Advertisement · 728 × 90

Posts by Max Hils

The LaTeX Korrektor 2/6: How to make sure everyone thinks your papers are written by AI. 🥲

4 months ago 1 0 0 0

browsers should be allowed to display the <li> in a <ul> in whatever order they like

4 months ago 63 13 7 1

One of my favorite games just got a free content update ten years after initial release. @metanetsoftware.com is just crazy cool. 😍

5 months ago 3 0 0 0
autofix.ci is down · Issue #32 · autofix-ci/action we're getting Error: getaddrinfo ENOTFOUND api.autofix.ci in the github action and http://autofix.ci also seems down

Thanks for the heads-up! Things should be fixed since yesterday, my registrar screwed up apparently. 🙈 (Details: github.com/autofix-ci/a...)

6 months ago 2 0 1 0

rust is a language in which you can borrow a cow

7 months ago 30 4 3 0

If you work on HTTP implementations, deploy it at scale, or have a unique perspective or interest in the protocol, you might find other people to talk to at the 2026 HTTP Workshop: github.com/HTTPWorkshop/workshop202...

7 months ago 6 4 0 0

You can also put stuff onto the tracks to cause any train to do an emergency break. Granted, attack complexity and stealthiness may be a bit better here, but I can see how they are a bit scared of "we crashed into another train because their stop signal wasn't properly signed" scenarios. :)

7 months ago 2 0 0 0
Advertisement
Post image

At the beginning of the study, developers forecasted that they would get sped up by 24%. After actually doing the work, they estimated that they had been sped up by 20%. But it turned out that they were actually slowed down by 19%.

9 months ago 631 56 3 12
LazyLock in std::sync - Rust A value which is initialized on the first access.

I really like doc.rust-lang.org/beta/std/syn... for this use case. Derefs to the inner value, so no calling necessary. :)

9 months ago 2 0 1 0
Preview
The ethics of README ads I’ve been considering accepting sponsorship again for my projects.

I post on "The ethics of README ads"

willmcgugan.github.io/the-ethics-o...

10 months ago 16 4 3 0

Great topic, your "luxury of being able to turn them down" framing is really nice.

I personally find bulma.io to be an interesting example. With 40 sponsors at $100/month it's getting non-negligible. Great for project sustainability, who am I to judge?

10 months ago 2 0 0 0

I this the IPv6 thing people keep talking about? I heard it has larger numbers. 🥸

10 months ago 1 0 0 0

Check out pyo3 if you haven't, it's rad

10 months ago 2 2 0 0

You don't have to write software in c++

11 months ago 8 1 2 0
Mitmproxy 12: Interactive Contentviews

mitmproxy 12 is out! 🚀 It’s now possible to modify the prettified representation of binary protocols. Editing Protobufs is now as easy as editing YAML, no .proto schema needed. 🙌

mitmproxy.org/posts/releas...

11 months ago 8 7 1 0
Advertisement
Post image

Also, this seems like a small feature but much appreciated:

11 months ago 3 1 0 0
Mitmproxy 12: Interactive Contentviews

mitmproxy 12 is out! 🚀 It’s now possible to modify the prettified representation of binary protocols. Editing Protobufs is now as easy as editing YAML, no .proto schema needed. 🙌

mitmproxy.org/posts/releas...

11 months ago 8 7 1 0
Post image

The next version of Rust might be one of the most transformative to the Rust ecosystem due to support for up-casting of trait objects. This makes `Any` significantly more powerful and potent!

1 year ago 90 15 7 1

0.1 + 0.2 == 0.3

1 year ago 183 40 3 0
Post image Post image

Not sure how I should feel about our new ice cream scoop containing AI. 🤔

1 year ago 1 0 0 0
Preview
Chromium GSoC 2025 Project Ideas and Info Chromium GSoC 2025 Project Ideas and Info

Here are the project ideas and info for Chromium:

1 year ago 8 4 0 2

🎉🎉🎉

Really cool effort. I didn't mind TLS fingerprinting back when it was it was used sparingly and carefully to fight actual abuse, but with everyone and their CDN now randomly blocking clients it just needs to die.

1 year ago 1 0 1 0
Advertisement
Preview
Use empty renegotiate extension instead of SCSV for TLS > 1.0 by pimterry · Pull Request #24161 · openssl/openssl This PR fixes #18790. This is my very first OpenSSL PR, and day to day I don&#39;t write much C (and zero Perl) so I&#39;d appreciate some careful review! I&#39;ve just emailed a signed CLA to the ...

This is part of an ongoing personal campaign to kill TLS fingerprinting.

With this change + github.com/openssl/open..., OpenSSL TLS traffic won't have any non-configurable distinguishing features, and so I _think_ it should be possible to configure it to exactly match modern browser traffic.

1 year ago 2 1 2 0
Preview
Wachstumseffekte eines kreditfinanzierten Investitionsprogramms Es wird ein kreditfinanziertes öffentliches Investitionsprogramm für die deutsche Wirtschaft von 600 Milliarden Euro in den nächsten 10 Jahren mit dem NiGEM-Modell simuliert. Die Ergebnisse zeigen erhebliche Wachstumseffekte, besonders längerfristig aufgrund der positiven Auswirkungen des höheren öffentlichen Kapitalstocks auf private Investitionsentscheidungen. <BR>Das BIP könnte längerfristig zeitweise um rund 6 % über seinem Niveau ohne Investitionsoffensive liegen. Außerdem regt das Programm die private Investitionstätigkeit deutlich an, sodass die Unternehmensinvestitionen bis zu 10 % über ihr Niveau ohne Programm steigen. Konkret bedeutet das, dass die aufsummierte Wirtschaftsleistung Deutschlands von 2025 bis 2050 um bis zu 4800 Mrd. Euro höher ausfallen würde. 2045 läge das jährliche Pro-Kopf-BIP um 3600 Euro höher, als es ohne das Programm der Fall wäre. <BR>Zwar erhöht sich das staatliche Budgetdefizit während der zehnjährigen Laufzeit des Programms um etwa 1 % des BIP. Alle

Neu: Unsere @imkinstitut.bsky.social Simulation, was mit Wirtschaftswachstum und Schulden in Deutschland passieren würde, wenn man über die kommenden 10 Jahre 600 Mrd. € zusätzlich in die öffentliche Infrastruktur investieren würde. (1/)

www.imk-boeckler.de/de/faust-de...

1 year ago 52 31 3 5
Preview
Mitmweb API Authentication Bypass Using Proxy Server ### Impact In mitmweb 11.1.0 and below, a malicious client can use mitmweb's proxy server (bound to `*:8080` by default) to access mitmweb's internal API (bound to `127.0.0.1:8081` by default). In...

mitmproxy 11.1.2 is out, everyone should upgrade! We fixed a rather nasty SSRF-style vulnerability affecting mitmweb (CVE-2025-23217). mitmproxy and mitmdump users are unaffected.

github.com/mitmproxy/mi...

1 year ago 3 2 0 0

now that this is (hopefully) over, I'd like to state the obvious that pestering FOSS maintainers with your misguided compliance issues – in the holiday season no less – is not something that gets you on Santa's good list

1 year ago 9 2 0 0
Post image

Sharing rsync instances vulnerable to CVE-2024-12084 RCE (version check only) in our updated daily Accessible Rsync report: shadowserver.org/what-we-do/n...

17,475 instances found vulnerable (out of 146,844) on 2025-01-16. Top affected: US (5K)

dashboard.shadowserver.org/statistics/c...

1 year ago 5 2 2 1

Template Injection needs a fertile breeding ground. :)

1 year ago 1 0 0 0
Intercepting Linux Applications

mitmproxy 11.1 is out! 🥳

We now support *Local Capture Mode* on Windows, macOS, and - new - Linux! This allows users to intercept local applications even if they don't have proxy settings.

More details are at mitmproxy.org/posts/local-.... Super proud of this team effort. 😃

1 year ago 75 23 2 2