Tootfinder

JSON-LD Explained for Personal Websites
#SEO

from my link log —
An exploration of JSON interoperability vulnerabilities.
https://labs.bishopfox.com/tech-blog/an-exploration-of-json-interoperability-vulnerabilities
saved 2021-02-25

An Exploration & Remediation of JSON Interoperability Vulnerabilities
Learn more about how the same JSON document can be parsed with different values across microservices, leading to a variety of potential security risks.

➡️ robida/human.json: A lightweight protocol for humans to assert authorship of their website content and vouch for the humanity of others
https://codeberg.org/robida/human.json
(This is a link from my bookmark collection. A new link gets posted each night.)

human.json
A lightweight protocol for humans to assert authorship of their website content and vouch for the humanity of others.

#Steady #Klimacrew
#BahnMonitor-Projekt: 7. Zufall ist nicht gleich Zufall. 🤭
Nach der Verspätungsmeldung kommt ein Wissenshäppchen. Der

Python-Projekt mit Bahn-API: 7. JSON-Wissenshäppchen: Zufall clever gemacht
So ergänzt dein Python-Bot Mastodon-Posts mit JSON-Wissenshäppchen – zufällig ausgewählt und fair rotiert.

Meine Güte, was ist denn mit #FreeTube los?
Alle Abos mit der .json Datei importiert und wenn ich die aufrufen möchte gibt es immer die Meldung:
TypeError: Cannot read properties of undefined (reading 'author')

#ReleaseDay https://thi.ng/column-store is an in-memory database with customizable column types, extensible query engine, bitfield indexing for query acceleration, JSON serialization with optional RLE compression.

In-memory column store database with customizable column types, extensible query engine, bitfield indexing for query acceleration, JSON serialization with optional RLE compression

#superproductivity app is great. There aren't many apps I can run on my locked down computer at work. But this one is possible to sync via webdav so I installed a minimal webdav just to syncronize the json and md file the app generates. It work flawlessly! I have finally found a way to take my todo's between work and home.
Age makes remembering things more and more tr…

Only for people with their own personal site: Do you have a human.json on your website?
https://codeberg.org/robida/human.json
My reason for asking is I'm making a blogging site for myself and while looking at other blogs for inspiration I came across it.

from my link log —
The order of the JSON.
https://blog.almaer.com/the-order-of-the-json/
saved 2019-08-16 https://dotat.at/:/J5LA…

The Order of the JSON
When I read Fitz’ tweet about ordered JSON my body shuddered, as my brain was flooded with a past experience that taught me a frightening lesson on technology being used by non-technical comp…

Playing with CSAF 2.1 CSD02 and GCVE extensions.
https://discourse.ossbase.org/t/csaf-and-gcve-bcp-05-extensions/1093
I think more and more that having GCVE extension on all vulnerability standard format makes much more sense nowadays.

CSAF and GCVE BCP-05/extensions
We had a quick discussion about the use of CSAF in GCVE and especially about BCP-05 (if we stick with CVE record format or going for something more versatile). In order to review, what’s possible, we did a quick extension for CSAF 2.1 CSD available at https://gcve.eu/schema/csaf/extensions/gcve-bcp-05-x-01_1.0.0.json and we tested a conversion of the GCVE enriched CVE dump It’s still in very early stage. We also mention it to the CSAF OASIS TC.

🖥️ Standalone CLI: npx impeccable detect scans directories, HTML files or live URLs via #Puppeteer, with JSON output for CI and per-file inline waivers
📦 Install via npx impeccable install, a git submodule, or the plugin marketplace. Works with Cursor, Claude Code, Gemini CLI, Codex CLI, Grok Build, OpenCode, Pi, Kiro, Trae, Rovo Dev and Qoder. Apache 2.0, 48.1k stars
🌐

Been getting these random #npm issues lately 😕
Scenario: dependency has optional peer dep that installs pre-built binaries based on current OS. I npm install it on macOS, it gets the macOS binaries & put it as non-optional dep in package-lock.json. CI runs on Linux, it got confused & failed installation. And npm ci doesn't skip incompatible peer deps.
Relevant issues:
- …

I just thought it *might* be possible to get some sweet JSON out of LLVM, and lo and behold - this works:
```sh
llvm-readobj --demangle --stack-sizes --elf-output-style JSON
```
BOOM!
Now I can process this easily, do not need custom line-by-line parsers that would just be prone to error and exploding arbitrarily.

cssQuake 👹
A port of id Software's Quake that renders BSP worlds as real HTML/CSS 3D geometry through PolyCSS, without a WebGL or canvas renderer. cssQuake preprocesses original Quake data into browser-ready JSON, image assets, and PolyCSS render bundles, then runs the game in TypeScript.
🕹️ https://cssquake.com

cssQuake - Play Quake in Your Browser
Play Quake in your browser with no install. cssQuake renders the game as inspectable HTML and CSS powered by PolyCSS.

On Website Technicals (2019-08) - Tech updates: maybe lazy, spatial coverage and Google Maps, goodbye JSON, long path wrapped, podcasts, links out and left float. - https://www.earth.org.uk/note-on-site-technicals-27.html

On Website Technicals (2019-08)
Tech updates: maybe lazy, spatial coverage and Google Maps, goodbye JSON, long path wrapped, podcasts, links out and left float.

I run 30 Docker containers and kept forgetting what was running where. So I built Cyberboard - a self-hosted dashboard with live health checks.
- Green/red status dots for every service
- Server-side checks (HTTPS, self-signed certs, auth)
- Built-in editor, drag-and-drop, emoji picker
- Tutorials, scratchpad, search, dark/light theme
- Single JSON file, no DB
- Python stdlib Preact, no build step

JSON Lines
https://jsonlines.org/

Every time that "json" is mentioned in one sentence with a Lisp (machine), a fairy dies.
Sorry for killing two fairies here, please try not to boost! 💕
#emacs
#emacsJsonRpc
#json

@… KeepassXC has an option to import a Bitwarden database. Datebase, Import, Bitwarden (.json).

⚡ Three scan profiles: baseline (global packages extensions, lightweight), project (dev dirs like ~/code), and deep (on-demand incident checks across broad roots like $HOME). Cadence is your runner's job.
🎯 Feed it an exposure catalog (simple JSON: ecosystem package versions) and Bumblebee flags exact matches across your fleet. The threat_intel/ dir ships with maintained catalogs from real supply-chain campaigns.

#RFC 9880 and the #IoT #Validation Problem: From Standards Fragmentation to a Device-Model Compiler by guest author Stefano Fago

Today the good people of the world commemorate the passing of Google Reader thirteen short years ago on July 1, 2013.
To honor their memory (and in lieu of flowers) please add an RSS, Atom, JSON or equivalent feed to your web site and keep building towards a web that connects people in meaningful and positive ways.

Another related demo, but this time using Grok as the AI Agent that generates RDF-Turtle from its own description of my session with Scoble.
Naturally, the RDF-Turtle could easily have been JSON-LD etc..

The Java Geek Weekly special "pneumonia during a heatwave" 🥵🤒 edition is out.
Get it before it's too late!
https://blog.frankel.ch/java-geek-weekly/142/

Arcaneum 0.7.0 is out
https://github.com/cwensel/arcaneum/releases/tag/v0.7.0

Release v0.7.0 · cwensel/arcaneum
Features corpus: improve corpus list display (40b8c24) cli: expose model catalog policy (c1b4ed1) cli: show corpus sync metadata in list (e596cb9) cli: add global json output mode (30f2636) cli: a...

Chow segmentation
The Chow test can identify structural breaks in a timeline, when they happen and how significant they are.
https://www.belle-nuit.com/sql-notebook/index.html?url=../site/files/chow-segmentation.json

"Fucking pretty print!" - My wife, while we're exploring a new webshop together through the same account, and somehow she is getting JSON for random pages instead of the actual page 🤣

currently obsessing a bit over config languages (again). it's been endless source of awkward problems in previous jobs
I think I have a set of ideas that are compelling enough to be worth pursuing, but I don't currently have a thing that needs a config language, and it feels unwise to develop it in a vacuum
(equivalent to json/yaml/toml, but slightly more powerful. less powerful and much simpler than .bzl or .hcl or .pkl, but it should be good for like 95% of normal confi…

This release includes a major new feature: a graph visualisation for the MISP standard and STIX format, making it easier to explore, understand, and present CTI data structures directly from JSON.
CTI Transmute is an online service available at cti-transmute.org and also an open source project availabl…

from my link log —
New Ansible data validation module(s).
https://blog.ipspace.net/2021/03/ansible-validation.html
saved 2021-03-05 https://

New Ansible Data Validation Module(s) « ipSpace.net blog
A few months ago I described how you could use JSON Schema to validate your automation data models, host/group variable files, or even Ansible inventory file. I had to use a weird toolchain to get it done – either ansible-inventory to build a complete data model from various inventory sources, or yq to convert YAML to JSON… and just for the giggles jsonschema CLI command requires the JSON input to reside in a file, so you have to use a temporary file to get the job done.

☸️ Kubernetes — k8s.verb / resource / namespace / name. Deny delete secrets, allow get pods only in dev.
🌐 HTTPS — match on http.method, path, headers & body_json. The body is parsed once for JSON endpoints, so you match on payload fields, not just shape.
🙋 Human-in-the-loop approvals for risky actions — defer kubectl apply -f production to a #Slack approval before the request le…

Guest author Stefano Fago is on a roll. Today, he wrote about Making ServiceLoader usable with a provider factory.
#java

or not, seeing a JSON file in my client lol

I still don’t understand why some bots try to enumerate everything via the Vulnerability-Lookup API when full dumps, including all metadata, are available in one shot:
https://vulnerability.circl.lu/dumps/
We currently don’t rate-limit bots, but we’re close to doing so.

Bike to work, low-intensity run at lunch, bike from work, and publish the Java Geek Weekly.
What a cool day 😊
https://blog.frankel.ch/java-geek-weekly/137/

Working on tempolocus, a tool that analyses time-series activity patterns to infer a user’s likely location.
In @…, we work with a large volume of social-network time series. Estimating users’ locations from these patterns is often a manual task.
I prototyped a Python module that combines potential locations with yearly activity …

🧠 The reasoning: text tokens are discrete, drawn from a fixed vocabulary of ~50,000 entries, each mapping to a fixed point in embedding space.
Image tokens are continuous vectors of a thousand floating point numbers, so they can pack far more information into the same space.
🎮 The test: a tower-defense game where the AI plays in JSON mode without graphics, run for hours with two context variants — the same game state as a plain text string, and as an image rendered via PixelPipe.…

from my link log —
A bidirectional typechecking puzzle in the Grace programming language.
https://haskellforall.com/2026/05/a-bidirectional-typechecking-puzzle
saved 2026-05-05

A bidirectional typechecking puzzle
Type inference challenges for real-world JSON

🎯 Core systems already work: query planner, buffer cache, storage engine, B-tree indexes, wire protocol (psql connects), JSON/JSONB, window functions, foreign keys, EXPLAIN / EXPLAIN ANALYZE, regex, PL/pgSQL pieces, and standard SQL with transactions, aggregates and joins.

SQL Notebook persistance with IndexedDB https://www.belle-nuit.com/sql-notebook/index.html?url=../site/files/persistance-with-indexeddb.json

The man from Oracle says they are making databases more AI. Support for vectors in the db and systems to ensure secure access for agents.
He wants to encourage us to use one big (Oracle) db instead of lots of caches and nosql databases. The ai prefers thst, he reckons.
Oracle is like a smart phone. It can do everything. No need for separate devices for music and notes and whatnot. It can even do json now. And vectors.
Data privacy is often done at the app layer, which means a rogue ai could generate SQL to bypas that. So do access control in the db direftly. Which is probably better even without ai honestly. This 'deep security' might work well.
Ai is happier , according to the man from Oracle, if it just has one Oracle db without competitors software at all.
Fancy that.
#devWorld

How Did #REST Come To Mean The Opposite of REST?
https://htmx.org/essays/how-did-rest-come-to-mean-the-opposite-of-rest/

Sort function in PostScript
https://www.belle-nuit.com/sql-notebook/index.html?url=../site/files/sort-function-in-postscript.json

MCP stands for Model Context Protocol and is a api for agents. Storyblok has made their api into an MCP and Bernhard is here to tell us about that from the context of a psychologist.
Storyblok is a Content management system which can now have agents mess with it for you.
MCP standard connects agents to external systems. An mcp server runs to enable that.
Isn't the agent smart enough to use the api?
Well, they need documentation to figure out how anyway, so MCP rolls that in I guess? Avoid filling the context window with api docs.
Overlay specification from openapi let's you describe the api with a json doc.
The agent can query the server to search for commands, get the spec for the one they want, then call it.
"Skills" are troublesome because they gry loaded to dev machine and never updated. MCP stuff downloaded live on demand.
There exist tools to convert a rest apt to MCP but they apparently fail often because the machine ideally wants something different to a rest api.
#devWorld