Daily Edition · Page 4

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ARTICLES & TUTORIALS

TLDR Web Dev

TONY HAWK'S PRO STRCPY

A buffer overflow vulnerability was found in the "Create-A-Park" feature of various Tony Hawk's Pro Skater games. The vulnerability, dubbed "Tony Hawk's Pro Strcpy", allows attackers to gain code execution on multiple gaming consoles, including the original Xbox, PlayStation 2, GameCube, and even the Xbox 360 (on a specific older kernel version). This article explores the various methods used to exploit the bug, ranging from simple save game hacks to intricate ROP chains and network-based attacks.

PYTHON EXTENSIONS SHOULD BE LAZY

Python's "everything is an object" philosophy slows down the parsing of large codebases with the ast module due to the overhead of converting C structs to Python objects. This conversion results in excessive memory allocations and garbage collection. To address the issue, this developer implemented a Rust extension that processed the ASTs in Rust, only returning the final results to Python, resulting in a 16x speedup and significantly reduced memory pressure. They argue that Python extensions should be designed to be lazy, meaning that they should only create Python objects when explicitly required, and instead keep data in a compact, optimized format within their own language.

BENCHMARKING AWS LAMBDA COLD STARTS ACROSS JAVASCRIPT RUNTIMES

This article benchmarks the cold start performance of AWS Lambda functions using Deno, Node.js, and Python runtimes. Deno shows significantly better performance with faster startup times, especially in smaller function configurations. This is likely due to Deno's various runtime caches. You can make your Deno app start time even faster by populating these caches ahead of time during the Docker image creation so that they're immediately available when your application executes in AWS Lambda.

TLDR IndexPage 4