Attacking browser extensions
Learn about browser extension security and secure your extensions with the help of CodeQL.

The post Attacking browser extensions appeared first on The GitHub Blog. ⌘ Read more

** Broughlike **
The Roguelike Celebration happened this weekend. Every year I think about participating, and every year I let it slip me by. In honor of it, though, this weekend I made a Broughlike…which I’ve creatively named “Eli’s Broughlike.”

It runs in the browser. It should work on most anything with a keyboard, or with a touchscreen — the about page ha … ⌘ Read more

[ANN] [CVE-2024-9680] Update Tor Browser & Firefox immediately

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild.

Links:

• https://blog.torproject.org/new-release-tor-browser-1357/
  
• https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/
  

n … ⌘ Read more

RINO platform to close down on October 31 2024: ‘we have to cut our losses’
The RINO1 team has announced2 plans to shut down their enterprise-grade Monero multisig browser wallet3 project on October 31st 2024, due to failed attempts to monetize the product, after 2+ years of operation4:

[..] our attempts to monetize the product never bore fruit to a point where the product could sustain itself, and at some point we have to cut our losses. As a consequence, … ⌘ Read more

Reading about browser security measures and getting sad we don’t live in a world where cross-site scripting is a feature instead of a bug.

@aelaraji@aelaraji.com Yep seems alright! Really fast too. I’m still using my main Firefox in general cos.. well it’s set up so much and it’s hardened, profile running in RAM, all that crazy stuff that got it working the way I want 😂

But keeping a good eye on Zen Browser’s progress.

How to read twts without browser? I dont understand context in reply messages

FreeCAD 1.0: The Most Important Linux Release of 2024
It may not be a Web Browser, Office Suite, or Game… but great CAD was needed for Linux. ⌘ Read more

Interesting.. QUIC isn’t very quick over fast internet.

QUIC is expected to be a game-changer in improving web application performance. In this paper, we conduct a systematic examination of QUIC’s performance over high-speed networks. We find that over fast Internet, the UDP+QUIC+HTTP/3 stack suffers a data rate reduction of up to 45.2% compared to the TCP+TLS+HTTP/2 counterpart. Moreover, the performance gap between QUIC and HTTP/2 grows as the underlying bandwidth increases. We observe this issue on lightweight data transfer clients and major web browsers (Chrome, Edge, Firefox, Opera), on different hosts (desktop, mobile), and over diverse networks (wired broadband, cellular). It affects not only file transfers, but also various applications such as video streaming (up to 9.8% video bitrate reduction) and web browsing. Through rigorous packet trace analysis and kernel- and user-space profiling, we identify the root cause to be high receiver-side processing overhead, in particular, excessive data packets and QUIC’s user-space ACKs. We make concrete recommendations for mitigating the observed performance issues.

https://dl.acm.org/doi/10.1145/3589334.3645323

@prologic@twtxt.net My pod, which is running the same commit you are, does not return an error like that. It returns the same HTML it always has. Try it. I nuked my cache before restarting.

Edit: Oh wait, the plot thickens. I do get an error if I use curl or if I use a web browser that isn’t logged in. That’s good!

@prologic@twtxt.net This does not seem to fix the problem for me, or I’ve done something wrong. I did the following:

1. Pull the latest version from git (I have commit 7ad848, same as on twtxt.net I believe).
   
2. make build and make install
   
3. Restart yarnd
   
4. Refresh cache in Poderator Settings
   

Yet I still see these bogus /external things on my pod when I hit URLs like the one I sent you recently. When I hit such a URL with curl I think it’s giving an error? But in a web browser, the (buggy) response is the same as it was before I updated.

So, this problem is not fixed for me.

@prologic@twtxt.net I believe you are not seeing the problem I am describing.

Hit this URL in your web browser:

https://twtxt.net/external?nick=lovetocode999&uri=https://socialmphl.com/story19510368/doujin

That’s your pod. I assume you don’t have a user named lovetocode999 on your pod. Yet that URL returns HTTP status 200, and generates HTML, complete with a link to https://socialmphl.com/story19510368/doujin, which is not a twtxt feed (that’s where the twtxt.txt link goes if you click it). That link could be to anything, including porn, criminal stuff, etc, and it will appear to be coming from your twtxt.net domain.

What I am saying is that this is a bug. If there is no user lovetocode999 on the pod, hitting this URL should not return HTTP 200 status, and it should definitely not be generating valid HTML with links in it.

Edit: Oops, I misunderstood the purpose of this /external endpoint. Still, since the uri is not a yarn pod, let alone one with a user named lovetocode999 on it, I stand by the belief that URLs like this should be be generating valid HTML with links to unknown sites. Shouldn’t it be possible to construct a valid target URL from the nick and uri instead of using the pod’s /external endpoint?

HTTP/2 differs from 1.x by becoming a binary protocol, it also multiplexes multiple channels over the same connection and has the ability to prefetch related content to the browser to lower the perceived latency.

HTTP/3 moves the binary protocol from HTTP/2 over to QUIC which is based on UDP instead of TCP. This makes it better suited to mobile or unstable networks where handling of transmission errors can be handled at a higher level.

@lyse@lyse.isobeef.org wow on my browser it shows up as all stars! •••••••

Firefox: The Data Collection, Advertising Browser
Listen now (22 mins) | Mozilla has been taken over by an anti-Privacy, pro-Advertising, pro-AI cabal. ⌘ Read more

Exploring the challenges in creating an accessible sortable list (drag-and-drop)
Drag-and-drop is a highly interactive and visual interface. We often use drag-and-drop to perform tasks like uploading files, reordering browser bookmarks, or even moving a card in solitaire.

The post [Exploring the challenges in creating an accessible sortable list (drag-and-drop)](https://github.blog/2024-07-09-exploring-the-challenges-in-creating-an-accessible-sortable-list- … ⌘ Read more

Last week at The Lunduke Journal (June 30 - July 6, 2024)
NixOS purges “Nazis”. Ladybird Browser goes pro. ⌘ Read more

Ladybird Web Browser Developer Attacked by Unhinged, Dishonest Activists
Activists concoct wild, meritless accusations of “Transphobia” and “Human Slavery”. ⌘ Read more

After that talk about the Ladybird browser the other day, I see this article just pop up:

https://devclass.com/2024/07/03/ladybird-web-browser-project-now-funded-by-github-co-founder-promises-no-code-from-other-browsers/

Seems it’s gaining some recognition and support, I hope it can gain traction as we sure as anything need some genuine alternatives.

Watch Out Firefox & Chrome: Here Comes Ladybird
Ladybird Web Browser becomes a non-profit with $1 Million from GitHub Founder. ⌘ Read more

Google Chrome will have Gemini LLM built into the browser.

@prologic@twtxt.net It’s weird though cos I could reproduce it on any of my browsers on either my laptop or phone 🤔

@prologic@twtxt.net Firefox but it happens on Brave and Chromium on my laptop, or any browser (Brave, Chromium, Vanadium) I try on my Android phone.

How to Confirm Before Closing Windows with Multiple Tabs in Chrome, Edge, Brave
If you use a lot of tabs when browsing the web with Google Chrome, Microsoft Edge, Brave, or any other Chromium based browser, you might want to enable an optional feature that asks to confirm whether or not you wish to close any browser window with multiple tabs open. This can help to prevent you … [Read More](https://osxdaily.com/2024/05/25/how-confirm-before-closing-windows-multiple-ta … ⌘ Read more

How to AirPlay from Chrome & Edge Browsers on Mac to Sonos or HomePod
There are many websites that have audio that you may wish to stream from a web browser to a Sonos or Homepod, or any other AirPlay compatible speaker system. For example, maybe you’re on a website for a podcast or music that you want to stream to another speaker in the room or house. This … Read More ⌘ Read more

How to Disable Microsoft Defender SmartScreen in Edge
Microsoft Defender SmartScreen is a feature in the Microsoft Edge web browser for Mac, Windows, iPhone, iPad, and Android (and it’s also in the Windows operating system, in case you have a PC or run it in a virtual machine) that aims to protect your computer or device from malicious sites and downloads. Because of … Read More ⌘ Read more

What Does the Number Badge Mean on Microsoft Edge Icon?
Using Microsoft Edge as the default browser on MacOS has been a mostly positive experience, for speed, utility, access to GPT-4, and other neat features. But it’s also not without some degree of confusion, like wondering what on earth the number badge icon on the Edge icon in the Mac Dock means. One key component … Read More ⌘ Read more

How to Import Google Chrome Data into Microsoft Edge
If you’re making a switch from Google Chrome to the Microsoft Edge browser on your Mac, you’ll almost certainly want to import your Chrome data into Edge. Doing so will allow Edge to have immediate access to your saved logins and passwords, bookmarks, history, extensions, settings, and more, allowing you to seamlessly transition from Chrome … Read More ⌘ Read more

OAuth for Browser-Based Apps Working Group Last Call!
The draft specification OAuth for Browser-Based Applications has just entered Working Group Last Call! ⌘ Read more

What do Blue Underlines on Text Mean in Microsoft Edge?
If you use Microsoft Edge as your web browser, whether for free GPT 4 access or and DALL-E use, for cross-platform syncing, or any other reason, you may have noticed that you will often see blue underlined text when you’re typing within the browser. If you’re like me, you’re probably wondering what on earth the … Read More ⌘ Read more

@movq@www.uninformativ.de Yeah, normally I just use s browser to open PDF, but we had actually create one and it needed some special Acrobat features. Afterwards I immediately uninstalled it again.

How to Hide the Sidebar in Microsoft Edge
Microsoft Edge is a surprisingly good web browser with some unique capabilities, like direct and easy GPT 4 access, and it has been a fun browser to experiment with as my new default. But, like many Microsoft software products, the appearance can be a little cluttered if you’re accustomed to the more minimalist designs of … Read More ⌘ Read more

How to Use ChatGPT-4 for Free with Microsoft Edge
The Microsoft Edge browser offers perhaps one of the best and easiest ways for an average person to access and use ChatGPT-4 for free, without having to pay for ChatGPT-4 access through OpenAI. Best of all, Edge is available for just about every major platform, including Mac, Windows, Linux, iPhone, iPad, and Android. With the … Read More ⌘ Read more

Setting the Default Web Browser from Command Line on Mac
Many advanced Mac users spend a lot of time working from the command line with the Terminal application. The command line offers ways to interact with various settings in MacOS through defaults commands and other tricks, so it’s a reasonable question to wonder if you can set or change the default web browser on a … Read More ⌘ Read more

Arc Browser is a Web Browser, Reimagined
Arc is an interesting new take on the web browser, aiming to be more like a little mini operating system than just another browser app. It has some fascinating features and a little bit of a learning curve, but once you get the swing of things, you may find you really appreciate the reimagined browser … Read More ⌘ Read more

See Who Sent You a Link in Safari on iPhone, Mac, iPad
The latest versions of Safari for Mac, iPhone, and iPad, support a handy feature that allows you to quickly identify who sent you a particular link or webpage that you have open in the browser. This ‘sent from’ link feature is useful if you engage in a lot of exchanging of URLs between friends, coworkers, … Read More ⌘ Read more

Somewhere I read that changing location, like entering a room, can rejigger neural pathways so that some thoughts and memories are somehow associated with the space. It’s the same for me when picking up a laptop. My purpose feels clear until I open a blank web browser window and my mind goes blank, too. In all the moments where I’m drawing a total blank, and then suddenly the thoughts come easily again: maybe that’s my brain looking for the room it was in before.

How to Make Microsoft Edge the Default Mac Web Browser
Microsoft Edge is a great web browser alternative that is available for MacOS, iPhone, iPad, and obviously Windows, and Android too. Not only is it fast and offers free access to ChatGPT 4, but if you regularly use different computing platforms, you’ll appreciate that you can sync your browser data across all of your devices, … [Read More](https://osxdaily.com/2024/02/24/how-to-make-microsoft-edge-the-default-mac-web-browser … ⌘ Read more

How to Disable Content Blockers for Specific Sites in Safari for Mac
Some Mac users have content blockers installed into Safari, which are usually designed to prevent a part of a webpage from loading, things like preventing a remote javascript that tracks cookies or loads ads, or something that places a cookie into your browser, etc. The very nature of how content blockers work can cause interference … [Read More](https://osxdaily.com/2024/02/23/how-to-disable-cont … ⌘ Read more

Georg Lukas: Converse.js webchat for prosody-hosted chatrooms
The goal of this post is to make an easily accessible (anonymous)
webchat for any chatrooms hosted on a prosody XMPP
server, using the web client converse.js.

There are two use cases:

1. Have an easily accessible default support room for users having trouble with
   the server or their accounts.

2. Have a working “Join using browser” button on
   [search.jabber.network … ⌘ Read more

** A scrappy fiddle **

Image

I’ve had fun playing at implementing a very basic visual programming system over the last few days. I like the direction I’ve s … ⌘ Read more

How to Set Default Web Browser in MacOS Sonoma
If you’re wondering how you can set the default web browser in macOS Sonoma to something else, maybe to Chrome, Firefox, Brave, or perhaps even back to Safari, you’ll find that it is relatively easy to do so. However, like so many other adjustments and tweaks to the latest macOS versions, it is different compared … Read More ⌘ Read more

PSA: Content Blockers May Break Captive Portal Wi-Fi Login Pages
Here’s a helpful bit of knowledge that you may want to keep in mind when traveling or using public wi-fi spaces; if you use Content Blockers in Safari or your web browser, that content blocker may break a wi-fi’s captive portal login page, thereby preventing you from joining that particular wireless network. This applies to … [Read More](https://osxdaily.com/2023/11/12/psa-content-blockers-may-break-captiv … ⌘ Read more

@movq@www.uninformativ.de time to write your own browser? Or at least a fork maintained outside the EU?

OAuth for Browser-Based Apps Draft 15
After a lot of discussion on the mailing list over the last few months, and after some excellent discussions at the OAuth Security Workshop, we’ve been working on revising the draft to provide clearer guidance and clearer discussion of the threats and consequences of the various architectural patterns in the draft. ⌘ Read more

How to Install Safari Technology Preview on Mac
Safari Technology Preview is an optional web browser for Mac that is separate from the regular Safari browser, with the Tech Preview offering an early look at upcoming web technologies and features before they become included in the primary Safari browser. In this way, Safari Tech Preview is kind of like Google’s Chrome Canary, and … Read More ⌘ Read more

Andreas Kling creator of Serenity OS & Ladybird Web Browser
Listen now (59 mins) | Lunduke’s Big Tech Show - September 13th, 2023 ⌘ Read more

Rewriting wipEout
The source code for the classic PSX launch title wipEout was leaked in 2022. A few month ago I finally sat down to take a look at it. The result is a (nearly) complete rewrite that compiles to Windows, Linux, macOS and WASM.

Image

I’m not the only one who embarked on a path to r … ⌘ Read more

Ladybird web browser brings in $310k in one month!
Plans to hire full time developers. ⌘ Read more

How I used GitHub Copilot to build a browser extension
Here’s how, in seven steps, I built my first browser extension with GitHub Copilot—and my three major takeaways about learning and pair programming in the age of AI. ⌘ Read more