Simon Willison’s Weblog

Subscribe
Atom feed

Blogmarks

Filters: Sorted by date

The Wii Remote API. “allows the Web page to detect all Wii Remotes that are connected to the Wii [...] this makes it possible to make Web pages interact with up to four users at the same time, a concept not normally possible with traditional JavaScript event detection.”

# 6th August 2007, 9:32 pm / javascript, opera, wii

A nice example of when to use reduce in python. As a shortcut for assembling a large OR query using the Django ORM.

# 2nd August 2007, 11:51 pm / django, orm, python, reduce

Professional Contractors Group. “PCG is the only cross-sector, not-for-profit trade association for freelance consultants and contractors.”—based in the UK.

# 2nd August 2007, 11:27 pm / consulting, freelancing, pcg, uk

(somewhat) breaking the same-origin policy by undermining dns-pinning. This is the best technical explanation of the DNS rebinding attack I’ve seen. The linked demo worked for me in Safari but not in Camino.

# 2nd August 2007, 12:53 pm / camino, dnsrebinding, safari, samedomain, security

Your browser is a tcp/ip relay. Thoroughly nasty new(ish) attack that breaks the same-domain policy and allows intranet content to be stolen by a malicious site. Using virtual hosts (hence requiring the Host: header) is the best known protection.

# 2nd August 2007, 12:53 pm / arturbergman, dnsrebinding, samedomain, security

Side-Channel Attacks and Security Theatre. “In order to mount most of these attacks the attacker must be local [...] every good security person knows that if your attacker has the ability to run stuff on your machine, it is game over, so why are we even caring about these attacks?”

# 2nd August 2007, 12:30 pm / ben-laurie, openssl, security, securitytheatre, sidechannel

Cabochon event server. Written in Python (on top of SQLObject and Paste), uses JSON for messages, allows event consumers to subscribe with a callback URL.

# 2nd August 2007, 8:36 am / cabochon, callbacks, events, json, paste, python, sqlobject

stomp.py. A Python client library for accessing ActiveMQ using the STOMP protocol. Pleasantly simple API for both sending and accepting messages.

# 1st August 2007, 1:50 pm / activemq, messaging, python, stomp

Django, iCal and vObject. Easy iCal generation for Django using vObject.

# 1st August 2007, 11:09 am / derek-willis, django, icalendar, python, vobject

Net::SSH revisited (via) Dependency injection (at least in Ruby) officially isn’t cool any more.

# 1st August 2007, 10:42 am / assaf-arkin, dependencyinjection, jamis-buck, ruby, ssh

Java’s Fear of Commitment (via) How Java culture emphasises interfaces and layers of abstraction over solving problems directly.

# 1st August 2007, 10:32 am / django, java

YUI 2.3.0. New components are a rich text editor, dojo-style package loader, lazy ImageLoader, colour picker and unit test framework. Easier skinning as well.

# 1st August 2007, 8:20 am / dojo, javascript, skinning, testing, yui

Mouseover DOM Inspector v2.0. Steve Chipman’s excellent debugging bookmarklet created back in 2005—includes useful keyboard shortcuts for quickly manipulating the DOM of the current page.

# 30th July 2007, 5:13 pm / bookmarklets, dom, javascript, modi, steve-chipman

XRAY web developer’s suite (via) Smart new bookmarklet from westciv—kind of like Steve Chipman’s MODI but with the addition of the canvas element for box model visualisation.

# 30th July 2007, 5:11 pm / bookmarklets, canvas, javascript, jeffrey-zeldman, steve-chipman, westciv, xray

Django weekly roundup: July 30. Every active open source project needs something like this.

# 30th July 2007, 5:03 pm / clint-ecker, django, open-source

Top 10 dotcoms to watch. From the Guardian—Dopplr and Moo both get a mention.

# 30th July 2007, 2:19 pm / dopplr, guardian, moo, startups

Scale rails from one box to three, four and five. Excellent, concise run-down of what it takes to scale a web application. Most of the advice is easily portable to other frameworks.

# 30th July 2007, 1:40 pm / courtenay, rails, scaling

YUI-based Image Cropper Widget. Nice implementation of a useful widget.

# 30th July 2007, 12:56 pm / javascript, widget, yui

Thread Synchronization Mechanisms in Python. Locks, RLocks, Semaphores, Events and Conditions as explained by Fredrik Lundh.

# 29th July 2007, 9:32 pm / conditions, effbot, events, fredrik-lundh, locks, python, rlocks, semaphores, threads, tutorial

System Administrator Appreciation Day. The last Friday in July is Annual System Administrator Appreciation day. Thank (or hug) your sysadmin today!

# 27th July 2007, 7:21 pm / sysadmin

Grub. Jimmy Wales just announced at OSCON that Wikia have acquired Grub from LookSmart, and will be releasing it as open source.

# 27th July 2007, 5:24 pm / grub, jimmywales, looksmart, open-source, oscon, oscon07, search, wikia

tesseract-ocr. Open source OCR, sponsored by Google. I just sat in on a talk on this at OSCON and the complexity of the problem is pretty incredible.

# 26th July 2007, 8:23 pm / google, ocr, oscon, oscon07, tesseract

mod_wsgi 1.0 Release Candiate Available. mod_wsgi is shaping up to be an excellent alternative to mod_python.

# 26th July 2007, 8:21 pm / django, modpython, modwsgi, python, wsgi

High Scalability (via) New blog about building scalable, reliable sites.

# 26th July 2007, 8:15 pm / cal-henderson, highscalability, scaling

Mozilla and IronPython: IronMonkey. Interesting to note that all three new Mozilla projects are being lead by experienced Python developers.

# 26th July 2007, 8:07 pm / ironmonkey, ironpython, javascript, mozilla, python, voidspace

Brendan Eich: New Projects. Exciting new projects from Mozilla. ActionMonkey is joined by IronMonkey (IronPython/IronRuby on Tamarin) and ScreamingMonkey (Tamarin for IE). Upgrading IE’s JavaScript using the Flash Player as a vector is a game-changing idea.

# 26th July 2007, 8:05 pm / actionmonkey, brendan-eich, flash, internet-explorer, ironmonkey, ironpython, ironruby, javascript, mozilla, screamingmonkey, tamarin

Years

Tags