Rust borrow checker unsoundness: how a field assignment bypasses Drop's lifetime bounds (rust#164250)
A safe-Rust use-after-free that has compiled since 1.4: how it works, which Drop impls are exposed, and how to close the hole today.
Developer tooling
Containers, CI and the small tools that make a team faster.
Developer tooling articles
GhostAction is back: how a GitHub Actions workflow steals secrets from your git history
How the GhostAction GitHub Actions workflow steals secrets from git history, how to check your repos, what to rotate, and what stops it.
Python 3.15 is out: lazy imports, UTF-8 by default, and what to test before you upgrade
What Python 3.15 changes for working code: how lazy imports work and fail, the UTF-8 default, frozendict, Tachyon, and an upgrade checklist.