This one was on HN a few months ago: https://alexnisnevich.github.io/untrusted/