neblem

joined 2 years ago
[–] neblem@lemmy.world 4 points 1 week ago

Neat to see more tools like this out there.

Great for any retromachines that can't / won't run the modern web (and things like Lynx and EWW) and accessibility purposes.

I'll have to take a look at how it's parsing the pages. Brow.sh is usually my goto for these use cases, but that's using a whole Firefox to do the rendering.

[–] neblem@lemmy.world 14 points 1 week ago* (last edited 1 week ago) (1 children)

Hopefully more projects take advantage of vulnerability scanning and monitoring tools like those in this OWASP list https://owasp.org/www-community/Free_for_Open_Source_Application_Security_Tools, have good code quality standards to make their projects easier to understand and evaluate, contribute and respond to CVE reports, and get third party security auditing.

All of that is hard to motivated those throwing their code out to the world only to share how they scratched their itch to perform. I think we need a combination of governments and non-profits providing incentives / grants to projects doing good practices, document and provide trusted a forum to validate vulnerabilities, give some backing to "trusted" frameworks, and provide some vulnerability and auditing themselves.

The recent EU push into more government open source usage will help as they will be more incentivized to secure the pipelines and everyone will benefit the fruits of that firehose of funding.

[–] neblem@lemmy.world 23 points 2 weeks ago (2 children)

Hopefully things like PineTime, Bangle.js, and the return of Pebble can shake up the market. There's always neat DIY hacks like the SensorWatch too that can still make the space fun even if the major players get enshittified.

[–] neblem@lemmy.world 3 points 2 weeks ago* (last edited 2 weeks ago)

If you're open to doing a bit more work, https://www.opensecrets.org/ might be a good resource to look up political affiliations of corporate PACs and lobbyists.

Edit: must have messed something up, meant to reply to unsettlinglymoist's https://lemmy.world/comment/15849319 comment not the OP.

[–] neblem@lemmy.world 6 points 3 weeks ago

Outside of rate limiting and sending detected bad bots to poisoned static data, yeah not much you can really do without harming valid use cases.

In the federated world people can just set up relays or listener instances, which are far better than hammering hobbyist instances with the additional bandwidth.

[–] neblem@lemmy.world 10 points 3 weeks ago

LockPickingLawyer

Steve Wallis (Camping With Steve)

Math Queen

[–] neblem@lemmy.world -1 points 4 weeks ago (1 children)

Speed bumps are pretty much the worst option for speeding. Lane narrowing, adding curves, and lane diets should be preferred, and you can try them out at similar costs with plastic bollards or even cones. That being said if you want speed bumps, install elevated sidewalks instead.