Simon Willison’s Weblog

Items in Aug, 2007

Filters: Year: 2007 × Month: Aug ×


New A-GPS service for Nokia phones. Appears to look up your cell ID against a global database to find nearby satellites, dramatically reducing the time needed to get a GPS fix. # 6th August 2007, 11:26 pm

The Wii Remote API. “allows the Web page to detect all Wii Remotes that are connected to the Wii [...] this makes it possible to make Web pages interact with up to four users at the same time, a concept not normally possible with traditional JavaScript event detection.” # 6th August 2007, 9:32 pm

A nice example of when to use reduce in python. As a shortcut for assembling a large OR query using the Django ORM. # 2nd August 2007, 11:51 pm

Professional Contractors Group. “PCG is the only cross-sector, not-for-profit trade association for freelance consultants and contractors.”—based in the UK. # 2nd August 2007, 11:27 pm

(somewhat) breaking the same-origin policy by undermining dns-pinning. This is the best technical explanation of the DNS rebinding attack I’ve seen. The linked demo worked for me in Safari but not in Camino. # 2nd August 2007, 12:53 pm

Your browser is a tcp/ip relay. Thoroughly nasty new(ish) attack that breaks the same-domain policy and allows intranet content to be stolen by a malicious site. Using virtual hosts (hence requiring the Host: header) is the best known protection. # 2nd August 2007, 12:53 pm

Side-Channel Attacks and Security Theatre. “In order to mount most of these attacks the attacker must be local [...] every good security person knows that if your attacker has the ability to run stuff on your machine, it is game over, so why are we even caring about these attacks?” # 2nd August 2007, 12:30 pm

Cabochon event server. Written in Python (on top of SQLObject and Paste), uses JSON for messages, allows event consumers to subscribe with a callback URL. # 2nd August 2007, 8:36 am

stomp.py. A Python client library for accessing ActiveMQ using the STOMP protocol. Pleasantly simple API for both sending and accepting messages. # 1st August 2007, 1:50 pm

Django, iCal and vObject. Easy iCal generation for Django using vObject. # 1st August 2007, 11:09 am

Net::SSH revisited (via) Dependency injection (at least in Ruby) officially isn’t cool any more. # 1st August 2007, 10:42 am

Java’s Fear of Commitment (via) How Java culture emphasises interfaces and layers of abstraction over solving problems directly. # 1st August 2007, 10:32 am

YUI 2.3.0. New components are a rich text editor, dojo-style package loader, lazy ImageLoader, colour picker and unit test framework. Easier skinning as well. # 1st August 2007, 8:20 am