292 private links
X.400 is arguably a better standard than SMTP, but the simple email address and the ease of implementation won.
GitHub - rapina-rs/rapina: A Rust web framework for APIs. So simple it feels like cheating. · GitHub
Read from a reddit post
« Les attaquants bénéficient d’un avantage asymétrique, puisqu’il leur suffit d’exploiter une seule brèche», alors que les défenseurs doivent couvrir une surface d’attaque qui n’est certes pas infinie, mais suffisamment étendue pour laisser des trous dans la raquette. Les développeurs de Firefox ne peuvent pas se permettre de « réécrire des décennies de code en C++ ».
De l'autre côté, l'IA peut détecter ces failles rapidement. Il est probable que ce genre de détection de faille soit inclus dans les processus avant la livraison d'une nouvelle version par exemple.
l’éditeur PDF intégré, qui permet de réorganiser, copier, coller, supprimer et exporter des pages dans un document PDF.
Oh pas mal
It's there if needed. A WebUSB implementation via native messaging.
- PDFs only
- provide photos!
- booking online
- integrations (birthday, events, ...)
SEO is important for search engines and other services (TripAdvisor, Google Maps, Instagram). The majority of the users are using smartphones, so mobile-first is definitely a way to built these websites.
About the possibilities of the web
The GNU Coreutils version published a faster version of some tools
In contrast to the frozen NPM package pages, npmx delivers some improvments:
- Transitive install size (similar to bundlephobia or packagephobia)
- Install script disclosure: any preinstall, install or postinstall script is rendered on the package page along with the
npx - outdated and vulnerable dependency trees
- version range resolution
- module replacement suggestions for features that become built-in ECMAScript. The dataset comes from https://github.com/es-tooling/module-replacements
- module format and types badges: ESM, CJS, both. Typescript types, node engine range
- Multi-forge repository stats instead of GitHub only
- cross-registry availability: npm, JSR
- side-by-side package comparison
- version diffing between two versions of the same package
- release timeline with size annotations: Every version of a package is plotted on a timeline with markers where install size jumped by a meaningful percentage
- download distribution by version (avoid download breaks with major versions)
- command palette
- i18n
- accessibility as default
- agent skill detection
- social features on AT Protocol
- Local-CLI admin connecter
- dark mode and custom palettes
An alternative to the frozen NPM which delivers more useful informations per package
I did not install any Anthropic browser extension. I have never installed a Claude browser extension due to privacy and security concerns. I did install Claude Desktop, the Mac app, a while back. That is the only thing on this machine which could have written the file. Claude Desktop reached into Brave, a browser from a completely separate vendor, and registered a back door for a browser extension I do not have.
and the security risks involved is concerning.
Vercel's turn
Changer un identifiant dans l'URL, c'est si simple.
Sur un forum cybercriminel, un certain « breach3d » a mis en vente une base de 18 à 19 millions d'enregistrements, présentée comme issue des systèmes de l'ANTS. Le vecteur d'attaque revendiqué est une vulnérabilité IDOR (Insecure Direct Object Reference) sur l'API du portail moncompte.ants.gouv.fr. Il suffisait de modifier un identifiant dans une requête pour consulter les données d'un autre citoyen.
Sounds logic :)
Render #html where the data lives.
If its stored on the backend in a database or cache, render HTML there and avoid sending potentially sensitive data to the client.
If state lives only on the client, render it there with plain old JS or your library of choice.