home.social

#yarl — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #yarl, aggregated by home.social.

  1. The #python library #aiohttp uses #yarl for URLs internally, and yarl normalizes URLs by default. It silently decodes some %-encoded characters in the query string that do not strictly need to be encoded.

    Sounds harmless, but it isn't. Changing the URL breaks any protocol that signs important aspects of a HTTP request for security.

    Took me a while to find this bug. I usually expect an HTTP client library to not silently manipulate the URLs before sending a request. Smarter is not always better

  2. I do not have sympathy for the cowardice of old white men.
    Fear doesn't justify murder.

    Every woman, every day, and multiple times a day, is confronted by a man who is physically stronger, who may offer her violence.

    Does she try to kill him? No. She is forced to trust in his good intentions, even if she is justified in NOT trusting his good intentions.

    If a woman killed a man every time she felt threatened, or wary of his intent, the world would be covered with corpses.

    #Yarl #Gillis

  3. CW: Ralph Yarl Shooting

    Gunman is finally charged

    "(...)Paul #Yarl, said(...)on Monday evening that his son underwent surgery over the weekend to remove the bullets.He was able to walk out of the hospital on Sunday evening and was expected to make a full recovery(...).

    Mr.Yarl said that he was relieved when the charges were finally announced.

    (...)“He could have repeated it with the next kid that looked like Ralph,”he said.(...)"

    nytimes.com/2023/04/17/us/ralp

    #RalphYarl, #GunViolence, #Racism

  4. 😢 #Yarl is able to communicate "when he feels like it..mostly just sits there & stares & the buckets of tears just rolls down his eyes."

    You can see that he is just replaying the situation over & over again. & that just doesn't stop my tears either, bc when you see your kid just sits there & constantly he just—tears are just rolling for both sides of his eyes, there's nothing you can say to him”

    cbsnews.com/news/ralph-yarl-ka