Simon Willison’s Weblog

Blogmarks in Aug, 2007

Filters: Type: blogmark × Year: 2007 × Month: Aug ×

Background Iframe (bgiframe). jQuery plugin that inserts an iframe shim behind an element in IE, allowing the element to be positioned overlapping a select box without the select box showing through. # 9th August 2007, 2:54 pm

Why Tamarin instead of... Justification for Tamarin in Mozilla over Mono and the JVM. It mainly comes down to license compatibility and overall size. # 9th August 2007, 12:43 pm

SproutCore (via) MVC JavaScript framework used to build the new .Mac Web Gallery application. # 7th August 2007, 11:35 pm

CodePress. “Real Time Syntax Highlighting Editor written in JavaScript”. # 7th August 2007, 10:49 pm

Atom Models. Building Python classes that act as utility wrappers around data stored in an lxml DOM object. # 7th August 2007, 4:02 pm

Dynamic Help in Web Forms. Luke Wroblewski catalogues patterns for providing contextual help. # 7th August 2007, 4:01 pm They scrape Wikipedia and extract useful information from it so you don’t have to. # 7th August 2007, 3:24 pm

Bruce Schneier interviews Kip Hawley. The head of the Transportation Security Administration in conversation with one of his most eloquent critics. # 7th August 2007, 3:23 pm

jQuery in 15 minutes. A quick introduction I put together. Much more interesting in conjunction with Firebug powered demos. # 7th August 2007, 2:57 pm

ETags, ETags, ETags. They’re no magic bullet. # 7th August 2007, 2:51 pm

Sweet Gig. SitePen seek “R&D Associate” to have fun hacking on Open Source software and researching whatever they think is important. # 7th August 2007, 2:47 pm

DNS Pinning Explained. With diagrams. # 7th August 2007, 11:01 am

VMware Fusion Review (via) It looks like VMware are finally catching up with Parallels. # 6th August 2007, 11:49 pm

New A-GPS service for Nokia phones. Appears to look up your cell ID against a global database to find nearby satellites, dramatically reducing the time needed to get a GPS fix. # 6th August 2007, 11:26 pm

The Wii Remote API. “allows the Web page to detect all Wii Remotes that are connected to the Wii [...] this makes it possible to make Web pages interact with up to four users at the same time, a concept not normally possible with traditional JavaScript event detection.” # 6th August 2007, 9:32 pm

A nice example of when to use reduce in python. As a shortcut for assembling a large OR query using the Django ORM. # 2nd August 2007, 11:51 pm

Professional Contractors Group. “PCG is the only cross-sector, not-for-profit trade association for freelance consultants and contractors.”—based in the UK. # 2nd August 2007, 11:27 pm

(somewhat) breaking the same-origin policy by undermining dns-pinning. This is the best technical explanation of the DNS rebinding attack I’ve seen. The linked demo worked for me in Safari but not in Camino. # 2nd August 2007, 12:53 pm

Your browser is a tcp/ip relay. Thoroughly nasty new(ish) attack that breaks the same-domain policy and allows intranet content to be stolen by a malicious site. Using virtual hosts (hence requiring the Host: header) is the best known protection. # 2nd August 2007, 12:53 pm

Side-Channel Attacks and Security Theatre. “In order to mount most of these attacks the attacker must be local [...] every good security person knows that if your attacker has the ability to run stuff on your machine, it is game over, so why are we even caring about these attacks?” # 2nd August 2007, 12:30 pm

Cabochon event server. Written in Python (on top of SQLObject and Paste), uses JSON for messages, allows event consumers to subscribe with a callback URL. # 2nd August 2007, 8:36 am A Python client library for accessing ActiveMQ using the STOMP protocol. Pleasantly simple API for both sending and accepting messages. # 1st August 2007, 1:50 pm

Django, iCal and vObject. Easy iCal generation for Django using vObject. # 1st August 2007, 11:09 am

Net::SSH revisited (via) Dependency injection (at least in Ruby) officially isn’t cool any more. # 1st August 2007, 10:42 am

Java’s Fear of Commitment (via) How Java culture emphasises interfaces and layers of abstraction over solving problems directly. # 1st August 2007, 10:32 am

YUI 2.3.0. New components are a rich text editor, dojo-style package loader, lazy ImageLoader, colour picker and unit test framework. Easier skinning as well. # 1st August 2007, 8:20 am