"Request methods are considered 'safe' if their defined semantics are essentially read-only; i.e., the client does not request, and does not expect, any state change on the origin server as a result of applying a safe method to a target resource."
-RFC 9110 section 9.2.1
I'm still surprised by the number of web developers who do not understand that, once you include someone else's Javascript on your site, they have full access to everything on your site, including all submitted customer data.
"We are also excited to make our 2026 sponsorship packages available in May for organizations interested in enhancing their visibility with event attendees."
California is not anywhere near 83% renewable for total electricity generation. [1] Are you just adding up nameplace capacities without capacity factors?
Cox Communications used to do it in California to inject JS into sites. I remember seeing little Cox popup/toast messages in the corner of other sites.
I've said it before, but Zero Trust is such a misnomer. It implies less trust in firewalls, VPNs, and other network controls, but much more trust in the ability of end-user devices to securely store and use private keys. Also, the server side has has to trust all incoming connections from the Internet enough to verify the certificates, and run a complicated TLS implementation, which can be a huge attack surface. We're sticking with WireGuard for all our internal users.
I'm using Firefox on a Linux workstation (without Tor) and I still got the CAPTCHA. The statement "blog.adafruit.com needs to review the security of your connection before proceeding" is misleading at best. Shame on Cloudflare, this kind of dishonesty makes me not want to trust your RCA marketing pieces.
Reddit used to be free for anyone to view without logging in, but now I get "Your request has been blocked due to a network policy." Sorry, but I'm not turning my ad blocker off.
Would it be possible to write an addon to use Perl's Finance::Quote [1] like GnuCash does? It supports scraping many financial websites, as well as paid AlphaVantage quotes.
I think it's time for AWS to pull the curtain back a bit and release a JSON document that shows a list of all internal service dependencies for each AWS service.