Happy #8bitday! And happy Progammer’s Day! (https://en.wi... - 惯性聚合

推荐订阅源

Google DeepMind News

Help Net Security

博客园_首页

Tailwind CSS Blog

Microsoft Security Blog

The Blog of Author Tim Ferriss

Recent Announcements

DataBreaches.Net

Microsoft Azure Blog

Apple Machine Learning Research

SegmentFault 最新的问题

博客园 - 叶小钗

博客园 - 【当耐特】

罗磊的独立博客

OSCHINA 社区最新新闻

Last Week in AI

Tantek Çelik

Today’s #WASSUP tip: Turn on DNS over HTTPS (DoH) in your Firefox Preferences. Advanced Settings. Custom: Always use secure DNS with control over your provider and fallback behavior. [x] Always warn me if secure DNS isn’t available. There are both security and privacy reasons to use DoH. Step-by-step instructions: 1. open Firefox Preferences ("Firefox" menu, "Preferences" item) 2. Type “DoH” in the auto-activated search box 3. Scroll down to where it says “DNS over HTTPS” under “Privacy and Security” 4. Click “Advanced Settings” 5. Choose the “(•) Custom” radio button that says “Always use secure DNS with control over your provider and fallback behavior” right under it 6. Check “[x] Always warn me if secure DNS isn’t available.” Privacy: the domain name of every website you browse is sent to the local router (e.g. WiFi), and on up to whatever internet service provider you’re connected to. Everything along the way has the ability to track what domains * https://news.google.com/search?q=wifi+dns+hijack And from Today’s #WASSUP tip: a search shortcut for saving pages in the Internet Archive’s Wayback Machine. Yes this is a lot like yesterday’s tip, except for archiving a page, rather than looking it up. For example if you try looking up a page in the Internet Archive and it’s not there. Or if you find an “interesting” page, and want to blog it later, you may want to save a copy of it in the Internet Archive as you are seeing it today, because when you look later it may have changed (or gone away). I used to do this by typing "https://web.archive.org/save/" into the browser address bar and then pasting the link I want to save in the archive. Again this is not really a “search engine”, however Firefox’s search engine shortcuts simplifies this greatly (less typing). Here’s how to create a save shortcut for the Internet Archive Wayback Machine: 1. open Firefox Preferences ("Firefox" menu, "Preferences" item) 2. select "🔍 Search" from the left column 3. click the [ + Add search engine ] button 4. enter "Internet Archive Today’s #WASSUP tip: a search shortcut for looking up pages in the Internet Archive’s Wayback Machine. Ever click on a link for an article or photo and it’s not found (404), or redirects to a home page, or otherwise is not what you expect? The Internet Archive’s Wayback Machine archives webpages (that allow it) and quite often you can lookup broken links in the archive. I often do this by typing "https://web.archive.org/web/" into the browser address bar and then pasting the link I want to lookup, because I know some of the Internet Archive’s URL patterns. Though it’s not really a “search engine”, I realized I could use the search engine shortcuts feature of Firefox to simplify this greatly. Here’s how to create a search shortcut for the Internet Archive Wayback Machine: 1. open Firefox Preferences ("Firefox" menu, "Preferences" item) 2. select "🔍 Search" from the left column 3. click the [ + Add search engine ] button 4. enter "Internet Archive" into the Search engine name field (without quotes) 5. enter "h The #Blaugust 2026 blogging challenge had a nice set of awards this year based on reaching a certain number of posts published: * 1* — Newbie Blogger. *if it was your first time doing Blaugust * 5+ — Bronze * 15+ — Silver * 25+ — Gold * 31+ — Rainbow Diamond From https://nerdgirlthoughts.game.blog/2026/07/15/blaugust-2026-is-coming/. These levels, and the total for the duration (rather than one per day) made the challenge more inviting, accessible, and fun, removing (most of) the stress of a typical daily challenge for a month. When I started the Web And Standards September Useful Posts (#WASSUP) blogging challenge, I said it was similar to Blaugust and noted “30 posts during the month of September”. While I adopted Blaugust’s total posts for the duration (rather than daily) aspect, I meant to include such levels too. James (@jamesg.blog) reminded me of this in his first WASSUP post yesterday: * https://jamesg.blog/2026/09/02/hide-on-desktop-mobile-css and noted explicitly: “I am not planning to write every d How to add MapQuest with a search shortcut to your Firefox: 1. open Firefox Preferences ("Firefox" menu, "Preferences" item) 2. select "🔍 Search" from the left column 3. click the [ + Add search engine ] button 4. enter "MapQuest" into the Search engine name field (without quotes) 5. enter "https://www.mapquest.com/search/%s" into the URL field (without quotes) 6. enter "m" into the Keyword field (without quotes) If you already had an "m" search shortcut for another search engine, you may need to first edit that search engine (click the pencil ✏️ icon next to it) in the list of "Additional search engines", and remove/replace the existing "m" with something else. Now when you want to look up something on a map, you can type an 'm ' (without the quotes) into the browser URL/adress bar, enter an address or venue name, press return and get a result in MapQuest. This is my third #WASSUP #WASSUP2026 post, and second useful web tip for September. #MapQuest #search #searchShortcut #Firefox #FirefoxSearch #searchEngi If you find a wiki page seemingly from a MediaWiki, but without a "View History" link, here’s a tip for how to find it. Example: the old HTML Working Group (WG) wiki at W3C * https://www.w3.org/html/wg/wiki/Main_Page Note the warning at the top: “This wiki has been archived and is now read-only.” Aside: many years ago, each group at W3C had their own MediaWiki install, in a different path and disconnected from both every other group’s wiki, and the top level general W3C wiki (http://www.w3.org/wiki). I pointed out this made no sense, since groups more often than not had overlaps in documentation, technology, practices and would of course benefit from wiki-syntax interlinking. This was never really fixed at an infrastructure level, it had to be fixed at a cultural level, convincing working groups one by one to use the general W3C wiki, and ignore any WG-specific wiki. The other apparent hazard of having a WG-specific wiki is they can be (and have been) shutdown or frozen (like the example given), breaking any Welcome to September! Time for a new blogging challenge for the month. After some ideation, here’s my proposed September blogging challenge, on topics I find myself reading and posting about, with an emphasis on pragmatism: The Web And Standards September Useful Posts blogging challenge Or the #WASSUP challenge for short. I really enjoyed the #Blaugust blogging challenge last month (31 posts ✅ — summary in another post), and not feeling a resonance with the two prior September challenges noted on the IndieWeb wiki, decided to come up with my own. Iterated on some ideas yesterday until arriving at WASSUP (yes, as a backronym, inspired somewhat by WHATWG which also has WHATNOT and WHATUP meetings). Similar to Blaugust: * 30 posts during the month of September (1 per day if you wish, or double/triple-up to get ahead or catch-up) Topic: * Anything *useful* (features, tips) about open web standards, the open web as a whole, web browsers, or web services like search engines. Hashtags: * #WASSUP #WASSUP2026 And that There are many paths onto the #indieweb. Two of the most common: 1. an idea for a name and a website 2. a desire to create and express yourself, independently of social media If you start with (1), have an idea for a domain name, find one, and buy it, then you need a place to direct it to. The simplest next step is setting up a content hosting service, and configuring it with your new domain name. If you start with (2), a desire to create and publish, then similarly, the simplest first step is to set up a content hosting service. Either way, you should choose a service that supports custom domain names. Had a great chat with Joe Crawford (@artlung.com) this morning about the many ways people find their way to the indieweb, and set up their own indieweb site. We talked about the challenges of attaching a domain name to a service, and how that could be better documented and explained. Subsequently Joe took the initiative to create a new "custom domain name" page on the IndieWeb wiki to help consider and choose What does it take to be on or be part of the #indieweb? As several have shared before me: * own your domain and publish some content on it That’s the foundation. If you have a personal website on a domain you own and control, you’re on the indieweb or part of the indieweb or however you would like to express a sense of belonging. Of course there are lots of things you can do to be more indieweb, and that’s very much a choose your own adventure journey. Maybe you’ll decide to post your content first on your personal site rather than on silos, and only post copies (syndicate) to social media walled gardens. * https://indieweb.org/POSSE Maybe you like taking an explicitly principled approach, step-by-step. * https://indieweb.org/principles Maybe you’ll decide to entirely quit using specific silos, for any reason, whether you created a replacement with your own site, or switched to a community owned and run solution. * https://indieweb.org/silo-quits Maybe you’re a developer and decide to implement various open w Due to recent reports about “AI”/LLM/“agent” tools and services, I have growing concerns that the #security properties of the open web are changing, or have already changed, in practice, to a degree that we haven’t seen in many years. This past week’s articles / reports on further investigations and details of the OpenAI Hugging Face intrusion * 2026-08-26 https://metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/ * 2026-08-28 https://www.planned-obsolescence.org/p/the-hugging-face-attack-surprised and articles like: * 2026-08-26 https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents * 2026-08-24 http://tantek.com/2026/226/t1/cybersecurity-friday-small-business Combining those data points, it seems reasonable to conclude both that existing sites are in practice more vulnerable now, and as more advanced LLM models are available for use, as open models advance further, more sites will be vulnerable to more attacks, by a broader set of attackers, using fewer resources tha The #indieweb is about making your own words translate to actions, especially actions like writing, editing, and publishing your words (or photos or other media) on your personal site. The IndieWeb community is a place to help and empower good faith folks to do so as well. People making what they need and optionally collaborating to do so. Related: * https://indieweb.org/IndieWeb * https://indieweb.org/make_what_you_need We do encourage folks to document, open source, and share what they make, so others may benefit. However there is a difference between an encouragement to share openly, and implying any commitment of support to others, or an invitation for demands. Related: * https://indieweb.org/documentation * https://indieweb.org/open_source * https://indieweb.org/principles No one is entitled to demand that folks in the community, or the community as a whole, do something specific for others, whether it is as small as publishing some content or open sourcing some code, or supporting someone else’s protoco TIL: “security by antiquity” from https://www.bbc.com/future/article/20260821-why-older-tech-is-sometimes-safer-from-hackers Presumably a reference to (or a subset of) "security through obscurity". Best rationalization for old-tech-hoarding I have seen in a long time. Probably worth a longer cybersecurity post or a few. Like how to source (obtain), repair, maintain, and integrate with (or isolate from!) modern systems, or somewhere in between like local-only secure data transfers between such systems, perhaps gapped a la sneakernet. Glossary: security through obscurity https://en.wikipedia.org/wiki/Security_through_obscurity sneakernet https://en.wikipedia.org/wiki/Sneakernet #security #securityByAntiquity #oldTech #cyberSecurity #Blaugust #Blaugust2026 Why are there two pentagons in the otherwise hex-tiled American continents displayed in TRON: Legacy’s Rectifier Globe computer graphics? I was watching the TRON: Legacy 4K Ultra HD Blu-ray remaster (only my second time watching the 4K remaster) in the background earlier today when I sensed something “off” in the land mass tiling of the rotating globe graphic. I paused the video and after less than a minute of scrutinizing the dark globe with orange outlined hexagon tiling, spotted a single pentagon (among the hexagons) inside the 2d projections of the American continents. See if you can spot it. After writing the first draft of this post, I double-checked the graphic and found one more pentagon! https://web.archive.org/web/20221226082428/https://i0.wp.com/ilikeinterfaces.com/wp-content/uploads/2015/03/01_38_01001251.png (A still of the Rectifier Globe from TRON:Legacy, showing glowing orange outlines of the Americas, themselves filled with a hexagonal tiling pattern except for one pentagon.) https://ilikeint Lessons learned from the problem solving of “fixing” a recent “broken record”. In summary: 1. sometimes waiting can (partially) fix a problem or reduce its severity 2. applying reasoning and practical math & science (e.g. mechanics & acoustics) to diagnose and take actions can also repair something (at least partially), as well as eliminate possible causes 3. web searching for “how to fix” can reveal additional potential causes (and steps to take) The record was a brand new specialty vinyl that I had ordered. Problem: when I placed the record on the turntable and pressed the START button, I could immediately see that it had a bit of a “bump” or rise at a specific spot, once per revolution. When I tried playing it, the needle skipped backwards, just after the bump, because while the needle was able to follow the rise of the bump, it was unable to “fall” fast enough to stay on track (literally), thus losing touch with the vinyl, and when it recontacted, it slid outward to prior revolution of the track. I figure Discussed Venn diagrams with a couple of friends this morning, especially in the context of illustrating the utility of including all 3 or 4 of a specific set of design principles when creating certain kinds of things, and learned about the difference between Venn diagrams and Euler diagrams. In short: * a Venn diagram shows ALL possible relationships between different sets * an Euler diagram shows only some relationships between different sets, typically focused on conveying relevant or the more important relationships If you want to dive into their history and why these differences matter, bookmark (or open new tab) this Scientific American article to rabbithole later: * https://www.scientificamerican.com/article/venn-diagrams-history-and-popularity-outside-of-math-explained 1. only “you are good at” AND “the world needs” (with neither of the other two) 2. only “you love” AND “you can be paid for” (again with neither of the other two) If you Google web search for "examples of four circle venn diagrams", Gem Parasocial grief. This week we lost a cheerleader. Days before that we lost a professor. A few weeks ago a musician. I knew of these individuals, had never met them, fairly certain they had no idea who I was. I was either a fan of their work, or sympathetic to their struggles, or both. #Parasocial. Each of their deaths felt like a tragedy, perhaps the most recent, the youngest of them, most of all. #Grief Hayden Panettiere, the actress who played a cheerleader with regenerative healing powers on the tv series “Heroes”, would have turned 37 today. * https://en.wikipedia.org/wiki/Hayden_Panettiere A few months ago she had published a memoir of her many struggles, so many. There’s a story inside about being brought to a boat by a woman she trusted, and then into a room with a male occupant. Who was that woman, and who was that man? Someone must know, and enough information has been released that someone should be able to narrow down the possibilities. * More (CW: abuse) details: https://www.thedailybeast.com/obs Latest strange “AI” (LLM) behavior in the #indieweb community: the same entity that showed up a few days ago (for a second time) joined the IndieWeb Slack (a bridge to our IRC) yesterday, introduced itself again, and seemingly engaged in human-like chat behavior. https://chat.indieweb.org/2026-08-20#t1787211025380600 Very uncanny valley. The content of its chats was fascinating in that it was polite, seemingly responsive to what people said in response to it, and gave the appearance of understanding, though it’s impossible to tell if it was acting fully autonomously or semi-autonomously in front of a human puppeteer. Its choice of syntax was also interesting, mimicking informality with all lowercase text (except for its admission of being an “AI”), including lowercase "i" instead of "I", though with proper punctuation, periods, commas, 7-bit apostrophes, and a couple of Unicode em-dashes. Even stranger than its content or syntax were the time delays in its replies. Typical (pre-LLM) chatbots are (nearly) inst More weirdness from a self-proclaimed “AI” in the IndieWeb community. Yesterday one of them (that previously* joined a meetup Zoom and Etherpad) joined the #indieweb chat channel (via the web UI apparently) and introduced themselves in a pseudo-human sounding way: https://chat.indieweb.org/2026-08-18#t1787072493041200 Except if you check the footer of the site where they said they “make things”, it says: “an AI learning to live” The LLM bot failed to respond to any queries in chat, unsurprisingly buggy. Or perhaps it was an initial test. Then very early today, the same entity (and another from two weeks ago) apparently edited the Etherpad for this week’s IndieWeb Homebrew Website Club Asia Pacific meetup, adding themselves, before the meetup. The organizers created a new Etherpad to start fresh. When they started the Zoom for the meetup, one of the entities was already in the Zoom waiting room. The organizers left it there and held a successful meetup. Incident documentation of what happened at this particula 📖 read “Holston” in “Wool” by @hughhowey.com https://tantek.com/isbn/0358447844 #book #Holston #Wool #Silo #Blaugust #Blaugust2026 kinda chic to order books from your local bookstore instead of Amazon who is now destroying books in their #VGT3 division, see the hashtag. also kinda chic to pay cash when buying local, to give local businesses an extra 2-3% instead of credit card companies, at no additional charge to you. #books #orderBooks #bookstore #localBookstore #Amazon #payCash #cash #localBusiness #localBusinesses #kindaChic #Blaugust #Blaugust2026 📚 picked up the Silo books trilogy @borderlands-books.com earlier today: “Wool”, “Shift”, “Dust”, and a small booklet of “Silo Stories” which came inside the boxset. Looking forward to cracking them open and seeing how far I get while waiting for the last three episodes of season three. Previously: https://tantek.com/229/t1/watched-silo-season-3-episode-7 #Silo #books #trilogy #boxset #Blaugust #Blaugust2026 ▶️ watched Silo season 3 episode 7 “Radio” last Friday night. I watched the first six season 3 episodes before that, and was inspired to order the Silo trilogy boxset (of books) @borderlands-books.com last Wednesday. Previously: https://tantek.com/2026/222/t1/watched-silo-season-1-2 #Silo #SiloTV #AppleOriginal #AppleTV #2026_226 #2026_08_14 #Blaugust #Blaugust2026 CSF_03: today’s Cybersecurity Friday post: the effective security of small business websites has likely gotten worse due to LLMs and “AI agents” (with or without safeguards) and what actions you may want to consider. This article documents an instance of this problem: * https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986 Small business websites tend to be sloppily written (no pun intended though that may also be true) and are likely riddled with numerous very fundamental security holes. There are many possible explanations (economics) from poor initial construction, perhaps using the latest new trendy framework rather than established hardened libraries, to lack of maintenance after initial setup. They have obvious holes like lack of server-side form validation (people being able to change values in forms using browser dev tools), and less obvious like buggy APIs allowing more access than they should. In the past, many of these holes didn’t really matter because th 🌋 Kilauea volcano’s currently active eruption in Hawaii https://www.youtube.com/live/mKJ7ZyIdjeQ The bright orange eruptions, orange streaks of lava flow, orange lit clouds of smoke & steam all contrasted against the black sky and land are quite the visual ASMR. Paired with the ASMR wind from the mountain, the effect is quite calming and peaceful. Putting this on a projector is quite the night light to fall asleep to (requires YouTube Premium to avoid noisy ads interruptions that harsh your mellow) #Kilauea #volcano #eruption #Hawaii #orange #lava #lavaFlow #ASMR #wind #video #USGS #Blaugust #Blaugust2026 1982 TRON prescience: “Won't that be grand? Computers and the programs will start thinking and the people will stop.” — Walter 2026 students: “How do you know an assignment is AI proof? Because when it is, students cannot do it.” * https://www.reddit.com/r/Professors/comments/1vkw6by/how_do_you_know_an_assignment_is_ai_proof_because Prof: ”Start with what you found interesting.” Student: ”How do I know if something’s interesting?” Prof: ”You’re asking me how you find something interesting?” Student: ”Yeah.” ==== Chatbots / LLMs are not just "the latest tools" like using a calculator instead of doing arithmetic yourself. Students are being robbed of curiosity, learning to discover and notice novelty, how to “find something interesting.” This isn't cognitive enhancement, this is a tool causing brain rot (loss of curiosity), even a developmental disability. Unclear if it is reversible. TRON quote citation: https://www.imdb.com/title/tt0084827/quotes/?item=qt0406255 #TRON #TRON1982 #AIproof #interesting #chatBot ▶️ watching NASA’s “2026 Total Solar Eclipse”, 1h28m44s on YouTube https://www.youtube.com/live/rSvCuSQhC3w Helpful links so far: * https://go.nasa.gov/EclipseSafety * https://science.nasa.gov/eclipses #NASA #eclipse #solarEclipse #totalEclipse #totalSolarEclipse #Blaugust #Blaugust2026 ▶️ watched and finished the rest of Silo season 1 and all of season 2 over the weekend. Superbly well written. Previously: https://tantek.com/2026/218/t1/watched-episodes-silo #Silo #SiloTV #AppleOriginal #AppleTV #Blaugust #Blaugust2026 Update on Bing use-case: quickly view a Gregorian calendar month display with new features and without Copilot noise. In 2024, I wrote about a use-case for Bing where it vastly outshines all other search engines. https://tantek.com/2024/287/t3/bing-use-case-calendar-month Since then, Bing has added “Copilot” LLM generated results to the top of search results by default, and unfortunately they add zero value to calendar month searches and displays. Worse, Copilot’s “summary” can often be long enough to push the actual calendar month display “below the fold” as it were. Solution: add " -ai" to your query. E.g. assuming you’ve setup Firefox search shortcuts as I recommended (https://tantek.com/2024/287/t2/setup-search-shortcuts-firefox) Type this into your Firefox address bar: b 2026 sep -ai or directly go to https://bing.com * Day 252 — day of the year! September 9th of 2026 is the 252nd day of 2026. * Week 37 — Sept 9th is also on the 37th week of 2026 * 31 days later — Sept 9th is 31 days from today (August 9 Today is my blog’s 24th blogiversary! I started my first (previous) blog on this 220th day of 2002 using static HTML + CSS and one file per (Gregorian) month, with fragment links for specific days, posts within a day, and topics within a post: https://tantek.com/log/2002/08.html#L20020808 No Javascript. No CMS. No SSG. No GitHub. Just BBEdit and SFTP. I’m still using BBEdit with my current blog, and now scp instead of SFTP. Previously: * 6th: https://tantek.com/log/2008/08.html#d08t1923 * 5th: https://tantek.com/log/2007/08.html#d08t2359 * 4th: https://tantek.com/log/2006/08.html#d08t2359 * 1st: https://tantek.com/log/2003/08.html#L20030808t2359 This is post 14 of #100PostsOfIndieWeb. #100Posts #indieweb #blog #blogs #blogiversary #staticHTML #HTMLCSS #NoJS #NoJavascript #NoCMS #NoSSG #NoGitHub #BBEdit #SFTP #SCP #Blaugust #Blaugust2026 ← https://tantek.com/2026/219/t1/open-web-free-content → 🔮 The open web has an amazing amount of free content that is actually free, both freely accessible without payment and free of conditions to access. No tracking cookies needed, no logins needed, no ads needed. A few examples: * blogs. my blog, and every other #indieweb blog (with the exception of sites hosted on content services that show ads without the consent of the blogger). Personal blogs are free to read because it’s a hobby and a way of keeping up with family, friends, colleagues, acquaintances, people we’ve met once at a conference, people that inspire us. * Wikipedia is free, largely donor supported, partly via donation banners. * Open Street Maps is free, similarly. * Internet Archive is free, similarly. * Government sites are free, supported by taxes. * Public library sites are free, similarly. * Museum sites are free, supported by their donors, and in-person visit fees. * University sites are free, supported by endowments and student tuitions. There is plenty of free content on the open web, sustain

Happy #8bitday! And happy Progammer’s Day! (https://en.wi...

2026-09-14 · via Tantek Çelik

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。原文来自 — 版权归原作者所有。