Should anyone need to be reminded, once again, from someone who has been doing offensive security for 40yrs: we hack the endpoints, we have always hacked the endpoints, we shall continue doing so.

Why? It is this incredibly simple concept called ROI, return on investment, it is cheaper, much cheaper, to get the endpoint. Whether it is the phone, the app, the headphones, the microphone, the user being socially engineered.

Nobody in his sane mind wakes up and goes "we need to crack the double ratchet", literally nobody.

That we have been unable to communicate this to the EU parliament is an incredible defeat of common sense.

Cloudflare Drop:

"Drop a folder. Or a zip.

Summon your site - HTML, CSS, JS. See it live instantly."

Cloudflare announced their new Exfiltration as a Service app today. Admins, be sure to lock this jackassery down ASAP. https://www.cloudflare.com/drop/

GitHub Has Restricted Access to Star Data https://www.star-history.com/blog/github-stargazer-api-restriction/

restrict access to star data is a poor UX choice. For me, seeing stars was a key trust metric, especially for smaller repositories in my circle. If I see a star from someone I know, it think that code is reliable or needs attention.

If you like HyperCard, or are HyperCard-curious, I'd like to share an early build of my HyperCard player for modern macOS, "Stacks". It runs stacks natively: no emulator, sound (with MacinTalk speech synthesis!), period-accurate typography.

There's an in-app browser for the Internet Archive's HyperCard collection, so you can explore thousands of stacks and run them with one click.

Still early days with rough edges, but I'm having fun with it. Please report bugs!

https://morphing.cloud/hypercard

Shortened links are a digital preservation and web archiving nightmare. You can imagine how they need to work:

1. Create a unique short code for a given (target) URL (like a hash, but far far shorter)
2. Pair the short code with your URL in a database.
3. Create a redirect rule on the URL shortening server from the new source URL to the target URL.
4. Send the shortened link to the caller, e.g. shortURL.com/123badf00d
5. In-perpetuity: continue to pay for your domain; maintain the database; look after redirect rules during server migrations; ensure duplicate short-codes are not created.

A URL-shortening business in five easy steps.

But what does that mean for digital preservation?

for some work stuff I have to use Dropbox, and I have always been happy with https://maestral.app/ on macos, but is no longer maintained.
rclone always saves the day https://rclone.org/dropbox/

Umberto Eco library opens in Bologna, 10 years after his death https://www.wantedinmilan.com/news/umberto-eco-library-opens-in-bologna-10-years-after-his-death.html

sono onesto: penso che anche uno studentə di una magistrale in digital humanities sarebbe in grado di disegnare sistemi e modelli di dati migliori di questi di iPAC¹. non mi piace parlare male del lavoro degli altri, ma queste API² sono totalmente inusabili e inconsistenti.

¹ https://ecomic.cultura.gov.it/ipac/
² https://ecomic.cultura.gov.it/ipac/playground/

I want to buy an Xteink eink reader. yay or nay? 3 or 4?

RSS is a secret trick to making the internet more usable. https://www.eff.org/deeplinks/2026/06/hate-algorithm-rss-one-tools-youve-been-looking

Memories Can’t Wait—or, How I Learned to Keep Worrying About the Web

The web is still the best hope we have for a durable, shared memory. But it requires us to be gardeners, not merely tenants....

https://zeldman.com/2026/07/06/memories-cant-wait-or-how-i-learned-to-keep-worrying-about-the-web/

RE: https://toot.community/@internetarchiveeurope/116873369103040652

"A second demo used a locally run open source model to search the Rijksmuseum’s digital collection for images connected to alchemy and the pursuit of knowledge, producing usable results entirely on Davide’s own hardware. No cloud service, no rented compute, no data leaving the machine."

@mala is this already documented? It would be very useful for digital humanists.

UPDATE: I am watching the recording here https://archive.org/details/mozilla-ai-agent https://ia903107.us.archive.org/34/items/mozilla-ai-agent/Mozilla%20AI-HR.ia.mp4

We hosted Davide Eynard and Thomas (TOTO) Bille from Mozilla AI team in Amsterdam this week to talk about what it means to own your AI stack rather than rent it.

One moment: an open source agent turned to the Wayback Machine a dozen times to verify a source. Preserved web history is not nostalgia: it is infrastructure.

Full write-up: https://www.internetarchive.eu/2026/07/06/mozilla-ai-at-internet-archive-europe-owning-your-ai-stack/

#webarchiving #openaccess

New blog post: "Conviviality in computational science"

https://blog.khinsen.net/posts/2026/07/06/conviviality.html

"Conviviality matters for science for multiple reasons. One of them is epistemic: if you want to derive knowledge from your work, you need to know exactly what you are doing, and that includes a detailed understanding of your tools."

Germany's massive 60,000-game preservation project collapses after €1.5 million funding dries up — world's largest game archive was entirely publicly available, now abandoned just as Sony kills physical media
https://www.tomshardware.com/video-games/retro-gaming/germanys-1-5-million-project-to-build-the-worlds-largest-game-archive-collapses-after-funding-dries-up
#digpres

RE: https://pdx.social/@patc/116857419881554592

Paging @wtfpdf ....

"The sneakerweb¹ is a peer-to-peer protocol² for web publishing without permission: there are no DNS servers, domain registrars, or web hosts.
Instead, websites are stored directly on user devices, and transferred between them through the ultimate fallback infrastructure: physical storage media.
Your collected sites can be viewed offline, in the same web browser you normally use, and then shared with others via .snk files."

¹ https://sneakerweb.org/
² https://willowprotocol.org/

@copystar also, there's an MCP for it, so you might even be able to test this? https://github.com/codefzer/z3950-mcp

RE: https://indieweb.social/@NetNewsWire/116817521149057386

NetNewsWire, the best RSS reader.

"The Dinosaurs window lists feeds that haven’t updated in n months" and I have discovered sites I havent' read since decades, many of them still online

Bring Back Crappy Forums: Web forums were rough around the edges and faded in relevance as seemingly better options emerged. But what if we had stuck with them?

https://feed.tedium.co/link/15204/17371410/online-web-forums-retrospective