Note #20176

Hey @VOXI_UK! There’s a security #vulnerability in your website. An attacker can (a) exfiltrate mobile numbers and (b) authenticate bypassing OTP.

Not sure who to talk to about ethical disclosure. Let me know?

Y100K

Reassuring to see that @Firefox’s datetime-local implementation is year 100,000 compliant. 😂 #Y100K

Note #19832

Every time I log in to HackerOne my brain pronounces it to rhyme with “pepperoni”. That’s normal, right?

Note #19777

The comprehensive @id3 v2 system for #MP3 metadata doesn’t seem to have an “explicit content” flag. I’m using an experimental XRAT frame (with a ‘1’ or ‘0’) for now, but I wonder if anyone’s already “solved” this in a better way?

Note #19700

How did it take me years of working-from-home before I thought to install one of these in my desk? Brilliant.

×

Note #19642

Note for Future Dan: if you want Firefox’s picture-in-picture (popout video) mode to be available for videos of less than 45 seconds, the setting you need is media.videocontrols.picture-in-picture.video-toggle.min-video-secs. This is useful if you’ve got a playlist of multiple short clips (which reuse the same <video> element) that you want to treat as a single long video for the purpose of picture-in-picture.

Note #19590

Called @Tesco Abingdon for a #flujab but fell down a black hole in their menu system. Had to choose the “continue to hold” option several times… and then nobody answered anyway…

Note #19581

Today is “superhero day” for nursery/reception, so I continued my effort to straddle the line between being a fun #parent and an embarassing parent line by dropping the kids off like this:

Dan dressed as The Flash

×

Note #20833

My @FreshRSS installation is the first, last, and sometimes only place I go on the Internet. When a site doesn’t have a feed but I wish it did, I add one using middleware (e.g. danq.me/far-side-rss).

Here’s to the next 20 years of my #RSS addiction.