Good write up of security vulnerabilities in a useful web-based tool for Google Cloud that should be relatively simple. It wasn't as simple as the authors intended.

Interesting security bug in Google Cloud's IAP, from 2021. Since fixed.

https://cloud.google.com/iap/docs/concepts-overview

My crusty Python code implementing EPUB, with the conforming uncompressed mimetype file as first member in the archive:

https://github.com/davidwtbuxton/ucflib/blob/e576fb97fc2a2ea...

Robin Sloan has a good Ruby project that builds good-looking web pages alongside EPUB files: https://github.com/robinsloan/perfect-edition

It was in porting that to Racket [1] that I learned about some of these EPUB standard details.

But spoiler alert, both projects just shell out to `zip` to do the actual compression.

[1]: https://github.com/otherjoel/perfect-edition-pollen/blob/mas...

I got hooked by the stereotypical 1970s production and the decidedly untelegenic (but informative) introduction from Dick MacKinnon, but the whole thing is a fascinating view of interactive programming.

Good reminiscing in the YouTube comments too.

Relevant Computer Chronicles episode from 1988: BUS wars

https://youtu.be/aYt4ZPxVkSs

IBM engineer responding to the accusation that MCA is proprietary (around 14' 15"):

"I really don't understand the term proprietary. To me that would mean that it's not available [snip] and it's available for use by anyone."

I am guessing the commenter means computing with and without use of your fingers on touch screens.

Without the fingers? How does that happen?

My memory of Frak! on the model B was glacial speeds, but looked great.

huh, i could be remembering it wrong, the yoyo was fast but you might be right about the dude being slow. definitely very smooth though.

I was interested to read about got, which uses the same on-disk format as git.

https://man.openbsd.org/ports-current/got.1

The command-line interface is consistent and minimal. It has the least amount of options possible while still being usable. We strive for sane defaults that fit our workflow, instead of offering configurability for every possible use case.

https://gameoftrees.org/faq.html

That UI only made sense if you already understood:

- That there were 4 octets in an IP address.

- Class-based IP addressing.

- Subnet bit masks.

The UI that replaced it was an improvement in that all it asked for was a series of numbers, separated by dots, constrained to 0-255.

Also this https://github.com/xeno14/recordio