Issue 2023-W45

Published on November 12, 2023

Subscribe to new issues of the bulletin via the RSS feed or via email.

This week has been about the HTTP/2 Rapid Reset vulnerability, a paper on new contributors and vulnerabilities, a guide on jq, a monospaced font, a multi-tile format and TigerBeetle's rationale for using 128-bit integers for financial amounts.

# 64-Bit Bank Balances ‘Ought to be Enough for Anybody’?

An article on the reasons why TigerBeetle moved from 64-bit integers to 128-bit integers for financial amounts and balances.

# HTTP/2 Zero-Day vulnerability results in record-breaking DDoS attacks

An article explainging the HTTP/2 Rapid Reset vulnerability.

# The Ultimate Interactive JQ Guide

A comprehensive tutorial to grok jq and its query language.

# monaspace

A monospaced family of fonts for code.

# Grading on a Curve: How Rust can Facilitate New Contributors while Decreasing Vulnerabilities (pdf)

A paper on the study done on the Oxidation project to infer whether Rust can help ease in new contributors to an open source codebase whilst mitigating the risk of introducing vulnerabilities. Notice that this study compares C/C++ and Rust.

# Protomaps

A tile-based map storage format leveraging image pyramids and HTTP Range requests for storing everything in a single file.