💭 Doyensec on Twitter: "Announcing wsrepl, the WebSocket testing...

Waylon Walker Author

Jul 28, 2023 1 min read

#doyensec #appsec #websockets #burpsuite https://t.co/UVLymuSk95" loading=“lazy”>

Doyensec (@Doyensec) on X

Announcing wsrepl, the WebSocket testing tool from Doyensec! This intuitive tool is super easy to use and makes automation around WebSockets simple!

Check out our blog for the details and download…

X (formerly Twitter) · twitter.com

wsrepl is an epic websocket repl built in python on the textual framework.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

Latest Thoughts #

💭 The Website Specification

specification.website

The Website Specification A platform-agnostic, full specification of the technical features a good website should have. Built in the open under an MIT licence. The Website Specification · specification.website [1]

A solid checklist for agents to implement on most sites. Very few sites need 100% coverage, but most should probably check most of these boxes

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

References: [1]: https://specification.website/

💭 Revisiting the closed canon

derekkedziora.com

Revisiting the closed canon A post I wrote in 2023, the closing of the canon, predicted that LLM answers would replace search results, dramatically lowering traffic to individual sites, thereby removing the incentives to eve... Derek Kedziora · derekkedziora.com [1]

This is what makes rss so interesting to me. Its boring old tech that fell out of mainstream popularity years ago, yet many sites still support it. Not all, especially ones that come with a good dickover.

At the same time, it’s sad to see the human internet dying, even more quickly than before. Not only do we have rampant bots and sites seo maxxing to get to the top. We have ai search overview that answers mose simple questions pretty good, chat that does good, and agents at our fingertips. The need for tutorials is pretty much dead.

What we need now is human experiences shared and documented more than ever. I’ve been writing a whole lot less simply because this transition has been hard. Most of my pre 2024 posts were how to, notes for future me. Things so simple agents just spat out better versions in seconds these days with barely a question.

Note

This post is a thought. It’s a short not…

💭 On Rendering Diffs :: Pierre Computer Company

pierre.computer

On Rendering Diffs A technical deep dive into how we built the @pierre/diffs package and CodeView component for zero-blanking diff rendering. Pierre Computer Company · pierre.computer [1]

It’s incredible how some problems seem so simple until you load the browser with so much text it just bogs to nothing and how impossibly difficult it becomes after this point. Very cool implementation of a problem that…. who has this problem. If it takes me 2 mintues to scroll through a diff at mach speed like the video, is a diff going to solve my problem?

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

References: [1]: https://pierre.computer/writing/on-rendering-diffs

💭 His presence is still felt in the codebase to this day 😂 #codi...

www.youtube.com

Remember this clip in 5 years, after the churn we just had with RTO and ai this is going to hit. Or AI will just figure is all out for us, who knows anymore. Not that they will figure out the human side, the what does this do, why is it here. A temporary fix is a clear signal to your other devs I didn’t have enough time to do it right, but this works. I think AI will squash a large number of these, especially in big coorporate internal tooling where you are trying to juggle as much as you can and just keep it a float at all times.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 UUID as a service?!

youtube.com

How many people watching this sent their clankers out to make a uuid service for them as they were watching it. UUID as a service sounds great, heck @steipete just has to mention it and his claws are on it building out the service, no need to even type anything or directly form a thought, just mention it in the meeting and a new repo will be up by end of meeting.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

Recent Pings #

just good enough #

I built shit on the web before AI, some of it was okay, some I put a lot of time into, but some was just really shitty. Done just well enough to get the job done. All of it had to be written by hand or copy pasted from stack overflow. It was a lot of fun. Now we have a new level of shitty, it looks fine. It looks like it should work good. None of it is just barely good enough, nearly browser default style anymore.

Flowing Thoughts Ai To Help Blast Radius #

Not sure how this matters to anyone else, but I'm sitting in the car and letting the thoughts flow.

I'm having really interesting conversations with ai recently. Like things I never thought I would care this deeply about. In part because it feels like the vulns are coming faster and harder, and in part because it is really enabling me to invest some time into the development that I would not otherwise have. I'm thinking about least privilege, reducing dependencies in containers, limiting pod access to the Internet and other pods. Reducing the blast radius.

Now I've always been hesitant to bring in new dependencies. I've always tried to strip to the lowest possible dependency set n my containers, but I would also re-use the main server container to run cron job workflows. I wasn't giving much thought about what services they could access, or their internet access

Ping 59 #

"All you have to be is good"

source

Not sure if this is a quote from somewhere but thought it was some interesting advice that @thorstenball received when he was starting into web development. He asked a friend already in the industry if he thought he had a shot. He had no degree, no credentials, no experience at the time.

remember rule 4 #

I almost for got Rules 4 today, rollout when smooth late in the day right before a vacation day (terrible time to deploy I admit not my clearest plan). Race conditions are a b****, all around on this one. The app I was concerned about won the race to deploy first and was fine by itself, then another app had a race condition inside itself that killed it

almost left tokens on the table #

Almost didn't get through those gippity tokens this week, woke up yesterday with 50% and a day to use them, cut full 5.4 loose on a big project that needs a lot of work an it gobbled em right up throughout the day ran out just before bed.

`j`	Scroll down
`k`	Scroll up
`g` `g`	Scroll to top
`Shift` `G`	Scroll to bottom
`d`	Half-page down
`u`	Half-page up

`j` / `↓`	Next post (in feeds)
`k` / `↑`	Previous post (in feeds)
`Enter` / `o`	Open highlighted post
`Shift` `O`	Open in new tab
`g` `h`	Go to home
`g` `s`	Focus search
`[`	Previous page
`]`	Next page
`s`	Toggle simple/rich feed view

`/`	Focus search input
`⌘CtrlK`	Focus search (alternative)
`y` `y`	Copy URL to clipboard
`?`	Show this help
`Esc`	Close / clear highlight

Connections