The most widely used digital image format, developed by Joint Photographic Experts Group. Several attempts has been made to replace it with something “better” (JPEG 2000 included), but it still helds its position. ISO/IEC and ITU-T standard, which only specifies the codec, but not the file format - the Exif and JFIF standards define the commonly used ones.
QR Code
Invented by Denso Wave (japanese automotive company, subsidiary of Toyota) in 1994 to track vehicle parts during manufacturing. It was designed to allow high-speed scanning. Now it is used basically everywhere.
Portable Network Graphics
One of the most widely used raster image formats, that supports lossless compression, alpha transparency and is supported by all the webbrowsers. It was developed in 1996 as an improved, non-patented replacement for GIF (“PNG’s not GIF”). ISO and IETF standard.
Form Data
How form data can get from the browser to the backend.
Without JS
action
: where to send the data (URL, current URL by default)method
:GET
,POST
(and there’sdialog
too…)enctype
: only forPOST
,Content-Type
of the dataapplication/x-www-form-urlencoded
- default, URL encoded bodymultipart/form-data
- multipart data, required for file uploadstext/plain
- for debugging, don’t use, security issues
Go(lang) - advanced topics
Concurrency
Goroutines
Goroutine: a lightweight thread managed by the Go runtime.
It’s pretty simple to execute a function call as a new goroutine:
go f(param1, param2)
The program is terminated when the main goroutine finishes.
Go(lang)
What?
- statically typed (w/ type inference)
- compiled (statically linked)
- memory safety, garbage collection
- built in dependency management
- concurrency:
- goroutines (~coroutines/threads)
- channels
- select (for channels)
- interfaces for “virtual inheritance”, type embedding
- standardized formatting (gofmt)
- multiple implementations (gc, gccgo, gollvm, gopherjs, …)
Matrix
- 2019, https://matrix.org/
- not the movie, but the “matrixed communication”
- open standard: spec
- non-profit Matrix.org Foundation
- decentralized
- end-to-end encryption
- olm, megolm
- based on Signal’s double ratchet
- extended to support encrypted rooms
- messaging (IM, rooms, bots, even IoT devices)
- signaling (for WebRTC, VoiP, video calls)
- bridging to other IM networks (XMPP, Slack, IRC, Discord, Facebook, …)
- HTTPS+JSON based by default, but a much lighter UDP based demo was already created for ~100bps (!) networks
Rate limiting
Why?
- DoS - Denial of Service attacks
- Brute Force attacks
- collect customer email addresses (signup)
- reveal username/password pairs (login)
- send emails (contact us, gift card)
Cross-Site Request Forgery
CSRF is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated.
Cross Site Scripting (XSS)
Data (from untrusted source) gets into the application, then this data is later displayed in the website without being properly validated/sanitized/escaped.