If I do say so myself, I do love expressive I can be with Kitten.
This is me injecting raw HTML markup into a Markdown code block in a Kitten Markdown page to highlight specific lines in a code block¹.
(The string interpolation of the HTML as an array is a hack that bypasses Kitten’s default sanitisation and should only be used with trusted content.)
PS. I’m going through all the tutorials on the site to update them to reflect the current state of Kitten after the three-mon…
Se ha anunciado la 2 Temporada de Atelier Of Witch Hat (Manga de Kamome Shirahama)
Web Oficial #AtelierOfWitchHat
Stanford study finds 5% of IP addresses send 55% of all web requests
Fewer than 0.2% of domains in the .com, .net and .org zones resolve to an address of their own, and 5% of client addresses generate more than half of the world's web requests, according to a Stanford-led measurement study that reached wide circulation this week, eight days after Google switched on IP-based ad personalization across the European Economic Area.
🤖
Ik vind deze campagne erg belangrijk - doe je ook mee?
Geen Kerncentrale in de Eemshaven!
https://actie.degoedezaak.org/petitions/geen-kerncentrale-in-de-eemshav…
Didn't know CrowdSec until recently, but I'm quite impressed. Thought I'd share: I'm protecting my Jellyfin and audiobookshelf via nginx logs for a few days now and it's very promising, especially the proactive blocking via the global community list.
Now looking for a nice GUI (alerts/stats/unbanning) since the official panel's pricing isn't for home users. Please only recommend tools you've actually used (I know how to Kagi 😊!).
Security firm Calif says it used OpenAI's Codex to discover HTTP/2 Bomb, a remote DoS exploit affecting web servers like Nginx, Apache HTTPD, and Microsoft IIS (The Hacker News)
https://thehackernews.com/2026/06/new-http2-bomb-vulnerability-allows.html…
AuthProbe: Specification-Driven, Multi-Identity Detection of Broken Object-Level Authorization in Recruitment API
Jay Barach
https://arxiv.org/abs/2607.20574 https://arxiv.org/pdf/2607.20574 https://arxiv.org/html/2607.20574
arXiv:2607.20574v1 Announce Type: new
Abstract: Broken Object-Level Authorization (BOLA), also known as Insecure Direct Object Reference (IDOR), has topped the OWASP API Security ranking since 2019 and is the root cause of some of the largest exposures of applicant data in recruitment technology. The defining feature of this flaw class is that a malicious request is byte-for-byte indistinguishable from a legitimate one, which is precisely why web application firewalls and single identity scanners fail to catch it. We present AuthProbe, an open-source, black-box scanner that detects BOLA and IDOR in HTTP APIs by driving its tests from an OpenAPI specification and by acting under two or more identities that the operator controls. AuthProbe discovers, for each identity, the objects that identity legitimately owns, then attempts to read one identity's objects while authenticated as another and confirms a leak by comparing the response against a ground-truth fetch by the true owner. It also walks predictable identifiers to expose enumeration and reports missing authentication and existence oracles. The tool returns a severity-thresholded exit code and machine-readable reports so that it can gate a continuous integration build. On a synthetic recruitment API in which the McHire failure class is reproduced, AuthProbe detects every planted cross-identity read with no false positives on a hardened counterpart, and its running time grows linearly with the number of objects under test. AuthProbe is released under the Apache 2.0 license with an authorized-use guardrail.
toXiv_bot_toot
Yet another #accessibility #overlay that introduces WCAG failures just by installing it.
Users might not be able to report an accessibility problem. Here, one field is unlabeled (4.1.2 / 1.3.1) and the other is labeled by its placeholder (1.4.3 / 3.3.2).
This one offered by Welcoming Web.
I quietly published the AI Alt Text for the Fediverse Chrome extension weeks ago. I have to say, I'm surprised that it already has over 2K active installs. Especially since it only works on Mastodon. I guess I can't be the only person who wants something like this, which is validating.
https:…
⚡ One Docker command starts the full stack locally on port 3010. First startup pulls images in 2-3 minutes, then you pick inbound or outbound, name the bot, describe the use case in a few words and click Web Call.
🔑 No API keys required to start: #Dograh ships with auto-generated keys and its own LLM, TTS and STT stack. Own keys for LLM, TTS, STT or telephony can be connected later.
I built a plugin to use NotebookLM in Zotero. You can upload books and articles and interact with it as you would on the web.
Link below.
1/2
Been thinking about debuggers for my rule engine langue, here's a sample rule - 2 sets of somewhat complex logic. Lots of scope for error, typos, things just not having the value you expect etc.
So added a tracing evaluator that shows the AST walk, outcomes, timings etc.
Be better on the web, so the dashboard will make this really awesome along with a rule editor.
Sigh, another web site and another interface fail.
1. Check boxes - you can select one or many.
2. If you want me to select ONLY one item then the proper option is a radio button.
3. STOP THE REFRESH when I make a selection. Allow me to fine tune what I want then have a 'REFRESH' button to show the results.
RE: https://norcal.social/@farmbiodiesielUtopias/116884986036173604
1. You’re an idiot.
2. I’m the sole programmer on gaza-verified.org (source code:
Interesting to see what assorted LLM tools think I am:
https://cyberplace.social/@GossiTheDog/116850588672790759
The first pic is one of 11 generally accurate abstracts on me. The second pic is my (not) favorite hallucination about me. Mistral thinks I’m an electron…
And this "Save to Recollect" browser extension makes my replacement of Raindrop complete!
https://chromewebstore.google.com/detail/save-to-recollect/fbmplkcoeijdokdlidejallnpcmiobjk
I used the importer to bulk add from Ra…
Replaced article(s) found for astro-ph.GA. https://arxiv.org/list/astro-ph.GA/new
[1/2]:
- GA-NIFS: Powerful and frequent outflows in moderate-luminosity active galactic nuclei at $z\sim3-6$
Giacomo Venturi, et al.
https://arxiv.org/abs/2512.09996 https://mastoxiv.page/@arXiv_astrophGA_bot/115705753776819617
- ALMA High-J CO Spectroscopy of High-Redshift Galaxies. II. 0.03" Resolution CO Kinematics Reveal ...
Ken-ichi Tadaki
https://arxiv.org/abs/2603.01352 https://mastoxiv.page/@arXiv_astrophGA_bot/116164867046260901
- Very long-term relaxation of harmonic 1D self-gravitating systems
Kerwann Tep, Jean-Baptiste Fouvry, Christophe Pichon
https://arxiv.org/abs/2603.11238 https://mastoxiv.page/@arXiv_astrophGA_bot/116220857983732581
- The tidal evolution of satellite galaxies in cosmological simulations: insights from COLIBRE
Feihong He, et al.
https://arxiv.org/abs/2604.03105 https://mastoxiv.page/@arXiv_astrophGA_bot/116356854403461047
- Deriving volume density profiles of filaments from observed surface densities
Alexander Men'shchikov, Guo-Yin Zhang
https://arxiv.org/abs/2604.12570 https://mastoxiv.page/@arXiv_astrophGA_bot/116407809964147819
- Reduced Incidence of Little Red Dots at z < 3 from Number Density and Halo Mass Evolution
Chenxuan Zhang, Huanian Zhang, Qingwen Wu, Luis C. Ho, Jian-Min Wang
https://arxiv.org/abs/2606.02773 https://mastoxiv.page/@arXiv_astrophGA_bot/116685196830855300
- The Hubble Missing Globular Clusters Survey IV. Ultra-faint compact satellites of the Milky Way. ...
M. Bellazzini, et al.
https://arxiv.org/abs/2606.12517 https://mastoxiv.page/@arXiv_astrophGA_bot/116736072691643849
- Nebular_AGN: A CIGALE module for fitting AGN emission lines
Hao Zhang, Patrice Theule, Veronique Buat, Denis Burgarella, Estelle Pons, Mederic Boquien
https://arxiv.org/abs/2606.14643 https://mastoxiv.page/@arXiv_astrophGA_bot/116753094453286560
- Assembly bias from nuisance to probe I: the relation between galactic conformity and the linear m...
Nelson Padilla, Ivan Lacerna, Dante Paz
https://arxiv.org/abs/2607.04022 https://mastoxiv.page/@arXiv_astrophGA_bot/116877882568563713
- Enabling Cosmic Web Analysis at Gigaparsec Scales: A Multi Block Approach for DisPerSE
Ankit Singh, Frazer Pearce, Meghan Gray, Gustavo Yepes
https://arxiv.org/abs/2607.14785 https://mastoxiv.page/@arXiv_astrophGA_bot/116934310782158818
toXiv_bot_toot
I have my own CLI parser - a fork of the old kingpin - and over time its evolved to have deep runtime introspection among other unique features.
Here using that to generate web based help viewers and I think this is a pretty sweet idea, will have to think how to incorporate this into my doc sites.
Short 2 minute video and screenshots
https://w…
@aral@mastodon.ar.al![2. The welcome message tells you that you can use the `.help` command for assistance. Run that and you will see a list that looks like the following:
```text
.break Sometimes you get stuck, this gets you out
.clear Alias for .break
.editor Enter editor mode
.exit Exit the REPL
.help Print this help message
${['<strong>']}.id Show your Small Web place ID (and create it and your secret if necessary).${['</strong>']}
.load Lo…](https://s3-eu-central-1.amazonaws.com/mastodon-aral/media_attachments/files/117/002/935/800/101/601/original/8cb19f2b6919e4b6.jpeg)
