IPinfo Free Geolocation API: Tools, Setup & Use Cases ⌘ Read more
Instagram API Documentation: Key Concepts Explained for Developers ⌘ Read more
Get Geocoding API Key: Step-by-Step Guide for Developers ⌘ Read more
API Key Exposure in NASA GitHub Repository Leads to Unauthorized Access to Academic Data
🔓Free Article Link
[Continue reading on InfoSec Write-ups »](https://infosecwriteu … ⌘ Read more
人人都需要一個 HTTP proxy 來 debug
前言介紹了作爲前端工程師如何使用 HTTP proxy 來進行 debug，超越了 DevTools 的限制。今日文章由前端早讀課 @huli 分享。身爲每天都要與網頁打交道的前端工程師，熟悉 DevTools 的使用是相當合理的。每當接 API 出問題時，就按下快捷鍵打開 DevTools，切到 Network 分頁，找到紅色的那一行，右鍵複製成 cURL 粘貼到羣裏面，讓後端自己找找問題。但不 ⌘ Read more
必裝的一些 MCP Server 推薦（程序員篇）
玩 MCP 我是認真的，也寫了好幾篇的實操教程，當然了主要是自己的試用體驗分享。使用過程中發現可以用起來了，甚至可以串起來當作工作流的一環了。今天分享一下關於程序員必備的幾個，試着組合起來，提高自己的效率吧。GitHub MCP Server—————–推薦的理由：GitHub MCP Server 能與 GitHub API 實現無縫集成，爲開發者和工具提供高級的自動化和交 ⌘ Read more
Hackers Love Your APIs: How to Defend Against 2025’s Biggest API Threats ⌘ Read more
Is Your App Protected? The Branch API Vulnerability You Need to Know About
$fallback_url is a helpful feature in Branch’s deep linking system — until someone uses it to redirect your users to phishing … ⌘ Read more
現代 JavaScript 異步寫法：不依賴 await，構建高性能異步系統
在 ES6 + 時代，JavaScript 異步編程經歷了重大變革。雖然async/await語法顯著提升了代碼可讀性，但在某些場景下直接操作 Promise 和利用新特性能帶來更精細的控制。1. Promise 鏈式操作fetch(’https://api.example.com/data’) .then(response = { if (!response.ok) throw ne ⌘ Read more
如何在 Go 中設計並公開接口
Go 語言中的接口（interface）是其最具特色的功能之一。與許多其他語言不同，在 Go 中，類型不需要顯式聲明實現某個接口。只要一個類型定義了接口所需的方法，它就自動實現了該接口。然而，編寫良好的接口並不容易。不恰當地暴露寬泛或不必要的接口，容易污染包的 API。本文將解釋現有接口設計準則背後的邏輯，並結合標準庫中的示例進行說明。「接口越大，抽象越弱」大型接口往往難以找到多個實現類型。因此， ⌘ Read more
如何在 Go 中設計並公開接口
Go 語言中的接口（interface）是其最具特色的功能之一。與許多其他語言不同，在 Go 中，類型不需要顯式聲明實現某個接口。只要一個類型定義了接口所需的方法，它就自動實現了該接口。然而，編寫良好的接口並不容易。不恰當地暴露寬泛或不必要的接口，容易污染包的 API。本文將解釋現有接口設計準則背後的邏輯，並結合標準庫中的示例進行說明。「接口越大，抽象越弱」大型接口往往難以找到多個實現類型。因此， ⌘ Read more
Understanding Kubernetes Gateway API: A Modern Approach to Traffic Management
Traffic management in Kubernetes can be complex, especially with modern applications composed of multiple services like frontends, APIs, and backends spread across hybrid and multi-cloud environments. As these environments grow, ensuring secure, efficient, and reliable communication… ⌘ Read more
** From JS File to Jackpot: How I Found API Keys and Secrets Hidden in Production Code**
Hey there!😁
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/from-js-file-to- … ⌘ Read more
Lab: Finding and exploiting an unused API endpoint
Art of exploiting using an unused API endpoint
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/lab-finding-and-exploiting-an-unused-api-endpoint-79fa6744f21e?source=rss—-7b72 … ⌘ Read more
↳
In-reply-to
»
gah i've been so busy working on love4eva! TL;DR i switched image backends from the test/dev only module i was using to the S3 one, but with a catch - i'm not using S3 or cloud shit!!! i instead got it to work with minio, so it's a middle ground between self hosting the image uploads & being compatible with the highly efficient S3 module. i'm super happy with it :)
⤋ Read More
@kat@yarn.girlonthemoon.xyz MinIO is a good choice for a self-hosted Object Storage (compatible with S3 APIs) 👌
**Master Spring Boot APIs Like a Pro: Skills That Distinguish Good Developers from Great Ones **
In the fast-moving world of backend development, it’s no longer enough to … ⌘ Read more
GitHub for Beginners: Building a REST API with Copilot
See how you can use GitHub Copilot to build an API.
The post GitHub for Beginners: Building a REST API with Copilot appeared first on The GitHub Blog. ⌘ Read more
4 大類 AI Agent 協議框架全面綜述
對現有的 LLM AI Agent 通信協議進行了系統性的概述，並將其分爲四大類，以幫助用戶和開發者爲特定應用場景選擇最適合的協議。一、AI Agent 協議的發展AI Agent 協議的定義：代理協議是標準化框架，定義了代理之間以及代理與外部系統之間結構化通信的規則、格式和程序。與傳統交互機制（如 API、GUI 或 XML）相比，協議在效率、操作範圍、標準化和 AI 原生性方面具有顯著優勢。代 ⌘ Read more
使用 Go 進行 HTTP 流量重放測試
在 Web 安全測試、API 調試、流量回歸測試中，HTTP 流量重放（HTTP Traffic Replay）是一項重要的技術。它可以幫助我們復現問題、測試系統兼容性、進行安全研究等。在這篇文章中，我們將簡單探討 HTTP 流量重放的原理，並通過 Go 語言實現不同的流量重放方案，同時介紹常見的開源工具。（身爲一個在小公司裏的網安牛馬，總得幹些雜活🐂🐎）HTTP 流量重放的原理HTTP 流量重放 ⌘ Read more
使用 Go 進行 HTTP 流量重放測試
在 Web 安全測試、API 調試、流量回歸測試中，HTTP 流量重放（HTTP Traffic Replay）是一項重要的技術。它可以幫助我們復現問題、測試系統兼容性、進行安全研究等。在這篇文章中，我們將簡單探討 HTTP 流量重放的原理，並通過 Go 語言實現不同的流量重放方案，同時介紹常見的開源工具。（身爲一個在小公司裏的網安牛馬，總得幹些雜活🐂🐎）HTTP 流量重放的原理HTTP 流量重放 ⌘ Read more
Unrestricted Access to All User Information | REST API Oversharing ⌘ Read more
Exploring GitHub CLI: How to interact with GitHub’s GraphQL API endpoint
Discover practical tips and tricks for forming effective GraphQL queries and mutations.
The post Exploring GitHub CLI: How to interact with GitHub’s GraphQL API endpoint appeared first on The GitHub Blog. ⌘ Read more
Deep Dive into the Gateway API Inference Extension
Running AI inference workloads on Kubernetes has some unique characteristics and challenges, and the Gateway API Inference Extension project aims to solve some of those challenges. I recently wrote about these new capabilities in the kgateway… ⌘ Read more
Lab: Exploiting an API endpoint using documentation
We will solve this lab based on the API documentation exposed to delete Carlos’s user.
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/lab-exploiting-an-api-endpoint-using-d … ⌘ Read more
**CORSplay of the Century: How I Hijacked APIs with One Misconfigured Header **
Free Link🎈
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/corsplay-of-the-century-how-i-hijacked-apis- … ⌘ Read more
I asked ChatGPT what it knows about Twtxt 😂 And surprisingly it’s rather accurate:
Twtxt is a minimalist, decentralized microblogging format introduced by John Downey in 2016. It uses plain text files served over HTTP—no accounts, databases, or APIs.
In 2020, James Mills (@prologic@twtxt.net) launched Yarn.social, an extended, federated implementation with user discovery, threads, mentions, and a full web UI.
Both share the same .twtxt.txt format but differ in complexity and social features.
**I asked ChatGPT what it knows about Twtxt 😂 And surprisingly it’s rather accurate:
Twtxt is a minimalist, decentralized microblogging form …**
I asked ChatGPT what it knows about Twtxt 😂 And surprisingly it’s rather accurate:Twtxt is a minimalist, decentralized microblogging format introduced by John Downey in 2016. It uses plain text files served over HTTP—no accounts, databases, or APIs.
In 2020, James Mills ( @prologic @twtxt.net) launched Yarn.social, an extended, federated implementat … ⌘ Read more
ProcessOne: ejabberd 25.04
Just a few weeks after previous release, ejabberd 25.04 is published with an important security fix, several bug fixes and a new API command.
Release Highlights:
If you are upgrading from a previous version, there are no change … ⌘ Read more
European AI
To reduce my dependence on USA-based products, I switched from using the OpenAI API to Scaleway’s Generative API for my blog. Not only is it cheaper, but it’s based on open-source models, hosted in Europe. 🇪🇺 ⌘ Read more
** Uncovering Hidden APIs: How One Forgotten Endpoint Made Me $500**
🚀Free Article Link
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/uncovering-hidden-apis-how-one-forgotten-endpoint-made-me-500-424e6388c … ⌘ Read more
MacSSL: a port of Mbed-TLS for the classic Mac OS 7/8/9
Yesterday we had SDL2 for the classic Mac OS, today we have modern SSL/TLS for the classic Mac OS. This is a C89/C90 port of MbedTLS for Mac System 7/8/9. It works, and compiles under Metrowerks Codewarrior Pro 4. This is a basic app that performs a GET request on whatever is in api.h, and prints the result out to the text box (with a lot of debug information, of course). The idea of this project was to build an ‘app’ of … ⌘ Read more
極簡 HTTP 客戶端，Resty 如何讓 Golang 請求效率翻倍？
Resty 是一個基於 Golang 標準庫 net/http 構建的高效、易用的 HTTP 客戶端庫。它通過鏈式調用、自動化處理和豐富的擴展功能，極大簡化了 HTTP 請求的發送與響應處理流程，尤其適合與 RESTful API 交互的場景。Resty 的核心優勢———–鏈式調用：支持直觀的鏈式語法，提升代碼可讀性。自動序列化：輕鬆將結構體轉爲 JSON/XML，自動解析響應內容。 ⌘ Read more
Go API 中的上下文取消機制
在分佈式系統和微服務架構中，高併發請求和資源管理是每個開發者必須面對的挑戰。尤其是在處理長時間運行的任務時，如何實現優雅的取消和超時控制，直接關係到系統的穩定性和用戶體驗。Go 語言通過context包提供了一套標準化的解決方案，本文將深入探討其核心用法與最佳實踐。 上下文（Context）的本質與作用——————context.Context是 Go 語言中用於傳遞請求範 ⌘ Read more
↳
In-reply-to
»
The original twt is unavailable. It may have been edited or deleted, or is from an unknown or muted feed.
⤋ Read More
@eapl.me@eapl.me I am currently working on Implementing a registry that is also a crawler. It finds any feeds that are mentioned or in the follows header.
https://watcher.sour.is/api/plain/twt
https://watcher.sour.is/api/plain/users
I think @prologic@twtxt.net is also working on one.
ProcessOne: ejabberd 25.03
Release Highlights:
- Matrix Gateway Gets Room Support
- Multiple Simultaneous Password Types
- Execute API Commands Using XMPP Client
If you are upgrading from a previous version, please check the [changes in SQL schemas](https://www.process-one … ⌘ Read more
↳
In-reply-to
»
The original twt is unavailable. It may have been edited or deleted, or is from an unknown or muted feed.
⤋ Read More
@eapl.me@eapl.me this “directory” is actually named registry. You can see users at https://registry.twtxt.org/api/plain/users and his twts at https://registry.twtxt.org/api/plain/tweets
golang 每日一庫之 base64Captcha
今天要介紹的庫 mojocn/base64Captcha 是一個用於 Go 語言的高效驗證碼生成庫，支持圖片、音頻等多種驗證碼格式，並且可以通過 base64 編碼輸出，方便前端直接使用。該庫廣泛用於 Web 應用、REST API 以及需要身份驗證的系統中，以增強安全性。主要功能——–支持多種驗證碼類型數字驗證碼 （DriverDigit）：僅包含數字，適用於一般驗證碼場 ⌘ Read more
PEP 782: Add PyBytesWriter C API
Add a new PyBytesWriter C API to create bytes objects. ⌘ Read more
↳
In-reply-to
»
When will the flat UI craze end? Can I get my buttons, scrollbars, and toolbars back, please?
⤋ Read More
Although, most software I use is decentish in that regard.
Is that because you mostly use Qt programs? 🤔
I wish Qt had a C API. Programming in C++ is pain. 😢
Extending my Komoot export script
I’ve taken another look at my export script for Komoot (original post), now that Bending Spoons has acquired Komoot. I’ve extended the script to also download cover images and, if available, an image of the map – I found that in the API responses. ⌘ Read more
golang 每日一庫之 gopsutil
shirou/gopsutil 是一個用 Go 語言實現的跨平臺系統信息採集庫，其設計靈感來源於 Python 的 psutil。它爲開發者提供了一套統一、簡潔的 API，用於獲取底層操作系統的各項指標數據，如 CPU、內存、磁盤、網絡、主機信息以及進程狀態等。下面我們將從多個方面詳細介紹這個庫的功能、設計特點、使用示例以及應用場景。庫簡介——跨平臺支持 gopsutil ⌘ Read more
i love everything pico.sh i wish i had more of a use for their services but the paste service is SUPER handy omg i finally had a reason to use it (to send a friend my unfinished failed marvel API bash program lol) and it’s epic. i love SSH i love TUI apps they are the best
Building Scalable, Agile, and Secure APIs with Kubernetes and Microservices
The dawn of APIs across the digital ecosystem has fundamentally disrupted standard business models and software development. And enhancing these approaches with intelligent, data-driven, and real-time insights allows your organization to dynamically scale. However traditional monolithic… ⌘ Read more