Page Magic: A Chrome extension that uses AI to customize the appearance of any web page
Comments ⌘ Read more
OSWE Web Hacking Tips (IPPSEC): My Study Journey href=”https://we.loveprivacy.club/search?q=%231”>#1** ⌘ Read more
This company wants to dethrone Google, but does it have a shot?
The internet search bar is giving way to talking machines scouring the web to answer our queries, and this time around, its Google that’s doing the chasing. ⌘ Read more
The flip phone web: browsing with the original Opera Mini
Opera Mini was first released in 2005 as a web browser for mobile phones, with the ability to load full websites by sending most of the work to an external server. It was a massive hit, but it started to fade out of relevance once smartphones entered mainstream use. Opera Mini still exists today as a web browser for iPhone and Android—it’s now just a tweaked version of the regular Opera mobile browser, and you shouldn … ⌘ Read more
MinIO Removes Web UI Features from Community Version, Pushes Users to Paid Plans
Comments ⌘ Read more
Microsoft unveils Microsoft’s competitor to Microsoft’s winget
One of the ways in which Windows (and macOS) trails behind the Linux and BSD world is the complete lack of centralised, standardised application management. Windows users still have to scour the web to download sketchy installers straight from the Windows 95 days, amassing a veritable collection updaters in the process, which either continuously run in the background, or annoy you with update pop-ups when you … ⌘ Read more
Exploiting Web Cache Poisoning with X-Host Header Using Param Miner
[Write-up] Web Cache Poisoning Using an Unknown Header.
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/exploiting-web-ca … ⌘ Read more
Inside GitHub: How we hardened our SAML implementation
Maintaining and developing complex and risky code is never easy. See how we addressed the challenges of securing our SAML implementation with this behind-the-scenes look at building trust in our systems.
The post Inside GitHub: How we hardened our SAML implementation appeared first on [The GitHu … ⌘ Read more
大模型瀏覽器自動化工具 brower-use
簡介Browser-Use Web UI 是大模型的瀏覽器自動化利器，其作用是提供了大模型和瀏覽器之間的交互方式，manus 等大多也能看到他的影子工作原理brower-use 執行主要分成以下幾步┌────────────┐ 狀態提示詞 ┌───────────┐│ │ ─────────────── │ ││ 瀏覽器環境 │ ⌘ Read more
費時一個多月終於使用 Session 實現了二維碼掃碼登錄功能
我終於完成了二維碼掃碼登錄功能，這個功能開發斷斷續續的用了我一個多月的空閒時間，其中 cookie 回寫和 session 同步就佔了 20 多天，開發有多痛苦，完成後就有多喜悅，。二維碼掃碼登錄是一種常見的無密碼認證方式，它的實現原理非常簡單：第一步在服務器生成一個唯一二維碼 ID 和對應的隨機 token，返回給 Web 網頁並生成二維碼，第二步用戶使用手機 APP 掃描二維碼，然後將用戶信息 ⌘ Read more
↳
In-reply-to
»
@kat I don’t like Golang much either, but I am not a programmer. This little site, Go by example might explain a thing or two.
⤋ Read More
One of the nicest things about Go is the language itself, comparing Go to other popular languages in terms of the complexity to learn to be proficient in:
- Go:
25keywords (Stack Overflow); CSP-style concurrency (goroutines & channels)
- Python 2:
30keywords (TutorialsPoint); GIL-bound threads & multiprocessing (Wikipedia)
- Python 3:
35keywords (Initial Commit); GIL-bound threads,asyncio& multiprocessing (Wikipedia, DEV Community)
- Java:
50keywords (Stack Overflow); threads +java.util.concurrent(Wikipedia)
- C++:
82keywords (Stack Overflow);std::thread, atomics & futures (en.cppreference.com)
- JavaScript:
38keywords (Stack Overflow); single-threaded event loop &async/await, Web Workers (Wikipedia)
- Ruby:
42keywords (Stack Overflow); GIL-bound threads (MRI), fibers & processes (Wikipedia)
Gin 服務性能提升的最佳實踐
Gin 框架是在 Go 中構建網絡服務的首選。隨着應用程序複雜性和流量的增加，性能成爲不能忽視的因素。本文將介紹一系列使用 Gin 構建服務的有效技巧，涵蓋從路由優化到內存重用、請求和響應優化、異步處理以及性能分析，幫助你創建更穩定高效的 Web 服務。路由註冊優化：避免循環引用————-Gin 的路由器使用基於樹的高效路由實現，可以快速匹配請求路徑。但是，如果路由註冊不當，例如嵌 ⌘ Read more
Gin 服務性能提升的最佳實踐
Gin 框架是在 Go 中構建網絡服務的首選。隨着應用程序複雜性和流量的增加，性能成爲不能忽視的因素。本文將介紹一系列使用 Gin 構建服務的有效技巧，涵蓋從路由優化到內存重用、請求和響應優化、異步處理以及性能分析，幫助你創建更穩定高效的 Web 服務。路由註冊優化：避免循環引用————-Gin 的路由器使用基於樹的高效路由實現，可以快速匹配請求路徑。但是，如果路由註冊不當，例如嵌 ⌘ Read more
Crypto Failures | TryHackMe Medium
Questions: What is the value of the web flag? What is the encryption key? Solution: We are firstly given an IP address. I preformed a…
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/crypto-failures-tryhackme-medium-d60d55b849 … ⌘ Read more
Strengthening Web service security with Apache2: Best practices for 2025
Keeping your Apache2 web services safe: What you need to know this year
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/ … ⌘ Read more
How I Gained Root Access on a Vulnerable Web Server: From Reconnaissance to Privilege Escalation
Web Server Exploitation & Privilege Escalation - Full Walkthr … ⌘ Read more
Buying a TV these days, means trying to avoid endless enshitification:
-Spyware and adware
-Shitty AI upscaling/ frame interpolation
-HW that breaks after 2 - 3 years
-One off OS, dead on arrival
-Android OS, that starts lagging after the third update
-8 buttons worth of ads, on your remote
You probably have to make some kind of a compromise. I thought that was buying from some other brand like Hyundai, but that one also felt into some of those categories and just broke, after less than 3 years of use. At this point I’ll probably go back to LG and hope their HW is still reliable and the rest manageable… It has AI bullshit and knowing LG, probably some spyware you have to try your best to get rid of, can buy a remote with “only” 2 ads on it, some web-based OS shared between all their TVs, that usually gets 4 - 5 years worth of updates and works decently enough afterwards.
At this point, I’ll probably settle for anything that doesn’t literally fall apart, not even 3 years in, like the Hyundai did.
Yet Another Linux Distro Ditches Firefox for Brave
First Zorin OS, now the Fedora-based Nobara changes the default web browser. ⌘ Read more
Hacking With No Tools: How to Break Web Apps Using Just Your Browser ️♂️
Hacking With No Tools: How to Break Web Apps Using Just Your Browser 🕵️♂️
[Continue reading on In … ⌘ Read more
從 Go 路由選擇看 “標準庫優先”：何時堅守？何時拓展？
大家好，我是 Tony Bai。最近，知名 Go 博主 Alex Edwards 更新了他那篇廣受歡迎的文章——“Which Go router should I use?1]”，特別提到了 [Go 1.22 版本對標準庫 http.ServeMux 的顯著增強。這篇文章再次引發了我們對 Go Web 開發中一個經典問題的思考：在選擇路由庫時，我們應該堅守標準庫，還是擁抱功能更豐富的第三方庫？這個 ⌘ Read more
從 Go 路由選擇看 “標準庫優先”：何時堅守？何時拓展？
大家好，我是 Tony Bai。最近，知名 Go 博主 Alex Edwards 更新了他那篇廣受歡迎的文章——“Which Go router should I use?1]”，特別提到了 [Go 1.22 版本對標準庫 http.ServeMux 的顯著增強。這篇文章再次引發了我們對 Go Web 開發中一個經典問題的思考：在選擇路由庫時，我們應該堅守標準庫，還是擁抱功能更豐富的第三方庫？這個 ⌘ Read more
My icon on here will never not crack me up. It’s so low quality, it feels like a facebook mom meme. Perfect for random corners of the indie web.
↳
In-reply-to
»
@bender Basically the way I'm reading this is
⤋ Read More
1 RPM. This is a rather aggressive rate limit actually. This basically makes Github inaccessible and useless for basically anything unless you're logged in. You can basically kiss "pursuing" casually, anonymously goodbye.
@prologic@twtxt.net that will not be a problem; as long as it doesn’t affect authenticated users it wouldn’t make a difference. But we are comparing apples and eggs here. I don’t access GitHub while unauthenticated, but I can see how others might. It comes across as anti-web in general.
Nginx 主從最全詳解 -圖文全面總結-
大家好，我是 mikechen 睿哥。Nginx 是大型架構的必備中間件，下面我就全面來詳解 Nginx 主從 @mikechenNginx 主從Nginx 主從配置的核心是利用冗餘備份和故障轉移機制，通過 Keepalived 等工具實現 VIP 的管理和切換，從而確保 Web 服務的高可用性。整體架構，如下圖所示:配置兩臺或多臺 Nginx 服務器，其中一臺作爲主服務器，負責處理主要的 Web ⌘ Read more
$256 Bounty : XSS via Web Cache Poisoning in Discourse
How Injecting Headers and Poisoning Cache Led to Stored Cross-Site Scripting
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/256-bounty-xss-via-web-cache-poisoning-in-d … ⌘ Read more
Master CRLF Injection: The Underrated Bug with Dangerous Potential
Learn how attackers exploit CRLF Injection to manipulate HTTP responses, hijack headers and unlock hidden vulnerabilities in modern web…
[Continue rea … ⌘ Read more
↳
In-reply-to
»
made the HTML for one of my static handwritten sites semantic!
⤋ Read More
@eldersnake@we.loveprivacy.club awww ty! it’s mostly fun stuff and links to my friends :) the buttons have been revived by indie web folks and the people at neocities, it’s super fun!
Compress-a-thon — CSP Bypass via Redirection — Pentathon 2025
Compress-a-thon is a “web exploitation” challenge that was featured in Pentathon 2025 Finale Jeopardy CTF Round. This challenge involved…
[Continue reading on InfoSec Write-ups »](https://inf … ⌘ Read more
VPS troubles and the weekend
This weekend I went to the cottage with P on Friday. I hoped I would
have a nice weekend reading in front of the wood stove, but I had also
planned to spend at least a few hours trying to configure Maddy as the
new mail server for hack.org et al.
Then the web server I moved to the new VPS died. Again. I connected to
the VNC console and, like before, the Linux kernel couldn’t find its
root disk. A simple:
# mount /dev/vda2 /sysroot; exit
in the emergency shell solved thi … ⌘ Read more
Plain Vanilla Web
Article URL: https://plainvanillaweb.com/index.html
Comments URL: https://news.ycombinator.com/item?id=43954896
Points: 506
# Comments: 277 ⌘ Read more
** My not so pragmatic guide to running background services on macOS **
I self host a lot of stuff — these days, mostly weird little utility scripts and toys that run in the background, but also some web apps like plex, calibre, and a suite of irc things. For a long time I ran such things on a VPS, but being incredibly cheap, and hardly ever leaving my house for realsies, during the height of the pandemic I brought everything on to an aged mac mini I keep on a shelf behind some books.
I tr … ⌘ Read more
10 Invisible Standards That Make the Modern World Work
Modern life feels seamless. You buy a phone charger, and it fits. You send a letter, and it gets delivered. But behind that convenience is a complex web of invisible global standards—quiet, often century-old decisions that the entire planet just agreed to follow. Without them, your printer wouldn’t know how to format a page, your […]
The post [10 Invisible Standards That Make the Modern World Work](https://listverse.com/20 … ⌘ Read more