Google and HTTP (2018)(this.how)

60 points by mpweiher 3 years ago | 103 comments

OpenAI agents tried to bruteforce a UN website's API fields(swarmcha.se)

64 points by intunderflow 29 days ago | 48 comments

Blog post analyzing how OpenAI agents scanned UNCTAD's statistics API about 16,500 times in 2026 using proxies, obfuscation, and Google's XSS game.

All the bugs they found(andreapivetta.com)

73 points by ziggy42 5 months ago | 27 comments

Mullvad exit IPs are surprisingly identifying(tmctmt.com)

521 points by RGBCube 5 months ago | 318 comments

Blog post explaining how Mullvad VPN deterministically assigns exit IPs based on a user's WireGuard key, making them usable as a fingerprinting vector.

Supporting org.apache.xml.security in graalVM(guust.ysebie.be)

23 points by whizzx 1 year ago | 3 comments

Troubleshooting Email Delivery to Microsoft Users(rozumem.xyz)

73 points by rozumem 6 months ago | 17 comments

Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)

444 points by guntars 1 year ago | 138 comments

Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.

The Twitter API is now effectively unmaintained(snarfed.org)

363 points by edent 3 years ago | 461 comments

Ryan Barrett's blog post arguing the Twitter API is effectively unmaintained, citing the decline of Twitter employee posts on the developer forum.

Most RESTful APIs aren't really RESTful(florian-kraemer.net)

324 points by BerislavLopac 1 year ago | 493 comments

Blog post by Florian Krämer arguing that most APIs called RESTful don't follow Roy Fielding's original REST architectural style as described in his dissertation.

There isn't an easy exploit for this PHP vulnerability(eliastaylor.com)

566 points by zkldi 4 days ago | 437 comments

Blog post arguing a newly disclosed PHP vulnerability is hard to exploit and that thousands of LLM-generated GitHub PoC exploits don't work against vanilla PHP.

A better streams API is possible for JavaScript(blog.cloudflare.com)

425 points by nnx 8 months ago | 147 comments

Cloudflare Blog post by James M Snell arguing that JavaScript's Web Streams API is flawed and proposing a better streams API design.

Prevent cognitive debt by manually retyping LLM-generated code(ankursethi.com)

502 points by mpweiher 2 months ago | 413 comments

A personal blog post arguing that developers should manually retype code generated by LLM coding assistants to keep understanding it and avoid cognitive debt.