pdjstone

Direct link to play Lander - https://archi.medes.live/#disc=lander&autoboot

I'd love to add a touchpad-style control to make this usable on mobile. This seems like something someone should have made before, but I've not found anything suitable.

Direct link if you want to try out Lander: https://archi.medes.live/#disc=lander&autoboot

Also, since it was on here yesterday here's Lemmings: https://archi.medes.live/#disc=lemmings-demo&autoboot

The Archimedes probably had the best port of Lemmings from the original Amiga version, including (IMHO) even better music tracks than the original.

None of the brushes seem to work in Firefox either.

Here's some stuff you used to be able to do by combining UI-redressing (clickjacking) with cross-origin drag and drop.

https://www.contextis.com/media/downloads/Context-Clickjacki...

There have also been plenty of UXSS bugs in various browsers caused by cross-origin drag-and-drop.

Seems like it would be a good idea to add crossorigin="anonymous" referrerpolicy="origin" attributes to user-provided images. This would prevent any 3rd party tracking or referrer leaking.

For more 80's microcomputer BASIC nostalgia, there's also INPUT magazine (https://en.wikipedia.org/wiki/Input_(magazine)). I spent hours and hours as a kid poring through those magazines. Archive.org has the entire series as PDFS - https://archive.org/details/inputmagazine. They were really good at explaining core programming concepts and the illustrations were also amazing.

I'll be putting out our blog post about this first thing tomorrow (we had it ready to go for next week, but I think now's a good time to add some fuel to the fire). Essentially the toy uses Bluetooth LE very insecurely and it has a speaker and a microphone. Guess what happens next?

Edit: Demo of the CloudPets functionality using Web Bluetooth https://github.com/pdjstone/cloudpets-web-bluetooth/

Shodan finds about 8,000 servers with the X-Clacks-Overhead HTTP header: https://www.shodan.io/search?query=X-Clacks-Overhead

Edit: I ran a query on HTTP Archive (which scans the top 1M sites) using Google BigQuery and got these results: https://docs.google.com/spreadsheets/d/1TYWRQWlWPuIWIj3dCHAk...

The notification is a summary of the current scan (until you stop it). New devices are ones you've never seen before the current scan. I often run it on my commute, the 'total' number give me an idea of how busy (in terms of BLE devices) it is today.

If you export the database you can pull some more interesting numbers out, e.g. http://www.contextis.com/resources/blog/bluetooth-le-increas...

The history tab is pull-to-refresh, but it's not particularly discoverable :)

I've implemented a UI hint to make this more obvious, which will be in the next version of RaMBLE.

Not sure what the GP is using, but on Android the Nordic BLE app is very good - https://play.google.com/store/apps/details?id=no.nordicsemi....

I'm also one of the authors of RaMBLE, another BLE app (https://play.google.com/store/apps/details?id=com.contextis....). It can run in the background, and can export logged BLE advertising packets and geolocation data to a SQLite DB.

Timing attacks still work in all browsers - http://www.contextis.com/documents/2/Browser_Timing_Attacks....

It seems that eInk technology has reached it's limits in terms of contrast. I was disappointed when I compared the new Kindle Paperwhite to my Kindle Keyboard. With the Paperwhite's backlight off, the contrast seemed a little worse - blacks were a little more grey.

That's the one

It's actually possible to do away with the HTML altogether (or rather have a 0-byte HTML file) by using the Link HTTP header to specify the stylesheet - http://www.w3.org/TR/html401/present/styles.html#h-14.6

There was a fun demo that showed exactly this, but I can't seem to find it now. This page - http://annevankesteren.nl/test/html-element/style-header.php - uses Link header but also uses some HTML.

[edit - fixed second link]

I wonder how long this thing would run off a pair of AA batteries?