Australia Spent $62 Million To Update Its Weather Web Site and Made It Worse
quonset writes: Australia last updated their weather site a decade ago. In October, during one of the hottest days of the year, the Bureau of Meteorology (BOM) revealed its new web site and was immediately castigated for doing so. Complaints ranged from a confusing layout to not being able to find information. Farmers were parti … ⌘ Read more

Speaking of WAF(s) / Web Applicaiton Firewalls – I actually had forgotten that not only have I designed a new WAF from scratch, but I’ve actually implemented it already, and done some local testing. I just haven’t put it into production yet… What od you think @aelaraji@aelaraji.com ? 🤔 https://git.mills.io/prologic/caddy-waf

@prologic@twtxt.net The main thing that I tought of is that whomever is abusing your services must be a well known actor (by range/set of IPs) that got reported by other Crowdsec users. So to my simpleton’s understanding, your reverse-proxy/web server passes the requests by crowdsec for processing, they get banned for $N hours if the source has already been blacklisted by the community or violates any of a set of behavior base rules (and even more hours for repeat offenders); otherwise the requests/responses go as per usual. Not sure if I got things right but this might help paint a better picture of the process.

Tired to re-enable the Ege route to git.mills.io today (after finishing work) and this is what I found 🤯 Tehse asshole/cunts are still at it !!! 🤬 – So let’s instead see if this works:

$ host git.mills.io 1.1.1.1
Using domain server:
Name: 1.1.1.1
Address: 1.1.1.1#53
Aliases:

git.mills.io is an alias for fuckoff.mills.io.
fuckoff.mills.io has address 127.0.0.1

PS: Would anyone be interested if I started a massive global class action suit against companies that do this kind of abusive web crawling behavior, violate/disregards robots.txt and whatever else standards that are set in stone by the W3C? 🤔

NVIDIA Is Interested In Helping Bring Vulkan Video To Chrome
NVIDIA engineers are interested in helping Google bring Vulkan Video accelerated GPU video decoding to the Chrome/Chromium web browser… ⌘ Read more

Study Claims To Provide First Direct Evidence of Dark Matter
An anonymous reader quotes a report from the Guardian: Nearly a century ago, scientists proposed that a mysterious invisible substance they named dark matter clumped around galaxies and formed a cosmic web across the universe. What dark matter is made from, and whether it is even real, are still open questions, but according to a study, the first dire … ⌘ Read more

Google Looks To Bring JPEG-XL Support Back To Chrome / Chromium
Back in 2022 was the surprising decision by Google that they were going to deprecate JPEG-XL image support in Chrome. By the end of 2022 they went ahead and removed JPEG-XL support from Chrome/Chromium to the frustration of many web developers and end-users interested in this image format. Now though as we get ready to roll into 2026, Google engineers are looking at bringing back JPEG-XL support to the Chrome web browser… ⌘ Read more

At this point I’m considering starting a class action lawsuit for all the self-hostess and little-web folks that want to host a small thing or two and sue these fucking inconsiderate fucking corporate giants, hopefully win, and make them respect others on the web.

HP and Dell Disable HEVC Support Built Into Their Laptops’ CPUs
An anonymous reader quotes a report from Ars Technica: Some Dell and HP laptop owners have been befuddled by their machines’ inability to play HEVC/H.265 content in web browsers, despite their machines’ processors having integrated decoding support. Laptops with sixth-generation Intel Core and later processors have built-in hardware support for … ⌘ Read more

Servo Announces Sponsorship Tiers To Get More Organizations Backing This Browser Engine
The Servo open-source web browser engine has been making good progress in recent times. Long outside the confines of Mozilla and working as a Linux Foundation Europe project, Servo has been advancing thanks to Igalia and other open-source developers while getting by on around ~$5.7k USD per month thanks mostly to donations from individuals. Servo has now announced sponsorship tiers in hopefully to solicit more donations from la … ⌘ Read more

Europe’s Cookie Nightmare is Crumbling
The EU’s cookie consent policies have been an annoying and unavoidable part of browsing the web in Europe since their introduction in 2018. But the cookie nightmare is about to crumble thanks to some big proposed changes announced by the European Commission today. From a report: Instead of having to click accept or reject on a cookie pop-up for every website you visit in Europe, the EU is preparing to … ⌘ Read more

Cloudflare chaos: Third internet outage in four weeks triggers global disruptions
A massive outage at internet infrastructure giant Cloudflare triggered a wave of “500 Internal Server Errors” across the globe, knocking substantial portions of the web offline. ⌘ Read more

Tech Giants’ Cloud Power Probed As EU Weighs Inclusion In DMA
An anonymous reader quotes a report from Bloomberg: Amazon Web Services, Microsoft’s Azure, and Alphabet’s Google Cloud risk being dragged into the scope of the European Union’s crackdown on Big Tech as antitrust watchdogs prepare to study the platforms’ market power. The European Commission wants to decide if any of the trio should face a raft of new restri … ⌘ Read more

Global Web Freedoms Tumble
Global internet freedom declined for a 15th consecutive year, according to Freedom House’s annual report. Semafor: “Always grim reading,” this year’s is particularly sobering, Tech Policy Press noted, with the lowest-ever portion of users living in countries categorized as “free.” Conditions declined in 27 of the 72 countries assessed, with those in Kenya – where anti-corruption protests were quelled, in part, by a seve … ⌘ Read more

Could Firefox Be the Browser That Protects the Privacy of AI Users?
Tech entrepreneur/blogger Anil Dash has been critical of AI browsers like ChatGPT Atlas. (He’s written that Atlas “substitutes its own AI-generated content for the web, but it looks like it’s showing you the web,” while its prompt-based/command-line interface resembles a clunky text adventure, and it’s true purpose seems to be ingesting more … ⌘ Read more

While Meta Crawls the Web for AI Training Data, Bruce Ediger Pranks Them with Endless Bad Data
From the personal blog of interface expert Bruce Ediger:

Early in March 2025, I noticed that a web crawler with a user
agent string of

meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)

was hitting my blog’s machine at an unreasonable rate.

… ⌘ Read more

Servo 0.0.2 Released For Those Wanting To Try Out This Example Rust Web Browser
Released minutes ago was the Servo 0.0.2 web browser engine update. Along with this new Rust-based web engine release is also the “servoshell” in tow for the example implementation built around this open-source codebase… ⌘ Read more

Depraved Adelaide paedophile sentenced to 20 years behind bars
A depraved Adelaide paedophile who drugged an eight-year-old boy and shared images of his vile abuse on the dark web has been sentenced to nearly 20 years behind bars. ⌘ Read more

It’s that time again, I’ve just rotated my #twtxt feed!

Find last quarter’s twts at the feed: https://tilde.pt/~marado/twtxt-2025Q3.txt , or see them on the web: https://tilde.pt/~marado/twtxt-2025Q3.html

Editor’s Note: Security Human Validation
Stephan A. Schwartz,  Editor  -  Schwartzreport

_Stephan: Even though we had several levels of security already installed, SR has been experiencing so many hacking attacks that it was getting difficult to publish it because the attacks kept screwing up the application we use to produce SR. So Beth Alexander, my wonderful web manager of many years, consulted with security specialists, and they told her we needed to add a human verification first … ⌘ Read more

This looks like a botnet, to be honest. The IPs are all over the place. Ethopia, Brazil, Kenya, Lebanon, Netherlands, … I mean, that’s the logical thing to do, isn’t it? Do your web crawling on infected PCs. Nobody will block those, because those are the same IP ranges as legitimate requests. And obviously you don’t have to pay for computing time.

… and they all send invalid HTTP requests, all answered with HTTP 400 … How silly.

Tim Berners-Lee Says AI Will Not Destroy the Web
Tim Berners-Lee thinks AI will help the web, not destroy it. The inventor of the World Wide Web has spent years warning about platform concentration and social media’s corrosive effects, but he views AI differently. AI has accomplished what his Semantic Web project could not. The technology extracts structured data from websites regardless of how the information was formatted. … ⌘ Read more

New Firefox Mascot ‘Kit’ Unveiled On New Web Page
“The Firefox brand is getting a refresh and you get the first look,” says a new web page at Firefox.com. “Kit’s our new mascot and your new companion through an internet that’s private, open and actually yours.”

Slashdot reader BrianFagioli believes the new mascot “is meant to communicate that message in a warmer, more relatable way.”

And Firefox is already selling shirts wit … ⌘ Read more

Kagi Small Web
Comments ⌘ Read more

Using the Web Monetization API for fun and profit
Comments ⌘ Read more

Video Games’ Hottest New Platform is an Old One
Web-based video games are experiencing an unexpected revival as the broader $189 billion industry stagnates. Sales for browser-based titles like GeoGuessr and chess were expected to triple from 2021 to 2028, reaching $3.09 billion, according to Google and Kantar. Playgama hosted more than 15,000 new web games in the first half of 2025, exceeding the combined total from 2021 throug … ⌘ Read more

From web developer to database developer in 10 years
Comments ⌘ Read more

A distant galaxy is being strangled by the cosmic web
A dwarf galaxy 100 million light years away is being stripped of its crucial star-forming gas, and it seems that the cosmic web is siphoning off this gas as the galaxy passes through ⌘ Read more

@bender@twtxt.net I think that’s where it sends the capture verification requests. It’s based on PoW, so it has to perform validation somehow. It actually looks pretty decent as far as a way to prevent spam/abuse of forms on the open web (e.g: Waitlist on SnipMail).

Dillo, a multi-platform graphical web browser
Comments ⌘ Read more

@movq@www.uninformativ.de Gemini liked your opinion very much. Here is how it countered:

The criticism of AI as untrustworthy is a problem of misapplication, not capability.

• AI as a Force Multiplier: AI should be treated as a high-speed drafting and brainstorming tool, not an authority. For experts, it offers an immense speed gain, shifting the work from slow manual creation to fast critical editing and verification.
  
• The Rise of AI Literacy: Users must develop a new skill—AI literacy—to critically evaluate and verify AI’s probabilistic output. This skill, along with improving citation features in AI tools, mitigates the “gaslighting” effect.
  

The fear of skill loss is based on a misunderstanding of how technology changes the nature of work; it’s skill evolution, not erosion.

• Shifting Focus to High-Level Skills: Just as the calculator shifted focus from manual math to complex problem-solving, AI shifts the focus from writing boilerplate code to architectural design and prompt engineering. It handles repetitive tasks, freeing humans for creative and complex challenges.
  
• Accessibility and Empowerment: AI serves as a powerful democratizing tool, offering personalized tutoring and automation to people who lack deep expertise. While dependency is a risk, this accessibility empowers a wider segment of the population previously limited by skill barriers.
  

The legal and technical flaws are issues of governance and ethical practice, not reasons to reject the core technology.

• Need for Better Bot Governance: Destructive scraping is a failure of ethical web behavior and can be solved with better bot identification, rate limits, and protocols (like enhanced robots.txt). The solution is to demand digital citizenship from AI companies, not to stop AI development.

apps.apple.com: App Store web version
Comments ⌘ Read more

Browser APIs: The Web’s Free SaaS
Comments ⌘ Read more

Understanding JSON Web Token (JWT) Security

Image

From Basics to Breaking Authentication

Continue reading on InfoSec Write-ups » ⌘ Read more

Reflections on Trusting Trust (1984)
Comments ⌘ Read more

Linux Kernel Ported To WebAssembly - Demo Lets You Run It In Your Web Browser
Comments ⌘ Read more

Show HN: Why write code if the LLM can just do the thing? (web app experiment)
Comments ⌘ Read more

Abandonware of the web: do you know that there is an HTML tables API?
Comments ⌘ Read more

Java’s Swing is allegedly in “maintenance mode”, so I doubt it’s a good idea to use it for new programs. For example, I very much doubt that it will ever support Wayland.

The replacement is supposed to be JavaFX, but that’s not included in JREs – anymore! It used to be, now it’s not, even though it’s well over 15 years old now.

This whole thing (“Java GUIs”) appears to have stagnated a lot. Probably because everything is web stuff these days …

https://www.oracle.com/java/technologies/javafx/faq-javafx.html#6

Security Doesn’t Have to Hurt
Do you ever wish security would stop blocking the tools you need to do your job? Surprise: your security team wants the same. There you are, just trying to get your work done, when… You need an AI to translate documentation, but all the AI services are blocked by a security web monitoring tool. You… ⌘ Read more

Web Cache Deception Attack – A Hidden Threat in Today’s Web Applications ⌘ Read more

@movq@www.uninformativ.de Yeah, give it a shot. At worst you know that you have to continue your quest. :-)

Fun fact, during a semester break I was actually a little bored, so I just started reading the Qt documentation. I didn’t plan on using Qt for anything, though. I only looked at the docs because they were on my bucket list for some reason. Qt was probably recommended to me and coming from KDE myself, that was motivation enough to look at the docs just for fun.

The more I read, the more hooked I got. The documentation was extremely well written, something I’ve never seen before. The structure was very well thought out and I got the impression that I understood what the people thought when they actually designed Qt.

A few days in I decided to actually give it a real try. Having never done anything in C++ before, I quickly realized that this endeavor won’t succeed. I simply couldn’t get it going. But I found the Qt bindings for Python, so that was a new boost. And quickly after, I discovered that there were even KDE bindings for Python in my package manager, so I immediately switched to them as that integrated into my KDE desktop even nicer.

I used the Python KDE bindings for one larger project, a planning software for a summer camp that we used several years. It’s main feature was to see who is available to do an activity. In the past, that was done on a large sheet of paper, but people got assigned two activities at the same time or weren’t assigned at all. So, by showing people in yellow (free), green (one activity assigned) and red (overbooked), this sped up and improved the planning process.

Another core feature was to generate personalized time tables (just like back in school) and a dedicated view for the morning meeting on site.

It was extended over the years with all sorts of stuff. E.g. I then implemented a warning if all the custodians of an activitiy with kids were underage to satisfy new the guidelines that there should be somebody of age.

Just before the pandemic I started to even add support for personalized live views on phones or tablets during the planning process (with web sockets, though). This way, people could see their own schedule or independently check at which day an activity takes place etc. For these side quests, they don’t have to check the large matrix on the projector. But the project died there.

Here’s a screenshot from one of the main views:

This Python+Qt rewrite replaced and improved the Java+Swing predecessor.

How to Disable Safari Color Tinting on MacOS Tahoe
The latest versions of Safari use an aggressive tinting feature by default that changes the color the Safari window and titlebars to whatever color is detected on the top of a particular webpage. This can cause some visually jarring experiences when browsing the web with Safari on the Mac, and if the colorful windows and … Read More ⌘ Read more

Launch HN: Propolis (YC X25) – Browser agents that QA your web app autonomously
Comments ⌘ Read more

@lyse@lyse.isobeef.org To be fair, I’m not convinced of the web design / user interface decisions either. I just hacked this together over a couple of days. I’m not sold on any of the UI/UX thus far. Open to suggestions, improvements, hell even a complete CSS rewrite 🤣 UI/UX nor CSS is my strong suite 😂

The $2,000 Bug That Changed My Life: How a Tiny URL Parameter Broke Web-Store Pricing !! ⌘ Read more

@bender@twtxt.net Kaboom! Hahaha, I did not think of that at all, thanks for pointing it out, mate! :‘-D

But let me clarify just in case: I honestly do not want to bash this project. In fact, it’s a great little invention. It’s just that I’m not conviced by the current user interface decisions. Anyway, web design isn’t right up my alley. I just wanted to add some fun. And luckily, at least someone liked it so far. :-)

‘Most of it is good’: Tim Berners-Lee on the state of the web now
The man who invented the web is aware of the many issues it faces, from problematic social media use to the rise of unfettered AI. He also has a plan to remedy the situation ⌘ Read more

@aelaraji@aelaraji.com yeah, it looks tedious because it is. LOL. I can twt no matter where I am because a) with Yarn is as easy as opening a web browser, and b) with jenny is as easy at SSHing to my VPS. But, the keyword is fun. That’s what matters!

Who needs Graphviz when you can build it yourself?
Comments ⌘ Read more