The trailing dot in domain names matter
https://lacot.org/blog/2024/10/29/the-trailing-dot-in-domain-names-a-detail-that-is-often-poorly-managed.html
@DevMisc
#dns #web #learn
- Trailing Dot in Domain Names: A trailing dot can be added to a domain name, designating it as a Fully Qualified Domain Name (FQDN), which specifies its exact position in the DNS hierarchy.
- FQDN vs. Non-FQDN: The presence of a trailing dot distinguishes between a fully qualified domain name (e.g., example.com.) and a regular domain name (e.g., example.com), which can lead to different behaviors in DNS resolution.
- Local Network Behavior: On local networks, omitting the domain can lead to confusion, as local DNS resolvers may append local domain names to requests, affecting how services are accessed.
- SEO Considerations: Both FQDN and non-FQDN versions of a domain can be indexed by search engines, potentially causing duplicate content issues, which can negatively impact SEO rankings.
- Redirect Strategies: There are two main strategies for handling redirects between FQDN and non-FQDN versions: redirecting to the FQDN (technically correct) or the non-FQDN (more user-friendly), each with its pros and cons.
- Browser Behavior: Browsers treat FQDN and non-FQDN as distinct domains, which can lead to unexpected behavior, such as users being logged out when switching between them.
- Content Serving Issues: Without specific configurations, servers may serve duplicate content for both FQDN and non-FQDN, risking SEO penalties and user confusion.
- SSL Certificate Validations: Many websites fail to properly handle SSL certificates for both FQDN and non-FQDN versions, leading to errors and security issues for users.
- Large Website Practices: A review of major websites reveals inconsistent handling of trailing dots, with varying responses for FQDN and non-FQDN requests, often leading to user frustration.
- Recommendations for Handling: Best practices include ensuring proper SSL configurations, serving 2xx responses on FQDN, and implementing effective redirection strategies to mitigate potential issues related to trailing dots in domain names.
https://lacot.org/blog/2024/10/29/the-trailing-dot-in-domain-names-a-detail-that-is-often-poorly-managed.html
@DevMisc
#dns #web #learn
Component Party
https://component-party.dev/
@DevMisc
#web #learn #misc
Web component JS frameworks overview by their syntax and features: Svelte 5, React, Vue 3, Angular Renaissance, Angular, Lit, Ember Octane, Solid.js, Svelte 4, Vue 2, Alpine, Ember Polaris (preview), Mithril, Aurelia 2, Qwik, Marko, Aurelia 1
https://component-party.dev/
@DevMisc
#web #learn #misc
Does Your Code Pass The Turkey Test?
https://www.moserware.com/2008/02/does-your-code-pass-turkey-test.html
@DevMisc
#bugs #csharp #misc
The article discusses the importance of writing code that can handle cultural differences, using Turkey as an example. The author highlights several common programming pitfalls that can arise when software is used in Turkey, such as issues with date formatting, decimal separators, and character encoding. The article provides specific examples of these problems and explains how to properly address them by following best practices for internationalization and localization. The key takeaway is that if your code can handle the unique quirks of the Turkish market, it will likely work well in most other regions as well. The article serves as a useful reminder to always consider cultural nuances when developing software for a global audience.
https://www.moserware.com/2008/02/does-your-code-pass-turkey-test.html
@DevMisc
#bugs #csharp #misc
😁5👍1
You wouldn't download an AI
https://altayakkus.substack.com/p/you-wouldnt-download-an-ai
@DevMisc (🟠 comments)
#rev #android #misc
- Artificial Intelligence is increasingly integrated into various applications, particularly by corporations with significant financial resources.
- On-device AI models enhance user experience by providing fast, offline access for tasks like photo filtering and object detection.
- Microsoft's Seeing AI app serves as a notable example, offering accessibility features, including currency detection for visually impaired users.
- Android apps are packaged as APK files, which contain all necessary components, including AI model files.
- The currency detection model within Seeing AI appears to be encrypted, presenting challenges for direct access and analysis.
- Tools like apktool can be used to decompile APKs and inspect their contents, revealing encrypted files and potential AI models.
- TensorFlow Lite is identified as the framework used for running AI models in the Seeing AI app, which facilitates model loading and inference.
- Frida is introduced as a dynamic instrumentation toolkit that allows for the alteration of app behavior and method tracing.
- By using Frida, the author successfully extracted the currency detection model from the app, validating its contents with a neural network visualization tool.
- The article emphasizes the importance of intellectual property rights regarding AI models, advising users to obtain permission before using or modifying extracted models.
https://altayakkus.substack.com/p/you-wouldnt-download-an-ai
@DevMisc (
#rev #android #misc
Please open Telegram to view this post
VIEW IN TELEGRAM
👍2
Bybit Hack Report ($1.4B ETH heist)
https://docsend.com/view/s/rmdi832mpt8u93s7
@DevMisc
#security #crypto #misc
https://docsend.com/view/s/rmdi832mpt8u93s7
@DevMisc
#security #crypto #misc
Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer from an app's perspective (2021)
https://signal.org/blog/cellebrite-vulnerabilities
@DevMisc
#security #signal #writeup
Cellebrite makes software to automate physically extracting and indexing data from mobile devices. They exist within the grey – where enterprise branding joins together with the larcenous to be called “digital intelligence.” Their customer list has included authoritarian regimes in Belarus, Russia, Venezuela, and China; death squads in Bangladesh; military juntas in Myanmar; and those seeking to abuse and oppress in Turkey, UAE, and elsewhere. A few months ago, they announced that they added Signal support to their software.
https://signal.org/blog/cellebrite-vulnerabilities
@DevMisc
#security #signal #writeup
I Write Type Safe Generic Data Structures in C
https://danielchasehooper.com/posts/typechecked-generic-c-data-structures/
@DevMisc (🟠 comments)
#c #generics #learn
I write type safe generic data structures in C using a technique that I haven't seen elsewhere. It involves unions and typeof, but we'll get to that. My approach works for any type of data structure: maps, arrays, binary trees… but for this article I illustrate the ideas by implementing a basic linked list.
https://danielchasehooper.com/posts/typechecked-generic-c-data-structures/
@DevMisc (
#c #generics #learn
Please open Telegram to view this post
VIEW IN TELEGRAM
❤1
Blocky Planet — Making Minecraft Spherical
https://www.bowerbyte.com/posts/blocky-planet/
@DevMisc (🟠 comments)
#gamedev #graphics #fun
This tech demo explores creating a destructible, procedurally generated spherical world with Minecraft-style blocks in the Unity engine. The central challenge involves mapping a cubic grid onto a sphere without major distortion, which is solved using a "quad sphere" technique that projects a cube's faces outward. To handle distortion at varying depths, the planet is built from concentric shells, where outer layers have more blocks than inner ones to keep block size consistent. The project also required developing custom player gravity that pulls towards the planet's core, using 3D noise for seamless terrain generation, and creating a system for placing structures that can navigate the complex geometry between the planet's different sectors and shells.
https://www.bowerbyte.com/posts/blocky-planet/
@DevMisc (
#gamedev #graphics #fun
Please open Telegram to view this post
VIEW IN TELEGRAM