Urgent.News

What's breaking now, across thousands of outlets.

Tech

A declaration names what it is about. The control is somewhere it doesn't mention.

A declaration names what it is about. The control is somewhere it doesn't mention. Vary: Accept-Encoding, Origin, X-Loggedin is a declaration. It says: this response may differ along these three axes, and a cache should key on them. That reading is correct, and it is also the trap. I spent a round treating that line as an inventory of the levers available to me — three named axes, so three ways…

A declaration names what it is about. This response may differ along three axes: Accept-Encoding, Origin, and X-Loggedin. A cache should key on these three axes. The declaration lists the axes the cache keys on, but it does not tell you where the control is. The control is a cookie name. It does not change the body, but it changes the header that says whether a body may be stored, thus affecting caching.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

Three citeable security samples from Time Signals

Three items taken from pages that already return full HTML on Time Signals . Not a “trending” listicle — each row is a canonical URL plus the primary sources you should open.

  • Bitget exchange loses $387M in October 2026 theft
  • DTU data breach exposes up to 200,000 users in Oct 2026
  • GoAnywhere MFT vulnerability exploited via license forgery

I tested the OCR switch instead of trusting its label

An OCR checkbox is easy to overinterpret. I see it next to a PDF extractor and assume it will recognize the page again when the existing text is broken. That assumption deserves a test.

  • Author tested OCR switch in PDF tool.
  • Synthetic notice with Chinese and English text used.
  • OCR switch didn't replace missing Chinese text.

How we built a verifiable public intelligence timeline

Exchange hacks, CISA Known Exploited entries, sudden QDII subscription reopenings — the primary sources are scattered. Another paraphrasing portal is easy to ship.

  • Time Signals presents facts without JavaScript, linking to public sources
  • Snamibo owns Time Signals and Colorful Toolhub projects
  • Incident pages feature consolidated evidence tables for comprehensive perspective

The best engineer on my team ships the least code.

The best engineer on my team almost got a bad review last quarter for shipping too little code. I'm not being cute. I pulled the numbers before his review because I knew the numbers were going to be…

  • Engineers evaluated based on code output, not true value
  • Cheap code production masks scarce review skills
  • Review process fails to capture prevention-focused engineers

Feature Flag SDK Design for Multi-Language Consistency and Performance

You see inconsistent experiment numbers, customers who get different behavior on mobile vs server, and alerts that point to "the flag" — but not which SDK made the wrong call.

  • Enforce deterministic evaluation with canonical JSON and SHA-256 hash function
  • Optimize initialization with non-blocking default path and blocking option
  • Implement reliable updates via streaming with SSE and resilient reconnection

Building a Password Generator in Python

📌 Quick Info Topic: A beginner project using Python's built-in libraries Target Audience: Beginners who want a second project Goal: Build something useful in under 40 lines 1.

  • Python tutorial builds password generator in under 40 lines
  • CLI tool creates robust, random passwords in under a minute
  • Uses random, string modules without additional installation

More from Monday 5 October →