikernel application went ahead and obtained a trusted TLS certificate from Let's Encrypt all by...

If tens of millions of lines of C code in your application stack keeps you from sleeping easily at night, as it does me, you may be interested in changing your web services to all-OCaml based Mirage unikernels. The complete argument for considering this can be made elsewhere. What I'd...