-
13 votes
-
The Web is still a DARPA weapon
12 votes -
Tunneling into a private network through JavaScript
7 votes -
SpeedReader: Fast and Private Reader Mode for the Web
8 votes -
I made a thoughtful-discussion-based subreddit to talk about web browsers
7 votes -
100 Websites That Shaped the Internet as We Know It
9 votes -
Phoenix Framework 1.4.0 release candidate
6 votes -
Batch-saving websites for offline viewing
Anybody here have a good setup for batch-downloading articles/news from several sites you specify, similar to youtube-dl but for general websites? I'm sure it could be scripted with not too much...
Anybody here have a good setup for batch-downloading articles/news from several sites you specify, similar to youtube-dl but for general websites? I'm sure it could be scripted with not too much effort but I'm interested what polished solutions there are.
The idea would be so people with rare internet access could go to a hotspot weekly or something and sync that week's worth of content.
12 votes -
DuckDuckGo usage is growing fast
63 votes -
Accurately measuring layout performance on the web
4 votes -
Powerlifting doesn't care what I look like
7 votes -
Dear Developer, The Web Isn't About You
39 votes -
Whatever happened to the semantic web?
15 votes -
The Bullshit Web
61 votes -
Feedbin goes private by default, explains design desicions to enhance user privacy
10 votes -
Why are newspaper websites so horrible?
23 votes -
Google and Certbot: Let's Encrypt not renewing certs for sites Google flags
17 votes -
Google wants websites to adopt AMP as the default approach to building webpages. Tell them no.
66 votes -
Brave browser gets Chrome's extensions starting Thursday with major new version
20 votes -
Is This The Beginning Of The End For Facebook?
18 votes -
‘Space Jam’ Forever: The Website That Wouldn’t Die [2015]
10 votes -
Conservative web development
29 votes -
Your web app is bloated
16 votes -
Google Chrome’s biggest challenge at age 10 might just be its own success
18 votes -
Contrast Ratio: Easily calculate color contrast ratios. Passing WCAG was never this easy!
6 votes -
How to design for the modern web
41 votes -
The Cost of JavaScript in 2018
30 votes -
Observatory by Mozilla
28 votes -
What football will look like in the future
20 votes -
This Panda Is Dancing
10 votes -
js13k - a contest to make an HTML5 game in under 13 KB
9 votes -
An Essential Guide to Image Compression
8 votes -
Podcasting is not walled (yet)
6 votes -
Let's Encrypt Is Now Officially Trusted by All Major Root Programs
25 votes -
RSS/Atom feeds for groups?
Could we have RSS or Atom feeds that correspond to a given view? There could be two kinds of feeds, one that links to the comments page, and one that follows the link itself. The comments feed for...
Could we have RSS or Atom feeds that correspond to a given view?
There could be two kinds of feeds, one that links to the comments page, and one that follows the link itself. The comments feed for ~comp could be
https://tildes.net/~comp?rss=comments
, and the link feed could behttps://tildes.net/~comp?rss=link
, or something like that. Ideally this could apply to tags as well, so if I just wanted to see posts in ~comp taggedweb
, I could viewhttps://tildes.net/~comp?tag=web&rss=comments
.Several similar sites have this ability, so it's nice to be able to browse them all in one place. (On Reddit you can put
.rss
at the end of a subreddit for a feed, and on Hacker News and Lobsters it's just/rss
).What do you think?
15 votes -
The Bullshit Web
8 votes -
How the Blog Broke the Web
25 votes -
Intellectual dark web psyop [part 1]
5 votes -
Tech’s ‘dirty secret’: The app developers sifting through your Gmail
11 votes -
Solid: From Tim Berners-Lee, a project to decentralize the web
20 votes -
Introducing Cat Hop! The mobile runner I made you can play now right in your browser!
9 votes -
I Discovered a Browser Bug: Accessing cross-origin resources with Service Worker and WAV headers
7 votes -
Hard-won lessons: Five years with Node.js
4 votes -
Signing CryptPad - Experiments with making a webapp secure despite the server
7 votes -
Several folks have posted recently about not being happy with the rat race. This gives me strength to be myself and hopefully does for you as well.
15 votes -
Firefox 62 Nightlies: Improving DNS Privacy in Firefox
Firefox recently introduced DNS over HTTPS (DoH) and Trusted Recursive Resolver (TRR) in nightly builds for Firefox 62. DoH and TRR are intended to help mitigate these potential privacy and...
Firefox recently introduced DNS over HTTPS (DoH) and Trusted Recursive Resolver (TRR) in nightly builds for Firefox 62.
DoH and TRR are intended to help mitigate these potential privacy and security concerns:
- Untrustworthy DNS resolvers tracking your requests, or tampering with responses from DNS servers.
- On-path routers tracking or tampering in the same way.
- DNS servers tracking your DNS requests.
DNS over HTTPs (DoH) encrypts DNS requests and responses, protecting against on-path eavesdropping, tracking, and response tampering.
Trusted Recursive Resolver (TRR) allows Firefox to use a DNS resolver that's different from your machines network settings. You can use any recursive resolver that is compatible with DoH, but it should be a trusted resolver (one that won't sell users’ data or trick users with spoofed DNS). Mozilla is partnering with Cloudflare (but not using the 1.1.1.1 address) as the initial default TRR, however it's possible to use another 3rd party TRR or run your own.
Cloudflare is providing a recursive resolution service with a pro-user privacy policy. They have committed to throwing away all personally identifiable data after 24 hours, and to never pass that data along to third-parties. And there will be regular audits to ensure that data is being cleared as expected.
Additionally, Cloudflare will be doing QNAME minimization where the DNS resolver no longer sends the full original QNAME (foo.bar.baz.example.com) to the upstream name server. Instead it will only include the label for the zone it's trying to resolve.
For example, let's assume the DNS resolver is trying to find foo.bar.baz.example.com, and already knows that ns1.nic.example.com is authoritative for .example.com, but does not know a more specific authoritative name server.
- It will send the query for just baz.example.com to ns1.nic.example.com which returns the authoritative name server for baz.example.com.
- The resolver then sends a query for bar.baz.example.com to the nameserver for baz.example.com, and gets a response with the authoritative nameserver for bar.baz.example.com
- Finally the resolver sends the query for foo.bar.baz.example.com to bar.baz.example.com's nameserver.
In doing this the full queried name (foo.bar.baz.example.com) is not exposed to intermediate name servers (bar.baz.example.com, baz.example.com, example.com, or even the .com root nameservers)
Collectively DNS over HTTPs (DoH), Trusted Recursive Resolver (TRR), and QNAME Minimization are a step in the right direction, this does not fix DNS related data leaks entirely:
After you do the DNS lookup to find the IP address, you still need to connect to the web server at that address. To do this, you send an initial request. This request includes a server name indication, which says which site on the server you want to connect to. And this request is unencrypted.
That means that your ISP can still figure out which sites you’re visiting, because it’s right there in the server name indication. Plus, the routers that pass that initial request from your browser to the web server can see that info too.So How do I enable it?
DoH and TRR can be enabled in Firefox 62 or newer by going to about:config:- Set network.trr.mode to 2
- Here's the possible network.trr.mode settings:
- 0 - Off (default): Use standard native resolving only (don't use TRR at all)
- 1 - Race: Native vs. TRR. Do them both in parallel and go with the one that returns a result first.
- 2 - First: Use TRR first, and only if the name resolve fails use the native resolver as a fallback.
- 3 - Only: Only use TRR. Never use the native (after the initial setup).
- 4 - Shadow: Runs the TRR resolves in parallel with the native for timing and measurements but uses only the native resolver results.
- 5 - Off by choice: This is the same as 0 but marks it as done by choice and not done by default.
- Here's the possible network.trr.mode settings:
- Set network.trr.uri to your DoH Server:
- Cloudflare’s is https://mozilla.cloudflare-dns.com/dns-query
(but you can use any DoH compliant endpoint)
- Cloudflare’s is https://mozilla.cloudflare-dns.com/dns-query
- The DNS Tab on about:networking will show which names were resolved using TRR via DoH.
Links:
A cartoon intro to DNS over HTTPS
Improving DNS Privacy in Firefox
DNS Query Name Minimization to Improve Privacy
TRR PreferencesI'm not affiliated with Mozilla or Firefox, I just thought ~ would find this interesting.
13 votes -
Ten years of Loss.jpg ~ What was your favorite version ?
⠀⠀⠀⣴⣴⡤ ⠀⣠⠀⢿⠇⡇⠀⠀⠀⠀⠀⠀⠀⢰⢷⡗ ⠀⢶⢽⠿⣗⠀⠀⠀⠀⠀⠀⠀⠀⣼⡧⠂⠀⠀⣼⣷⡆ ⠀⠀⣾⢶⠐⣱⠀⠀⠀⠀⠀⣤⣜⣻⣧⣲⣦⠤⣧⣿⠶ ⠀⢀⣿⣿⣇⠀⠀⠀⠀⠀⠀⠛⠿⣿⣿⣷⣤⣄⡹⣿⣷ ⠀⢸⣿⢸⣿⠀⠀⠀⠀⠀⠀⠀⠀⠈⠙⢿⣿⣿⣿⣿⣿ ⠀⠿⠃⠈⠿⠆⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠹⠿⠿⠿ ⠀⢀⢀⡀⠀⢀⣤⠀⠀⠀⠀⠀⠀⠀⡀⡀ ⠀⣿⡟⡇⠀⠭⡋⠅⠀⠀⠀⠀⠀⢰⣟⢿ ⠀⣹⡌⠀⠀⣨⣾⣷⣄⠀⠀⠀⠀⢈⠔⠌...
⠀⠀⠀⣴⣴⡤
⠀⣠⠀⢿⠇⡇⠀⠀⠀⠀⠀⠀⠀⢰⢷⡗
⠀⢶⢽⠿⣗⠀⠀⠀⠀⠀⠀⠀⠀⣼⡧⠂⠀⠀⣼⣷⡆
⠀⠀⣾⢶⠐⣱⠀⠀⠀⠀⠀⣤⣜⣻⣧⣲⣦⠤⣧⣿⠶
⠀⢀⣿⣿⣇⠀⠀⠀⠀⠀⠀⠛⠿⣿⣿⣷⣤⣄⡹⣿⣷
⠀⢸⣿⢸⣿⠀⠀⠀⠀⠀⠀⠀⠀⠈⠙⢿⣿⣿⣿⣿⣿
⠀⠿⠃⠈⠿⠆⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠹⠿⠿⠿⠀⢀⢀⡀⠀⢀⣤⠀⠀⠀⠀⠀⠀⠀⡀⡀
⠀⣿⡟⡇⠀⠭⡋⠅⠀⠀⠀⠀⠀⢰⣟⢿
⠀⣹⡌⠀⠀⣨⣾⣷⣄⠀⠀⠀⠀⢈⠔⠌
⠰⣷⣿⡀⢐⢿⣿⣿⢻⠀⠀⠀⢠⣿⡿⡤⣴⠄⢀⣀⡀
⠘⣿⣿⠂⠈⢸⣿⣿⣸⠀⠀⠀⢘⣿⣿⣀⡠⣠⣺⣿⣷
⠀⣿⣿⡆⠀⢸⣿⣿⣾⡇⠀⣿⣿⣿⣿⣿⣗⣻⡻⠿⠁
⠀⣿⣿⡇⠀⢸⣿⣿⡇⠀⠀⠉⠉⠉⠉⠉⠉⠁11 votes -
The American Revolution’s greatest leader was openly gay
14 votes -
Trying to change my career to freelancing, how plausible is this path?
Didn't know if i should post this in talk or tech, but my focus is on advice, so i guess this is the place. I am currently in the process of changing my career to be a web developer. Studied IT a...
Didn't know if i should post this in talk or tech, but my focus is on advice, so i guess this is the place.
I am currently in the process of changing my career to be a web developer. Studied IT a few years ago, dropped out due to finances, and spent the last few years working crappy jobs.
I designated all my spare time towards learning the basics. I'm confident enough in my knowledge of HTML and CSS, know how to use Bootstrap and i'm currently learning the basics of JS. The Udemy course i'm taking will cover NodeJS, jQuery and some more backend next. After that i plan on learning Wordpress and a framework i guess (React/Vue/Angular). Have i missed something here?
My final goal is doing freelance web development. My question is, how plausible is this and what else do you suggest learning to have an easier time finding clients?
Also, how soon do you figure i could start doing some basic work with simple websites (even if it means using Bootstrap / altering Wordpress themes)? My country is rather cheap, so even 500$/month on simple projects will be enough of a reason for me to quit my 9-5.
Guess i'll need a portfolio too though.
Anyways, thanks for reading. Any web devs out there care to offer advice? I'm dedicated to achieving this goal, but i'm somewhat lost still.
3 votes -
Side-channel attacking browsers through CSS3 features
8 votes