惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

大猫的无限游戏
大猫的无限游戏
Security Archives - TechRepublic
Security Archives - TechRepublic
T
Threat Research - Cisco Blogs
A
Arctic Wolf
S
Securelist
O
OpenAI News
T
Threatpost
Forbes - Security
Forbes - Security
N
News and Events Feed by Topic
S
Secure Thoughts
H
Heimdal Security Blog
S
Security Affairs
P
Privacy International News Feed
C
Cisco Blogs
C
CERT Recently Published Vulnerability Notes
Cyberwarzone
Cyberwarzone
N
News and Events Feed by Topic
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
P
Palo Alto Networks Blog
S
Security @ Cisco Blogs
Hacker News - Newest:
Hacker News - Newest: "LLM"
博客园 - 三生石上(FineUI控件)
月光博客
月光博客
T
Tailwind CSS Blog
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Hacker News: Ask HN
Hacker News: Ask HN
T
Troy Hunt's Blog
S
SegmentFault 最新的问题
腾讯CDC
V
Visual Studio Blog
Last Week in AI
Last Week in AI
H
Hacker News: Front Page
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Project Zero
Project Zero
WordPress大学
WordPress大学
NISL@THU
NISL@THU
博客园 - 【当耐特】
博客园 - Franky
Webroot Blog
Webroot Blog
博客园_首页
T
Tenable Blog
雷峰网
雷峰网
Google Online Security Blog
Google Online Security Blog
阮一峰的网络日志
阮一峰的网络日志
V2EX - 技术
V2EX - 技术
Recent Commits to openclaw:main
Recent Commits to openclaw:main
L
Lohrmann on Cybersecurity
The Hacker News
The Hacker News

Hacker News: Best

madhadron - The seven programming ur-languages GitHub - smol-machines/smolvm: Tool to build & run portable, lightweight, self-contained virtual machines. I Measured Claude 4.7's New Tokenizer. Here's What It Costs You. Introducing Claude Design by Anthropic Labs It Is Time to Ban the Sale of Precise Geolocation The creative software industry has declared war on Adobe Isaac Asimov: The Last Question Newly unsealed records reveal Amazon’s price-fixing tactics, California attorney general claims Clojure - Documentary Android CLI and skills: Build Android apps 3x faster using any agent Qwen3.6-35B-A3B on my laptop drew me a better pelican than Claude Opus 4.7 Codex for almost everything Introducing Claude Opus 4.7 Qwen Studio The Future of Everything is Lies, I Guess: Where Do We Go From Here? Virginia Bans Sale of Geolocation Data YouTube now lets you turn off Shorts Burgers | マクドナルド公式 ChatGPT for Excel Ask HN: Who is using OpenClaw? Live Nation illegally monopolized ticketing market, jury finds Google Broke Its Promise to Me. Now ICE Has My Data. Open Source Isn't Dead. The Future of Everything is Lies, I Guess: New Jobs Unexpected €54k billing spike in 13 hours: Firebase browser key without API restrictions used for Gemini requests IPv6 – Google Your Backpack Got Worse On Purpose Good sleep, good learning, good life Fixing a 20-year-old bug in Enlightenment E16. Does Gas Town 'steal' usage from users' LLM credits & paid services to improve itself? Tell HN: Fiverr left customer files public and searchable Cybersecurity Looks Like Proof of Work Now Getting the Flock out Release OpenSSL 4.0.0 · openssl/openssl Internet será irrespirable los días de fútbol y otros deportes. Telefónica extiende los bloqueos a Champions, tenis y golf. Automate work with routines - Claude Code Docs The Future of Everything is Lies, I Guess: Work Thousands of rare concert recordings are landing on the Internet Archive — listen now What is jj and why should I care? Backblaze has quietly stopped backing up your data Cal.com Goes Closed Source: Why AI Security Is Forcing Our Decision | Cal.com - Scheduling Software for Online Bookings Codex Hacked a Samsung TV The Future of Everything is Lies, I Guess: Safety GitHub - sterlingcrispin/nothing-ever-happens: Polymarket bot that buys "No" on all non-sports markets. For entertainment only, mostly a meme. Make tmux Pretty and Usable - Ham Vocke Microsoft isn't removing Copilot from Windows 11, it's just renaming it Servo is now available on crates.io - Servo aims to empower developers with a lightweight, high-performance alternative for embedding web technologies in applications. We May Be Living Through the Most Consequential Hundred Days in Cyber History, and Almost Nobody Has Noticed All elementary functions from a single binary operator 奈拜提耶市 Seven countries now generate 100% of their electricity from renewable energy Pro Max 5x Quota Exhausted in 1.5 Hours Despite Moderate Usage Tell HN: docker pull fails in spain due to football cloudflare block Bring Back Idiomatic Design @adlrocha - How the "AI Loser" may end up winning Apple update turns Czech mate for locked-out iPhone user Cache TTL silently regressed from 1h to 5m around early March 2026, causing quota and cost inflation The peril of laziness lost AI Will Be Met With Violence, and Nothing Good Will Come of It Center for Responsible, Decentralized Intelligence at Berkeley The disturbing white paper Red Hat is trying to erase from the internet – OSnews The Future of Everything is Lies, I Guess: Annoyances 447 Terabytes per Square Centimetre at Zero Retention Energy: Non-Volatile Memory at the Atomic Scale on Fluorographane Show HN: Pardonned.com – A searchable database of US Pardons 20 Years on AWS and Never Not My Job Artemis II crew splashes down near San Diego after historic moon mission Molotov Cocktail Is Hurled at Home of Sam Altman, OpenAI’s CEO France to ditch Windows for Linux to reduce reliance on US tech On filing the corners off my MacBooks Installing every* Firefox extension Chimpanzees in Uganda locked in vicious 'civil war', say researchers linux/Documentation/process/coding-assistants.rst at master · torvalds/linux GitHub - callumlocke/json-formatter: Makes JSON easy to read. A compelling title that is cryptic enough to get you to take action on it GitHub - Keychron/Keychron-Keyboards-Hardware-Design: Industrial design files for Keychron keyboards and mice. 100+ models with CAD assets in STEP, DXF, DWG, and PDF. Source-available, with commercial use allowed for original compatible accessories within the license terms. [ANNOUNCE] WireGuardNT v0.11 and WireGuard for Windows v0.6 Released 1D-Chess Helium Is Hard to Replace FBI used iPhone notification data to retrieve deleted Signal messages Microsoft suspends dev accounts for high-profile open source projects Why you can’t trust Privacy & Security Serenity Forge (@serenityforge.com) A new trick brings stability to quantum operations OpenAI Backs Bill That Would Limit Liability for AI-Enabled Mass Deaths or Financial Disasters Netflix Prices Went Up Again – I Bought a DVD Player Instead DOJ Wants to Scrap Watergate-Era Rule That Makes Presidential Records Public EFF is Leaving X How NASA built Artemis II’s fault-tolerant computer Meta removes ads for social media addiction litigation How Pizza Tycoon simulated traffic on a 25 MHz CPU Claude mixes up who said what, and that's not OK Reallocating $100/Month Claude Code spend to Zed and OpenRouter Help Keep Thunderbird Alive! Why Are Flock Employees Watching Our Children? The Pentagon Threatened Pope Leo XIV’s Ambassador With the Avignon Papacy Fragments: April 2 Native Instant Space Switching on MacOS Bitcoin miners are losing $19,000 on every BTC produced as difficulty drops 7.8% God sleeps in the minerals Apple Silicon and Virtual Machines: Beating the 2 VM Limit
Dillo release 3.3.0
2026-04-27 · via Hacker News: Best

Released on 2026-04-26

Summary of changes

The Dillo 3.3.0 release contains several new features, configuration options and bug fixes. It is the first release to provide experimental support for FLTK 1.4 (see the details below).

Control via UNIX socket

A new dilloc program is now available to control Dillo from the command line or from a script. It searches for Dillo by the PID in the DILLO_PID environment variable or for a unique Dillo process if not set. You can see the available commands with dilloc help:

% dilloc help
Commands return 0 on success or non-zero on error.
Available commands:
 ping          Check if dillo replies correctly:
 pid           Print PID of selected dillo process
 reload        Reload the current tab
 ready         Exits with 0 if finished loading, 1 otherwise
 open URL      Open the given URL in the current tab
 url           Print the url in the current tab
 title         Print the title of page in the current tab
 status [MSG]  Set the status bar to MSG
 dump          Print the content of the current tab
 hdump         Print the HTTP headers of the current tab
 load          Replace the content in the current tab by stdin
 rawload       Replace the HTTP headers and content of the current
               tab by stdin
 quit          Close dillo
 wait [T]      Wait until the current tab has finished loading
               at most T seconds (default 60.0). Wait forever with
               T set to 0.

Page actions

We have added the ability to run arbitrary commands from the page menu (right click on the page) with the page_action new option.

With page actions, dilloc provides a powerful mechanism to perform page manipulations. Here is an example page action in ~/.dillo/dillorc:

page_action="Mimic Chrome:curl_chrome136 $url | dilloc load"

When the "Mimic Chrome" option is selected, the current page will be fetched again using curl impersonate to mimic Chrome (which avoids some JS walls) and the output will be piped directly into Dillo as the new HTML of the current page.

Another example is the "Fix page" action, which tries to find specific fixes for the current page based on the URL, HTTP headers or other criteria:

page_action="Fix page:~/.dillo/actions/fixpage.sh"

See the actions git repository to download the fixpage.sh script.

FLTK 1.4 experimental support

We have added experimental support to build Dillo with FLTK 1.4.0 and higher with the new --enable-experimental-fltk configure flag, so that experienced users and testers can provide technical feedback on different platforms. Be sure to use the latest FLTK 1.4.5 release which contains fixes to solve the problems with blurry fonts.

We have similar rendering quality in FLTK 1.4.5 as in FLTK 1.3 on a X11 platform with a 96 DPI screen (both with the Xft and Pango backends), but we still have rendering problems with higher DPIs (specially non-multiple of 96) or with Wayland. You can track the status in the corresponding FLTK issue.

Important: If you maintain a Dillo package, do not enable FLTK 1.4 support by default for all users as they will be exposed to visual glitches and other issues.

Fixed OAuth login

In order to perform the OAuth authentication (for example to login into Fediverse via Smolfedi) we need to allow cookies that are set in a redirection response. By default Dillo blocks all third party cookies that are not caused by a request initiated by the user, so we can prevent tracking by image pixels. We added an exception to also allow cookies from redirections of the main page after the user initiated request, so we can still stay safe against tracking but allow OAuth to work.

Download

To download the 3.3.0 release use these links:

Notice that we have migrated from GitHub to our own server. The git repositories are now served by our self-hosted cgit and also mirrored in Codeberg and SourceHut.

Detailed changes

This is the list of changes from the ChangeLog of this release:

  • Rodrigo Arias Mallo:
    • Add optional support for brotli (br) content encoding.
    • Add about:keys to display current keyboard shortcuts.
    • Control + left click opens links in new tab (emulates mouse middle button).
    • Ctrl+C copies selected text into the clipboard so Ctrl+V works as expected.
    • Enable IPv6 support by default if supported by the platform.
    • Focus the N-th tab with the Alt+ shortcut.
    • Fix vsource dpi infinite loop on musl due to unescaped "%" printf format.
    • Add about:cache and about:dicache pages to show internal cache details.
    • Add mojeek search engine with shortcut "mj".
    • Hide form elements (like buttons and inputs) with display:none in CSS.
    • Increase margin in location bar to make it easier to select with the mouse.
    • Navigate back and forward with mouse buttons.
    • Fix OAuth login by allowing cookies in root 30X redirects.
    • Add support for remote control via a UNIX socket (enabled by default, disable with --disable-control-socket).
    • Add new dilloc program to remote control dillo from the command line.
    • Set DILLO_PID variable when executing actions so dilloc can read it.
    • Add support for "page_action" option to define custom entries in the page menu to run programs or scripts.
    • Add "mark_unloaded_images" option to show a border in images not loaded, so they are easier to see.
    • Fix segfault on CurveBall TLS test with LibreSSL.
    • Match complete search prefixes in "search_url" to avoid partial matches.
    • Update website URL to https://dillo-browser.org/ and git repository to https://git.dillo-browser.org/dillo.
    • Add "trace_http" option to debug HTTP traffic.
    • Avoid cached responses when submitting forms.
    • Fix cookie Max-Age parsing using the epoch instead of the local timezone.
    • Add experimental FLTK >= 1.4 support with the --enable-experimental-fltk configure flag.
  • Patches by Alex
    • Middle click on back or forward button opens page in new tab.
  • Patches by Cameron Paul, Rodrigo Arias Mallo
    • Add support for Content-Disposition header to set the filename.
  • Patches by Leonardo Taccari
    • Fix build in NetBSD and avoid ctype(3) incorrect sign extension.
  • Patches by Magnus Larsen
    • Fix use-after-free in HTTP server and OpenSSL connection dialog.