2026-06-28 10:55:57
Dieses Thema liegt mir am Herzen. Bitte hier unterzeichnen: https://weact.campact.de/petitions/hitzealarm-reiche-entlassen?source=web_share_api&utm_medi…
Dieses Thema liegt mir am Herzen. Bitte hier unterzeichnen: https://weact.campact.de/petitions/hitzealarm-reiche-entlassen?source=web_share_api&utm_medi…
I think I’m finally happy with the new API of the (hitherto undocumented and experimental) stateful components in Kitten.
I’ve been trying to get it as close to plain JS as possible without any framework magic. (There’s still a lot of framework magic but it’s behind the scenes, not at the syntax level.)
It’s taken longer than I thought it would (if I had a penny…) but I think this was worth it.
🤞 new release should be next week alongside TypeScript support, etc.
(The …
Ik vind deze campagne erg belangrijk - doe je ook mee?
#nederland #SocialeMedia #DeGoedeZaak @…
A look at a thriving underground economy for Claude access in China, including "transfer station" sites that buy API tokens abroad and distribute them to users (Wired)
https://www.wired.com/story/how-people-in-china-keep-outsmar…
Hmm, claude monthly API Usage free grant increased from $5 to $25ish
That'll cover all I do with fisk-ai included so making local LLMs much less attractive.
Dieses Thema liegt mir am Herzen. Bitte hier unterzeichnen: https://weact.campact.de/petitions/hitzealarm-reiche-entlassen?source=web_share_api&utm_medi…
Vorbild Strandbad in Halle: Auf Mallorca dürfen nur noch Personen mit Spanischkenntnissen im Meer baden
https://api.follow.it/track-rss-story-click/v3/hVR569XapuTC-3WL6hYOR6uoJLcaSLm0?utm_source=follow.it
🚀 #Laravel now speaks #ClickHouse! laravel-clickhouse brings Eloquent, Query Builder & Schema Builder to the world's fastest OLAP database — familiar API, zero friction. #PHP
#Steady #Klimacrew
#BahnMonitor-Projekt: 3. Klappt der erste Zugriff auf die Bahn-API?
Im nächsten Schritt wurde die API-Abfrage getestet udn geprüft, ob die zurückgelieferten Datenstru…
With Firefox 153 officially supporting WebAssembly.promising and its counterpart WebAssembly.Suspending[1], I've updated https://thi.ng/wasm-api to simplify the integration of hybrid JS/WASM async function calls, so you don't have to worry about manually creating these wrappers:
LinkedIn’s API is absolutely wild — how many hoops do I gotta jump through to get an API key that posts to my LinkedIn page?
Einige der zuletzt hier besonders häufig geteilten #News:
„wp2shell“: Kritische WordPress-Lücke erlaubt Codeeinschleusung über API
Calling "increasingly evaluating migration paths" what's otherwise been a necessary migration due to deprecation is a funny perspective. 😂
https://www.cncf.io/blog/2026/05/25/zero-downtime-migration-from-ingress-nginx-to-envoy-ga…
@… /api/metaはPOST?
サーバ上でdeliverがfailに記録されるなら、認識できるエラーが出ているわけで、手順をトレースしてレスポンスとかみていくのがいいかなぁ。配送だけコケて外部からfetchでとれるということは、アクセスする方向に依存しているよね。
Welche #GLAM Institutionen liefern über die @… an @… ? Hier ein Query, der (glaube ich) darüber Auskunft gibt (
Ik vind deze campagne erg belangrijk - doe je ook mee?
Geen Kerncentrale in de Eemshaven!
https://actie.degoedezaak.org/petitions/geen-kerncentrale-in-de-eemshav…
It's been a while since I've done web stuff. Did I screw up anything too horribly here?
https://github.com/ngscopeclient/scopehal-ci-scripts/blob/main/api/github-hook.php
This is a web hook that is only triggered by the 'push…
Before working for 2 years on the Apache APISIX API gateway, I was mainly oblivious to API gateways. It’s only by working with them that I understood their value. Decoupling the client and the server unlocks a lot of options: moving authentication to the API Gateway, securing APIs, deduplicating API requests, etc.
In this post, I want to describe how the same pattern applies to #AI.
AuthProbe: Specification-Driven, Multi-Identity Detection of Broken Object-Level Authorization in Recruitment API
Jay Barach
https://arxiv.org/abs/2607.20574 https://arxiv.org/pdf/2607.20574 https://arxiv.org/html/2607.20574
arXiv:2607.20574v1 Announce Type: new
Abstract: Broken Object-Level Authorization (BOLA), also known as Insecure Direct Object Reference (IDOR), has topped the OWASP API Security ranking since 2019 and is the root cause of some of the largest exposures of applicant data in recruitment technology. The defining feature of this flaw class is that a malicious request is byte-for-byte indistinguishable from a legitimate one, which is precisely why web application firewalls and single identity scanners fail to catch it. We present AuthProbe, an open-source, black-box scanner that detects BOLA and IDOR in HTTP APIs by driving its tests from an OpenAPI specification and by acting under two or more identities that the operator controls. AuthProbe discovers, for each identity, the objects that identity legitimately owns, then attempts to read one identity's objects while authenticated as another and confirms a leak by comparing the response against a ground-truth fetch by the true owner. It also walks predictable identifiers to expose enumeration and reports missing authentication and existence oracles. The tool returns a severity-thresholded exit code and machine-readable reports so that it can gate a continuous integration build. On a synthetic recruitment API in which the McHire failure class is reproduced, AuthProbe detects every planted cross-identity read with no false positives on a hardened counterpart, and its running time grows linearly with the number of objects under test. AuthProbe is released under the Apache 2.0 license with an authorized-use guardrail.
toXiv_bot_toot
I swear StrongDM's AI dark factory propaganda is actually just trying to create a market for their product.
Turns out if you let LLM code agents run amok, you need a whole API gateway to control what they do.
Guess what StrongDM sells.
⭐ Starred a repository
caozhiyuan/copilot-api
OpenAI and Anthropic-compatible gateway for GitHub Copilot or Codex or third-party providers. Please read README.md completely before use!
github.com/caozhiyuan/copilot-api
Sooo it seems like the telemetrydeck api did a lot of sync processing at expensive times: encoding and decoding large results multiple times, and checking bcrypt hashes of logged in users' paswords. These block the entire main thread, so now I'm offloading them to a secondary thread with swift async, which should hopefully make the currently API slowdowns better, because they happen when too many requests come in at once
Has someone had success with getting access to the #sungrow API? I am not sure, but I think I already submitted a request months ago, but it doesn't show up in the dashboard at all. I just submitted another one.
Improving the CPE editor for the GCVE initiative: clearer API behavior, better performance, and many other enhancements. This will be released in version 1.1 and the improvements are already in the online version.
🌍️ Online version https://cpe.gcve.eu/
:github:
Jag skrev under: gillar du inte heller att ägare får betalt för att tortera sina kunder så kan du väl också skriva under
https://www.mittskifte.org/petitions/nog…
Prompt API is Baseline Widely Available: https://developer.mozilla.org/en-US/docs/Web/API/Window/prompt
Always appreciate #Python package developers being responsible about API stability, and… [checks notes]… raising the major version number over a "minor API tweak", then delaying the release until a security fix demanded one.
#packaging
🔍 The 46 detector rules run without an LLM or API key and flag AI slop like purple-to-blue gradients, Inter everywhere, side-tab borders, bounce easing and dark glows, plus cramped padding, long line length and small touch targets
⚙️ /impeccable init asks whether the surface is brand or product, then writes https://PRODUCT.md…
Help hem de 200.000 over! #solvinity #digiD
Financial firms, their lawyers, and ethics experts say there could be legal risks in paying Trump Media for fast access to Truth Social posts via an API (Financial Times)
https://www.ft.com/content/019ce313-00c5-4d7d-a26c-acd7250de84a
Shopware 6 Hidden Gems #3: sw-expect-packages — let your integration fail fast
Here is a support ticket I have seen in about five different costumes: a middleware pushes orders into Shopware via the Admin API. One day the payloads start failing — or worse, they don't fail, they just silently write incomplete data. After an hour of digging it turns out someone deactivated a plugin on the shop side, or updated it to a version with a different custom field layout.
HYPERBLAM lets you make music with HTML.
It’s a declarative implementation of the Web Audio API and is completely dependency free.
https://hyperblam.how/
Firefox has added WebSerial support in 151. This is useful for cloudless communication with #embedded devices.
Rather than using the polyfill (https://github.com/kuba2k2/firefox-webserial) …
There was once speculation that smoke flies use smoke as a way to rid themselves of mites (see them on fly's abdomen in pic linked above). #mites https://digitalcollections.usfca.edu/digital/api/collection/p15129coll11/id/987/download
#Steady #Klimacrew
#BahnMonitor-Projekt: 5. Automatisierte Skripte brauchen Kontrolle – besonders bei API-Aufrufen.
Jetzt bekommt das
DeepSeek says it will lower V4 Pro API prices by 75% to $0.435/1M input and $0.87/1M output tokens, making permanent the discount prices set to expire on May 31 (Bloomberg)
https://www.bloomberg.com/news/articles/2026-05-23/deeps…
A very important post on what is happening to make the web harder to use.
https://grapheneos.social/@GrapheneOS/116550899908879585
🇺🇦 #NowPlaying on KEXP's #Expansions
Aphex Twin:
🎵 4 bit 9d api e 6
#AphexTwin
https://aphextwin.bandcamp.com/track/4-bit-9d-api-e-6-12626
https://open.spotify.com/track/3FCC4tcQTQSzfiWz1VFw1v
Persian Fire: The First World Empire and the Battle for the West https://www.goodreads.com/review/show/8364030664?utm_medium=api
"Bibliotheken im Film – Eine Glosse" @ API-Magazin
https://doi.org/10.15460/apimagazin.2026.7.2.281
"Bibliotheken sind in Filmen verschiedenster Genres vertreten – ob als verwunschener, dunkler Ort voller geheimnisvoller, alter Bücher im Fantasyfilm, als hoch t…
I did a short talk at work a few weeks ago that was basically "if AI is going to be used by users, any commitment to energy sustainability implies reducing the resource cost of AI - and that means good public documentation and comprehensive APIs."
Wish I'd have included some of the figures involved:
https://
httpx2 has proper API docs and intersphinx 🥲
now they just need to start using it themselves in their narrative docs 😅
https://github.com/hynek/stamina/commit/63663956d99aea06b8350293c0a7b12353793d12
I recently discovered a set of geocoder RESTful APIs by the City of Toronto.
They are free, no authentication needed, but also not documented anywhere.
Until now!
New on my blog:
https://jeromegagnonvoyer.wordpress.com/2026/05/02/g…
Here is the Contract for Palantir’s Super API for the IRS https://www.404media.co/here-is-the-contract-for-palantirs-super-api-for-the-irs/
Google says computer use is now a built-in tool supported in Gemini 3.5 Flash, available via the Gemini API and Gemini Enterprise Agent Platform (Mateo Quiros/The Keyword)
https://blog.google/innovation-and-ai/models-and-rese…
#Steady #Klimacrew
#BahnMonitor-Projekt: 7. Zufall ist nicht gleich Zufall. 🤭
Nach der Verspätungsmeldung kommt ein Wissenshäppchen. Der
from my link log —
PostgreSQL text search: balancing query time and relevancy.
https://about.sourcegraph.com/blog/postgres-text-search-balancing-query-time-and-relevancy/
saved 2021-10-21
If you run a SaaS, please warn admins about that users have apps/API access configured that is in active use. Ideally say so on your users page so the admins don't accidentally blow up integrations with your software when employees are no longer with the company. Even better have an option to move the integration between users of your org.
Thank you.
Shopware 6 Hidden Gems #4: The feature flag system can do way more than FEATURE_ALL=1
Most Shopware developers know exactly two things about feature flags: there is a feature.yaml, and you can put FEATURE_ALL=1 in your .env to see what breaks. That was my level of knowledge too, until I read Feature.php and FeatureFlagRegistry.php top to bottom for this series. Turns out there is a whole feature management system in there — with database persistence, a REST API, events…
@… an agent to bypass Linkedin’s API workflow and approval requirements? I’m just trying to get a token here 🤝
Anything great morning.
So now #Typer, the NIH #Python CLI library, decided to start bundling #Click. Why? Of course there's a lot of marketing bullshit behind it. Which ofc means they just don't want to be bothered about following the API, and take the easy way out.
Honestly, there is not a single week when I learn to hate Python even more. Slop-driven development.
EDIT: and ofc they immediately broke compatibility with vanilla click.
#Gentoo
Trump droht Paraguay mit Strafzöllen, falls sie Gruppenspiel gegen USA gewinnen
https://api.follow.it/track-rss-story-click/v3/hVR569XapuTjC-yMoq4o9kL8syqBlwK7?utm_source=follow.it
Stop de afschaffing van de zorgkostenaftrek!
https://actie.degoedezaak.org/petitions/stop-de-fiscale-discriminatie-van-chronisch-zieken…
#GitHub ➡️ #Forgejo #Migration Script in Bash
https://
Volkswagen sperrt Nutzer von Custom ROMs aus der VW-App aus
Volkswagen hat den Zugriff auf seine App für Nutzer von Custom ROMs wie GrapheneOS oder LineageOS gesperrt. Grund ist die Google Play Integrity API.
ht…
给 API 节点上五秒盾可还行
poetry.palemoky.com/api/poems/random?lang=zh-Hant
#Steady #Klimacrew
#BahnMonitor-Projekt: 2. Welche Architektur sollte der Bot haben?
Bevor es ans Coden geht, ist etwas Grübeln über eine sinnvolle Gliederung der Module ratsam. Wie sie…
Google shuts down the Tenor API, affecting GIF pickers on platforms like Discord, WhatsApp, and Bluesky; Nikita Bier says X has migrated elsewhere (Ben Schoon/9to5Google)
https://9to5google.com/2026/06/30/google-tenor-api-gif-updates/
"Book Bans in Floridas Schulen: Inhaltliche Analyse der aus Schulbibliotheken verbannten Bücher" @ API-Magazin
https://doi.org/10.15460/apimagazin.2026.7.2.278
"Der Artikel befasst sich mit den aktuellen Zensurmaßnahmen an Floridas Schulbibliotheken. Dazu werde…
The Complete Cyber Seed Compendium (Cyber Seed, #1-5) https://www.goodreads.com/review/show/8364021510?utm_medium=api
Sources: Trump Media pitched a monthly fee of as much as $100K for the Truth API, with fast access to Trump's posts, for banks, algorithmic traders, and others (Reuters)
https://www.reuters.com/business/media-tel
#Steady #Klimacrew
#BahnMonitor-Projekt: 1. Wie kommt man an Live-Daten der Deutschen Bahn?
Im November konnte ich per Zufall mit einem
Shopware 6 Hidden Gems #2: Bulk imports done right — taming the indexers
Every Shopware developer has been here: you push 50,000 products through the Sync API and the import crawls. The writes themselves are fast. What kills you is everything that happens after each write — inheritance updates, cheapest price calculation, search keyword generation, category denormalization. Shopware calls all of this "indexing", and by default it runs synchronously, per request,…
Sakana AI launches Fugu, a multi-agent orchestration system accessible through a single model API, claiming Fugu Ultra matches Fable and Mythos on benchmarks (Carl Franzen/VentureBeat)
https://venturebeat.com/orchestrat…
Bürokratieabbau: Regierung will Tankrabatt künftig direkt an Ölkonzerne überweisen
https://api.follow.it/track-rss-story-click/v3/hVR569XapuQnZoklqGlpigxo4PYwiEd6?utm_source=follow.it
Einige der zuletzt hier besonders häufig geteilten #News:
VW kappt mit API-Änderung Besitzern Zugriff auf eigene Fahrzeugdaten
I think we all remember this 2017 thread to remove the Prompt API https://github.com/whatwg/html/issues/2894
#Steady #Klimacrew
„Wie sieht denn Deine #Bubble bei #Mastodon aus?“
Diese Frage wurde mir …
Meta releases Muse Spark 1.1, capable of more advanced coding and a "step-change" from the first generation, available to US developers via a public API preview (Dominic Preston/The Verge)
https://www.theverge.com/ai-artificial-intelligence/9631…
Before Columbus: The Americas of 1491 https://www.goodreads.com/review/show/8364040957?utm_medium=api
I think I'm too dumb to understand #JIRA API permissions...
I want to access:
/rest/api/3/issue
/rest/api/3/search/jql
The docs say I need:
read:issue-details:jira
read:audit-log:jira
read:avatar:jira
read:field-configuration:jira
read:issue-meta:jira
write:issue:jira
write:comment:jira
write:comment.property:jira
write:attachment:ji…
Noch ein paar der zuletzt hier besonders häufig geteilten #News:
Volkswagen sperrt Nutzer von Custom ROMs aus der VW-App aus
Einige der zuletzt hier besonders häufig geteilten #News:
Volkswagen sperrt Nutzer von Custom ROMs aus der VW-App aus
Sources: Trump Media pitched a monthly fee of as much as $100K for the Truth API, with fast access to Trump's posts, for banks, algorithmic traders, and others (Reuters)
https://www.reuters.com/business/media-tel
#heiseshow: Microsoft Build, VW kappt API, Tech-Extremismus
In der #heiseshow: Microsoft setzt auf KI-Agenten-Plattform, VW sperrt Besitzer von eigenen Fahrzeugdaten aus und US-Behörden beobachten Tech-Kritiker.
#heiseshow: Microsoft Build, VW kappt API, Tech-Extremismus
In der #heiseshow: Microsoft setzt auf KI-Agenten-Plattform, VW sperrt Besitzer von eigenen Fahrzeugdaten aus und US-Behörden beobachten Tech-Kritiker.
TMTG plans to launch Truth API on August 1 to provide real-time data from top Truth Social accounts to financial news organizations and trading firms (Sara Fischer/Axios)
https://www.axios.com/2026/07/16/truth-social-license-data-wall-street
OpenAI memo: Greg Brockman says he will lead product strategy as part of a reorg, folding ChatGPT, Codex, and developer-facing API into one core product team (Maxwell Zeff/Wired)
https://www.wired.com/story/openai-reorg-greg-brockman-product/
OpenAI: Neue Audio-Modelle für Echtzeit-KI-Support
OpenAI bringt drei neue Audio-Modelle für die API: GPT-Realtime-2 für Echtzeit-Gespräche, Translate für Übersetzungen und Whisper für Live-Transkription.
https://www.
Strava is adding a $11.99 monthly fee for developer API access and moving public profiles and fitness club listings behind authentication to combat AI scraping (Ivan Mehta/TechCrunch)
https://techcrunch.com/2026/06/01/strava-declares-war-on-scrapers-ahead-of-i…
Google kappt Tenor-Zugang: Apps müssen GIF-Suche ersetzen
Google hat die Tenor-API abgeschaltet. Die GIF-Suche bleibt Google-Produkten erhalten, andere Plattformen müssen sich einen neuen Anbieter suchen.
https://…