Continued thread
Recent searches
Search options
#http
6 posts6 participants0 posts today
HTTP Feeds: a minimal specification for polling events over HTTP
Link: https://www.http-feeds.org/
Discussion: https://news.ycombinator.com/item?id=43805358
HTTP FeedsHTTP FeedsAsynchronous event streaming and data replication with plain HTTP APIs.
From: blenderdumbass . org
The multiplayer, or the lack there of, at the moment is so utterly broken and so lacking of being properly made that for a long time, I was just not bothering with it. Seeing it as something unnecessary. Something that does not need to be touched, because other things, like the...
Read or listen: https://blenderdumbass.org/articles/a_rant_about_making_a_multiplayer_game
Show HN: Faasta – A self-hosted Serverless platform for WASM-wasi-HTTP in Rust
Link: https://github.com/fourlexboehm/faasta
Discussion: https://news.ycombinator.com/item?id=43789010
GitHubGitHub - fourlexboehm/faasta: A faster FaaS Platform with full wasi-http complianceA faster FaaS Platform with full wasi-http compliance - fourlexboehm/faasta
GitHub - Y2Z/monolith: 
️ CLI tool and library for saving complete web pages as a single HTML file
Just found out that it is no longer possible to straightforwardly write HTTP/1 requests by hand on the #terminal.
Modern #Apache will reject #HTTP 1.x requests where the line endings are not CRLF, and as far as I know it's not possible on #Linux to type a CR using the keyboard. Ctrl+M should do it in theory, but when I try, it produces LF instead of CR for some reason.
Is there by any chance a way to make the Linux #console (or #KDE #Konsole) produce CRLF when I push the Enter key?
Threat Infrastructure Uncovered Before Activation
Between November 2024 and April 2025, a set of domains and servers impersonating an Iraqi academic organization and fictitious UK tech firms were tracked. The infrastructure, while dormant, exhibited characteristics similar to APT34 (OilRig), including shared SSH keys, structured websites, and decoy HTTP behavior on M247-hosted servers. Key observations include the use of port 8080 for fake 404 responses, consistent SSH fingerprint reuse, and domains registered through P.D.R. Solutions with regway.com nameservers. The setup suggests deliberate pre-operational staging, offering defenders an early warning opportunity. Detection strategies include monitoring SSH fingerprints, HTTP response patterns, and domain registration behaviors.
Pulse ID: 68082a17ee5771aa012e93c3
Pulse Link: https://otx.alienvault.com/pulse/68082a17ee5771aa012e93c3
Pulse Author: AlienVault
Created: 2025-04-22 23:45:27
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.
iX-Workshop API-Sicherheit: OWASP Top 10 API Security Risks
Lernen Sie hands-on, wie Sie Schwachstellen in der API-Implementierung vermeiden und Angriffe abwehren.
heise online · iX-Workshop API-Sicherheit: OWASP Top 10 API Security Risks
How TCP really works: Top 3 things you need to know!
YouTube video with the amazing Chris Greer: https://youtu.be/Auwn3RWapRE
#Freenginx 1.27.6 has been released (#nginx / #http / #http2 / #http3 / #httpd / #Web / #Webserver / #TLS / #TLS13) https://freenginx.org/
freenginx.orgfreenginx news
#nginx 1.27.5 (dev) has been released (#http / #http2 / #http3 / #httpd / #Web / #Webserver / #TLS / #TLS13) https://nginx.org/
nginx.orgnginx
Show HN: AgentAPI – HTTP API for Claude Code, Goose, Aider, and Codex
Link: https://github.com/coder/agentapi
Discussion: https://news.ycombinator.com/item?id=43719447
GitHubGitHub - coder/agentapi: HTTP API for Claude Code, Goose, Aider, and CodexHTTP API for Claude Code, Goose, Aider, and Codex. Contribute to coder/agentapi development by creating an account on GitHub.
If you are a #developer and need to combine several #protocol #bindings for an #IoT system, the ACME-CSE provides a great environment for learning and experimentation https://acmecse.net/home/Supported/ #CoAP #http #MQTT #WebSocket
acmecse.netoneM2M - ACME oneM2M CSE
iX-Workshop API-Sicherheit: OWASP Top 10 API Security Risks
Lernen Sie hands-on, wie Sie Schwachstellen in der API-Implementierung vermeiden und Angriffe abwehren.
heise online · iX-Workshop API-Sicherheit: OWASP Top 10 API Security Risks
iX-Workshop: API-Design und -Entwicklung mit HTTP, REST und OpenAPI
Lernen Sie, wie man effiziente und benutzerfreundliche APIs entwickelt, HTTP- und REST-Standards anwendet und standardisierte Referenzdokumentationen erstellt.
heise online · iX-Workshop: API-Design und -Entwicklung mit HTTP, REST und OpenAPI
Trying to come up with my own little self-hosted #http #authentication #daemon to work with #nginx' "authentication request" facility ... first step done! 
Now I have a subset of HTTP 1.x implemented in #C, together with a dummy handler showing nothing but a static hello-world root document.
I know it's kind of stubborn doing that in C, but hey, #coding it is great fun 
GitHubGitHub - Zirias/swad: Simple Web Authentication DaemonSimple Web Authentication Daemon. Contribute to Zirias/swad development by creating an account on GitHub.
Cloudflare puts an end to insecure HTTP
Plain text communication also allows unauthorized persons to view data. Cloudflare therefore also no longer supports HTTP for API calls.
heise online · Cloudflare puts an end to insecure HTTP
From: blenderdumbass . org
The multiplayer, or the lack there of, at the moment is so utterly broken and so lacking of being properly made that for a long time, I was just not bothering with it. Seeing it as something unnecessary. Something that does not need to be touched, because other things, like the...
Read or listen: https://blenderdumbass.org/articles/a_rant_about_making_a_multiplayer_game
#Gamedev #DanisRace #Networking #Multiplayer #TCP #HTTP #Programming #Python #UPBGE #Blender3d #GNU #Linux #GamingOnLinux #FreeSoftware #OpenSource
blenderdumbass . orgA Rant About Making a Multiplayer Game
More from 
Blender Dumbass ( J.Y.Amihud )
Cloudflare macht unsicherem HTTP den Garaus
Klartextkommunikation erlaubt auch Unbefugten Einsicht in Daten. Cloudflare unterstützt daher auch für API-Aufrufe kein HTTP mehr.
heise online · Cloudflare erlaubt nur noch verschlüsselte Verbindungen mit HTTPS
Mastodon-Client-API
Auch wenn sich im #Fediverse viel um #ActivityPub dreht und hier durchaus auch eine #Client-Schnittstelle skizziert ist, nutzt #Mastodon eine eigene Client-API, die (zumindest teilweise) auch von anderer fediversaler Serversoftware unterstützt wird (z.B. #Friendica, #Firefish, #Mammuthus).
Diese #API (application programming interface, eine #Schnittstelle zur #Programmierung von Anwendungen) dient Apps und Clients dazu, entsprechende Funktionen auf einer #Instanz durchzuführen. Diese API ermöglicht die Entwicklung von Apps wie #Tusky, #Fedilab & Co.
Man kann diese API auch nutzen, um Konten etwa (teil)automatisiert zu betreiben.
Oder Statistiken zu sammeln... oder... oder... ;-)
Die API ist soweit öffentlich dokumentiert und steht frei zur Verfügung.
Allgemeine Dokumentation zu #Mastodon (auf Englisch):
https://docs.joinmastodon.org/
"Getting started with the API":
https://docs.joinmastodon.org/client/intro/
Wer mit dem Gedanken spielt, die API zu nutzen, sollte sich mit #HTTP, #JSON & Co. anfreunden können. Und Englischkenntnisse sind in diesem Bereich grundsätzlich von Vorteil...
docs.joinmastodon.orgMastodon documentationWelcome to the Mastodon documentation!