Topics selected by tag: web

Pushed First Code Commits of Frontend Work Done with Opal Ruby + Glimmer DSL for Web to My Job's Rails Web App Repo

I'm happy to report that I officially pushed the first Opal Ruby + Glimmer DSL for Web code commits to my job's Rails repo in the Admin UI last week. It is just amazing how Glimmer components written in Ruby to replace React components are way simpler and smaller! It's not even close! My productivity definitely feels double at least while producing about half the code. This is so exciting! It reminds me of the early fun days of discovering Ruby, but on the Frontend! There is so much potential...| Code Master Blog

Code Master Blog: Glimmer DSL for Web Now Officially Supports Rails 7.1 & 7.2

code master oop ruby jruby java jee jse desktop web gui glimmer swt libui tk gtk rails| andymaleh.blogspot.com

Google no longer supports javascript-free search requests · Issue #1211 · benbusby/whoogle-search · GitHub

Describe the bug As of late, I'm starting to get empty search results when searching for something. Screenshot: It actually appears the HTML returned from Whoogle contains a fragment of an error me...| GitHub

How do I internationalize my CMS?

Background| dz4k.com

Use cases for | Jayesh Bhoot

I've started using a relatively less known value of the <form> element's method attribute, called dialog, for the following scenarios:| bhoot.dev

TLS Cipher Suite

You connected using X25519.| pq.cryspen.com

Creating a curtain-like navigation bar in Svelte

While browsing the internet looking for inspiration, I came across this wonderfully designed website. Build in Amsterdam has created a navigation menu that shows great interaction design by giving appropriate […]| ConSol Blog

Mapy.cz mají předplatné, ale Seznam už mě naučil používat něco jiného – Sesivany's blog

Trošku se zpožděním, ale napsal jsem o předplatném Mapy.cz. Cena příjemně překvapila, ale já už se naučil používat něco jiného. V druhé části článku se věnuji tomu, co to je a v čem je to lepší než Mapy.cz.| Sesivany's blog

Simplifying Angular Library Docs with Storybook

Managing a growing Angular library ecosystem can be challenging without clear, centralized documentation. At Halodoc, we adopted Storybook to streamline component management, enhance collaboration, and maintain scalability.| Halodoc Blog

Adding structured data with Perl - Perl Hacks

If you have a website, then it’s very likely that you would like as many people as possible to see it. One of the best tools for achieving that is to ensure that your site is returned close to the top of as many search results pages as possible. In order to do that, you […]| Perl Hacks

Va-t-il falloir bannir X (ex-Twitter) d’Europe pour contrer les ingérences d’Elon Musk ?

Elon Musk a multiplié les tweets contre Olaf Scholz en Allemagne et Keir Starmer au Royaume-Uni, parfois de façon outrageante. En parallèle, il soutient de plus en plus ouvertement l'extrême-droite en Europe. À tel point que la question de bannir X (ex-Twitter) d'Europe se pose.| Société : bien comprendre la société de demain avec Numerama

Pourquoi Elon Musk s’est disputé avec les fans de Donald Trump tout le week-end

En désaccord sur l'immigration et le sort des travailleurs étrangers, Elon Musk et une partie des fans de Donald Trump ont passé le week-end à s'insulter sur X (ex-Twitter). C'est la première fois depuis la victoire du Républicain que le patron de Tesla et de SpaceX devient la cible de son propre clan.| Société : bien comprendre la société de demain avec Numerama

Web 1.0, 2.0, 3.0 and 4.0: The evolution of the internet

Discover the evolution of the internet from Web 1.0 to Web 4.0 and how each phase has revolutionised the way we interact with the web and each other.| SEEBURGER Blog

valve flicker css

As noted, Valve uses the same flicker effect for broken lights in all their games. What if I want a broken web page?| flak.tedunangst.com

WhatsApp news of the week: feature to quickly contact support under development for the web client

Missed our weekly WhatsApp beta updates? Catch up now with our summary! Among our 6 stories we shared, the best news of the week is a new feature under development that allows users to access quick support directly from the web client! Common questions Answers Story about? WhatsApp news of the week I've installed the […]| WABetaInfo

The Five Best Mashups for Your 2025 Marketing Campaigns

The Golden Globes are celebrating the best in movies, TV, and screenplays. But what about the best pairings in marketing?... The post The Five Best Mashups for Your 2025 Marketing Campaigns appeared first on Ironmark.| Ironmark

Bing Tricking People Into Thinking They’re on Google

Tom Warren (tweet, Hacker News): Microsoft is pulling yet another trick to get people to use its Bing search engine. If you use Bing right now without signing into a Microsoft account and search for Google, you’ll get a page that looks an awful lot like… Google.It’s a clear attempt from Microsoft to make Bing […]| Michael Tsai

RSS Cache Control

Brent Simmons reported to me that my blog’s RSS feed wasn’t updating in recent versions of NetNewsWire. They’ve added support for the Cache-Control response header, and, for reasons unknown, my site was returning an interval of 2 days: $ curl --head https://mjtsai.com/blog/feed/ HTTP/2 200 date: Wed, 08 Jan 2025 14:28:24 GMT server: Apache vary: Accept-Encoding,Cookie,User-Agent […]| Michael Tsai

OpenAI Failed to Deliver Opt-out Tool

Kyle Wiggers (Hacker News): Back in May, OpenAI said it was developing a tool to let creators specify how they want their works to be included in — or excluded from — its AI training data. But seven months later, this feature has yet to see the light of day.Called Media Manager, the tool would […]| Michael Tsai

Autodesk Deletes Old Forum Posts

Autodesk (via Hacker News): To keep our community efficient and up to date, we’ll be archiving content older than 10 years. We built a policy around document retention to stay relevant to our users and customers.[…] The archiving process will start in December and is planned to be completed before the end of [2024].[…]Archiving is based […]| Michael Tsai

Bench Shut Down, Then Acquired

Charles Rollet (Hacker News): Bench, a Canada-based accounting startup that offered software-as-a-service for small and medium-sized businesses, has abruptly shut down, according to a notice posted on its website.[…]The company’s entire website is currently offline except for the notice, leaving thousands of businesses in the lurch. Bench touted having more than 35,000 U.S. customers just […]| Michael Tsai

Web Performance Calendar » Not every user owns an iPhone

As software engineers and technologists its common to have access to some powerful devices and super fast bandwidths. It's highly likely that you will be developing/testing on a high end Mac (or similar) or pulling out an expensive mobile device such as an iPhone from your pocket. But we need to be| Web Performance Calendar

Fix Image Alt in JSON-LD When Using Jekyll SEO Tag

Learn how to fix the bug in Jekyll SEO Tag plugin's generated JSON-LD output with an invalid image alt property for an object of type ImageObject.| Adamsdesk

Resolve Jekyll Cannot Load Such File JSON Error

Resolve the error message of Cannot Load Such File -- json (LoadError) when running Jekyll's built-in web server by modifying the Gemfile config.| Adamsdesk

How to Block or Disable Media Using Mozilla Firefox

Improve your privacy and website performance in this comprehensive guide on how to block media elements (images, videos, etc.) using Mozilla Firefox.| Adamsdesk

Create a Custom Description for Your Jekyll Posts

Learn to create an effective custom post/page description with Jekyll using either the excerpt feature or a custom description front matter variable.| Adamsdesk

The Importance of a Thoughtful Website Footer

Take a deep dive in learning about a website footer in this comprehensive guide covering what one is, key design points, ideas, the purpose, and more.| Adamsdesk

The Ultimate Guide to the Broadcast Channel API

In this article, we will explore the Broadcast Channel API and how it works, as well as how it can be used in real-world cases.| Telerik Blogs

</> htmx ~ The future of htmx

htmx gives you access to AJAX, CSS Transitions, WebSockets and Server Sent Events directly in HTML, using attributes, so you can build modern user interfaces with the simplicity and power of hypertext htmx is small (~14k min.gz’d), dependency-free, extendable, IE11 compatible & has reduced code base sizes by 67% when compared with react| htmx.org

How to Optimize Next.js Web Apps for Better Performance

As engineers, we often get so carried away with other aspects of development that we overlook how users perceive and interact with our applications. This oversight can result in users leaving the app almost as soon as they arrive, leading to higher b...| freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More

FTC Catches up to #accessiBe

From the FTC on Friday: The Federal Trade Commission will require software provider accessiBe to pay $1 million to settle allegations that it misrepresented the ability of its AI-powered web accessibility tool to make any website compliant with the Web Content Accessibility Guidelines (WCAG) for people with disabilities. FTC Order…| Adrian Roselli

Updated Brief Note on Description List Support — Adrian Roselli

TL;DR: Description list support continues to be generally good (with VoiceOver still the outlier), even if you may not like how it is supported. For background, the has existed since HTML+, or 1993, when it was called definition list. In December 2022 I wrote Brief Note on Description List…| Adrian Roselli

Web page annoyances that I don't inflict on you here

Web page annoyances that I don't inflict on you here| rachelbythebay.com

/web/

If you're wondering where all the action is, given that this blog has been quiet for half a year, I've been gradually populating a new area of my website: mathr.co.uk/web I'm finding a less time-oriented site more useful for making incremental changes to pages.| mathr

Low-latency Disco

Back in 2019 I experimented a bit with Haar wavelets for audio analysis and resynthesis. The main idea was splitting audio into octaves, calculating energy per octave, then doing the same for each octave over a longer time period, calculating energy per octave of rhythm frequencies for each octave of audible frequencies. I intended to use these rhythm fingerprints for discriminating (hence the name for the project, "Disco") between speech and music, but didn't get very far at the time (more r...| mathr

unarchive-1.0 released

15 years on from my initial prototype, unarchive-1.0 is released. It's a bash script for downloading items and collections from the Internet Archive. I use it to maintain a local mirror of my favourite netlabels. See the website at mathr.co.uk/unarchive for more details, including downloads, link to development repository and an HTML version of the manual page.| mathr

Make Agencies Mortal Again

DOGE’s first task should be to make government agencies compete to be efficient, or face elimination.| Chronicles

Tech Brahmins Should Look at Indian Dysfunction First

Before criticizing America and American workers, people like Vivek Ramaswamy should consider the ramifications of importing India’s dysfunctional culture.| Chronicles

The Acts of ‘Axe’

Obama’s personal storyteller David Axelrod sold the American public a bill of goods.| Chronicles

My Own Brush With Abortion

As an “inconvenient” child born before Roe, I was lucky that there was no notion of a “right to an abortion” then.| Chronicles

Brothers: Donald John Trump and Cassius Marcellus Clay

Both Ali and Trump, kindred spirits in so many ways, shook up the world.| Chronicles

Dynamic RSS Feed Generator

I built something over the holiday break to generate constantly updating RSS feeds (or Atom or JSON feeds) at any frequency you want. Each entry has sample content (generated by ChatGPT) and links to a corresponding web page. These pages include a randomly generated image and OpenGraph meta. The homepage even has feed discovery meta.| Josh Betz

AirSS: 超轻量RSS阅读器

去年我有一篇博文介绍了RSS在博客的应用。博客不是微信公众号，有现成的平台可以方便订阅。你当然可以把我的博客加在浏览器书签里，时不时点一下。但个人博客更新时间不定，可能一两天，可能一两个月，所以读者主动点进来效率很低。假如你想追踪十个，二十个，甚至上百个个人博主呢？那必须有更好的方法。通过RSS，读者可以把众多的个人博客汇集在一个界面，...| 一言堂

Chrome : une trentaine d’extensions compromises, comment réagir ?

Fin décembre 2024, une campagne de cyberattaques a compromis plusieurs extensions légitimes du navigateur Chrome, exposant des millions d'utilisateurs au vol de données.| BDM

Les 10 actualités du digital qu’il ne fallait pas manquer en décembre 2024

Lancement de Sora, mode Essai sur Instagram, gratuité de ChatGPT Search : retour sur les actualités qui ont marqué le mois de décembre.| BDM

Antitrust : Google fait une contre-proposition à la justice américaine

Google négocie en amont de l'audience prévue en avril 2025.| BDM

La CNIL va lancer une certification RGPD des sous-traitants

La commission veut faciliter le choix des sous-traitants par les responsables de traitement.| BDM

SEO : Google déploie une mise à jour de ses algorithmes (December 2024 spam update)

Google poursuit sa lutte contre les spams avec une nouvelle mise à jour. Le déploiement pourrait durer jusqu'à une semaine et impacter le classement de certains sites.| BDM

Vol de cookies : quel est ce type d’attaque et comment s’en protéger ?

Le vol de cookies, une menace grandissante, permet à des attaquants d’usurper des identités ou de contourner la sécurité. Découvrez les risques et les moyens de s’en protéger.| BDM

Video for /dev/mtl 2024 Talk "Frontend Ruby with Glimmer DSL for Web"

The video for my /dev/mtl 2024 talk "Frontend Ruby with Glimmer DSL for Web" has been published!| Code Master Blog

CTFで出題される脆弱性 vs プロダクトセキュリティのリアルな課題

週末をCTFに費やし、平日の余暇時間をその復習に費やしている @hamayanhamayan です。去年2023年はCTFtime1調べでは66本のCTFに出ていて、自身のブログでは解説記事を40本ほど書いています。自分はCTFプレイヤーですが、一方で、Flatt Securityはお仕事でプロダクトセキュリティを扱っている会社です。CTFで出題される問題と、プロダクトセキュリティにおける課題の間にはどの...| Flatt Security Blog

Is Secure Cookie secure? - CookieのSecure属性・__Host-プレフィックス・HSTSを正しく理解しよう

こんにちは、 @okazu_dm です。前回の記事に引き続きCookie関連のセキュリティに関する記事となります。今回は、Cookieの仕様を定めたRFC6265(https://datatracker.ietf.org/doc/html/rfc6265)自体に含まれるSecure属性の問題点と、その対策について紹介していきます。 CookieのSecure属性自体は前回紹介したSameSite属性と比較してわかりやすいのもあり、かなり知名度が高いと思われますが、...| Flatt Security Blog

Webアプリケーションに対する脆弱性診断の外注/内製化とバグバウンティの役割の違い

初めまして、Flatt Security社のブログに寄稿させていただくことになりました、西川と申します。普段は、SaaS企業でプロダクトセキュリティをメインの仕事としていますが、一般社団法人鹿児島県サイバーセキュリティ協議会の代表理事として活動しております。さて、今回はプロダクトセキュリティを生業としている私が、脆弱性診断を外注することと内製化すること...| Flatt Security Blog

SQL/コマンドインジェクション、XSS等を横串で理解する - 「インジェクション」脆弱性への向き合い方

こんにちは、@hamayanhamayan です。本稿ではWebセキュリティに対する有用な文書として広く参照されているOWASP Top 10の1つ「インジェクション」について考えていきます。色々なインジェクションを例に挙げながら、どのようにインジェクションが起こるのかという発生原理から、どのようにインジェクションを捉え、より広くインジェクションの考え方を自身のプロダク...| Flatt Security Blog

Flatt Security Developers' Quiz #7 解説

こんにちは、今回作問したTerranovaです。今回はFlatt Security Developers' Quiz #7にご参加いただきありがとうございました。 🍫 Flatt Security Developers' Quiz #7 開催！ 🍫解答は2/18(日) 19:59まで！チョコ獲得を目指して頑張ってください！デモ環境: https://t.co/7J8Ez1nct4ソースコード: https://t.co/14AHolfCRt解答提出フォーム: https://t.co/sdvK7UzDel pic.twitter.com/MlNcKswnai— 株式会社Flatt Securi…| Flatt Security Blog

SameSite属性とCSRFとHSTS - Cookieの基礎知識からブラウザごとのエッジケースまでおさらいする

こんにちは、 @okazu_dm です。この記事は、CookieのSameSite属性についての解説と、その中でも例外的な挙動についての解説記事です。サードパーティCookieやCSRF対策の文脈でCookieのSameSite属性に関してはご存知の方も多いと思います。本記事でCookieの基礎から最近のブラウザ上でのSameSite属性の扱いについて触れつつ、最終的にHSTS(HTTP Strict Transport Security)のような注意点を含...| Flatt Security Blog

GitHubの内部ネットワークにアクセス可能な脆弱性(SSRF)を報告した話

今回解説する脆弱性は、当時プライベートベータ中だったGitHub Enterprise Importerと呼ばれる機能に存在しました。この機能は以下の環境からGitHub Enterprise Cloudに対して、リポジトリデータだけでなくプルリクエストやそのコメントなど、様々なデータをインポートすることができるものであり、従来のデータ移行時には引き継ぐことができなかったデータをGitHub Enterprise Clo...| Flatt Security Blog

GitLabで1クリックアカウント乗っ取りが可能だった脆弱性から学ぶ、OpenID Connect実装の注意点

はじめにこんにちは。株式会社Flatt Securityセキュリティエンジニアの森(@ei01241)です。最近は認証や認可に際してOpenID Connectを使うWebサービスが増えていると思います。「Googleアカウント/Twitter/Facebookでログイン」などのUIはあらゆるサービスで見かけると思います。しかし、OpenID Connectの仕様をよく理解せずに不適切な実装を行うと脆弱性を埋め込むことがあります。そ...| Flatt Security Blog

11 best open-source web crawlers and scrapers in 2025

Free software libraries, packages, and SDKs for web crawling? Or is it a web scraper that you need?| Apify Blog

Reminiscing CGI scripts | Redowan's Reflections

I’ve always had a thing for old-school web tech. By the time I joined the digital fray, CGI scripts were pretty much relics, but the term kept popping up in tech forums and discussions like ghosts from the past. So, I got curious, started reading about them, and wanted to see if I could reason about them from the first principles. Writing one from the ground up with nothing but Go’s standard library seemed like a good idea.| Redowan's Reflections

2024.12.20 覚書 / 2024.12.20 memo's

2024.12.20 覚書 / 2024.12.20 memo's 自分が参考になったブログの紹介します。 / Here are some blogs that I found helpful. Angular blog.logrocket.com www.telerik.com danielsogl.medium.com medium.com zenn.dev zenn.dev CSS blog.classyendeavors.com Develop zenn.dev Rust www.rustfinity.com RxJS dev.to TypeScript qiita.com zenn.…| らいふうっどの閑話休題

2024.12.16 覚書 / 2024.12.16 memo's

2024.12.16 覚書 / 2024.12.16 memo's 自分が参考になったブログの紹介します。 / Here are some blogs that I found helpful. Angular youtu.be dev.to itnext.io medium.com medium.com scrpgil.github.io qiita.com CSS dev.to Rust blog.startifact.com Web web.dev dev.to| らいふうっどの閑話休題

Vhsky.cz: česká alternativa k YouTube postavená na PeerTube

Zhruba před týdnem jsme v jedné diskusi na Mastodonu s Archosem zjistili, že oba přemýšlíme o stejné věci: rozjetí instance PeerTube, která by byla k dispozici českým autorům. On měl připravené technické prostředky, ale myslel si, že o to nebude zájem. Já jsem byl přesvědčený, že o to zájem bude, ale neměl technické prostředky.| Sesivany's blog

En 2024, on a appris à nager en web trouble

[Opinion] 2024 a vu l'accélération brutale de phénomènes en ligne inquiétants. Mais, quand on touche le fond, n'est-ce pas le meilleur moment pour réapprendre à nager ? C'est le thème de Règle 30, la newsletter de Numerama, cette semaine.| Société : bien comprendre la société de demain avec Numerama

Zen Browser - SparkyLinux

There is a new application available for Sparkers: Zen Browser What is Zen Browser? Installation (Sparky 7 & 8 amd64/arm64): Make sure it is in beta stage yet. License: MPL Web: github.com/zen-browser/| SparkyLinux

Declare your AIndependence: block AI bots, scrapers and crawlers with a single click

To help preserve a safe Internet for content creators, we’ve just launched a brand new “easy button” to block all AI bots. It’s available for all customers, including those on our free tier.| The Cloudflare Blog

Making a Trello clone using htmx

Is it possible to create a Trello clone using htmx? Yes, and I’ll show you how.| www.erikheemskerk.nl

A Tour of WebAuthn

This book was distributed at the FIDO Authenticate conference in| www.imperialviolet.org

Handling keyboard shortcuts in JavaScript - rand[om]

I was recently reading the source code of mizu.js1 and I liked the utility “function”2 they have to handle keyboard shortcuts/combinations. I decided to slightly modify it to have it as …| rand[om]

making a website is hard - - cathode ray dude's blog

making a website is hard and every year it gets harder. you can skip this post, i'm just an old man yelling at cloud. break i wrote like 8,000 words about how much i hate trying to make websites in the modern world and got so mad and disgusted that i just abandoned it. then i tried to write something nicer and that didn't work either. the best i can manage is not being outright vitriolic| cathode ray dude's blog

My take on United States of Al

Last week, I was in Abuja in Nigeria for the Going Global Africa 2024 conference and I had to take three flights to go there (Mauritius to Johannesburg, to Addis-Ababa and then to Abuja). On one of these three flights, I came across United States of Al, a TV show which ran for two seasons from 2021 to 2022. I watched the first two episodes and I really liked it.| Noulakaz

Cramming scrapscript into msgpack

Every scrapscript program can be crammed into "flat" scraps.| taylor.town

Netflix App or Browser? Unpacking User Behavior Trends | Datos

Netflix is the biggest streaming service in the world. Despite cutthroat competition from other streaming platforms in recent years, it still retains the largest market share across the globe, with over 84 million paid subscribers in the USA alone. There are two ways for Netflix’s millions of users to access the service: through a web […]| Datos

How do you do, fellow web developers? A growing disconnect. | exotext

How do you do, fellow web developers? A growing disconnect. | exotext| rakhim.exotext.com

Infographie : 1 minute sur Internet en 2024

Domo a dévoilé la 12e édition de son rapport Data Never Sleeps, vous permettant de découvrir ce qu'il se passe chaque minute sur le web.| BDM

De Linux à Mozilla Firefox : 5 projets open source qui ont marqué leur temps

Les projets open source, aux principes solidaires, communautaires et gratuits, ont engendré de grandes avancées dans le numérique, de WordPress à Blender, en passant par Linux.| BDM

Les tendances du secteur RH et de la paie en 2025

Sage, spécialiste mondial de la gestion d'entreprise, décrypte pour BDM les grandes tendances dans l'univers de la paie et des RH.| BDM

Comment connaître le CMS d’un site : méthodes et outils

Vous souhaitez découvrir le CMS qui se cache derrière un site web ? Voici 4 méthodes pour y arriver.| BDM

Handling Arbitrarily Nested Structures with Burp Suite

This is a blog post by Erik Szinai, who worked with us as an intern during the last couple of months. We hope our readers will find his contribution to the Burp Suite ecosystem useful!| Silent Signal Techblog

Surf's Up

A new app from Team Flipboard to combat social fragmentation| Spyglass

Misplaced trust

This might be a little technical for some readers, but don’t worry, it’s not actually the technical detail that’s important… On my home server, I run about half a dozen services that I need to access via a web browser, so they’re all behind a Caddy reverse proxy which connects me to the right one, Continue Reading| Status-Q

Lustre tutorial

Get started building your first web app with the Lusture tutorial.| Gleam tours

GitHub - abuseofnotation/static-feed-aggregator: An RSS aggregator that generates a simple embeddable static Markdown page

An RSS aggregator that generates a simple embeddable static Markdown page - abuseofnotation/static-feed-aggregator| GitHub

Boost Your Online Reach: How Multiple Related Websites Can Grow Your Business

Use your industry specific knowledge to create a related website and fill it with your own ADS. Create your own referrals with much less cost than paying for ads. I could go on, but let me start with An Example My own business is in the Entertainment Industry. We do high value entertainment which can … Continue reading "Boost Your Online Reach: How Multiple Related Websites Can Grow Your Business" The post Boost Your Online Reach: How Multiple Related Websites Can Grow Your Business appeare...| Circus Scientist

Avoiding unnecessary cleanup work in disconnectedCallback

In a previous post, I said that a web component’s connectedCallback and disconnectedCallback should be mirror images of each other: one for setup, the other for cleanup. Sometimes, though, you want to avoid unnecessary cleanup work when your component has merely been moved around in the DOM: This can happen when, for example, your component […]| Read the Tea Leaves

Gemini 2.0

David Pierce (Slashdot): Google is releasing Gemini 2.0 on Wednesday, about 10 months after the company first launched 1.5. It’s still in what Google calls an “experimental preview,” and only one version of the model — the smaller, lower-end 2.0 Flash — is being released. But Hassabis says it’s still a big day. “Effectively,” Hassabis […]| Michael Tsai

Re: Re: Bluesky and Decentralization -- Dustycloud Brainstorms

A few weeks ago I wrote| dustycloud.org

vExcess | My Github Webpage

My Github Webpage| vExcess

Caddy Ninja

Setup an HTTPS-enabled webserver with Caddy on Alpine Linux| caddy.ninja

Post: Mutation XSS: Explained, CVE and Challenge | Jorian Woltjer

Learn how to bypass HTML sanitizers by abusing the intricate parsing rules and mutations. Including my CVE-2024-52595 (lxml_html_clean bypass) and the solution to a hard challenge I shared online| jorianwoltjer.com

Firefox Removes “Do Not Track”

Venkat (via Hacker News): According to Wikipedia, DNT was introduced in 2009 by researchers Christopher Soghoian and Sid Stamm, and Mozilla Firefox was the first browser to implement this feature.However, as we approach 2025, with growing concerns about online privacy and data protection, Mozilla believes that DNT is no longer an effective privacy measure. Many […]| Michael Tsai

Storing Times for Human Events

Simon Willison: What’s wrong with calculating the exact UTC time the event is starting and storing only that? […] It’s surprisingly common for countries to make decisions about DST with very little notice. Turkey and Russia and Chile and Morocco are four more examples of countries that can often cause short-term chaos for software developers […]| Michael Tsai

FTC and CFPB Reining in Data Brokers

FTC (tweet): The Federal Trade Commission will prohibit data broker Mobilewalla, Inc. from selling sensitive location data, including data that reveals the identity of an individual’s private home, to settle allegations the data broker sold such information without taking reasonable steps to verify consumers’ consent. Under the FTC’s proposed settlement order, Mobilewalla will also be […]| Michael Tsai

Google Page Annotation Links

Barry Schwartz: When you are browsing a web page in the Google App native browser, Google can “extract interesting entities from the webpage and highlight them in line.” When you click on them, Google takes you to more search results.I don’t think this is a new feature, I mean, I’ve heard of this before from […]| Michael Tsai

Losing “Podcast”

Dave Winer: We’re losing the word “podcast” very quickly. It’s come to mean video interviews on YouTube mostly. Our only hope is upgrading the open platform in a way that stimulates the imagination of creators, and there’s no time to waste. If you make a podcast client, it’s time to start collaborating with competitors and […]| Michael Tsai

Montreal.rb Hack Night Solutions for Hunt The Wampus

In November and December of 2024, Montreal.rb hosted 2 Ruby Hack Night meetups about building the historic computer game, Hunt The Wampus, which was a text-based adventure game developed by Gregory Yob in 1973.| Code Master Blog

State of the Web App: Current Woes and Promising Futures

State of the Web App: Current Woes and Promising Futures The concept of a progressive web app is enticing: an application using web technologies that is inherently cross platform (since it runs in a browser) and acts like a native app, even functioning offline. Support for PWAs in traditionally locked-down platforms like iOS means that PWAs can give users the freedom to install apps without having to go through Apple’s App Store. But there are problems with web content that PWAs haven't sol...| Privacy Guides