Deep Dive into the Gateway API Inference Extension
Running AI inference workloads on Kubernetes has some unique characteristics and challenges, and the Gateway API Inference Extension project aims to solve some of those challenges. I recently wrote about these new capabilities in the kgateway… ⌘ Read more

Lab: Exploiting an API endpoint using documentation

Image

We will solve this lab based on the API documentation exposed to delete Carlos’s user.

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/lab-exploiting-an-api-endpoint-using-d … ⌘ Read more

**CORSplay of the Century: How I Hijacked APIs with One Misconfigured Header **

Image

Free Link🎈

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/corsplay-of-the-century-how-i-hijacked-apis- … ⌘ Read more

I asked ChatGPT what it knows about Twtxt 😂 And surprisingly it’s rather accurate:

Twtxt is a minimalist, decentralized microblogging format introduced by John Downey in 2016. It uses plain text files served over HTTP—no accounts, databases, or APIs.
In 2020, James Mills (@prologic@twtxt.net) launched Yarn.social, an extended, federated implementation with user discovery, threads, mentions, and a full web UI.
Both share the same .twtxt.txt format but differ in complexity and social features.

**I asked ChatGPT what it knows about Twtxt 😂 And surprisingly it’s rather accurate:

Twtxt is a minimalist, decentralized microblogging form …**
I asked ChatGPT what it knows about Twtxt 😂 And surprisingly it’s rather accurate:

Twtxt is a minimalist, decentralized microblogging format introduced by John Downey in 2016. It uses plain text files served over HTTP—no accounts, databases, or APIs.

In 2020, James Mills ( @prologic @twtxt.net) launched Yarn.social, an extended, federated implementat … ⌘ Read more

ProcessOne: ejabberd 25.04

Image

Just a few weeks after previous release, ejabberd 25.04 is published with an important security fix, several bug fixes and a new API command.

Release Highlights:

• Fix handling multiple occupant-id
  
• Kick_users API command
  

If you are upgrading from a previous version, there are no change … ⌘ Read more

European AI
To reduce my dependence on USA-based products, I switched from using the OpenAI API to Scaleway’s Generative API for my blog. Not only is it cheaper, but it’s based on open-source models, hosted in Europe. 🇪🇺 ⌘ Read more

** Uncovering Hidden APIs: How One Forgotten Endpoint Made Me $500**

Image

🚀Free Article Link

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/uncovering-hidden-apis-how-one-forgotten-endpoint-made-me-500-424e6388c … ⌘ Read more

極簡 HTTP 客戶端，Resty 如何讓 Golang 請求效率翻倍？
Resty 是一個基於 Golang 標準庫 net/http 構建的高效、易用的 HTTP 客戶端庫。它通過鏈式調用、自動化處理和豐富的擴展功能，極大簡化了 HTTP 請求的發送與響應處理流程，尤其適合與 RESTful API 交互的場景。Resty 的核心優勢———–鏈式調用：支持直觀的鏈式語法，提升代碼可讀性。自動序列化：輕鬆將結構體轉爲 JSON/XML，自動解析響應內容。 ⌘ Read more

Go API 中的上下文取消機制
在分佈式系統和微服務架構中，高併發請求和資源管理是每個開發者必須面對的挑戰。尤其是在處理長時間運行的任務時，如何實現優雅的取消和超時控制，直接關係到系統的穩定性和用戶體驗。Go 語言通過context包提供了一套標準化的解決方案，本文將深入探討其核心用法與最佳實踐。 上下文（Context）的本質與作用——————context.Context是 Go 語言中用於傳遞請求範 ⌘ Read more

Rust 1.86.0 released
Version\
1.86.0 of the Rust language has been released. Changes include support
for trait upcasting, the ability to index multiple elements of HashMaps and
slices mutably, and a number of stabilized APIs. ⌘ Read more

yep, it looks nice! How could add my URL?
Is it following the same endpoints than https://registry.twtxt.org/swagger-ui/#/users/addUser ?

BTW, I think that the usage section has a wrong base URL or something.

For example if you enter here: https://watcher.sour.is/conv/4rx5iyq
It says to look for this URL: https://watcher.sour.is/conv/4rx5iyq/api/plain/users

Which seems to return the content from https://watcher.sour.is

thanks for sharing @xuu@txt.sour.is!

Checking for example https://watcher.sour.is/api/plain/twt or https://registry.twtxt.org/api/plain/tweets, I don’t know whether this syntax is being used by clients or by people. Is it integrated on Yarn in any way? Genuinely asking to know more about it.

If I might throw a quick thought to those working on the registries, it would be nice to have an endpoint with a valid twtxt output (perhaps cached or dumped to a static file) which a client could point to, helping to discover it’s content in a way which is compatible with the twtxt spec.

Taking the first twt I found in https://watcher.sour.is/api/plain/twt as an example:
reddit_world_news https://feeds.twtxt.net/Reddit_World_News/twtxt.txt 2025-03-28T00:29:25Z **China bans US logs. 3 billion dollar[...])
it would be something like
TIME <@NICK URL> TWT
2025-03-28T00:29:25Z <@reddit_world_news https://feeds.twtxt.net/Reddit_World_News/twtxt.txt> **China bans US logs. 3 billion dollar[...])

That way you could watch the latest twts with your client, something similar to what we find on Mastodon: https://mastodon.online/public/local

Some support from the clients to separate these ‘discovery’ content, from your following timeline might be required. 🤔

@eapl.me@eapl.me I am currently working on Implementing a registry that is also a crawler. It finds any feeds that are mentioned or in the follows header.

https://watcher.sour.is/api/plain/twt

https://watcher.sour.is/api/plain/users

I think @prologic@twtxt.net is also working on one.

@eapl.me@eapl.me I am currently working on Implementing a registry that is also a crawler. It finds any feeds that are mentioned or in the follows header.

https://watcher.sour.is/api/plain/twt

https://watcher.sour.is/api/plain/users

I think @prologic@twtxt.net is also working on one.

ProcessOne: ejabberd 25.03

Image

Release Highlights:

• Matrix Gateway Gets Room Support
  
• Multiple Simultaneous Password Types
  
• Execute API Commands Using XMPP Client
  

If you are upgrading from a previous version, please check the [changes in SQL schemas](https://www.process-one … ⌘ Read more

@eapl.me@eapl.me this “directory” is actually named registry. You can see users at https://registry.twtxt.org/api/plain/users and his twts at https://registry.twtxt.org/api/plain/tweets

golang 每日一庫之 base64Captcha
今天要介紹的庫 mojocn/base64Captcha 是一個用於 Go 語言的高效驗證碼生成庫，支持圖片、音頻等多種驗證碼格式，並且可以通過 base64 編碼輸出，方便前端直接使用。該庫廣泛用於 Web 應用、REST API 以及需要身份驗證的系統中，以增強安全性。主要功能——–支持多種驗證碼類型數字驗證碼 （DriverDigit）：僅包含數字，適用於一般驗證碼場 ⌘ Read more

PEP 782: Add PyBytesWriter C API
Add a new PyBytesWriter C API to create bytes objects. ⌘ Read more

@lyse@lyse.isobeef.org

Although, most software I use is decentish in that regard.

Is that because you mostly use Qt programs? 🤔

I wish Qt had a C API. Programming in C++ is pain. 😢

Extending my Komoot export script
I’ve taken another look at my export script for Komoot (original post), now that Bending Spoons has acquired Komoot. I’ve extended the script to also download cover images and, if available, an image of the map – I found that in the API responses. ⌘ Read more

golang 每日一庫之 gopsutil
shirou/gopsutil 是一個用 Go 語言實現的跨平臺系統信息採集庫，其設計靈感來源於 Python 的 psutil。它爲開發者提供了一套統一、簡潔的 API，用於獲取底層操作系統的各項指標數據，如 CPU、內存、磁盤、網絡、主機信息以及進程狀態等。下面我們將從多個方面詳細介紹這個庫的功能、設計特點、使用示例以及應用場景。庫簡介——跨平臺支持 gopsutil ⌘ Read more

i love everything pico.sh i wish i had more of a use for their services but the paste service is SUPER handy omg i finally had a reason to use it (to send a friend my unfinished failed marvel API bash program lol) and it’s epic. i love SSH i love TUI apps they are the best

Building Scalable, Agile, and Secure APIs with Kubernetes and Microservices
The dawn of APIs across the digital ecosystem has fundamentally disrupted standard business models and software development. And enhancing these approaches with intelligent, data-driven, and real-time insights allows your organization to dynamically scale. However traditional monolithic… ⌘ Read more

Expose the Kubernetes API and access it anywhere
Accessing the Kubernetes API for your clusters from anywhere or across any network is a powerful lever. It’s even better if you can do so without shipping or extending more messy networks, like VPCs or VPNs…. ⌘ Read more

Dapr in Two Minutes: Simplifying Distributed Application Development
Dapr (Distributed Application Runtime) takes the pain out of building distributed applications by offering developers simple “building block” APIs to manage the challenges of connecting with complex infrastructure. Developers can use these APIs to interact with… ⌘ Read more

New study reveals unifying theme behind homelessness — and it’s not drug use
,    -  Good Good Good | Case Western Reserve University

_Stephan: In American cities all over the country, homelessness is becoming a growing problem. In 2022, according to the Department of Housing and Urban Development in the United States approximately 18 out of 10,000 Americans, or 582 … ⌘ Read more

Golang 實現 IP 全球定位
在 Golang 開發中，如何快速獲取 IP 地址的地理位置？無論是安全審計、日誌分析，訪問控制，還是資產測繪，網絡空間搜索等等都可能需要 IP 定位。本篇文章將介紹常見幾種 Golang IP 定位方案，幫助你選擇最合適的方法。IP 全球定位系統IP 定位系統是利用多種數據庫，如全球城市數據庫、多語言支持庫、IP 地址數據庫以及地圖服務等資源來精準確定用戶位置。藉助於 IP 地理定位 API，我 ⌘ Read more

golang 每日一庫之 concurrent-map
概述orcaman/concurrent-map/v2 是一個 Go 語言的高性能併發安全哈希表實現。它通過分片鎖（shard locking）策略減少鎖競爭，適用於高併發讀寫場景。與標準庫的 sync.Map 不同，該庫針對通用鍵值類型優化，提供更靈活的 API 和更高性能。項目地址GitHub 倉庫 : https://github.com/orcaman/concurrent- ⌘ Read more

使用 Golang 編寫 2D 遊戲
Ebitengine 是一款基於 Go 語言的 2D 遊戲開發引擎，提供了簡單易用的 API 和跨平臺的支持，開發者可以通過它輕鬆構建遊戲項目。核心特性——-跨平臺支持 Ebitengine 支持多個平臺，包括 Windows、macOS、Linux，以及 WebAssembly（可運行於瀏覽器中）。這使得開發者可以在不同設備上運行同一個遊戲項目，而無需編寫額外的代碼。易用的 API ⌘ Read more

context-Context - 構建高可用的 Go 應用
你是否有遇到過這樣的情況：意外的流量激增導致數據庫掛起 系統掛掉，用戶無法訪問 做爲開發人員，你忙於調試問題，事後還會被扣除績效和獎金 不受控制的 goroutines，長時間運行的任務，無響應的 API 這些都會對構建一個高可用的應用造成嚴重影響。這些問題通常源於缺乏適當的上下文管理。無論您是在處理 API 請求、管理數據庫操作，還是構建分佈式系統，掌握上下文都是每個 Go ⌘ Read more

Amd of course, TDD! I tried that, but it doesn’t work all that great for me in its strict form. I have the feeling that coming up with a single new failing test, making it pass, maybe some refactoring, rinse and repeat wastes significantly more time than doing it in – what they call – the “bundle” approach. Coming up with several tests in advance and then writing the code or vise versa is usually much quicker. I do find that more enjoyable, it also helps me to reduce smaller context switches. I can focus on either the tests or the production code.

As for the potentially reduced code coverage with a non-TDD approach, I can easily see which parts are lacking tests and hand them in later. So, that’s largely a specious argument. Granted, I can forget to check the coverage or simply ignore it.

I agree with John, TDD results in less elegant code or requires more refactoring to tidy it up. Sometimes, it’s also not entirely clear at the beginning how the API should really look like. It doesn’t happen often, but it does happen. Especially when experimenting or trying out different approaches. With TDD, I then also have to refactor the tests which is not only annoying, but also involves the danger of accidentally breaking them.

TDD only works really well, if you have super tiny functions. But we already established that I typically don’t like tiny methods just for the purpose of them being extremely short.

When fixing a bug, I usually come up with a failing test case first to verify that my repaired code later actually resolves the problem. For new code, it depends, sometimes tests first, sometimes the productive code first. Starting off with the tests requires the API to be well defined beforehand.

Go 項目目錄結構指南
擁有一個井然有序的目錄結構非常重要，原因有幾個：層次分離：它將項目的不同部分——如業務邏輯、數據訪問和 API 處理——放在各自的文件夾中。這樣，開發人員可以專注於特定領域，而不會感到不知所措或困惑。 更好的組織： 通過整齊地整理你的代碼及其依賴項，較大的項目變得更容易導航。你總是知道在哪裏找到你需要的東西！ 可重用性： 一個良好的結構讓你可以創建可以在項目不同部分使用的組件或包，從而 ⌘ Read more

golang 每日一庫之 swaggo
Go Swagger（Swaggo）是一個用於 Go 語言的開源工具集，它幫助開發者自動生成 API 文檔。它利用 Go 的註釋和結構體信息，通過解析代碼，生成符合 OpenAPI 規範的文檔。OpenAPI（也稱爲 Swagger）是一個廣泛使用的 API 規範，它使得 API 文檔更加標準化、易於理解和交互。Swaggo 主要的功能包括：1. 自動生成 OpenAPI 文檔Swaggo 通過解 ⌘ Read more

golang 每日一庫之 govalidator
govalidator 是一個用 Go 語言編寫的輕量級的驗證庫，提供了豐富的驗證和清理功能，主要用於驗證和清理用戶輸入的數據（如表單數據、API 請求的 JSON 數據等）。它支持常見的數據驗證功能，如電子郵件、URL、IP 地址、信用卡號等的驗證，同時也支持自定義驗證規則。1. 安裝你可以通過 go get 來安裝 govalidator：go get github.com/asaskevic ⌘ Read more

ok, sounds like a ‘large’ project to me.
Is it more an API (more oriented to developers), more oriented to UI/UX/Frontend? Perhaps both?

I’d go with prologic’s advice of measuring and prioritizing. Perhaps you have a budget or at least something like “let’s see how far can we reach in 6 months”, and possibly you won’t finish in the time you have (just guessing).

Something that has helped me was defining “Why do you we want to refactor this project?”.
Could it be to make it compile on newer versions, or making it easier to grow and scale, or perhaps they are trying to sell that product to another company. Every reason has a different path, IMO.

Go 項目裏的 API 對接，這樣做 Mock 測試才舒服
我們在開發項目的過程中總會遇到要調用依賴方接口的情況，如果依賴方的 API 接口還沒有開發好，通常我們會先約定好 API 接口的請求參數、響應結構和各類錯誤對應的響應碼，再按照約定好請求和響應進行開發。除了上面說的情況外，還有一種就是當你開發的功能需要與微信支付類的 API 進行對接時，因爲各種訂單、簽名、證書等的限制你在開發階段也不能直接去調用支付的 API 來驗證自己開發的程序是否能成功完成對 ⌘ Read more

SNeedlewoods submits CCS proposal for ~4.5 months of part-time Monero dev work
SNeedlewoods1 has submitted a second CCS proposal2, looking to work part-time on Monero development for ~4.5 months:

Since the feature-complete Wallet API PR from my previous CCS proposal is finally in “pending review” state (I will give my best to quickly resolve issues coming up during the review, so it hopefully will get merged soon), it’s time for the next steps..

Funding propose ... ⌘ [Read more](https://monero.observer/sneedlewoods-submits-second-monero-dev-work-ccs-proposal/)

For many years I have found Flask to be too basic a tool for modern development. But since I create APIs using Flask with Pydantic to validate the input data, some middlewares for parsing and Blueprint to separate the code into modules… I must admit that I am super comfortable, fast and easy to test.
#flask #python #pydantic

I share a simple API template with Clean Architecture using #flask and #fastapi
https://git.andros.dev/andros/api-template-with-clean-architecture
#cleancode #cleanarchitecture

golang 每日一庫之 jinzhu-copier
這都 2025 年了，你還在一個一個手動複製字段嗎?jinzhu/copier 是一個 Go 語言庫，用於深度複製結構體（struct）及其字段，支持嵌套結構體、切片、數組等的複製。這個庫的主要目標是通過簡單的 API 提供高效、易用的對象複製功能，避免手動編寫複製邏輯。核心特性：深度複製支持深度複製結構體及其嵌套字段，包括切片、數組、映射（map）等。 對象的字段會遞歸地被複制到目標對象中 ⌘ Read more

ofrnxmr completes third milestone for BasicSwapDEX CCS
ofrnxmr1 has completed2 the third milestone (M3-F/M3-B) for their CCS proposal3 to empower and steward BasicSwapDex4 to production quality software:

Request for M3-F and M3-B (M3-O comes end of month 4) [..] This next sprint (month) will add some of the more exciting functionality, further improve the UX and add some security features (such as client auth for the api port and amm integra … ⌘ Read more

Monero Dev Activity Report - Week 3 2025: 66 PRs, 12 Issues
This weekly report aims to provide a big picture view of Monero development activity, increase community support for existing devs and, hopefully, encourage new contributions.

Opened (13)

monero-project/monero:

• #96971 [WIP] carrot_impl (jeffro256)
  
• #96982 add do_not_relay option to sweep_single … (SNeedlewoods)
  
• #97063 ci: build wallet_api for all linux cli jobs (t … ⌘ Read more

ProcessOne: How Big Tech Pulled Off the Billion-User Heist

Image

For many years, I have heard countless justifications for keeping messaging systems closed. Many of us have tried to rationalize walled gardens for various reasons:

• Closed messaging systems supposedly enable faster progress, as there’s no need to collaborate on shared specifications or APIs. Y … ⌘ Read more

been playing with making fun scripts using charm CLI’s gum library :P

one that gets lyrics from an open lyrics database’s API and accepts input for artist & song names: https://asciinema.org/a/697860

and one that uses a user-provided last.fm API key to pull what’s currently playing or what last played on your account :) https://asciinema.org/a/697874

(#vwzj4aa) @suitechic@suitechic Even Namecheap has a bunch of other service offerings 🤣 I’m kind in the market for a new registr …
@suitechic @yarn.girlonthemoon.xyz Even Namecheap has a bunch of other service offerings 🤣 I’m kind in the market for a new registrar, one that has a decent API and just does domain name registrations 🤔 ⌘ Read more

woodser releases monero-java v0.8.34, monero-ts v0.11.2
woodser1 has just released monero-java v0.8.342 and monero-ts v0.11.23 with various fixes and updates:

monero-java:
-fix block template serialization
-changed slf4j dependency to api instead of simple
-fix notification of connection change on check connection
-update monero-cpp submodule
monero-ts:
-Fix handling of internal assets to eliminate the need for dist/dist
-Fix block ... ⌘ [Read more](https://monero.observer/woodser-releases-monero-java-v0.8.34-monero-ts-v0.11.2/)

Yes, ik. But i can’t use this api without yarn.social (feed is just file)

@doesnm@doesnm.p.psf.lt It is the same API that yarnc the command-line client uses.

(#o2ru6pq) @doesnm It is the same API that yarnc the command-line client uses.
@doesnm @doesnm.p.psf.lt It is the same API that yarnc the command-line client uses. ⌘ Read more

Want this API for Goryon or just Goryon with support to just twtxt.txt. I can’t read timeline without visible replies and missing twts

@andros@twtxt.andros.dev What do you mean by API? yarnd (which powers Yarn.social pods like twtxt.net) does have an API, however that API is designed for clients to interact with the pod and the user’s account and feed. e.g: there is a command-line client called yarnc and I used to maintain a mobile native app (using Flutter).

What use-case did you have in mind?

(#gjl3gwq) @andros What do you mean by API? yarnd (which powers Yarn.social pods like twtxt.net) does have an API, however that API is desig …
@andros @twtxt.andros.dev What do you mean by API? yarnd ( which powers Yarn.social pods like twtxt.net) does have an API, however that API is designed for clients to interact with the pod and the user’s account and feed. e.g: there is a command-line client called yarnc and I used to maintain a mobile native app ( … ⌘ Read more

@prologic@twtxt.net Is it possible to interact with twtxt.net from outside? For example, an search API

everoddandeven proposes bounty for monero-cpp Python bindings module
everoddandeven1 has proposed a bounty2 for creating a Python module that exposes the core functionalities of the monero-cpp library 3:

This module should enable Python developers to interact with monero-cpp API using a Pythonic interface without needing to write or interact with C++ code directly.

Total Bounty: 0 XMR (to date)

• Code is ope … ⌘ Read more

Go Protobuf 新增全新不透明 API
Protobuf 是 Google 的語言中立的數據交換格式。早在 2020 年 3 月，就發佈了 google.golang.org/protobuf 模塊，這是對 Go protobuf API 的重大修訂。該包引入了對反射的一流支持、一個 dynamicpb 實現和 protocmp 包，以便於測試。現在，我們將爲生成的代碼發佈一個新的 API，我們將說明創建新 API 的動機，並展示如何在 ⌘ Read more

高性能 Gin 框架原理學習教程
作者：jiayan 工作中的部分項目使用到了 gin 框架，因此從源碼層面學習一下其原理。1. 概述Gin 是一款高性能的 Go 語言 Web 框架，Gin 的一些特性：快速 基於 Radix 樹的路由，小內存佔用，沒有反射，可預測的 API 性能。 支持中間件 傳入的 HTTP 請求可以由一系列中間件和最終操作來處理，例如：Logger，Authorization，GZIP，最終操作 D ⌘ Read more

用 Option 模式和對接層簡化和管理 Go 項目的外部 API
在項目開發實現功能需求的過程中不可避免的要與外部第三方系統進行交互，這些交互大部分是通過請求 API 接口來完成的。前幾節提到但一直沒帶大家用代碼過一遍的 Lib 層就是負責寫第三方對接邏輯的，通過把跟第三方對接的邏輯限制在 Lib 層裏，讓項目的其他部分不需要關注第三方的邏輯，從而達到每部分都職責分明，這樣項目的代碼多起來後纔不會變得臃腫和雜亂。不過在演示 Lib 層的使用前我們需要先一起給項目 ⌘ Read more

(#5i25niq) @bender@bender And technically even that’s not really the problem either 🤣 The software devs have decided to update the minimum …
@bender And technically even that’s not really the problem either 🤣 The software devs have decided to update the minimum hardware requirements. Maybe that’s legit ( API changes) maybe not 🤔 ⌘ Read more

Apple Card Savings Account Receives Yet Another Interest Rate Cut
The Apple Card’s high-yield savings account received an interest rate cut overnight, the fourth time it has done so this year.

Image

The ‌Apple Card‌ savings account’s annual percentage yield (APY) dropped from 4.1% to 3.9%. Push notifications regarding the cut were sent to ‌Apple Card‌ users on Tuesday evening. Savings account inte … ⌘ Read more

精通 Go 併發：上下文傳播與取消的奧祕
Go 的併發模型堪稱一場革命，但管理複雜的併發操作並非易事。這時，context 的傳播與取消機制便成爲了強有力的工具。通過這些機制，我們可以構建健壯的、可取消的操作，甚至跨越多個 goroutine 和網絡邊界。基礎知識—-context 包提供了一種方法，用於在 API 邊界和進程之間傳遞截止時間、取消信號以及請求範圍的值。這是控制長時間運行操作和優雅關閉服務的關鍵。以下是一個使用 con ⌘ Read more

SNeedlewoods completes first part-time Monero dev work CCS
SNeedlewoods1 has posted a Monero dev update2 after working part-time on Monero development for 1 month (~65 hours) during their first CCS proposal3:

Thanks for all the support from CCS coordinators, upvoters, donors and dev colleagues. It’s an honor to be able to work with you. [..] Will continue to work on the wallet API and will try to solve review comments ASAP, but since I’ll go take some days off … ⌘ Read more

NVK Achieves Day-Zero Support for Vulkan 1.4
The Khronos Group recently announced the release of the Vulkan 1.4 specification, and NVK, an open-source Vulkan driver for NVIDIA hardware, has achieved day-zero conformance with the latest API. This support has been integrated into Mesa and will be available in the upcoming Mesa 25.0 release, scheduled for early 2025. This development highlights Mesa’s ongoing […] ⌘ Read more

Gin 框架 JSON 格式返回結果的使用方式
大家好，我是 frank。「Golang 語言開發棧」公衆號作者。01 介紹Gin 框架爲 JSON、XML 和 HTML 渲染提供了易用的 API。本文我們主要介紹 JSON 的使用方式。02 JSON在 Go 項目開發中，當開發 HTTP API 時，我們通常提供 JSON 格式的返回結果。Go 框架爲 JSON 渲染提供了易用的 API。普通 JSON示例代碼：func main() { ⌘ Read more

APIOps and an API gateway: Get your development groove back
Member post originally published on the ngrok blog by Joel Hans Developers love a groove. No, I don’t mean a touch of jazz to class up your workday, but the specific patterns you rely on for… ⌘ Read more

Gain insights into cloud native applications with the OpenTelemetry Certified Associate (OTCA)
Announcing a New CNCF certification for OpenTelemetry OpenTelemetry (also known as OTel) is an open-source observability framework with tools, libraries, APIs, and SDKs for collecting, processing, and exporting rich telemetry data such as traces, metrics, and… ⌘ Read more

Go 項目實戰 - API 路由的分模塊管理
隨着項目開發的迭代，我們寫的接口往往會越來越多，如果都把 API 的路由寫到一個文件裏，那麼整個路由文件就會變得又亂又長，所以我們最好在項目開始階段就給路由的分模塊管理做好規劃。今天這個文章給大家介紹一下 Web 項目 API 路由的分模塊管理，我們的項目使用的是 Gin 框架，但基本上所有的 Web 框架都能按照這個方式來分模塊管理 API 接口的路由。 一些路由管理混亂的例子——– ⌘ Read more

Cloud Native Computing Foundation Announces Dapr Graduation
Dapr provides a set of integrated APIs for building reliable and secure distributed applications, increasing developer productivity by 20-40% SALT LAKE CITY, Utah – KubeCon + CloudNativeCon North America – November 12, 2024 – The Cloud… ⌘ Read more

XMRig v6.22.2 released
XMRig 1 version 6.22.22 has been released with a few bug fixes.

Fixed corrupted API output in some rare conditions.
Fixed number of threads on the new Intel Core Ultra CPUs.

Verify the SHA256 sums with xmrig3’s GPG key4 (ID: 446A53638BE94409) before using the software.

Consult the README.md5 file for more information about XMRig and transfer Monero to the project’s donation address6 if you want to support the … ⌘ Read more

Monero Dev Activity Report - Week 44 2024: 11 PRs, 10 Issues
This weekly report aims to provide a big picture view of Monero development activity, increase community support for existing devs and, hopefully, encourage new contributions.

Opened (5)

monero-project/monero:

• #95471 tests: framework for wallet cpp <> live daemon tests (j-berman)
  
• #95482 wallet2_api: use std::optional instead of handmade optional (jeffro256)
  
• #95493 Updat … ⌘ Read more

Model-Based Testing with Testcontainers and Jqwik
We demonstrate how to use model-based testing with jqwik and Testcontainers to automate regression testing on a REST API across different application environments. ⌘ Read more

IP 訪問限制及提交次數，用 golang 如何實現 ？
在 Web 應用中，通常會需要對 IP 訪問進行限制以及控制提交次數，以防止惡意攻擊（例如暴力破解、DoS 攻擊、API 濫用等）。爲了實現這一功能，我們可以結合 Golang 的特性，使用中間件或者基於 Redis 這樣的緩存服務來實現 IP 限制和提交次數的控制。實現步驟IP 訪問限制：對每個 IP 的訪問頻次進行限制，比如每個 IP 每分鐘只能訪問某個接口 10 次。超過限制後，返回錯誤信息 ⌘ Read more

Ignite Realtime Blog: Smack 4.5.0-beta5 released
The Ignite Realtime developer community is happy to announce that Smack 4.5 entered its beta phase. Smack is a XMPP client API written in Java that is able to run on Java SE and Android. Smack’s beta phase started already a few weeks ago, but 4.5.0-beta5 is considered to be a good candidate to announce, as many smaller issues have been ironed out.

With Smack 4.5 we bumped the minimum Java version to 11. Furthermore Smack now requires a minimum And … ⌘ Read more

Justin Berman posts CCS progress report after 195 hours of dev work
Justin Berman1 has published the first progress report2 for his full-time 2024 (part 8) Monero/Seraphis dev work CCS proposal3:

I’m currently waiting on @kayabaNerve to complete work on the prove/verify API before I continue on to construct/verify/make consensus changes for fcmp++ txs (deliverables 4/5/6 of this CCS). To maintain forward progress on the fcmp++ integration, and since dang … ⌘ Read more

[ANN] If you run the haveno.markets website, please contact me

[..] Do you operate haveno.markets? You are welcome to stay pseudoanonymous but please open source the project and start accepting contributions from the community (like me). Two updates I can think of right away are to include a json api and to source data from bisq too. Please contact me at www.ki9.us/contact if you know anything about haveno.markets or its operator. If I don’t hear back after a week or two, I will have to assume haveno.markets is untrustworthy until pro … ⌘ Read more

ProcessOne: WebPush support on your fluux.io instance
We’re excited to announce the latest enhancement to Fluux.io services – the integration of WebPush support. This significant update extends our services beyond

FCM/APNs, enabling push notifications for XMPP across various platforms. Now, our push notification capabilities are not li … ⌘ Read more

ki9 starts work on XMR price API with data from Bisq, Haveno-reto
Keith Irwin (ki91) has apparently started working on XMR Price F.Y.I. 2 - a new Monero price API with unbiased street price data from multiple sources, including Haveno-reto 3 and Bisq 4:

[X] Domain name service
[X] TLS certs
[X] Nginx proxy
[X] Basic 11ty site
[ ] Basic http API
[ ] Haveno-reto data
[ ] Bisq data
[ ] Coingecko data
[ ] Forex data
[ ] API
[ ]  ... ⌘ [Read more](https://monero.observer/ki9-starts-work-xmr-price-api-data-haveno-bisq/)

SNeedlewoods submits CCS proposal for 1 month of part-time Monero dev work
SNeedlewoods1 has submitted their first CCS proposal2 to work part-time on Monero development for 1 month:

For this proposal the focus of work will be on the new wallet API [..] The work is already ongoing since May 2024 [..] This is a “pilot” proposal to see how things work out. [..] Hopefully I will become a long term contributor for general development.

Funding proposed: 2.15 XMR (10-15 hour ... ⌘ [Read more](https://monero.observer/sneedlewoods-submits-monero-dev-work-ccs-proposal/)

Karmada v1.11 version released! New cross-cluster rolling upgrade capability for workload!
Project post by Karmada Maintainers Karmada is an open multi-cloud and multi-cluster container orchestration engine designed to help users deploy and operate business applications in a multi-cloud environment. With its compatibility with the native Kubernetes API, Karmada can… ⌘ Read more

RavenTree：輕量級的 Go HTTP 請求庫，內置重試機制和錯誤處理
RavenTree 是一個輕量級的 Go 庫，旨在通過提供易於使用的接口、內置對各種 HTTP 方法的支持、接受重試處理等功能來簡化 HTTP 請求。它爲開發者提供了一種高效便捷的方式與網絡服務進行交互。RavenTree 的核心功能—————易於使用的接口：  RavenTree 提供了一個簡單直觀的 API，可以方便地創建和發送 HTTP 請求。 內置支持各種 HTT ⌘ Read more

Apple Card Savings Account Receives Another Interest Rate Cut
The Apple Card’s high-yield savings account received an interest rate cut overnight, the second time it has done so this year.

Image

The ‌Apple Card‌ savings account’s annual percentage yield (APY) dropped from 4.4% to 4.25%, in line with the US Federal Reserve approving an aggressive rate c … ⌘ Read more

構建 Go RESTful API 的終極指南：Fiber、GORM 和 PostgreSQL
本文將帶你一步步構建一個基於 Go、Fiber 和 GORM 的 RESTful API，並使用 PostgreSQL 作爲數據庫。我們將涵蓋從項目搭建、數據庫配置到 API 路由、認證、授權、錯誤處理等關鍵環節，並附有完整代碼示例和詳細解釋，幫助你快速上手 Go RESTful API 開發。項目搭建—-首先，我們需要創建一個新的 Go 項目並安裝必要的依賴包。 初始化 Go 模塊go mo ⌘ Read more

如何用 Go 來構建 LLM 應用
隨着大型語言模型（LLM）及其相關工具（如嵌入模型）在過去一年中能力顯著提升，越來越多的開發者考慮將 LLM 集成到他們的應用程序中。由於 LLM 通常需要專用硬件和大量計算資源，它們通常作爲網絡服務打包，提供 API 供訪問。這就是 OpenAI 和 Google Gemini 等領先 LLM 的 API 工作方式；即使是像 Ollama 這樣的自託管 LLM 工具，也將 LLM 封裝在 RES ⌘ Read more

Go 開發人員開發 WebRTC 的福音
Pion 是 WebRTC API 的純 Golang 實現。開發 WebRTC 應用可以使用該庫，提高開發效率。你可以使用 Pion 去創造一些很棒的東西，以下是一些可以讓你創意源源不斷的想法：發送一個視頻文件到多個瀏覽器，以實現完美同步的電影觀看。 將嵌入式設備上的網絡攝像頭內容發送到瀏覽器，無需額外的服務器。 不需要訂閱發佈，就可以在兩臺服務器之間安全地發送數據。 ⌘ Read more

Go 語言 API 文檔利器：絲襪哥（Swagger）保姆級使用指南大揭祕！
咱們都知道在 API 開發中，文檔是必不可少的一環。swaggo/swag 是一個用於 Go 語言的自動化生成 API 文檔的工具，它可以將代碼註釋轉換爲 Swagger 文檔，方便開發者和用戶理解 API 的使用方法。本文將詳細介紹 swaggo/swag 的使用方式以及它的特性。1. 安裝 Swaggo/Swag先在你的 Go 項目中安裝 swag 命令行工具和 gin-swagger 依賴： ⌘ Read more

構建由大型語言模型（LLM）驅動的 Go 應用程序
隨着過去一年大型語言模型（LLM）及其相關工具（如嵌入模型）的能力顯著增長，越來越多的開發者開始考慮將 LLM 集成到他們的應用程序中。由 於 LLM 通常需要專用硬件和大量的計算資源，它們最常見的形式是作爲提供 API 訪問的網絡服務。這就是領先的 LLM 如 OpenAI 或 Google Gemini 的 API 的工作方式；即使是運行你自己的 LLM 工具，如 Ollama[1]，也會將 ⌘ Read more

PEP 756: Add PyUnicode_Export() and PyUnicode_Import() C functions
Add functions to the limited C API version 3.14: ⌘ Read more

@prologic@twtxt.net I believe you when you say registries as designed today do not crawl. But when I first read the spec, it conjured in my mind a search engine. Now I don’t know how things work out in practice, but just based on reading, I don’t see why it can’t be an API for a crawling search engine. (In fact I don’t see anything in the spec indicating registry servers shouldn’t crawl.)

(I also noticed that https://twtxt.readthedocs.io/en/latest/user/registry.html recommends “The registries should sync each others user list by using the users endpoint”. If I understood that right, registering with one should be enough to appear on others, even if they don’t crawl.)

Does yarnd provide an API for finding twts? Is it similar?

@prologic@twtxt.net I guess I thought they were search engines. Anyway, the registry API looks like a decent one for searching for tweets. Could/should yarn.social pods implement the same API?

@prologic@twtxt.net What’s the difference between search.twtxt.net and the /api/plain/tweets endpoint of a registry? In my mind, a registry is a twtxt search engine. Or are registries not supposed to do their own crawling to discover new feeds?

@prologic@twtxt.net How does yarn.social’s API fix the problem of centralization? I still need to know whose API to use.

Say I see a twt beginning (#hash) and I want to look up the start of the thread. Is the idea that if that twt is hosted by a a yarn.social pod, it is likely to know the thread start, so I should query that particular pod for the hash? But what if no yarn.social pods are involved?

The community seems small enough that a registry server should be able to keep up, and I can have a couple of others as backups. Or I could crawl the list of feeds followed by whoever emitted the twt that prompted my query.

I have successfully used registry servers a little bit, e.g. to find a feed that mentioned a tag I was interested in. Was even thinking of making my own, if I get bored of my too many other projects :-)

@prologic@twtxt.net Yes, fetching the twt by hash from some service could be a good alternative, in case the twt I have does not @-mention the source. (Besides yarnd, maybe this should be part of the registry API? I don’t see fetch-by-hash in the registry API docs.)

Go 項目結構的簡潔實現
今天分享一個在 GitHub 上有 3.5k stars 的 Go 項目：go-backend-clean-arch[1]。該項目展示了一個 Golang 後端項目如何設計優雅的項目結構。項目架構——-3.Directory Explanation———————–.├── Dockerfile           # Image file├── api│ ⌘ Read more

Go 程序如何實現優雅退出？來看看 K8s 是怎麼做的——下篇
K8s 的優雅退出現在，我們已經掌握了 Go 中 HTTP Server 程序如何實現優雅退出，是時候看一看 K8s 中提供的一種更爲優雅的優雅退出退出方案了😄。這要從 K8s API Server 啓動入口說起： https://github.com/kubernetes/kubernetes/blob/release-1.31/cmd/kube-apiserver/apiserver.gof ⌘ Read more

Automatic Komoot export
While I like Komoot and use it to navigate and record all my tours, whether that are bike tours or hiking trips, it sucks that there’s no option to export all your data. There’s also no official API to easily implement such functionality. ⌘ Read more

golang 做 api 開發離不開簽名驗證- 如何設計?
在 API 開發中，簽名驗證是一種常見的安全措施，用於確保請求的完整性和來源的可靠性。以下是設計一個簽名驗證機制的步驟和示例代碼。設計思路密鑰管理：爲每個客戶端分配一個唯一的 API 密鑰和 API 密鑰。 簽名生成：客戶端在請求 API 時，使用預定義的算法生成簽名，並將簽名和其他必要參數（如時間戳、隨機數等）一起發送到服務器。 簽名驗證：服務器接收到請求後，根據相同的算法重新生成簽 ⌘ Read more

The importance of secrets detection and redaction within the SLSA framework
Member post by Wayne McDaniel, GitGuardian Leaked credentials, aka secrets, are an easy way for bad actors to gain access to your environments and data. While no one intends to leave these valuable API keys, tokens, and passwords… ⌘ Read more

ProcessOne: ejabberd 24.06

Image

This new ejabberd 24.06 includes four months of work, close to 200 commits, including several minor improvements in the core ejabberd, and a lot of improvements in the administrative parts of ejabberd, like the WebAdmin and new API commands.

Image

• *Webadmin rework … ⌘ Read more

I have a question for the IndieWeb community: What can we do against Webmention spam, except filter it out, when it fails validation? I receive hundreds of invalid Webmentions a day, and even using a filtering DNS server doesn’t seem to help much. But I also don’t want to waste network traffic to access all those spam sites. Is there any good block list I can check first before doing the request for validation? I thought about Akismet, but the API has no such option to only check the submitted URL. ⌘ Read more

如何架構優秀的 Go 後端 REST API 服務
REST（Representational State Transfer）是 Web 服務中廣泛使用的一種架構風格，其核心思想是使用 HTTP 協議出色地創建、讀取、更新和刪除（CRUD）資源。作爲一種靜態類型、編譯型語言，Go 在構建高效、可靠的 Web 服務時具有顯著優勢。使用 Go 語言構建 REST API 服務需要我們從多個方面入手，包括項目結構、框架選擇、數據庫操作、路由設計等。以下將 ⌘ Read more