Link Previews and You | Sable
Why it took us so long to figure out link previews, and where we're going in the future with them.| Sable
Would you reconsider your Tufte CSS sidenotes? | Kyou
TL;DR: Using "clever CSS tricks" for Tufte CSS, or sidenotes, is probably a bad idea, as inlining sidenotes as the official Tufte CSS does can cause trouble for browser reader modes or mobile devices.| Kyou
The anti-marketing aspect of the Gemini network
The anti-marketing aspect of the Gemini network par Ploum - Lionel Dricot.| ploum.net
Bildrechte Unternehmenswebsite Italien: KMU-Leitfaden
Bildrechte auf der Unternehmenswebsite in Italien: Was KMU in Südtirol zu Urheberrecht, Recht am eigenen Bild, DSGVO und Freigaben wissen...| Berger+Team
SEO : Google déploie une mise à jour majeure de ses algorithmes (November 2026 Core Update)
Google lance sa troisième Core Update de 2026, la première depuis l'arrivée d'AI Overviews et de l'AI Mode en France. Le déploiement peut durer jusqu'à deux semaines.| BDM
Reporting social media : le guide pour créer et automatiser son tableau de bord avec Data Studio
Comment créer un reporting social media vraiment utile, et l’automatiser sans perdre en fiabilité ? Bryan Coder partage sa méthode pour construire un tableau de bord sur mesure avec Data Studio.| BDM
Představení Openreviews.cz
Před dvěma týdny jsem psal o Mangrove Reviews a proč do této otevřené platformy pro recenze psát. Nakonec ale nezůstalo jen u toho a řekl jsem si, že by bylo dobré adopci této platformy v ČR trochu podpořit, a tak vzniklo Openreviews.cz.| Sesivany's blog
Resonant Computing and Common Fabric
This event summary was created by Claude with editing by Tim O’Reilly, based on a transcript of the conversation. Alex Komoroske is the CEO and a cofounder of Common Fabric, a public benefit corporation building the infrastructure for human-centric agentic computing. He spent more than a decade at Google as a product manager and director […]| Radar
(iterate think thoughts): Rendering in batches with glimmer and Datastar
Dmitri's blog about programming, Clojure, and software development| yogthos.net
Handling Arbitrarily Nested Structures with Burp Suite
This is a blog post by Erik Szinai, who worked with us as an intern during the last couple of months. We hope our readers will find his contribution to the Burp Suite ecosystem useful!| Silent Signal Techblog
Our new scanner for Text4Shell
Some say, CVE-2022-42889 is the new Log4Shell, for which we developed our own tool to enumerate affected hosts back in 2021. Others like Rapid7 argue that it may not be as easy to exploit like Log4Shell. Regardless of the severity and exploitability of this vulnerability, we quickly morphed a clone of our Log4Shell plugin into an open source tool that can detect this vulnerability reasonably well.| Silent Signal Techblog
Our new tool for enumerating hidden Log4Shell-affected hosts
Log4Shell, formally known as CVE-2021-44228 seems to be the next big vulnerability that affects a huge number of systems, and the affected component, Log4j gets involved in logging untrusted data by design. This results in lots of vulnerable hosts that are hidden in the sense that naive testing won’t find them, as it’s not trivial to know which part of a complex parsing path (potentially involving multiple systems) is vulnerable. We built and released our new open source tool to find thes...| Silent Signal Techblog
Uninitialized Memory Disclosures in Web Applications
While we at Silent Signal are strong believers in human creativity when it comes to finding new, or unusual vulnerabilities, we’re also constantly looking for ways to transform our experience into automated tools that can reliably and efficiently detect already known bug classes. The discovery of CVE-2019-6976 – an uninitialized memory disclosure bug in a widely used imaging library – was a particularly interesting finding to me, as it represented a lesser known class of issues in the i...| Silent Signal Techblog
Unix-style approach to web application testing
SANS Institute accepted my GWAPT Gold Paper about Unix-style approach to web application testing, the paper is now published in the Reading Room.| Silent Signal Techblog
The curious case of encrypted URL parameters
As intra-app URLs used in web applications are generated and parsed by the same code base, there’s no external force pushing developers towards using a human-readable form of serialization. Sure, it’s easier to do debugging and development, but that’s why I used the word “external”. Many frameworks use custom encodings, but one of the most extreme things a developer can do in this regard is completely encrypting request parameters. We encountered such a setup during a recent web app...| Silent Signal Techblog
Snow cannon vs. unique snowflakes — testing registration forms
Many of the web application tests we conducted had a registration form in the scope. In such cases, there’s usually a field that needs to be unique for each invocation, sometimes called username, in other cases, the e-mail address is used as such. However, launching the Scanner or Intruder of Burp Suite or a similar tool will send the same username over and over again, resulting in possible false negatives. We faced this problem long enough that we came up with a solution for it, and now yo...| Silent Signal Techblog
Beyond detection: exploiting blind SQL injections with Burp Collaborator
It’s been a steady trend that most of our pentest projects revolve around web applications and/or involve database backends. The former part is usually made much easier by Burp Suite, which has a built-in scanner capable of identifying (among others) injections regarding latter. However, detection is only half of the work needed to be done; a good pentester will use a SQL injection or similar database-related security hole to widen the coverage of the test (obviously within the project scop...| Silent Signal Techblog
Detecting ImageTragick with Burp Suite Pro
After ImageTragick (CVE-2016–3714) was published, we immediately started thinking about detecting it with Burp, which we usually use for web application testing. Although collaborator would be a perfect fit, as image processing can happen out-of-band, there’s no official way to tap into that functionality from an extension.| Silent Signal Techblog
You’re not looking at the big picture
When serving image assets, many web developers find it useful to have a feature that scales the image to a size specified in a URL parameter. After all, bandwidth is expensive, latency is killing the mobile web, and letting the frontend guys link to avatar.php?width=64&height=64 pretty straightforward and convenient. However, solutions with those latter two qualities usually have a hard time with security.| Silent Signal Techblog
Finding the salt with SQL inception
Introduction| Silent Signal Techblog
Testing Oracle Forms
SANS Institute accepted my GWAPT Gold Paper about testing Oracle Forms applications, the paper is now published in the Reading Room.| Silent Signal Techblog
Sanitizing input with regex considered harmful
Sanitizing input (as in trying to remove a subset of user input so that the remaining parts become “safe”) is hard to get right in itself. However, many developers doom their protection in the first place by choosing the wrong tool to get it done, in this case, regular expressions (regex for short). While they’re powerful for quite a few purposes, as the old saying goes,| Silent Signal Techblog
Compressed file upload and command execution
In this post I would like to share some experiences of a web application hacking project. After I got access to the admin section of the web application I realized that there is a file upload function available for administrators. The application properly denied uploading dynamic scripts (eg.: .php) and it was not possible to bypass this defense. However, the upload function supported compressed file upload and provided automatic decompression also but unfortunately the upload directory did n...| Silent Signal Techblog
WAF bypass made easy
In this post I will share my testing experiences about a web application protected by a web application firewall (WAF). The investigation of the parameters of web interfaces revealed that I can perform XSS attacks in some limited ways. The target implemented blacklist-based filtering that provided some HTML tag and event handler restriction. Since this restriction appeared at quite unusual places I suspected that there might be a WAF in front of the application. To verify my suspicion:| Silent Signal Techblog
Plesk panel decryption
After I read the description of the Plesk vulnerability CVE-2012-1557 I decided to investigate the application a bit deeper. You can download a fully installed VMware image from the internet so you can skip the install and save some time. The PHP files which belong to the PLESK application are encrypted:| Silent Signal Techblog
Open Graph images with Astro and Typst · Erik André Jakobsen
Typst is good for more than academic papers and resumes.| eaj.no
PHP 8.5 újdonságai, és hogyan frissíts a tárhelyeden
Pipe operátor, clone with, URI bővítmény és a többi PHP 8.5 újdonság, a támogatási határidők, és hogyan válts biztonságosan PHP-verziót a tárhelyeden.| aWh
Wix vagy WordPress: melyik felületet könnyebb használni
Wix helyett WordPress? Tudd meg, melyik felület kezelhetőbb, mikor éri meg a váltás, és mire figyelj a weboldal költöztetésekor. A testreszabás is számít.| aWh
Weboldal hibaüzenetek értelmezése és elhárítása - aWh
A weboldal hibaüzenetek értelmezése segít a hibák gyors javításában. Ismerd meg a 404-es és 500-as hibakódok okait, és hárítsd el a hibákat hatékonyan!| aWh
Blunt Banhammer Blocks Basic Bots Ballistically – Terence Eden’s Blog
I cut bot traffic to my site by over 80% with a simple trap. Last month, my hobby website OpenBenches.org transferred more than 2.5TB of data to visitors. As much as I'd like to think the site is enormously popular, it looks like it is just AI bots endlessly crawling the data and slurping up the images. So I've built B to be an indiscriminate tool to eradicate these unwanted parasites. It is…| Terence Eden’s Blog
Two apps one process
A blog mostly about Clojure programming| andersmurphy.com
udger: User Agent and IP Database
udger offers databases and an API to identify user agents, crawlers, VPNs, Tor exit nodes and datacenter IP ranges. I have not used it yet, but I keep this note for when I need it. Source| Web-Performance Blog
Vivaldi 8.3 Released with Customizable Ads & Track Blocker
Vivaldi, the Chromium based web browser, released version 8.3 a few days ago. The new version of this popular browser app features a big overhaul of its built-in Ads and Track Blocker. Besides disabling or blocking everything, it now provides two new options to reduce tracker and ad blocking a bit, to prevent websites from […]| UbuntuHandbook
Goodbye, Salon
Salon (via John Gruber, Hacker News): The business realities of independent digital journalism have changed profoundly over the years. After careful consideration, we have reached the difficult decision that our publishing model is no longer sustainable. We know this news will be deeply disappointing to many of you, and we share that sadness. Thirty-one years […]| Michael Tsai
Chameleon templates, modernized: chameleon-rs • Michael Kennedy's Thoughts on Technology
I rewrote Chameleon in Rust to make Python web apps faster. chameleon-rs runs your existing templates unchanged and adds async rendering, Markdown, and free-threaded Python support.| Michael Kennedy's Thoughts on Technology
I downloaded a website – Laura Michet's Blog
Misty wrote recently about how to archive websites locally on your own computer. I've never done this before! I decided to give it a shot!! I downloaded t...| Laura Michet's Blog
How are you dealing with all the negative side effects of AI on the web? | Lobsters
40 comments| Lobsters
Scriptable GeoDNS: leaving AWS for Bunny
I moved this blog from CloudFront and Route 53 to a European provider. JavaScript code running on each DNS query returns the closest servers,...| vincent.bernat.ch
Exploring Janet and the httpf web framework - Nick's Blog — Nick's Site
Written by Nick F | nick.gs
Portal B2B para distribuidores y fabricantes: Shopify B2B vs WooCommerce vs Odoo
Si tus clientes profesionales siguen haciéndote pedidos por WhatsApp, email o Excel, necesitas un portal B2B. Comparamos Shopify B2B, WooCommerce y Odoo con criterios reales: tarifas por cliente, condiciones de pago, integración con ERP y automatización de pedidos. La entrada Portal B2B para distribuidores y fabricantes: Shopify B2B vs WooCommerce vs Odoo se publicó primero en Inprofit.| Inprofit
A Look at Datastar - Noteflakes
I have always been interested in frontend solutions for building web applications. Even though I'm more of a backend programmer, I really dig all the different techniques people come up with...| noteflakes.com
« Nous devons donner aux internautes une raison de redécouvrir Firefox »
Fin septembre, Firefox a dévoilé sa refonte la plus ambitieuse depuis 2021. Ajit Varma, responsable du navigateur, revient sur la genèse du projet, évoque les pistes écartées en cours de route et la stratégie pour reconquérir le grand public.| BDM
Lorem Ipsum Dot Gov Dot UK – Terence Eden’s Blog
I love testing in production. The thrill of accidentally publishing some dummy data - or taking down an entire website - is similar to skydiving without a parachute. Exquisite excitement followed by heart-stopping terror. Before going live with a new website or service, it's sensible to test how text looks on it. Most people don't test with readable text - it's too easy for management to start…| Terence Eden’s Blog
Death comes for XSLT – David Bushell – Web Dev (UK)
The one where the grim reaper has a web standard in sight.| dbushell.com
« La programmation est morte » : Proton publie son manifeste IA interne qui a déclenché la polémique — Frandroid
Proton a mis en ligne le 1er novembre le « manifeste IA » de son directeur technique, Bart Butler, qui annonce à ses ingénieurs que « la programmation est morte ». Le mémo, diffusé en interne en septembre, circulait déjà depuis trois jours grâce à l'enquête de 404 Media.| Frandroid
Lata de lixo
É só uma lata de lixo, com lixo em volta que você pode colocar de volta dentro da lixeira.| Manual do Usuário
Rock Social
Meio rede social, meio prática relaxante, o desafio diário neste site é amontoar pedras virtuais de acordo com o tema proposto. Há uma galeria com as obras das outras pessoas.| Manual do Usuário
BIGWORDS.PAGE
Este site permite compor uma mensagem gigante, que ocupe a tela toda, direto no navegador, editando apenas a URL. (Tem um editor visual também; mais fácil.) Além de palavras, dá para colocar também QR codes, contadores regressivos, imagens…| Manual do Usuário
Trash can
It's just a trash can, with trash around you can put back inside the trash can.| Manual do Usuário
Rock Social
Half social network, half relaxing practice, the daily challenge on this site is to pile virtual stones according to the proposed theme. There is a gallery with other people's works.| Manual do Usuário
BIGWORDS.PAGE
This site allows you to compose a giant message, which occupies the entire screen, directly in the browser, editing only the URL. (It has a visual, easier editor, too.) In addition to words, you can also put QR codes, regressive counters, images…| Manual do Usuário
Nuevas redes sociales: buscando alternativas
Este nuevo artículo es una continuación de este otro, y se puede considerar una actualización del mismo. Todo esto viene como consecuencia de que, o como dice el refrán, por causas ajenas a la empresa 😊, he tenido que dejar de usar una de las RRSS que utilizaba hasta ahora. Pero esto también me ha venido bien, porque, como dice otro refrán, cuando una puerta se cierra, se abre una ventana.| Posts on Si lo haces, hazlo bien!
Eternal Black October
Rusty Foster, of the excellent Today in Tabs newsletter you should probably be reading: Neat! There’s a remote-exploitable kernel memory race condition in the Linux IPv4 TCP code. A bunch of other linux kernel vulnerabilities were accidentally posted to a public mailing list before patches were ready for them. The official Claude Code extension for […]⌥ Permalink| Pixel Envy
Que s'est-il passé avec les packages npm sur ces 12 derniers mois ?
Depuis septembre 2025, les compromissions de paquets npm se sont multipliées : Shai-Hulud, axios, Mastra, ChainDrop. Retour sur un an et demi d’attaques, les propriétés de l’écosystème node qui les rendent possibles, et les mesures concrètes (délai avant installation, blocage des scripts, CI, OIDC) pour réduire votre exposition.| OCTO Talks !
Базы данных на клиенте
Современные веб-приложения работают так. Есть апишка на сервере, которая возвращает данные в JSON. Бекенд ничего не знает о рендере, а только раздает данные и обрабатывает команды. И есть js-приложение на клиенте, которое забирает данные с бека и рендерит их. Все это понятно, ...| Ivan Grishaev's blog
We don't want decentralized systems, we want small ones
We don't want distributed systems, we want small systems. It doesn't matter if they are centralized inside: what matters is that they stay at a manageable size. That makes them cheap, easy to maintain and almost free of moderation. One example is tildes, shared Unix servers where every user has their own account. They run on a trusted admin and donations. When they grow too big, more tildes appear. Another example is Friend Camp, a community of friends. It costs about $30 a month, around $1 p...| Andros Fenollosa Blog
Org Social: the social network that survives its own infrastructure
Org Social is so simple it looks like it was born before the internet. A single plain text file, an editor and a host are enough to interact with other people. To "create an account", you just create a plain text file in any editor. Your "database" is your own hierarchy of posts. Your "algorithm" is however you decide to sort other people's posts. There is no "character limit". Your "server" is any hosting or web server. Your "interface" is your favorite editor. And if you want to "delete you...| Andros Fenollosa Blog
A July SCI for Web update - defining a new standard for carbon measurement in web applications - Green Web Foundation
Over the last twelve months, we’ve been posting about our work leading on the development of SCI for Web, a new standard for measuring the carbon emissions from using digital services. This will eventually become an ISO standard, as a more focussed version of the parent ISO standard, Software Carbon Intensity, from the Green Software…| Green Web Foundation
10 Best Web Hosting Providers in South Africa in 2024
Finding the right web host for your website can be challenging. This list of the best web hosting providers in South Africa will help you choose.| Learn Digital Marketing
HTTP/3 load balancer connection offloading
In a previous post I described load balancing for TCP-based HTTP with connection offloading, and mentioned that HTTP/3 can do even more. By the power of AI writing an HTTP/3 version of both the load balancer (sni-router-h3) and the webserver (tarweb-h3), I have experimented enough to have more to say about how that works. To be clear: this post is 100% human-written. In this post I will use this terminology: client: E.g. a web browser. router: A load balancer / traffic router, that inspects S...| Blargh
Websites in artistic contexts
Yesterday I asked three friends a variation of the following question: Is there a website that makes you pause like a piece of architecture? One person provided an answer to the question that was a hypothetical design: a website where, when you scrolled down, you would be moved forward through the archives, with representations of pages to your left and right. Two people – and, additionally, myself – couldn’t think of an answer. 1 I was motivated by the way that tall buildings in partic...| with words, wonder
Scalable Vector Grief | PortSwigger Research
I tested eight popular SVG sanitizers and bypassed six of them. In this post, I'll show you how a response header can run JavaScript in Firefox even when the response body is completely harmless XML.| PortSwigger Research
Was bedeutet "Maschinenlesbare Website"? Glossar 2026
Maschinenlesbare Website einfach erklärt: Definition, Bausteine, Schema.org, JSON-LD, KI-Crawler und Checkliste für KMU.| Berger+Team
Gorona del Viento revalida el 10 en transparencia
Por segundo año consecutivo, Gorona del Viento El Hierro logra un 10 en el Índice de Transparencia de Canarias, la máxima nota posible en un indicador que refleja la calidad... La entrada Gorona del Viento revalida el 10 en transparencia se publicó primero en Gorona del Viento El Hierro, S.A..| Gorona del Viento El Hierro, S.A.
TEDxRennes 2026
Le TEDx rennais fête ses 15 ans avec une soirée de conférences consacrée aux utopies.| BDM - Agenda
Issue: Q2 2020 - Saddle Up!
Nulla a velit quis ex ornare rhoncus. Donec imperdiet risus justo, vel malesuada erat fermentum at. Morbi at laoreet mauris. Mauris lorem felis, gravida et vehicula congue, tempus vel justo.| Saddle Up!
Vibe Coding Webdesign: Strategie vor KI-Code
Vibe Coding Webdesign beschleunigt Prototypen. Erfahre, warum KI keine Website-Strategie ersetzt und wie KMU KI-Webdesign sauber nutzen.| Berger+Team
Mobile First ist nicht tot: Context First entscheidet
Mobile First bleibt wichtig, reicht als Leitlogik aber nicht mehr aus. Erfahre, warum Context First, kontextbasiertes Design und...| Berger+Team
Mikrointeraktionen im Webdesign: wichtige Details
Mikrointeraktionen im Webdesign verbessern das Nutzererlebnis durch Animationen, Feedback und Interaktivität, was die Nutzerbindung stärkt.| Berger+Team
Unternehmensfakten für KI konsistent halten: KMU-Leitfaden
Konsistente Unternehmensdaten brauchen eine verbindliche Primärquelle, klare Zuständigkeiten und einen regelmäßigen Kanalabgleich. Diese Anleitung zeigt eine praxistaugliche Monatsroutine samt Korrekturprotokoll für KMU.| Berger+Team
Website-Wissenssystem: Der 15-Minuten-Selbsttest für KMU
Der 15-Minuten-Selbsttest zeigt anhand von zehn Fragen, ob Deine Website eine digitale Broschüre, eine strukturierte Wissensbasis oder eine andockbare Serviceschnittstelle ist. Jede Reifestufe führt zu einem klaren nächsten Schritt.| Berger+Team
The passkey is worse | Kevin Coleman
Today I got a strange email that turned into an unsettling phishing experiences.| Kevin Coleman
Michael Tsai - Blog - iPod at 25
Monday, October 26, 2026| mjtsai.com
_Paradise Lost_, diffed
One of my book clubs will be starting Milton's _Paradise Lost_ soon. Preparing for that reading, I learned that there are actually two different versions of _Paradise Lost_: the “original” 1667 edition in ten books, and the 1674 revised edition in twelve. Are the differences between the two editions as significant as, say, the differences between the 1818 and 1831 editions of Mary Shelley's _Frankenstein_? To find out, I wanted a website similar to Eduardo Villuendas' [_Frankendiff.com_](...| Arthur O’Dwyer
Websites Should Be Printable
I read a lot of printed papers these days. While I enjoy reading on a laptop as much as the next guy, marking up a printed document engages me better. Also, there's something about sitting with a whit…| Brennen Puth
Web Page Crawler Revealed - Information Camouflage
In my post about| bruceediger.com
Wildcard HTTPS certificates with Certbot and Cloudflare DNS
Wildcard HTTPS certificates allow you to generate a certificate that will be valid across every subdomain of a domain, which is a great convenience if you manage a lot of subdomains. However with great power comes great responsibility as in order for Let’s Encrypt to validate that you are in control of the entire domain, you will need to pass a DNS-based challenge, as compared to a traditional HTTP-based challenge for an individual subdomain.| ROllerozxa
Web szerver logok elemzése hibák és robotok felismeréséhez
A web szerver logok elemzése segít Önnek a rejtett hibák és a robotok azonnali feltárásában. Ismerje meg a HTTP-kódokat és a hatékony naplókezelés alapjait!| aWh
WordPress hibakeresés debug módban: a WP_DEBUG beállítása 2026-ban
A wordpress hibakeresés (debug mode) segít feltárni a hibákat. Ismerje meg a WP_DEBUG és a WP_DEBUG_LOG biztonságos beállítását, valamint a naplózás lépéseit.| aWh
Too many redirects hiba: így szüntesse meg az átirányítási hurkot
A too many redirects hiba blokkolja weboldalát? Ismerje meg az átirányítási hurok okait, és hárítsa el a hibát a cPanelben vagy a WordPressben biztonságosan.| aWh
Outlook e-mail beállítása lépésről lépésre - aWh
A sikeres outlook email beállítás lépésről lépésre: adja meg a pontos IMAP és SMTP adatokat, konfigurálja az SSL/TLS titkosítást, és levelezzen biztonságosan!| aWh
Mastodon 5
Imani Joy: We’re moving away from the embedded composer and adopting a pop-out composer with new controls for visibility and other post settings. Navigation is simplified and organised in a more intuitive way and create space for future new features. […] In your feeds, the posts themselves have been rebuilt from the ground up, giving […]| Michael Tsai
Putting this blog on ATProto with standard.site | Redowan's Reflections
Mirroring a static Hugo blog onto ATProto with standard.site and Sequoia, plus the GitHub Actions wiring that republishes the records on every push without any manual steps.| Redowan's Reflections
Decorative Images… — Adrian Roselli
…aren’t a thing. Three hand-drawn lines curling together like an S or three skinny snakes trying to spoon. At least not as far as people are concerned. Yes, this is an absolutist take, but sometimes it’s necessary to take the absolutist position to force someone to justify their own reasoning.…| Adrian Roselli
Please don't mess with links:
Please don't mess with links:| maurycyz.com
Episodio 107. SEO Local ¿Cómo se hace, pero bien?
No te dejes engañar, el SEO Local es muy importante para tu negocio local. ¿Sabes cómo hacerlo, pero bien, bien? Dale al play ▶️| leaderselling.com
Oracle Cloud Free Tier 2026: Ainda Vale a Pena? Guia Completo + Alternativas | Home
O Oracle Cloud Always Free Tier ainda funciona em 2026? Guia completo com configuração passo a passo, Tailscale, Docker e alternativas gratuitas de VPS.| Home
iPhone Duo and Safari
Mike Piontek (Mastodon): A year ago I wrote that Safari 26 and Liquid Glass have little respect for web sites and unfortunately this hasn’t changed. […] It’s unclear to me why Apple is not opting to treat the iPhone Duo toolbar as a safe area. I have not come across anything discussing their reasons nor […]| Michael Tsai
La Turquie ferme les réseaux sociaux aux moins de 15 ans, et sa méthode change tout
C’est voté, c’est publié, ça s’applique. La Turquie vient de poser au Journal officiel, le 10 octobre, le règlement qui interdit les réseaux sociaux aux … L’article La Turquie ferme les réseaux sociaux aux moins de 15 ans, et sa méthode change tout est apparu en premier sur Les Actus du Net.| Les Actus du Net
Attal veut pouvoir couper certains réseaux sociaux pendant les émeutes, le Conseil d’État lui a déjà dit non
Gabriel Attal a relancé lundi 19 octobre une idée qui revient à chaque flambée de violences : donner à l’État le pouvoir de bloquer temporairement … L’article Attal veut pouvoir couper certains réseaux sociaux pendant les émeutes, le Conseil d’État lui a déjà dit non est apparu en premier sur Les Actus du Net.| Les Actus du Net
PHP2Shell
Malwarebytes: If you’ve encountered websites in maintenance mode today, it may be a security precaution. Reports of attacks targeting two critical PHP vulnerabilities have prompted warnings to install emergency updates and consider temporarily taking affected services offline until they can be patched. […] Successful exploitation could let an attacker run malicious code on an affected […]| Michael Tsai
Ofcom Concedes Defeat in 4chan Case
Guido Fawkes: Ofcom boss Dame Melanie Dawes has admitted today that tech firms have paid just two of the eleven fines handed out under the Online Safety Act since March last year. Giving evidence to the Culture, Media and Sport Committee, she conceded nine remain unpaid, four of the offending sites have simply geo-blocked the […]| Michael Tsai
Instagram Charging for Links
Meta: If you subscribe to a Meta One plan, you can add links to a set number of posts and reels each month based on your plan:Meta One Advanced plan: up to 4 posts and 4 reels with links per monthMeta One Expert plan: up to 8 posts and 8 reels with links per monthMeta […]| Michael Tsai
Reddit to Remove RSS
Jeff Johnson (June): This new RSS rate limiting was perhaps foreshadowed by an r/modnews post a couple of weeks ago[…] judy-funnie (September, via Jeff Johnson): Because RSS is now a common surface for large-scale scraping and automated abuse, we'll stop supporting RSS feeds on November 13, 2026 while preserving moderation workflows that depend on it […]| Michael Tsai
Michael Tsai - Blog - Passkeys Attestation Trap
Passkeys Attestation Trap| mjtsai.com
« On a un problème » : une faille de sécurité absurde met Internet en alerte - Numerama
Huit clés privées de l’autorité de certification eMudhra étaient tellement faibles qu’elles pouvaient être retrouvées presque instantanément. Révélé le 20 octobre 2026, l’incident permet de fabriquer de faux certificats pour usurper l’identité de sites web auprès de logiciels vulnérables. Les principaux navigateurs| Numerama
Le merveilleux monde des dégénérés du Web3
Nous sommes le 22 octobre 2021. Quelques jours après la fin de mon dernier article. On me promet toujours 500 000 euros en Ethereum. The post Le merveilleux monde des dégénérés du Web3 appeared first on Je suis un dev.| Je suis un dev
J’ai codé l’univers tout entier (et au-delà) en JavaScript
J'ai codé un jeu gratuit en 3D dans le navigateur, librement explorable, à travers des univers infinis générés de manière procédurale. The post J’ai codé l’univers tout entier (et au-delà) en JavaScript appeared first on Je suis un dev.| Je suis un dev