typicode/tlapse: Create a timelapse of your web development... or just automatically take screenshots of your hard work ;)
▻https://github.com/typicode/tlapse
“Create a timelapse of your web development... or just automatically take screenshots of your hard work ;)”
Ethereum : nouveau casse sans arme, ni violence de 30 millions de dollars
▻http://www.zdnet.fr/actualites/ethereum-nouveau-casse-sans-arme-ni-violence-de-30-millions-de-dollars-3985524 #cryptomonnaie
Sécurité : La société britannique Parity, qui édite un client pour les utilisateurs d’ #Ethereum, a annoncé qu’une faille avait été détectée dans certaines versions de ses porte-monnaie. Un #cybercriminel s’est servi de cette vulnérabilité afin de dérober l’équivalent de 30 millions de dollars en ether.
A hacker stole $31M of Ether — how it happened, and what it means for Ethereum
▻https://medium.freecodecamp.org/a-hacker-stole-31m-of-ether-how-it-happened-and-what-it-means-f
[...]
Around 12:00 PST, an unknown attacker exploited a critical flaw in the Parity multi-signature wallet on the Ethereum network, draining three massive wallets of over $31,000,000 worth of Ether in a matter of minutes. Given a couple more hours, the hacker could’ve made off with over $105,000,000 from vulnerable wallets.
But someone stopped them.
Having sounded the alarm bells, a group of benevolent white-hat hackers from the Ethereum community rapidly organized. They analyzed the attack and realized that there was no way to reverse the thefts, yet many more wallets were vulnerable. Time was of the essence, so they saw only one available option: hack the remaining wallets before the attacker did.
By exploiting the same vulnerability, the white-hats hacked all of the remaining at-risk wallets and drained their accounts, effectively preventing the attacker from reaching any of the remaining $77,000,000.
Yes, you read that right.
To prevent the hacker from robbing any more banks, the white-hats wrote software to rob all of the remaining banks in the world. Once the money was safely stolen, they began the process of returning the funds to their respective account holders. The people who had their money saved by this heroic feat are now in the process of retrieving their funds.
It’s an extraordinary story, and it has significant implications for the world of cryptocurrencies.
It’s important to understand that this exploit was not a vulnerability in Ethereum or in #Parity itself. Rather, it was a vulnerability in the default smart contract code that the Parity client gives the user for deploying multi-signature wallets.
[...]
Most programmers today are trained on the web development model. Unfortunately, the blockchain security model is more akin to the older model.
In blockchain, code is intrinsically unrevertible. Once you deploy a bad smart contract, anyone is free to attack it as long and hard as they can, and there’s no way to take it back if they get to it first. Unless you build intelligent security mechanisms into your contracts, if there’s a bug or successful attack, there’s no way to shut off your servers and fix the mistake. Being on Ethereum by definition means everyone owns your server.
A common saying in cybersecurity is “attack is always easier than defense.” Blockchain sharply multiplies this imbalance. It’s far easier to attack because you have access to the code of every contract, know how much money is in it, and can take as long as you want to try to attack it. And once your attack is successful, you can potentially steal all of the money in the contract.
Imagine that you were deploying software for vending machines. But instead of a bug allowing you to simply steal candy from one machine, the bug allowed you to simultaneously steal candy from every machine in the world that employed this software. Yeah, that’s how blockchain works.
In the case of a successful attack, defense is extremely difficult. The white-hats in the Parity hack demonstrated how limited their defense options were — there was no way to secure or dismantle the contracts, or even to hack back the stolen money; all they could do was hack the remaining vulnerable contracts before the attacker did.
This might seem to spell a dark future.
But I don’t think this is a death knell for blockchain programming. Rather, it confirms what everyone already knows: this ecosystem is young and immature. It’s going to take a lot of work to develop the training and discipline to treat smart contracts the way that banks treat their ATM software. But we’re going to have to get there for blockchain to be successful in the long run.
This means not just programmers maturing and getting more training. It also means developing tools and languages that make all of this easier, and give us rigorous guarantees about our code.
It’s still early. Ethereum is a work in progress, and it’s changing rapidly. You should not treat Ethereum as a bank or as a replacement for financial infrastructure. And certainly you should not store any money in a hot wallet that you’re not comfortable losing.
[...]
JAMstack | JavaScript, APIs, and Markup
▻https://jamstack.org
JAMstack: noun \’jam-stak’\
Modern web development architecture based on client-side JavaScript, reusable APIs, and prebuilt Markup.
When we talk about “The Stack,” we no longer talk about operating systems, specific web servers, backend programming languages, or databases.
The JAMstack is not about specific technologies. It’s a new way of building websites and apps that delivers better performance, higher security, lower cost of scaling, and a better developer experience.
bcosca/fatfree: A powerful yet easy-to-use #php micro-framework designed to help you build dynamic and robust Web applications - fast!
▻https://github.com/bcosca/fatfree
Condensed in a single ~65KB file, F3 (as we fondly call it) gives you solid foundation, a mature code base, and a no-nonsense approach to writing Web applications. Under the hood is an easy-to-use Web development tool kit, a high-performance URL #routing and cache engine, built-in code highlighting, and support for multilingual applications. It’s lightweight, easy-to-use, and fast. Most of all, it doesn’t get in your way.
F3 supports both SQL and NoSQL databases off-the-shelf: MySQL, SQLite, MSSQL/Sybase, PostgreSQL, MongoDB and its own lightning fast Flat-File DB (we call it Jig). It also comes with powerful object-relational mappers for data abstraction and modeling that are just as lightweight as the framework. No configuration needed.
F3 can also shield you from spam and DoS attacks, by performing DNSBL checks. It can increase your server health and uptime, by controlling web server traffic with profile analysis and bandwidth throttle.
Petit mais costaud, ça fait plus « out of the box » que Lumen et Silex.
Pas mal pour faire une API Rest rapidement, entre autres.
Apple launches Safari Technology Preview, a new browser aimed at web developers
▻http://techcrunch.com/2016/03/30/apple-launches-safari-technology-preview-a-new-browser-aimed-at-web-deve
Apple today announced it’s expanding its efforts in the area of web development, with the launch of a new version of its Safari web browser, designed specifically for developers. Called Safari Technology Preview, the company says this browser will allow developers to get an early look at upcoming web technologies in OS X and iOS, including things like the latest layout technologies, visual effects, and other developer tools.
How one programmer broke the internet by deleting a tiny piece of code - Quartz
▻http://qz.com/646467/how-one-programmer-broke-the-internet-by-deleting-a-tiny-piece-of-code
▻https://qzprod.files.wordpress.com/2016/03/13072.jpeg?quality=80&strip=all&w=400
A man in Oakland, California, disrupted web development around the world last week by deleting 11 lines of code.
The story of how 28-year-old Azer Koçulu briefly broke the internet shows how writing software for the web has become dependent on a patchwork of code that itself relies on the benevolence of fellow programmers. When that system breaks down, as it did last week, the consequences can be vast and unpredictable.
“I think I have the right of deleting all my stuff,” Koçulu wrote on March 20 in an email that was later made public.
And then he did it.
One of the open-source JavaScript packages Koçulu had written was kik, which helped programmers set up templates for their projects. It wasn’t widely known, but it shared a name with Kik, the messaging app based in Ontario, Canada. On March 11, Koçulu received an email from Bob Stratton, a patent and trademark agent who does contract work for Kik.
Stratton said Kik was preparing to release its own package and asked Koçulu if he could rename his. “Can we get you to rename your kik package?” Stratton wrote.
“Sorry, I’m building an open source project with that name,” Koçulu wrote back.
The conversation quickly escalated, with Stratton threatening legal action: “We don’t mean to be a dick about it, but it’s a registered trademark in most countries around the world and if you actually release an open source project called kik, our trademark lawyers are going to be banging on your door and taking down your accounts and stuff like that — and we’d have no choice but to do all that because you have to enforce trademarks or you lose them.”
“Hahah, you’re actually being a dick,” Koçulu replied. “So, fuck you. Don’t email me back.”
Stratton brought Kik’s request for the name to npm, again citing the company’s trademark and potential confusion. Isaac Schlueter, the chief executive of npm, agreed to turn the name over to the company.
To Koçulu, npm’s decision to transfer ownership of the kik package to Kik ran counter to the values of the community it serves. In his reply, Koçulu said he wanted all of the packages he had registered on npm taken down. “I don’t wanna be a part of NPM anymore,” he wrote. “If you don’t do it, let me know how do it quickly.”
Two days after Koçulu’s last email to npm, on March 22, JavaScript programmers around the world started receiving a strange error message when they tried to run their code. The issue was severe enough to keep some developers from updating apps and services that were already running on the web. The error spit out many lines, but one stood out:
npm ERR! 404 ’left-pad’ is not in the npm registry.
It meant that the code they were trying to run required a package called left-pad, but the npm registry didn’t have it.
Message de Azer Koçulu :
▻https://medium.com/@azerbike/i-ve-just-liberated-my-modules-9045c06be67c
Do You Wish To Spread Your Business Much More Efficiently?
Welcome to the official website of Media599 where you get to choose from a wide range of services including digital marketing, web designing and many more. Welcome to Media599 where all of your online marketing needs will be fulfilled. Our company has become one of the most famous and trusted Web Design Firms in Curacao. Our company is a creative digital marketing agency based in Curacao dealing in digital production around the world.Marketing; especially online marketing is one of the best ways to spread the name and the product of the company.
Media599 was formed in 2009, by one of the best Interactive Designer & Developer in the field, Wouter Meeuwisse .We specialize in web designing and development, app development for android and iOS and also Face book development .Whether you require the services of Beacon In CMS or Beacon In Curacao, we promise that you will never leave unsatisfied. Our company’s services for Web Development in Curacao have received positive response from the users. We consist of a professional team of graphic and web-designers, front-end developers, Facebook and WordPress specialists & App developers.
At Media599, we are offering our clients with top notch digital marketing services at the best prices.The most prior aim of our company is to offer ultimate designing and marketing service to our clients.Due to our hard work and quality services, we are now in the list of top agencies in Netherlands. Log on to media599.com and get the services of the best app designing and marketing service providers.
#Pomm - #PHP / #Postgresql object model manager
Pomm is an open source database access framework coupled with an Object Model Manager dedicated to the Postgresql™ database. It offers an alternative approach than #ORM to using database in web developments.
Fellowship Report - #ICANN52 Singapore
▻http://mathias.houngbo.net/node/50
First time I heard about ICANN was in 2006 during a web development training and about the Fellowship program in 2012 at AFRINIC-16 meeting. I was newbie in Internet Governance and I had no a clear idea about multi stakeholder model, I was selected as fellowship for ICANN52 meeting in Singapore and my objective was to understand as much as possible the whole Internet Governance process and implement it in my country as fast as possible...Attached: My report ICANN52.pdf
“npm install -g” without sudo - Kaz’hack
▻http://kazhack.org/?post/2014/12/11/npm-install-g-without-sudo
I use more and more Node.js tools, mostly for my web development tasks: linters, code formatters, unit tests… Most of the time, you want these tools to be installed “globally” so Tags: #npm #installation #logiciel #mac
Straightening our Backbone : A lesson in event-driven UI development | Mixpanel Engineering
▻https://code.mixpanel.com/2015/04/08/straightening-our-backbone-a-lesson-in-event-driven-ui-development
Our Unix-inspired development philosophy favors the integration of lightweight, independent apps and components instead of the monolithic mega-app approach still common in web development. Explicit rather than implicit, direct rather than abstract, simple rather than magical: with these in-house programming ideals, it’s little surprise that we continue to build Single-Page Applications (SPAs) with Backbone.js, the no-nonsense progenitor of many heavier, more opinionated frameworks of recent years.
#firefox Add-on Enables Web Development Across Browsers and Devices ✩ Mozilla Hacks – the Web developer blog
▻https://hacks.mozilla.org/2014/09/firefox-tools-adapter
Enter an experimental Firefox add-on called the Firefox Tools Adaptor that connects the Firefox Developer Tools to other major browser engines. This add-on is taking the awesome tools we’ve built to #debug Firefox OS and Firefox on Android to the other major mobile browsers starting with Chrome on Android and Safari on iOS. So far these tools include our Inspector, Debugger and Console. This add-on allows you to use your desktop environment to work on several small screen devices without using up precious screen space.
#dev
Malheureusement pas prévu pour marcher avec Firefox Gaia (la version mobile). Comme si les équipes ne se connaissent même pas.
#déception
In-browser kitten platform action game introduces kids to hacking #HTML by having them modify levels while playing: ▻http://eraseallkittens.com
#CSS #Web #development #cats #education #kids
#HTML #apprentissage #serious-game (mouais… :D)
La démo ne marche pas vraiment chez moi, je peux ouvrir l’édition mais je ne peux jamais sauver, annuler, etc, bref revenir au jeu ensuite.
codebabes.com | Learn Coding and Web Development the Fun Way
▻https://codebabes.com
The Internet is awesome for Learning to Code & Checkin’ out Babes separately. Until Now.
Mon dieu mon dieu mon dieu... Heureusement certains ont déjà sorti une « réplique » :
4月26日のツイート
▻http://twilog.org/ChikuwaQ/date-140426
▶ ねないで超Z級映画 第1夜 SF・ヒーロー・エロスの世界 町山智浩 - YouTube www.youtube.com/watch?v=XMC0ao… posted at 14:39:33
Top story: codebabes.com | Learn Coding and Web Development the Fun Way codebabes.com, see more tweetedtimes.com/ChikuwaQ posted at 13:51:57
My Tweeted Times tweetedtimes.com/ChikuwaQ - top stories by joygarnett, andreastemplin, jranck posted at 12:00:08
Papier is out! paper.li/ChikuwaQ/13277… Stories via @TGirard1996 @berkati @mrfidalgo posted at 09:16:15
劇団EXILE、ってあるのか。XD posted at 09:00:35
RT @donadulcinea: Bon weekend in retour #FF pic.twitter.com/8XTFMHGJM2 | a cat dude posted at 08:58:01
「米中間の戦闘行為」って、なんだそれ。(憫) posted at 08:35:57
Top story: The Piketty Panic www.nytimes.com/2014/04/25/opi…, see more tweetedtimes.com/ChikuwaQ posted at (...)
Compiling a Web Development Environment on #mac OS X
▻http://mac-dev-env.patrickbougie.com
“This guide is for compiling a web development environment in OS X. There are easier and faster methods to set up a development environment — such as Homebrew, MacPorts, Fink — but none provide absolute control.” Tags: #environnement #développement mac #logiciel #compilation #Apache #PHP #Node.js
#functional_javascript for crawling the Web
▻https://nicolas.perriault.net/code/2013/functional-javascript-for-crawling-the-web
“few people are aware of the #Functional_Programming capabilities of JavaScript. Many couldn’t see obvious usage of these in Web development, which is a bit of a shame if you ask me” Tags: functional javascript #ECMAscript #ES6 Functional Programming
CSS Front-end Frameworks with comparison - By usabli.ca
▻http://usablica.github.io/front-end-frameworks/compare.html?v=2.0
A Collection of best front End frameworks for
Faster&Easier
Web Development
via AngeZanetti ▻https://twitter.com/AngeZanetti/status/375628206402846720
Ground Javascript Framework
▻http://gnd.io
Ground is a compact, modern web development framework that provides you a firm foundation to create rich, modular, scalable, realtime interactive web applications that are required to work seamlessly both online and offline.
Ground is light (22Kb + 5Kb of dependencies), and well suited for both desktop and mobile applications.
In ground, most of the application logic is moved from the server to the client, whereas the server acts mostly as an scalable, efficient distributed storage and synchronization controller.
It includes also some rather useful features such as a hierarchical routing system, an undo/redo manager, property and declarative bindings, reference counting and automatic synchronization between clients and servers. It is design to always deliver high performance and low memory consumption.
Ground is written in TypeScript, for modularity and stability and is suitable for both javascript and TypeScript projects.
Des idées intéressantes, à regarder de plus près.
Tutorials | Codrops
▻http://tympanus.net/codrops/category/tutorials
“In this section you will find in-depth how-tos involving common web development and web design techniques.”
Improve #Mobile Support With Server-Side-Enhanced Responsive Design | Smashing Mobile
▻http://mobile.smashingmagazine.com/2013/04/09/improve-mobile-support-with-server-side-enhanced-responsive
a responsive website is not automatically a mobile-friendly website. Amid the buzz of trendy Web development techniques, the good ol’ Web server doesn’t get the spotlight it deserves. Modern Web development should be about finding the right balance between server-side and client-side implementation.
1. Use Your #CMS
2. Use A #Device-Description Repository
3. Execute #CSS #Media_Queries Server-Side
4. Optimizing #Images
5. Pre-Processing and Intelligent Caching
How to Write Code That Embraces Change
▻http://net.tutsplus.com/tutorials/how-to-write-code-that-embraces-change
Writing code, which is easy to change is the Holy Grail of programming. Welcome to programming nirvana! But things are much more difficult in reality: source code is difficult to understand, dependencies point in countless directions, coupling is annoying, and you soon feel the heat of programming hell …
Source: Web development tutorials, from beginner to advanced - Patkos Csaba
What Was Hot in 2012: Month By Month
►http://net.tutsplus.com/articles/general/what-was-hot-in-2012-month-by-month
Well, 2012 has come to a close. A plethora of excellent tutorials and articles were published throughout the year, both here on Nettuts+ and elsewhere around the web. To document the year, I compiled a list of sixty of the best tutorials, month by month …
Source: Web development tutorials, from beginner to advanced - Andrew Burgess
What to Expect From PHP 5.5
►http://net.tutsplus.com/tutorials/php/what-to-expect-from-php-5-5
xperiment with it, we can now bring you our in-depth overview of what to look forward for!InstallationIf you’d like to follow along with this article, you’ll need to install PHP 5.5 for yourself …
Source: Web development tutorials, from beginner to advanced - Gabriel Manricks
#php