defnull

In a small town, there was a bakers' club popular with professionals and hobbyists alike.

This benchmark covers the most commonly used Python parsers for multipart/form-data (HTML5 forms) and tests them in different scenarios, comparing both blocking and non-blocking (async) APIs if available.

Did you also notice a repeating pattern with AI security reports lately?

BigBlueButton sometimes show an error with a 4-digit number but no further explanation.

The 'multipart' python library got an independent security audit and I only know about that because they found something -> CVE-2026-28356 This is great, actually!

My latest FOSS Project: BBBLB is a modern multi-tenant capable load balancer for large BigBlueButton clusters.

The python aiohttp library uses yarl for URLs internally, and yarl normalizes URLs by default.

The uv and uvx tools have a very particular way to make virtual environments relocateable: they replace the shebang in python scripts with some polyglot magic, so that the executable is both a valid bash script and a python script at the same time.

Go to https://fediwall.social/ and press 'w' :D Sorry, no mobile support for this ultra useful feature, but it wouldn't look good on mobile anyway.

Coffee machine design flaw: My coffee maker has a floating magnet in its water tank and a reed switch to detect low water levels.

Today is the day.

I recently experimented with BigBlueButton 3.0-RC4 again and tried do find out why hasura-graphql-server and postgresql are hogging half a CPU all the time on a fresh BBB server with just a single meeting and only one participant.

A while ago I found CVE-2024-47874 in starlette (and FastAPI).

Werkzeug is a Web Server Gateway Interface (WSGI) library used to develop python web applications or frameworks.

I'm finally allowed to speak about this nice little DoS vulnerability I found in starlette (and FastAPI).

Digging through the most popular password 'leak' compilations for a side project and it's >90% fake.

I did a thing!

Diese Website existiert eigentlich nur, weil T-Online keine E-Mails von Mailservern ohne Website mit Impressum annehmen mag, was für private Mailserver natürlich Blödsinn ist, aber was soll's.

This website exists mostly because t-online tends to block e-mails from mail servers that do not have a website and contact information attached.