Mastodawn

Oh, the #FCC strikes again! 🙄 Now they're saving us from the perils of #foreign #routers, because clearly, the biggest threat to our #security is a device that connects us to funny cat videos. 🐱 Meanwhile, you're stuck here, trying to enable #JavaScript and #cookies like it's 1999. 🍪
https://blog.adafruit.com/2026/03/24/fcc-just-banned-the-import-of-all-new-foreign-made-routers-heres-what-you-can-do-about-it/ #Regulation #Internet #HackerNews #ngated

Stupid Fucking Idiot 1h ago

J'ai rajouté la possibilité d'exporter une save et d'en importer quand on veut, comme on veut. Au final c'est un peu un savestate :')

#gamedev #indiedev #javascript

FooBar 2h ago

For a while, deploying apps meant a familiar ritual: SSH in, pull the repo, pray nothing breaks, repeat for every service.

Manual.

Fragile.

Exhausting.

This week I finally consolidated everything into a proper self-hosted control plane.

The stack:
→ aaPanel as the central dashboard which I heard about from a friend
→ Docker for containerised app isolation (absolute cancer)
→ PostgreSQL for database management (with per-app panels and log visibility)
→ DuckDNS handling dynamic DNS + automated HTTPS via Let's Encrypt (stayed up until 3AM on Sunday for this btw)
→ Netlify on the frontend side cuz it's easy to deploy

The difference is hard to overstate.

One dashboard.

Full log access across services.

Deployments that don't require me to remember 12 steps in the right order at 11pm.

It's not a perfect setup, aaPanel is proprietary-ish and Netlify is clearly not self-hosted, but it's a defenitely a step away from "I'll fix it manually when it breaks" territory.

Curious if anyone here has migrated from this kind of hybrid setup toward something fully FOSS.

Always looking for the next rabbit hole.

- UltraX

#SelfHosting #DevOps #Docker #FOSS #Linux #Infrastructure #HomeServer #OpenSource #Privacy #Sysadmin #Python #javascript #saas

AA 3h ago

New.

ReversingLabs: Fake install logs in npm packages load RAT https://www.reversinglabs.com/blog/npm-fake-install-logs-rat

The Hacker News: Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials https://thehackernews.com/2026/03/ghost-campaign-uses-7-npm-packages-to.html @thehackernews #infosec #npm #phishing #javascript

Malicious npm packages use fake install logs to load RAT | ReversingLabs

The final-stage malware in the Ghost campaign is a RAT designed to steal crypto wallets and sensitive data.

ReversingLabs

Habr 3h ago

Анатомия PhaaS-кита: как коммерческая фишинговая платформа фильтрует песочницы через browser fingerprinting

Разбираем фишинговое письмо, пришедшее на адрес НКО: от SendGrid-доставки с SPF/DKIM pass до реверса JavaScript-фреймворка collector.js, который собирает GPU fingerprint, ломает WebRTC для раскрытия IP за VPN и детектирует DevTools — до того как жертва увидит фишинговую форму.

https://habr.com/ru/articles/1014420/

#phishing #phishingasaservice #browser_fingerprinting #webrtc #sendgrid #incident_response #threat_intelligence #javascript

Анатомия PhaaS-кита: как коммерческая фишинговая платформа фильтрует песочницы через browser fingerprinting

Хабр

Mathias Panzenböck 3h ago

The #JavaScript testing framework #jest somehow breaks built-in classes so that `x instanceof Error` always gives false. (Same for Array.) This completely breaks error handling when running tests! `Error.isError(x)` seems to work, but #TypeScript doesn't know about it (for NodeJS 24 LTS, even though it has that method)! I'm hack-fixing it with this TypeScript declaration:

Deni Mintsaev (mintydev)4h ago

Somehow I just implemented an #OAuth login method for the first time in my 5 years as a web developer. I'd only ever done email + password authentication before (and yes, with hashing, salting, and all the expected security measures). Well, I guess better late than never. Having a great experience with Better Auth so far!

#webdev #coding #React #JavaScript #TypeScript

Show thread

David Voki 4h ago

Unas cuantas imagenes de #simpleicons y #materialicons, combinadas con gracia y la paleta de la marca via loved @inkscape. Y ya lo tenemos: Responsive, multi-idioma y weblate, SEO, no-cookies, no-javascript. Hasta perdí el tiempo haciendo un marco de movil css.

https://carburoid.canvoki.net

Porqué cero #javascript? Porque no ha hecho falta. Ya no soy tan purista, si hubiera hecho falta lo hubiera añadido, pero no.

Porque cero #cookies? Pues porque "Aquí sí, nos preocupa tu privacidad de verdad".

Peter Kröner 4h ago

You can't subclass Proxy because it does not have a prototype property. But since this is #JavaScript and there are no rules…

Pseudonymous

4h ago

"Slow LLM" manipulates a quirk in the #JavaScript language to rewrite Fetch. When a user visits a chatbot domain the modified Fetch makes the response excruciatingly slow.

#TechnologyNews #AI

https://www.404media.co/this-web-tool-sabotages-ai-chatbots-by-making-them-really-really-slow

This Web Tool Sabotages AI Chatbots By Making Them Really, Really Slow

Artist Sam Lavigne created ‘Slow LLM’ to make people question their dependence on tools like Claude and ChatGPT. Or at least, make them super annoying to use.

404 Media