The most widely used digital image format, developed by Joint Photographic Experts Group. Several attempts has been made to replace it with something “better” (JPEG 2000 included), but it still helds its position. ISO/IEC and ITU-T standard, which only specifies the codec, but not the file format - the Exif and JFIF standards define the commonly used ones.
Invented by Denso Wave (japanese automotive company, subsidiary of Toyota) in 1994 to track vehicle parts during manufacturing. It was designed to allow high-speed scanning. Now it is used basically everywhere.
Portable Network Graphics
One of the most widely used raster image formats, that supports lossless compression, alpha transparency and is supported by all the webbrowsers. It was developed in 1996 as an improved, non-patented replacement for GIF (“PNG’s not GIF”). ISO and IETF standard.
How form data can get from the browser to the backend.
action: where to send the data (URL, current URL by default)
enctype: only for
Content-Typeof the data
application/x-www-form-urlencoded- default, URL encoded body
multipart/form-data- multipart data, required for file uploads
text/plain- for debugging, don’t use, security issues
Go(lang) - advanced topics
Goroutine: a lightweight thread managed by the Go runtime.
It’s pretty simple to execute a function call as a new goroutine:
go f(param1, param2)
The program is terminated when the main goroutine finishes.
- statically typed (w/ type inference)
- compiled (statically linked)
- memory safety, garbage collection
- built in dependency management
- goroutines (~coroutines/threads)
- select (for channels)
- interfaces for “virtual inheritance”, type embedding
- standardized formatting (gofmt)
- multiple implementations (gc, gccgo, gollvm, gopherjs, …)
- 2019, https://matrix.org/
- not the movie, but the “matrixed communication”
- open standard: spec
- non-profit Matrix.org Foundation
- end-to-end encryption
- olm, megolm
- based on Signal’s double ratchet
- extended to support encrypted rooms
- messaging (IM, rooms, bots, even IoT devices)
- signaling (for WebRTC, VoiP, video calls)
- bridging to other IM networks (XMPP, Slack, IRC, Discord, Facebook, …)
- HTTPS+JSON based by default, but a much lighter UDP based demo was already created for ~100bps (!) networks
- DoS - Denial of Service attacks
- Brute Force attacks
- collect customer email addresses (signup)
- reveal username/password pairs (login)
- send emails (contact us, gift card)
Cross-Site Request Forgery
CSRF is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated.
Cross Site Scripting (XSS)
Data (from untrusted source) gets into the application, then this data is later displayed in the website without being properly validated/sanitized/escaped.