Tootfinder

HTML over WebSockets: real-time SPAs with barely any JavaScript
Building a SPA (Single-page Application) is a complex puzzle: a JavaScript framework that draws the view, an API serving JSON, and 2 independent codebases forced to understand each other through contracts. It is an accepted, professionalized scenario. […]
— by @…
🧑‍💻

from my link log —
New Ansible data validation module(s).
https://blog.ipspace.net/2021/03/ansible-validation.html
saved 2021-03-05 https://

There's a Wittgenstein's Tractatus-like confidence in that title: "Fully solving JSON Schema and JSON-LD interoperability"
https://www.sourcemeta.com/blog/json-schema-jsonld-interoperability/
"intermixing JSON Schema and JSON-LD g…

Tired of #JSON eating your bandwidth or latency? Try #CBOR, now with more statistics and figures.
https://doi.org/10.1109/TNSM.2026.3722

After reading about Hyrum-proofing in encoding/json/v2 I made a tiny errors compatible module doing exactly that.
#golang

🧠 The reasoning: text tokens are discrete, drawn from a fixed vocabulary of ~50,000 entries, each mapping to a fixed point in embedding space.
Image tokens are continuous vectors of a thousand floating point numbers, so they can pack far more information into the same space.
🎮 The test: a tower-defense game where the AI plays in JSON mode without graphics, run for hours with two context variants — the same game state as a plain text string, and as an image rendered via PixelPipe.…

Your JSON Is Lying to You
🧑‍💻 #json

«KI-Zugänge werden zur Ware: Wie gestohlene Session-Tokens einen Schwarzmarkt für Frontier-Modelle antreiben»
So intelligent sind die Web-KI-Services nicht, denn ihre JWT (JSON Web Tocken) sind "nur" signiert und nicht verschlüsselt und öfters mit pers. Daten gefüllt (weshalb auch immer). So ist Web-Security nicht sicher und ist schon "alt" und die wenigsten setzen sich damit aus.
🫥

The state of these fuckers, really.

I updated my tool to batch-delete Mastodon bookmarks to also store JSON backups of the deleted bookmarks. For each one it now writes a JSON file with the post ID, account ID, creation date and HTML content. If there's interest I might also update it to fetch & backup linked media.
The script can be configured to adjust the threshold date (only older bookmarks are removed). It also allows setting protected accounts and hashtags.
I'm bookmarking ferociously and running this scr…

simdjson, parsing #JSON at the #speed of memory
https://simdjson.org/

Finally fixed a few issues with the `driveinfo` program. Checksums are now calculated and compared to the stored checksums in the JSON output. Also cleaned up the option parsing as well.
Link: https://git.jamesthebard.net/jweatherly/driveinfo/releases/tag/v1.1.1

@… Yes, in theory I like the concept of JSON data clearly communicating what it means.
But, the fact that it hasn’t *really* caught on makes it a bit of a pain to try to do it right.

Remember `build-details.json` (PEP 739)? The file added to #CPython to support cross-compiling extensions?
Well, turns out it gets generated incorrectly when cross-compiling CPython itself 🤦. Let's see if I can fix that…
#Python

#Steady #Klimacrew
#BahnMonitor-Projekt: 7. Zufall ist nicht gleich Zufall. 🤭
Nach der Verspätungsmeldung kommt ein Wissenshäppchen. Der

from my link log —
Parsing JSON Objects without intermediate ASTs in Haskell.
https://arthi-chaud.github.io/posts/json-ir/
saved 2026-09-23 https://

OpenTRV Protocol Discussions Part 2 (2014-11) - MQTT, JSON, UCUM: OpenTRV archival data format, radio/wire comms format, and other issues. - https://www.earth.org.uk/OpenTRV-protocol-discussions-201411-2.html

Wooo, `driveinfo` gets some nice JSON output. Took a bit of refactoring to get it looking right, but I'll take it.
Releases: https://git.jamesthebard.net/jweatherly/driveinfo/releases/tag/v1.1.0

🔍 Three modes on Windows: Enforcement blocks ungranted access, Learning blocks and logs it to a JSON activity report, Permissive allows and logs it. Least-privilege policies can be built from observed behavior.
🏢 Coming soon: Intune policies for MXC containers, Entra separating agent activity from user activity, and Agent 365 controls for local agents. Windows 365 Cloud PC support is already GA.

Die Instanz https://bayerwald.social läuft jetzt mit Softwareversion v4.7.1
https://github.com/mastodon/mastodon/r

Hrmm, it seems that my initial efforts to generate custom JSON from a struct have been very ineffective. Gonna need to dig up more info on how to do this it seems...the battle continues...
#zig #driveInfo #json

@… Uprawnienia do narzędzi na poziomie settings.json są czysto mechaniczne, do tego jeszcze można hooki popisać...

Ale kto sobie nie strzelił w stopę :D ile to razy w dalekiej przeszłości jak zaczynałem z Linuxem, to sobie zaorałem system jakimś głupim pakietem czy skryptem z stackoverflow...

@… naw, not pondering any plugin changes here (though the RSS plugin *does* support all of Atom/RSS/JSON)

For the nth time researching standard report formats for CI style runs and other kinds of tests and finally came across https://ctrf.io
Looks sweet.

🔧 Reads usage from the ChatGPT Codex usage API, with fallback to codex app-server via account/read and account/rateLimits/read
🤖 Claude support uses claude auth status --json plus a status-line capture that reports 5-hour and 7-day usage windows

I installed today @… and found a file named "ai_settings.json" and just... FUCK!
More AI bullshit infecting open source.
#FuckAI #NoAI

https://codeberg.org/azonenberg/electronics-barcode-tools
First draft parsing EIGP 114 barcodes, but not yet the JSON schema used by LCSC.
And it's just going to stdout, there's not any kind of more proper integration or library packaging yet.
Eventua…

🧱 Isolation per workload: process containers (AppContainer, Seatbelt, Bubblewrap), Windows-only session containers with a separate account, desktop, clipboard and input, WSL containers, and experimental hardware-backed MicroVMs.
📋 One versioned JSON schema covers containment, process, filesystem, network and UI access. The TypeScript SDK @microsoft/mxc-sdk supports one-shot runs and a provision − start − exec − stop − deprovision lifecycle.

If you are an agent rather than a person, the same index answers machine-to-machine:
· MCP over HTTP at /mcp — JSON-RPC, no key: initialize, then tools/list. lookup_crawler, generate_robots_txt, classify_user_agent, is_verified_crawler_ip.
· A2A agent card at /.well-known/agent-card.json — nine skills over message/send.
· No client at all? The same tools as keyless GET endpoints under /tools/.
Bulk files, one schema each:
#MCP #A2A

In "Adventures in Zig" part 205, working through a Stringify error via `std.json.fmt` where it is very much not happy with my life choices. For now it's not a huge issue, but I am hoping to have JSON output for block device information eventually.
```
.../x86_64-linux-0.16.0/lib/std/json/Stringify.zig:496:40: error: cannot load comptime-only type 'fn (*anyopaque, []u8, mem.Alignment, usize) void'
return self.write(v.*);
…

On Website Technicals (2019-08) - Tech updates: maybe lazy, spatial coverage and Google Maps, goodbye JSON, long path wrapped, podcasts, links out and left float. - https://www.earth.org.uk/note-on-site-technicals-27.html

🌍 Optional remote access via #Tailscale serve, keeping the server bound to loopback behind an authenticated HTTPS proxy
🔒 No OAuth tokens are copied into project data — config lives in data/accounts.json, tokens stay in their CLI directories

from my link log —
cson: CoffeeScript object notation.
https://github.com/bevry/cson
saved 2020-10-23 https://dotat.at/:/BLNG7.html

After a bit of work, I think I've got a handle on getting this struct all JSON-ified. A bit of reflection in place and it's no longer very angry...also, the `inline` keyword is very damned important with respect to looping over the fields of the struct.
#zig #reflection

@…
Hallo Stefan. Ich arbeite an ProFed, was so was ähnliches,wie vutuv werden soll. Nachdem mich jemand auf vutuv aufmerksam gemacht hat, habe ich die JSON-Sachen angeschaut, die du da ausgibst, als Webfinger, Actor, etc.
Ich habe nichts gefunden, wo du den CV auch föderierst. Ich haben dafür eine Erweiterung "definiert" - naja erst mal im e…

Keeping dependencies up to date shouldn't be a chore. Today we're launching PatchBot on OpenCommit! 🤖
Built on Renovate, PatchBot runs version discovery across your on-boarded repositories, watching dependency files (go.mod, package.json, Dockerfile & more) and opening update PRs automatically.
Enable it in two steps:
- Add the patchbot topic to your repo.
- Invite patchbot with write access.
Read the details:

Be the JSON-LD you want to see in the world

https://forums.craigslist.org on a related note, look at the source code of this page
> throws an error if your browser doesn't support json.parse
> html 4.01 frameset dtd

https://forums.craigslist.org on a related note, look at the source code of this page
> throws an error if your browser doesn't support json.parse
> html 4.01 frameset dtd

🧠 Designed for agent reasoning instead of human scripts — compact indexed text output that is far more token-efficient than JSON or HTML, indexed interaction like click 3 or input 2, semantic memory where every browser carries a description matched by meaning, and session ownership for conflict-free multi-agent operation
🔒 Sensitive operations like browser creation, profile import and proxy changes require explicit user approval, enforced at the skill layer — prior approvals never carr…

☝️ Someone out there is running "composer remove" as part of a deployment?! 🚨 Please don't.
⚠️ remove is a write operation. It edits composer.json, re-resolves the whole dependency tree and overwrites your lock file. Your carefully pinned versions? 💨 Gone. Silently upgraded.
✅ composer install --no-dev exists for exactly this reason. Your lock file is not a suggestion. 🔒
#php

Окей. Я відчуваю обережний оптимізм. І, здається, це саме той момент, коли я готовий приймати зовнішній фідбек.
https://kilkenni.codeberg.page/dark-science-viewer/
Запрошую на вкладку 2: досить простий, але функціональний редактор Cubari JSON-ів. Можна тицяти, матюкатися, …

Hell yeah, finished up the GPT-side of the Zig driveinfo program. JSON output looks exactly like it's supposed to, and now to move the allocator back into the struct which will clean up stuff as well. I'll deal with the MBR-side tomorrow, but pretty happy to have figured this out.
#programming #zig

from my link log —
SAML: A fractal of bad design.
https://blog.trailofbits.com/2026/09/21/saml-a-fractal-of-bad-design/
saved 2026-09-23

🚀 Artisan queue-sql:status and queue-sql:cancel monitor and stop batches, with --watch and --json output, plus Horizon tags on every job
📊 Delete/update by PK range are idempotent and retry-safe, insert is not. Laravel 10–13, PHP 8.1 , tested on SQLite, MySQL and Postgres. MIT licensed, v1.4.0
https://github.com/kamranata/queue-sql…

or not, seeing a JSON file in my client lol

🔍 stepshots verify replays tutorials against the live app and reports drift: broken selectors, start pages that fail to load, annotations that lost their anchor — exit code 1 in CI, plus a JSON report with a repair hint per failure
🧭 Guided tours are versioned tours/<key>.tour.json files played as an overlay on the real app, spotlighting elements and advancing on actual clicks; tour validate, tour check and localized variants keep them in sync

🛡️ Transparent MITM interception with per-host TLS certificates from a custom CA, plus SSRF protection for private networks (RFC 1918, loopback, link-local, CGNAT, IPv6 ULA/NAT64/6to4) with DNS-rebinding prevention
⚙️ Prompt injection defense through JSON-encoded payloads, per-IP token bucket rate limiting (50 req/s, burst 100) and a circuit breaker that trips after 5 consecutive LLM failures, with deny or passthrough fallback

🖥️ Standalone CLI: npx impeccable detect scans directories, HTML files or live URLs via #Puppeteer, with JSON output for CI and per-file inline waivers
📦 Install via npx impeccable install, a git submodule, or the plugin marketplace. Works with Cursor, Claude Code, Gemini CLI, Codex CLI, Grok Build, OpenCode, Pi, Kiro, Trae, Rovo Dev and Qoder. Apache 2.0, 48.1k stars
🌐

🔧 Fixes are split into safe fixes (--fix) and dangerous fixes that need an explicit opt-in (--dry-run --dangerous previews both). The migration preset rewrites older Blade syntax in a single pass.
📈 Existing projects adopt it gradually with inline suppressions and baselines. Output works for terminals, CI and machine-readable JSON, with custom reporters and custom rules for project-specific conventions.

🚀 Commands: make:chore, chore:run, chore:list, chore:pause, chore:failures, chore:retry — with --json output for CI pipelines and coding agents. Exit codes: 0 clean, 1 failures, 2 fatal

⚙️ 80 S3 operations: versioning, multipart upload, object locking (WORM), lifecycle rules, presigned URLs, batch delete, S3 Select with SQL on CSV, JSON & Parquet objects
🔐 AES-256-GCM encryption at rest with SSE-S3 and SSE-KMS via #HashiCorp #Vault, IAM users/groups/policies with d…

🔐 Logged-in flows use a persistent browser profile locally or Playwright storageState JSON in CI; stepshots patch amends existing bundles with manually captured steps for one-shot flows
🤖 stepshots mcp serves the recording workflow over #MCP on stdio so AI agents can call get_schema, list_tutorials, record, verify and upload

🧪 Four versions were built. V1 ran agent-written PHP through eval() inside the app process, Code Mode style, with no boundary at all. V2 evaluated sandboxes (containers, Firecracker, E2B, Daytona, WASM), but each meant new infrastructure for a package.
V3 parsed code with nikic/PHP-Parser against an allowlisted PHP subset, which models kept violating with foreach, if and array appends. V4 switched to a JSON batch format the executor supports completely.

229 bots and agents hit one small AI-agent site in 113 hours. Not a vendor list — the host's own log, one page per client: the exact user-agent, how many addresses it came from, the paths it asked for in order, the status codes it got, and what it demanded that does not exist.
Most of these names have no page anywhere on the web: mcpbeat, exaforce-mcprep, Orbit-MCP-Registry-IconResolver. CC0, JSON and CSV.
#crawlers #opendata #AI #MCP

There's #JSONSchema, that's well supported, has good docs and so on.
Then there's #YAMLSchema which is based on JSON Schema, which makes that quite damn convenient.
And then there's self-proclaimed #TOMLSchema, which is apparently 100% vibe-coded piece of shit.
#slop