• Drop #558 (2024-11-20): Pipes • PDS Files • Proxy

    Today’s Drop discusses three data-centric tools: Vector, a high-performance observability data pipeline enhancing data collection and routing; ATFile, a shell script for storing and retrieving blobs in ATproto/PDS infrastructure; and Betwixt, a web debugging proxy for effective traffic analysis outside browsers using a familiar interface.


  • Drop #542 (2024-10-16): Happy WebsDay

    Today’s 🕸️ web-focused Drop discusses Apple’s proposal on reducing TLS certificate lifespans to 45 days, shows how to extend the Manifest V2 extension lifespan in Chromium-based browsers, and introduces the Gosub project, which is a new Rust-based web browser engine.


  • Bonus Drop #65 (2024-10-05): CIDR Serendipity

    The weekend Bonus Drop discusses 3 tools: cidrex, a command-line utility for expanding IP addresses and CIDR ranges; ferment, a recreation of cidrex in C that focuses on smaller binary size; and libxo, a library for generating structured output in various formats.


  • Bonus Drop #62 (2024-09-15): Serverless Sunday

    The weekend Bonus Drop featurs Val Town: a cloud-based platform for coding and application development, offering serverless functions, persistence, cron job scheduling, REST API creation, and more. Additionally, there are examples of creating a CORS proxy for #CISA #KEV JSON, turning KEV JSON into Atom-flavored RSS XML, and a CRON job to email when new…


  • Drop #523 (2024-08-29): Happy ThursdAI!

    Today’s Drop covers creating a custom Ollama model to generate concise names for CVE vulnerabilities and discusses concerns about Google’s new Pixel 9 “Reimagine” feature. Additionally, it introduces “The Inference,” an editorial project by Danny Palmer exploring the impact of AI on cybersecurity and society


  • Bonus Drop #57 (2024-08-03): Vector Similarly Search And RAG-Lite

    The weekend Bonus Drop concludes a miniseries on vector search operations with VSS in R. But wait! There’s more! We also work with Ollama and three models to build a “lite” retrieval augmented generation application over the CISA KEV corpus. #RStats


  • Drop #514 (2024-08-09): DuckDB Vector Search

    Today’s Drop showcases DuckDB’s nascent vector search superpowers by walking through an example of how to generate embeddings for CISA KEV vulnerabilities, performing similarity search, and having Ollama guess good titles for clustered groups of KEV vulns. Tis def a code block-heavy post. #DuckDB #RStats


  • Drop #508 (2024-07-31): Wild, Wild, Wednesday

    The Drop is caught up to Wed! Trail of Bits conducted a security audit of Homebrew, uncovering some concerns including executable code vulnerabilities and CI/CD issues. We look at the highlights in the Drop and shunt readers to the completel report for more details. I expanded my Mastodon-thread of the initial features of Apple Intelligence…


  • Drop #495 (2024-07-08): Monday Afternoon Grab Bag

    Today’s potpourri Drop includes the evolution of text abbreviations (that ends in a weather surprise!), a new-ish color palette for accessible UI design, and the benefits of using low-tech developer tools.


  • Drop #492 (2024-07-03): It’s Always DNS

    Today’s Drop takes a look at — RFC 9606 which introduces the RESINFO DNS resource record type, — doggo – a modern command-line DNS client written in Go, and — Microsoft’s Zero Trust DNS (ZTDNS) Framework.