Flux
sqlite-utils 4.1
IA Programmation

sqlite-utils 4.1

Release: sqlite-utils 4.1 The first dot-release since 4.0 a few days ago, introducing a number of minor new features. sqlite-utils insert and sqlite-utils upsert now accept a --code option for providing a block of Python code (or a path to a .py file) that defines a rows() function or rows iterable of rows to insert, as an alternative to importing from a file. (#684) sqlite-utils already had features that allow you to pass blocks of Python code as CLI arguments, for example this one for the…

Simon Willison's Weblog
jscrambler npm Package Compromised in Supply Chain Attack
Cybersécurité Programmation

jscrambler npm Package Compromised in Supply Chain Attack

A compromised release of the popular jscrambler npm package introduced hidden native binaries that execute automatically during npm install, exposing users to a supply chain attack before any application code runs. The malicious 8.14.0 release, published on July 11, adds an undocumented preinstall hook that invokes dist/setup.js. It also introduces new files, including dist/setup.js and dist/intro.js, along with platform-specific binaries for Linux, macOS, and Windows embedded in an obfuscated…

Socket
Quoting Nilay Patel
IA Programmation

Quoting Nilay Patel

The reality is to make augmented reality glasses, you need to put a camera next to your eyes that is continuously recording everything you see and processing that to put information over it. There is not another way around it. And there's certainly not a chip that can fit in the stem of a glasses that is both powerful enough and power miserly enough to do that in real time. You have to send that data to a cloud. You gotta do it. [...] Or you can build something the size of a Vision Pro with a…

Simon Willison's Weblog
A tour of my dotfiles
Programmation Web

A tour of my dotfiles

Over the years, I've built up a collection of aliases, shell functions, and CLI tools that make my terminal feel like home. All of it lives in a single repository: my dotfiles. It's a backup of every terminal tool and configuration I rely on, and it means I can set up a brand new Mac from scratch in about five minutes. Colleagues at Spatie use it as a starting point for their own setups too. Let me walk you through what's in there. I'll cover the tools and tricks first, with installation and…

Freek Van der Herten
HTTP QUERY method: the missing verb for complex search APIs
Programmation Web

HTTP QUERY method: the missing verb for complex search APIs

Video version at https://youtu.be/REjWp_2Dt30 Hypertext Transfer Protocol (HTTP) provides us with a set of basic methods to describe what our request is doing. Generally, we’re working with GET or POST requests, but these have limitations on them that you won’t be aware of until you’ve run headlong into one of them. The best example is […] The post HTTP QUERY method: the missing verb for complex search APIs appeared first on PHP Architect.

PHP Architect
Quoting OpenAI
IA Programmation

Quoting OpenAI

[...] Work on web and mobile runs in the cloud. Work in the desktop app can also use local files and desktop apps with your permission. At launch, cloud Work conversations do not appear in desktop Work; desktop Work threads and local files remain on that computer. — OpenAI, trying (unsuccessfully) to clarify ChatGPT Work Tags: openai, chatgpt, ai

Simon Willison's Weblog
The PHP Podcast 2026.07.09
Programmation Web

The PHP Podcast 2026.07.09

🎙️ PHP Podcast – July 9, 2026 Hosts: Eric Van Johnson & John Congdon | Guest: Holly Schilling A PHP RFC for extension methods that PHP definitely should have had by now. 👋 Holly Schilling, Uninvited but Welcome Holly was originally just planning to heckle from the Discord chat room. She had about 45 minutes’ […] The post The PHP Podcast 2026.07.09 appeared first on PHP Architect.

PHP Architect
Fake Braintree NuGet Package Skims Credit Cards and Harvests Merchant Credentials
Cybersécurité Programmation

Fake Braintree NuGet Package Skims Credit Cards and Harvests Merchant Credentials

Socket’s AI scanner flagged a suspicious NuGet package masquerading as the official Braintree payment gateway client, with the first malicious version published on July 3, 2026. It was detected by Socket as potential malware 10 minutes after publication. Follow-on analysis by the Socket Threat Research team revealed a multi-stage .NET implant that intercepts live payment card data, exfiltrates Braintree merchant API keys and harvests host environment secrets upon assembly load. The package…

Socket