Simon Willison’s Weblog

Subscribe
Atom feed

Blogmarks

Filters: Sorted by date

Wait For It (via) Neat WSGI middleware from Ian Bicking that launches a thread for every incoming request and watches for slow responses; if something is taking too long it returns a “please wait” page to the user and polls for completion.

# 9th June 2007, 4:53 pm / ian-bicking, middleware, python, wsgi

Security Breach. A statement from Dreamhost.

# 8th June 2007, 8:16 am / dreamhost, hosting, security

WCAG Samurai. Anonymous Samurai, headed up by Joe Clark, publish their errata for WCAG 1.0 (with two independent peer reviews). Recommended as a better alternative to WGAC 2.0.

# 8th June 2007, 5:56 am / accessibility, atmedia2007, errata, joe-clark, samurai, wcag

Sun Identity Provider for OpenID. “We’re talking to partners about offering special services to Sun employees that use this service for authentication.”

# 6th June 2007, 12:57 pm / openid, sun

Talking to the internal GPS in my N95 from Python. Thanks to a new LocationRequestor module for Python Series 60.

# 6th June 2007, 10:31 am / gps, nick-burch, nokia, pyseries60, python

The CSS working group is irrelevant. “Someone really needs to do to CSS what the WHATWG has been doing to HTML”.

# 6th June 2007, 10:10 am / css, hixie, ian-hickson, stardands, w3c, whatwg

Firefox promiscuous IFRAME access bug. Lets malicious sites “display disruptive or misleading contents in the context of an attacked site” and intercept keystrokes! The demo worked in Camino 1.5 as well. Avoid using Gecko-based browsers until this is patched?

# 6th June 2007, 10 am / camino, firefox, iframes, michal-zalewski, security

Gaping holes exposed in fully-patched IE 7, Firefox (via) Michal Zalewski released a new Firefox 2.0 vulnerability in addition to the IE cookie stealing one.

# 6th June 2007, 9:57 am / firefox, internet-explorer, michal-zalewski, security

IE vulnerability allows cookie stealing. Full exploit against the same-domain cookie origin policy, so malicious sites can steal cookies from elsewhere. Avoid using IE until this is patched.

# 6th June 2007, 9:53 am / cookies, internet-explorer, samedomain, security

Semi-synchronous replication for MySQL (via) Google’s patch for MySQL which enables more reliable master-slave replication (a transaction isn’t committed until at least one slave has replicated the data).

# 5th June 2007, 10:07 pm / google, masterslave, mysql, open-source, philippearson, replication

Unsettling. Sounds like there might be a massive scripted hack going on against out of date WordPress installs on Dreamhost. Check your site. See also discussion in the comments attached to this post.

# 5th June 2007, 9:16 pm / dave-shea, dreamhost, hosting, php, security, spam, wordpress

start.gotapi.com. Lightning fast lookups of API documentation; includes Python docs, YUI, HTML, CSS and lots more.

# 5th June 2007, 6:05 pm / css, docs, documentation, gotapi, html, python, yui

ITA Software Trip Planner. Super nerdy flight booking search site, operated by the company that provides software to everyone else in the industry.

# 4th June 2007, 10:14 pm / flights, itasoftware, travel

jsjuicer. Another conditional comment respecting minifier tool, this time in C++. Ships with a command line utility, unlike JavaScript::Minifier.

# 4th June 2007, 5:57 pm / adrian-johnston, c-plus-plus, javascript, jsjuicer, jsmin, minification

JavaScript Minifier that doesn’t break code (via) Perl re-implementation of Douglas Crockford’s classic JSMin that doesn’t clobber IE’s conditional comments, by Peter Michaux.

# 4th June 2007, 5:44 pm / conditionalcomments, douglas-crockford, internet-explorer, james-bennett, javascript, jsmin, perl, pete-michaux

The Zonetag API Goes Public. Awesome new API from YRB—given a cell tower ID can provide both a location and a list of suggested tags, based on data collected by ZoneTag.

# 2nd June 2007, 12:53 am / api, cellid, location, tagging, yahoo, ydn, yrb, zonetag

Oxford Geek Night 3 (via) The date for your diary is July 25th (moved from the 18th).

# 2nd June 2007, 12:38 am / conferences, events, oxford, oxford-geek-nights, oxfordgeeks, upcoming

Deploying a Django app on the desktop. Silver Stripe used cx_freeze to package their commercial agile project management Django application as an easy to run Windows executable.

# 1st June 2007, 9:45 pm / desktop, django, silverstripe, windows

Making use of the XRDS. One of the better explanations of XRDS: provides some background information and isn’t too long.

# 1st June 2007, 9:35 pm / andy-dale, openid, xrds

How Ads Really Work: Superfans and Noobs. My variant on this idea is to serve ads only on content that’s at least 6 months old. I’ve made $473.98 since January.

# 1st June 2007, 9:10 pm / ads, matt-haughey

Launching Expectnation. Edd’s conference organisation software. I was a reviewer for XTech and the process was completely painless.

# 1st June 2007, 8:55 pm / conferences, edddumbill, expectnation, xtech

Cross Domain Frame Communication with Fragment Identifiers. Google are using this crazy iframe/fragment trick for their new Mapplets API.

# 31st May 2007, 2:15 pm / google, google-maps, hack, iframes, javascript

Review Board. VMWare release a slick looking Django-powered code review system, with hooks in to Subversion and Perforce.

# 31st May 2007, 8:32 am / code-review, django, perforce, subversion, vmware

Apollo will include Google Gears technology. Looks like Google really worked on the partnerships for this one.

# 31st May 2007, 8:30 am / apollo, google, google-gears, javascript, offline

Dojo Offline on Google Gears. “The great news is that the Dojo crew were in the loop wrt this project, and Brad has ported Dojo Offline to use Google Gears as the base platform.”

# 31st May 2007, 8:28 am / brad-neuberg, dojo, dojooffline, google, google-gears, javascript, offline

RSS Bling goes Offline with Google Gears. Google Gears is Google’s new offline JavaScript framework. Dion Almaer (a Google employee) has a nice example of code using Google Gears on Ajaxian.

# 31st May 2007, 8:27 am / ajaxian, dion-almaer, google, google-gears, javascript, offline

’tie’ considered harmful (via) Rich Skrenta on the disadvantages of abstractions like Perl’s tie, which lets you create hash data structures that aren’t actually hashes. Operator overloading (as seen in Python) suffers the same problems.

# 30th May 2007, 11:11 pm / operatoroverloading, perl, python, rich-skrenta, tie

The Google Maps Street View team? They’re posing outside the Googleplex so I’m guessing this is the team that built it.

# 30th May 2007, 12:29 pm / easteregg, google, google-maps, googleplex, streetview

Years

Tags