Weekly Shaarli

All links of one week in a single page.

Week 06 (February 5, 2024)

Pkl :: Pkl Docs
Rust wont save us, but its ideas will • Glitchbyte

Most of the security vulnerabilities come from IEF: Insecure Exposed Functions. They are functions available to the outside that should not, such as a public dropDatabase() for example.

Next comes Routing Abuse tied for second with memory corruption issues. Rust has strongly type strings, so these errors occur less in Rust. The example of HTTP headers is great: Rust does not parse the header name as strings. They are present or not instead.

The average developer is more concerned with shipping the product now and worry about fixing bugs later than how security can be designed from the start.

Uplist

Re-implement this in OSS and MIT licence.

OPML is underrated - kmaasrud

I didn't know we can build an HTML template directly from the xsl.. well tags and attributes in an opml file.

See https://indieweb.org/OPML

Suite logicielle médicale libre et open source [FreeMedForms]
Accessibility Advocates Sued by French Overlay Company - Equal Entry
Landing Pages Explained
La CNIL accusée de ne pas remplir « sa mission de veiller au respect du RGPD » - Next

Le post de l'association PURR suivant l'article https://elk.zone/firefish.asso-purr.eu.org/notes/9peh4cw9b9n0zfab

A search engine in 80 lines of Python.

Great and awesome! Small search engines can be useful indeed.

Static Site Generators - Top Open Source SSGs | Jamstack
Clipdrop - SDXL Turbo

Not bad. The image is generated in real-time.

Parse, don’t validate

Parsing increases the information in the type system. A list can be of type NonEmpty, i.e. there is at least one element.

Use a data structure that makes illegal states unrepresentable.
Push the burden of proof upward as far as possible, but no further.

and awesome guidelines to follow.

So parse "data" and return the closest type instead of only validate them.

"Une douche d'air pur": des "aspirateurs à pollution" installés dans le village olympique des JO 2024
Future Postgres Challenges - challenges.pdf

Project challenges:

  • Leadership disruption
  • Poor Reputation
  • Patent Attacks
  • Identity Challenges
  • Cloud Vendor Starvation

Competitive Challenges

  • Decline of relational
  • other solutions: embedded, document, columnar, data warehouse, full text search et time series
  • rise of fork

Technical challenges

  • write amplification
  • cluster file encryption
  • horizontal scaling
  • obsolete toolchain (programming languages, support libraries, testing frameworks)
  • drastic technology changes: new language, architecture or storage are difficult for Postgres to adopt
The creator economy can't rely on Patreon. — Joan Westenberg
Greg Morris - There Is No Hack
10 leçons que j’ai apprises en 1 an en tant que Product Owner : épisode 2 : Comment garder une vision produit
Making a PDF that’s larger than Germany – alexwlchan

How PDFs work to arrive at this conclusion and why it is not so true.

Greg Morris - Some Thoughts On Slugs

The authors think the url does not really matter anymore because

  • they are not fully displayed in some browsers
  • they need to be short and memorable to get people to it

So it does not need to contain a lot of information.

Use Cypress For API Testing | Better world by better software

An example of API testing in Cypress

Catima - The Libre Card Wallet
Fossify · GitHub

A fork of SimpleMobileTools to keep these applications free

Postgres à nouveau élu SGBD de l'année en 2023, mais je suis inquiet | Select * from Adrien

Inquiet de la perte de connaissance du métier de DBA. C'est une inquiétude qui me semble justifié.

Patuleia: "Battle of the slashes#linux #windows #mac" - Metalhead.club

Star wars combat of Luke and Darth Vador of file paths.

Three million malware-infected smart toothbrushes used in Swiss DDoS attacks — botnet causes millions of euros in damages | Tom's Hardware
Aux apatrides du web merdique - Par Thibault Prévost | Arrêt sur images
Browsers Are Weird Right Now – Tyler Sticka

Because no browsers satisfy the author. The interesting part is why.