Security updates for Friday
Security updates have been issued by AlmaLinux (kernel), Debian (dovecot, exim4, frr, and haveged), Fedora (cockpit, freeipa, jpegxl, libre, nextcloud, perl-Cpanel-JSON-XS, perl-Crypt-Argon2, perl-Dist-Build, perl-ExtUtils-Builder, perl-ExtUtils-Builder-Compiler, perl-HTTP-Tiny, perl-libwww-perl, python-starlette, rubygem-yard, rust-sequoia-cert-store, rust-sequoia-chameleon-gnupg, rust-sequoia-octopus-librnp, rust-sequoia-sop, rust-sequoia-sq, rust-sequoia-wot, samba, and transmission), **Red … ⌘ Read more

SystemD Adds Optional ‘birthDate’ Field for Age Verification to JSON User Records
“The systemd project merged a pull request adding a new birthDate field to the JSON user records managed by userdb in response to the age verification laws of California, Colorado, and Brazil,” reports the blog It’s FOSS.

They note that the field “can only be set by administrators, not by users themselves” — it’s … ⌘ Read more

Simdjson Shows More Speed-Ups Possible For SIMD In JSON Parsing: Another 30% Boost
Simdjson is the open-source project for high performance JSON parsing by leveraging SIMD instructions for “parsing gigabytes of JSON per second.” Notably it showed years ago the huge performance advantage to using AVX-512 in JSON parsing for surprisingly big benefits. Simdjson has continued advancing since then with various optimizations over the years and today is out with simdjson 4.3 that brings yet more SIMD optimizations… ⌘ Read more

PEP 819: JSON Package Metadata
This PEP proposes introducing JSON encoded core metadata and wheel file format metadata files in Python packages. Python package metadata (“core metadata”) was first defined in PEP 241 to use RFC 822 email headers to encode information about packages. This was reasonable in 2001; email messages were the only widely used, standardized text format that had a parser in the standard library. However, issues with handling different encodings, differing handling of line breaks, and other differences between i … ⌘ Read more

ProcessOne: Stop Telling Us XMPP Should Use JSON

Image

We hear this too often: “XMPP uses XML. It should use JSON—it’s more modern.”

The logic seems straightforward: JSON came later, so it must be better. But better for what, exactly?

JSON became successful because it’s the standard serialization format for JavaScript. That made it convenient for browser-based applications.

Does that m … ⌘ Read more

Magika 1.0 Goes Stable As Google Rebuilds Its File Detection Tool In Rust
BrianFagioli writes: Google has released Magika 1.0, a stable version of its AI-based file type detection tool, and rebuilt the entire engine in Rust for speed and memory safety. The system now recognizes more than 200 file types, up from about 100, and is better at distinguishing look-alike formats such as JSON vs JSONL, TS … ⌘ Read more

💻 Issue 494 - We found an embedding indexing bottleneck in JSON parsing ⌘ Read more

We found an embedding indexing bottleneck in the most unexpected place: JSON parsing
Comments ⌘ Read more

Understanding JSON Web Token (JWT) Security

Image

From Basics to Breaking Authentication

Continue reading on InfoSec Write-ups » ⌘ Read more

JSON Query - a small, flexible, and expandable JSON query language
Comments ⌘ Read more

Token-Oriented Object Notation – JSON for LLMs at half the token cost
Comments ⌘ Read more

JSON Schemas in Go
Comments ⌘ Read more

Writing a JSON Parser in BQN
Comments ⌘ Read more

[2022] JSONSki: Streaming Processing of JSONPath Queries with Fast Forwarding
Relevant Paper: https://dl.acm.org/doi/10.1145/3503222.3507719

I am sure this is impressive engineering, but I am not sure if this solves a meaningful problem. If you do need to access the data in this manner, maybe you shouldn’t have stored it as JSON in the first place?

Comments ⌘ Read more

MAML – a new configuration language (similar to JSON, YAML, and TOML)
Comments ⌘ Read more

Woot, thank you! Using a config.json like this:

{
  "host": "localhost:31212",
  "protocols": ["http"]
}

Indeed did the trick! I know it isn’t production ready, but I wanted to see with my own eyes, locally, how did it look. :-) I like where you are going! It is looking very nice, and polished. Can’t wait for an alpha, beta, and release!

@prologic@twtxt.net haha yeah for the youtube rules i just copied the first JSON block in your screenshot (i typed it out) and it miraculously worked! yayyy

@lyse@lyse.isobeef.org @kat@yarn.girlonthemoon.xyz I spent so much time in the past figuring out if something is a dict or a list in YAML, for example.

What are the types in this example?

items:
- part_no:   A4786
  descrip:   Water Bucket (Filled)
  price:     1.47
  quantity:  4
- part_no:   E1628
  descrip:   High Heeled "Ruby" Slippers
  size:      8
  price:     133.7
  quantity:  1

items is a dict containing … a list of two other dicts? Right?

It is quite hard for me to grasp the structure of YAML docs. 😢

The big advantage of YAML (and JSON and TOML) is that it’s much easier to write code for those formats, than it is with XML. json.loads() and you’re done.

Gin 框架深度分析
Gin 是一個採用 Go 語言實現的 HTTP web 框架，提供了類似 Martini 的 API，但是性能遠強於 Martini，峯值性能是 Martini 的 40 倍。如果我們的項目需要高性能，毫無疑問採用 Gin。Gin 官網列舉了該項目的 8 個如下關鍵特性：高性能 中間件支持 防崩潰機制 JSON 校驗 路由分組 錯誤管理 內容渲染 示例 D ⌘ Read more

Gin 框架深度分析
Gin 是一個採用 Go 語言實現的 HTTP web 框架，提供了類似 Martini 的 API，但是性能遠強於 Martini，峯值性能是 Martini 的 40 倍。如果我們的項目需要高性能，毫無疑問採用 Gin。Gin 官網列舉了該項目的 8 個如下關鍵特性：高性能 中間件支持 防崩潰機制 JSON 校驗 路由分組 錯誤管理 內容渲染 示例 D ⌘ Read more

golang 每日一庫之參數校驗工具 go-tagexpr
go-tagexpr 是字節跳動開源的一款輕量級 Go 標籤解析與表達式求值引擎。我一般用來校驗參數。它的主要功能是支持通過結構體標籤（struct tag）定義表達式，然後在運行時動態解析這些表達式，實現靈活的數據校驗、默認值設置等功能。核心特性VzBq9U示例type User struct {    Name string json:“name” tagexpr:“len(name) 0 ⌘ Read more

5 分鐘搞定 Go 自定義結構體標籤
本文介紹瞭如何通過自定義結構體標籤實現對結構體字段值的自定義處理，並討論了該方法的優缺點。原文：Struct Tags in Go: Implementing Custom Tag Functionality[1]Go 的 struct 標籤提供了一種爲 struct 字段定義元數據的方法，允許開發人員指定在序列化或驗證等操作期間如何處理這些字段。一個常見用例是 json 標籤，告訴 Go 的 ⌘ Read more

Go 語言反射揭祕：獲取 Tag 易如反掌，爲何 json 包卻視而不見？
從詭異現象說起：JSON 爲何忽略私有字段？type User struct{    ID    intjson:“id”// 正常導出    Name  stringjson:“name”// 正常導出    email stringjson:“email”// 私有字段，JSON無視！}funcmain(){    u := User{1,“Tom”,“tom@example.com”} ⌘ Read more

深入 Biome — 現代 Rust 前端工具鏈
Biome 簡介Biome 是一個基於 Rust 開發的前端工具鏈工具，它提供了完善的 Analyzer / Linter / Formatter 的能力支持。目前 Biome 提供了 JS、TS 、JSON/JSONC 以及 CSS 和 GriftQL 等語言的支持。在 Linter 方面，目前 Biome 內置支持了約 320 條以上規則支持 (參考: https://next.biomejs ⌘ Read more

I reproduced a $10,000 bug

Image

🎭 “I wasn’t an admin… until I became one with just a JSON object.”

Continue reading on InfoSec Write-ups » ⌘ Read more

DOM XSS Exploit: Using postMessage and JSON.parse in iframe Attacks

Image

[Write-up] DOM XSS Using Web Messages and JSON.parse.

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/dom-xss-exploit-using … ⌘ Read more

怎麼樣把 Image 圖片通過 MQTT 協議進行發送和接收？
MQTT 是一種輕量級發佈 / 訂閱消息的協議，通常用於具有小型的物聯網設備。消息中通常不會包含太多數據，只是傳感器值。但是大多數情況下，MQTT 消息負載是文本，可能是少量文本或 JSON 數據負載。不過，設備如何在 MQTT 消息中發送文件，例如 Image 圖片. jpg 格式文件呢？這期我們通過整理網上的資料，把具體的方式分享給大家！使用 MQTT 協議發佈圖像————– ⌘ Read more

Progressive JSON
Comments ⌘ Read more

golang 每日一庫之 go-workflow
go-workflow 是一個基於 Go 語言開發的超輕量級工作流引擎，設計靈感來源於 Java 的 Activiti，但進行了深度簡化和解耦，特別適用於微服務架構下的流程控制需求。特點微服務架構友好 ：go-workflow 僅關注流程流轉邏輯，完全解耦用戶、組織等業務數據，便於與各類系統集成。 JSON 流程定義 ：採用 JSON 數組替代傳統的 BPMN 模 ⌘ Read more

golang 每日一庫之 go-workflow
go-workflow 是一個基於 Go 語言開發的超輕量級工作流引擎，設計靈感來源於 Java 的 Activiti，但進行了深度簡化和解耦，特別適用於微服務架構下的流程控制需求。特點微服務架構友好 ：go-workflow 僅關注流程流轉邏輯，完全解耦用戶、組織等業務數據，便於與各類系統集成。 JSON 流程定義 ：採用 JSON 數組替代傳統的 BPMN 模 ⌘ Read more

Loading Pydantic models from JSON without running out of memory
Comments ⌘ Read more

Fx v36 - JSON terminal viewer
Hello Lobsters, I’m the author of a fx tool. I’ve been working hard past month to develop a new version of a fx with a lot of improvements and fixes. Please check them out.

Comments ⌘ Read more

谷歌 Agent2Agent 協議原理解讀
谷歌在 25 年 4 月初發布了 A2A 協議，作爲 MCP 協議的補充。Agent2Agent 協議致力於促進獨立 agent 間的通信，幫助不同生態系統的 agent 溝通和協作。核心概念Agent Card：一個公共元數據文件（通常位於 /.well-known/agent.json），用於描述 Agent 的能力、技能、端點 URL 以及認證要求。客戶端通過它來發現 Agent。 Agen ⌘ Read more

Go 1-24 震撼發佈！這些新特性你必須知道！
一、工具鏈重大升級 🛠️————-更智能的模塊校驗機制 新版本引入了 verify 命令go mod verify -json通過結構化輸出模塊校驗結果，完美解決了開發者在持續集成（CI）流程中解析校驗結果的痛點。舊版本只能獲得簡單提示$ go mod verifyall modules verified新版本結構化輸出$ go mod verify -json{  ”Pat ⌘ Read more

Go 1-24 震撼發佈！這些新特性你必須知道！
一、工具鏈重大升級 🛠️————-更智能的模塊校驗機制 新版本引入了 verify 命令go mod verify -json通過結構化輸出模塊校驗結果，完美解決了開發者在持續集成（CI）流程中解析校驗結果的痛點。舊版本只能獲得簡單提示$ go mod verifyall modules verified新版本結構化輸出$ go mod verify -json{  ”Pat ⌘ Read more

深入解讀 MCP 協議最新版本的 4 大升級【下】：批處理與增強的工具註解
本篇接着爲大家解讀 MCP 協議最新修訂版本（2025-03-26）的四個較大升級的後兩項（上篇翻閱：深入解讀 MCP 協議最新版本的 4 大升級【上】：傳輸機制與安全授權）：JSON-RPC 批處理 增強的工具註解 01JSON-RPC 批處理JSON-RPC 2.0 規範本身支持批量（Batch）模式，允許一次性發送一個包含多個請求對象的數組，服務器隨後可以返回 ⌘ Read more

告別 JMeter！這款 Go 語言神器讓性能測試輕量 10 倍，還支持分佈式壓測
k6 簡介：爲何選擇它———–k6 由 Go 語言編寫，相較於傳統工具 JMeter，具有輕量高效、語法簡潔、擴展性強等優勢。其特點包括：開發者友好：基於 JavaScript/TypeScript 腳本，無縫銜接現代開發流程 雲原生支持：內置分佈式測試能力，輕鬆模擬萬級併發 豐富可視化：提供 HTML/JSON 格式報告，支持自定義儀表板 擴展生態：通過 npm ⌘ Read more

深入解讀 MCP 協議最新版本的 4 大升級【上】：傳輸機制與安全授權
MCP 協議的最新修訂版本（2025-03-26）已經在路上，儘管 SDK 尚未發佈，但規範內容已經基本定型，前期的各種解讀也在網絡上陸續出現。我們將結合官方文檔、Github 上的 PR 與社區討論等，爲大家深入解讀該版本中的四個較大的升級。Streamable HTTP 傳輸模式 OAuth2.1 的授權框架 JSON-RPC 批處理 增強工具註解 ⌘ Read more

Go：終於有了處理未定義字段的實用方案
衆所周知，Go 裏沒有 undefined，只有各類型的零值。多年來，Go 開發者一直依賴 JSON 結構標籤 omitempty 來解決 “字段可能缺失” 這一需求。然而omitempty 並不能覆蓋所有場景，而且常常讓人抓狂——到底什麼算 “空”？定義本就含糊不清。在 編碼（marshal） 時：切片和 map 只有在爲 nil 或長度爲 0 時纔算空。 指針只有 nil 時爲空。 ⌘ Read more

@movq@www.uninformativ.de json and database put together sounds terrifying. i must try jenny

jenny really isn’t well equipped to handle edits of my own twts.

For example, in 2021, this change got introduced:

https://www.uninformativ.de/git/jenny/commit/6b5b25a542c2dd46c002ec5a422137275febc5a1.html

This means that jenny will always ignore my own edits unless I also manually edit its internal “json database”. Annoying.

That change was requested by a user who had the habit of deleting twts or moving them to another mailbox or something. I think that person is long gone and I might revert that change. 🤔

極簡 HTTP 客戶端，Resty 如何讓 Golang 請求效率翻倍？
Resty 是一個基於 Golang 標準庫 net/http 構建的高效、易用的 HTTP 客戶端庫。它通過鏈式調用、自動化處理和豐富的擴展功能，極大簡化了 HTTP 請求的發送與響應處理流程，尤其適合與 RESTful API 交互的場景。Resty 的核心優勢———–鏈式調用：支持直觀的鏈式語法，提升代碼可讀性。自動序列化：輕鬆將結構體轉爲 JSON/XML，自動解析響應內容。 ⌘ Read more

A Simple vim plugin for displaying NPM package info in package.json files ⌘ Read more

@andros@twtxt.andros.dev sha256 hash of twt in json. Look at converter script

Hello, i want to present my new revolution twtxt v3 format - twjson
That’s why you should use it:

1. It’s easy to to parse
   
2. It’s easy to read (in formatted mode :D)
   
3. It used actually \n for newlines, you don’t need unprintable symbols
   
4. Forget about hash collisions because using full hash
   Here is my twjson feed: https://doesnm.p.psf.lt/twjson.json
   And twtxt2json converter: https://doesnm.p.psf.lt/twjson.js

Hmm so looking at the swagger of the registry spec client it seems to just take a “page”.. That seems worse than doing an offset. Lol.

https://github.com/DracoBlue/twtxt-registry/blob/master/src/swagger.json

@prologic@twtxt.net huh interesting! yeah i was stumped for a bit i was like WHAT config.json file are these logs talking about…. but then it worked after i moved the old meta.json file lol!

idfk where the error came from it just broke one day, maybe from one of my many server crashes which are becoming frequent and UGH i have to fix that too but i have a headache right now so one thing at a time. the error was ‘unexpected end of JSON input’ or something, for a while i thought oh permission error but turns out i can’t read the error that clearly indicated something syntax related (i did double check my env file though)

@kat@yarn.girlonthemoon.xyz it was like…. meta.json was corrupt or well it was empty actually whatever idk. ended up moving that elsewhere temporarily, rebuilding the binary, restarting server… and it worked?!?!? shit was confusing

golang 每日一庫之 govalidator
govalidator 是一個用 Go 語言編寫的輕量級的驗證庫，提供了豐富的驗證和清理功能，主要用於驗證和清理用戶輸入的數據（如表單數據、API 請求的 JSON 數據等）。它支持常見的數據驗證功能，如電子郵件、URL、IP 地址、信用卡號等的驗證，同時也支持自定義驗證規則。1. 安裝你可以通過 go get 來安裝 govalidator：go get github.com/asaskevic ⌘ Read more