RAG Memberi AI Kartu Perpustakaan

Channel ini menyajikan materi seputar Data Science & Artificial Intelligence, Networking & Cyber Security, serta Database & Programming. Seluruh materi disusun secara sistematis untuk membantu Anda memahami konsep, teknologi, dan praktik yang digunakan di bumi teknologi informasi, mulai dari tingkat alas hingga lanjutan. Setiap bahasan berfokus pada pengembangan keahlian melalui materi yang gampang dipahami, relevan dengan kebutuhan industri, dan disampaikan untuk tujuan edukasi. Seluruh konten mengedepankan implementasi teknologi secara legal, etis, dan bertanggung jawab, sehingga dapat menjadi rujukan belajar bagi pelajar, mahasiswa, maupun profesional. Jika Anda mau mengembangkan kapasitas di sektor pemrograman, pengelolaan data, kecerdasan buatan, jaringan komputer, maupun keamanan siber, channel ini menyediakan materi yang dapat membantu membangun fondasi ilmu sekaligus menaikkan keahlian secara bertahap. Playlist video terkait: ▪ https://www.youtube.com/playlist?list=PLZGgeqmsm32s ▪ https://www.youtube.com/playlist?list=PLZomBNpDl3vc ▪ https://www.youtube.com/playlist?list=PLE5VyXMZkzb8 PEMBAHASAN MATERI Playlist Materi Ilmu Komputer berisi kumpulan video pembelajaran, tutorial, klarifikasi konsep, studi kasus, demo, dan bahasan komplit seputar beragam sektor dalam ilmu komputer. Materi yang disajikan mencakup alas hingga tingkat lanjut, mulai dari pemrograman, pengelolaan database, jaringan komputer, keamanan siber, mekanisme operasi, pengembangan alat lunak, arsitektur komputer, hingga beragam teknologi yang digunakan dalam bumi komputasi modern. Temukan bahasan mengenai komputer dan pemrograman, algoritma, struktur data, PHP, JavaScript, Python, Laravel, MySQL, PostgreSQL, API, rekayasa alat lunak, database, jaringan komputer, pengelolaan server, cloud computing, virtualisasi, Linux, Windows Server, keamanan jaringan, cyber security, ethical hacking, kriptografi, keamanan aplikasi, DevOps, Internet of Things (IoT), kecerdasan buatan (AI), machine learning, serta beragam konsep, teknologi, dan praktik terbaik di sektor ilmu komputer. Playlist ini cocok bagi pelajar, mahasiswa, programmer, web developer, software engineer, pengelola sistem, ahli IT, maupun siapa saja yang mau mempelajari dan memperdalam wawasan di bumi ilmu komputer secara menyeluruh. CONTACT US ▪ Email support@mycoding.id ▪ WhatsApp https://wa.me/6281274309663 ▪ Telegram https://t.me/mycodingxd OFFICIAL LINKS ▪ Web https://mycoding.id ▪ Blog https://blog.mycoding.id ▪ News https://en.mycoding.id ▪ Apps https://play.google.com/store/apps/dev?id=5237501547073493079 SOCIAL MEDIA ▪ https://linkedin.com/company/mycodingxd ▪ https://facebook.com/mycodingxd ▪ https://instagram.com/mycodingxd ▪ https://tiktok.com/@mycodingxd ▪ https://twitter.com/mycoding_xd ▪ https://pinterest.com/mycoding_xd CHANNEL LINKS ▪ YouTube https://safelink.asia/youtube ▪ DailyMotion https://safelink.asia/dailymotion ▪ WhatsApp https://safelink.asia/whatsapp ▪ Telegram https://safelink.asia/telegram Powered by https://linkedin.com/company/401XDGroup #Networking #Programming #DataScience #CyberSecurity #ArtificialIntelligence #Database

Started by sysrpl on 11 November 2026

Read next

Read next

It's been a during since our final advancement report, and a lot has changed. This update covers the biggest shifts in the project: our new guideline on AI-assisted contributions, first ARM64 support, and what we scheme to activity on next.

Our AI Policy​

The biggest alter in the project this twelvemonth is not a feature, but a policy: we have adopted rules for AI-assisted contributions. We cognize this is a divisive topic that many open origin projects are debating correct now, and the involvement concerning low-quality "slop" is a fair one. But in the hands of group who cognize the project's internals, an LLM can be a extremely mighty tool.

Developing Darling has continually been a lot of fun, but it was additionally difficult to see the ray at the end of the tunnel. Let's visage it: Apple is a huge business alongside many engineers shipping new features all the time, and a small collection of volunteers is no equivalent for that capacity. I started Darling in 2012, and until lately extremely few real-world macOS applications really ran on it.

Darling has additionally never had the advantages that Wine enjoys. The exterior of macOS applications is much smaller than that of Windows applications, so there is small involvement in operating them on Linux, and far small developers who cognize the internals of macOS fine adequate to help. That makes it difficult to diagram contributors, and fair as difficult to diagram business assistance of the benevolent Valve has provided to Wine. The measure of the phase is a issue too. Apple keeps adding frameworks that lone container alongside macOS: by one count, macOS 27 contains 464 community and 2,754 personal frameworks, up from 273 and 878 in macOS 10.14. Wine can lean on Microsoft's redistributable runtimes, which tools specified as winetricks fetch for users, whereas for most of Apple's frameworks there is nothing to download, and we have to execute them ourselves. Matching Apple's engineering capability looked akin an unsolvable issue for a fistful of volunteers.

This year, that changed. Several forks appeared that create dense use of AI, and they achieved notable results. One of the most apparent examples is a fork that runs League of Legends (see it in act on YouTube). VibeDarling has additionally gotten multiple first macOS applications working.

AI changes the equation. What used to be an unsolvable issue alongside few contributors is now financially realistic, and it lets us vie alongside Apple on item nearer to flat ground.

Refusing to use AI would have meant two things for us:

• We would have rotate into insignificant. Various forks would be moving at extreme speed, during we continued at the identical gait alongside extremely few things working.
• The community would apt have fragmented, as group moved to anywhere advancement is happening.

The guideline is how we use this power responsibly. It is written as instructions for AI agents, but it binds the humans using them. Whoever opens a drag petition is liable for all row in it and must be capable to explain it in their own words; maintainers' questions get answered by people, not by a bot. The remainder of it encodes our clean-room rules: execute the documented agreement fairly than hacks for a sole application, regard the macOS layering, isolate and tag undocumented quirks, and never use leaked matter or Apple's restricted origin specified as corecrypto. Nobody should use disassembly to create matching code. Depending on local laws, it may be satisfactory to use disassembly to document how item plant and afterward reimplement it in a clean-room fashion: the delegate that writes the code never sees the disassembly, lone a distinct behavioral clarification produced in another context.

ARM64 Support​

Darling now has first ARM64 support. This matters since ARM64 is the current chief architecture for Apple hardware. Since Apple's passage to its own silicon, all new Mac has been ARM64-based, and the application being written for macOS today increasingly targets it first, or only. Without ARM64 support, Darling would be constricted to an architecture that Apple itself is moving distant from.

There is another logic we are assured in this support. The VibeDarling fork is being developed on ARM64, so its day-to-day activity exercises the ARM64 code paths constantly. When the fork is folded rear into the first Darling, we anticipate to have fine assistance for this architecture from the start.

The Future​

The Next Two Months​

Our short-term goal is to get the activity from all the forks merged rear into Darling. For this we are using agent-driven merging logic, which has so far autonomously fixed many bugs, the two in the code coming from the forks and in pre-existing bugs in Darling itself.

We scheme to officially assistance three architectures: i386, x86-64 and ARM64 (aarch64). Our confidence in ARM64 comes from the fact that VibeDarling is developed on it.

Separately, I am gradually operating on operating ARM64 applications on x86-64 hosts by reusing Dynarmic. This is a lengthy shot, so delight don't figure on it, but I'm inquisitive to see how far it can go.

Longer Term​

I anticipate to keep receiving a dependable stream of patches from another contributors, so I can't conversation for them. My own scheme is to stabilize AppKit assistance and create the UI appearance nice.

I additionally have a few particular applications I desire to get working, either since they are uncomplicated adequate or since they are open source. Being open origin gives the agents a improved chance of discovering what the use expects from the system.

I would additionally akin to commencement adding GUI applications to Darling itself, specified as a configuration usefulness and a log spectator in the soul of Console.app. Darling should arrive alongside native tools for managing it, and they volition additionally assist as real-world tests of our AppKit support.

Contributing​

Darling is a ample codebase that can be daunting to contribute to, and we'd akin to create it easier. If you desire to help, equal alongside a small fix, arrive conversation to us on our Discord. If you use an AI assistant, delight peruse our AI policy first: you are liable for all row you submit, and you have to be prepared to explain it in your own words.

You can additionally assistance the project financially through our OpenCollective. The finances volition be used to shield infrastructure and hosting costs, and perchance LLM costs.

Back in July, I started experimenting alongside using contemporary coding agents to build a figure of mathematical visualization applets. With the extremely hectic events of the final few months, I had to set those projects aside; but I lately established a bit of period to activity on one specified project that I had started rear then, which was to modernize a Javascript interactive textbook I had made rear in 2018, entitled “QED”, and announced earlier on this blog. The intent of that textbook was to instruct propositional and first-order logic in the form of a “crafting game”, anywhere one applied assorted rules of logic to attain a desired decision from a stated set of hypotheses.

With a coding agent, I rebuilt the game (which I have stated the operating heading of “Lean Grimoire”) alongside a figure of new features, for case giving the choice to display an in-progress Lean evidence of one’s equivalent state. Just for fun, I additionally added an choice to perform in a “fantasy mode” in which assorted equivalent elements are depicted using fantasy-themed sensation content (for instance, mathematical statements rotate into “potions”, mathematical expressions rotate into “scrolls”, and so forth). Here is a representative screenshot, in which one has nearly completed the evidence of the assertion :

I would be curious in having several playtesting of this app to create it additional helpful as a method to instruct logical proofs and/or Lean.

Read next

A crucial synchronization exposure (CVE-2026-119618) has been identified in Apache HTTP Server’s HTTP/2 component (mod_http2). The flaw stems from a concurrent implementation competition circumstance inside the assign_headers() function whenever handling shared resources. If successfully exploited, a remote, unauthenticated attacker can corrupt heap recollection to accomplish arbitrary code implementation (RCE).

As of the period of this blog’s publication, no utilize is accessible and there are no reports of exploitation in the wild. 

CVE-2026-119618 is a critical, high-severity exposure involving a competition circumstance in the Apache HTTP Server, which was independently discovered by Anthropic and Google Cloud’s Vulnerability Research Team.

Specifically, the flaw exists inside the assign_headers() function of the HTTP/2 component (mod_http2). Due to improper synchronization whenever executing concurrent threads sharing resources, an attacker can trigger heap corruption. This recollection misconduct can ultimately be leveraged to accomplish RCE on the hosting server, allowing unauthorized danger actors to execute arbitrary commands alongside the privileges of the web server process.

In haze environments, a compromised Apache case operating containerized or virtualized workloads can assist as an admission item for lateral movement, possibly exposing neighboring microservices or haze metadata endpoints.

According to Wiz data 64% of haze environments have resources susceptible to CVE-2026-119618, and 51% of haze environments have publically exposed instances. Note that this does not obtain configuration into account.

The exposure affects deployments using HTTP/2 capabilities on the Apache HTTP Server inside the type ranges outlined in the array below:

Security operations and engineering teams should execute the following remediation and mitigation steps:

1. Upgrade Deployments

• Upgrade Apache HTTP Server: Update affected installations to Apache HTTP Server type 2.4.71 or later. This publish addresses the competition circumstance in assign_headers().

• Update Standalone Modules: If managing standalone mod_h2 builds from GitHub, upgrade the component to a type newer than 2.0.42.

2. Implement Temporary Mitigations

If contiguous patching is not imaginable because of operational constraints, temporarily disable HTTP/2 assistance to eliminate the assault vector.

• Edit the configuration document (such as httpd.conf) to restrict energetic protocols to HTTP/1.1 by removing h2 and h2c references:

Wiz customers can use the pre-built query and advisory in the Wiz Threat Center to hunt for susceptible instances in their environment.

• Apache HTTP Server publish notes

Read next

Read next

Google is evaluation moving the citations or sources icons to the extremely base of the AI Overviews. Previously, these icons appeared at the top of the AI Overview; now Google is evaluation placing them at the bottom, which may create it equal harder to discover the sources of the answers Google generates in these AI Overviews and could decrease clicks to your location equal more.

This was spotted by Brodie Clark who wrote on X, "Google is now evaluation out the placement of the figure of sites referenced inside AI overviews at the base of the response. " "The former placement for this test was at the top of the AI overview (directly complete the citations). This type is different: hovering displays the complete catalog of citations," he added. He additionally posted this on SERP Alert.

Here is a screenshot of his video:

Here is his video:

Google is now evaluation out the placement of the figure of sites referenced inside AI overviews at the base of the response.

The former placement for this test was at the top of the AI overview (directly complete the citations). This type is different: hovering displays the complete catalog of citations.

📖 More particulars & examples of this experiment: https://t.co/OXXMVdWfED

📧 To remain updated on SERP changes, subscribe to my monthly newsletter: https://t.co/CyLde59l8t

🔎 Take a liberated test of @serplens: the workspace for SEOs and their agents, today: https://t.co/TeRID3QJHb

— SERP Alert ⚡️ (@SERPalerts) November 12, 2026

I don't see the top of the results, but Brodie did say in this format, they display at the base and not at the top.

Why would Google move these origin links to the base whenever it volition outcome in equal small clicks?

Forum conversation at X.

Read next

Published: November 10, 2026

In this new era of agentic web development, developers expect their coding agents to be experts at construction for the web. And during the latest frontier coding models are fairly capable and can normally create item that works, if you ask a web betterment expert to assessment the AI-generated code, they can nearly continually discover ways to create the code faster, additional accessible, or additional secure.

Chrome is investing heavily in the forthcoming of agentic web development, and to location this challenge, we introduced an early preview of Modern Web Guidance at Google I/O in May. Modern Web Guidance is a set of skills that embed web phase expertise, finest practices, and browser compatibility data immediately into your coding agents.

Today we're enthusiastic to province the stable publish of Modern Web Guidance type 1.0, which includes:

• New modernization workflow that scans your existing codebase to assistance your delegate discover opportunities to safely modernize.
• Expanded guide database targeting hundreds of verified AI cognition gaps alongside expert-vetted, cross-browser solutions.
• Deeper individual expert review for all guide, including sign-off from satisfied area tech leads and a dedicated accessibility assessment on our user-facing guides.
• Full evaluation coverage throughout all of our guides alongside a public eval dashboard showing the measurable improvements compared to agents without Modern Web Guidance.

With type 1.0, we're additionally enthusiastic to portion that Modern Web Guidance is becoming a cross-browser effort, alongside Firefox and Edge joining Chrome to support, enhance cross-browser compatibility, and contribute to the project. Building on our shared activity alongside Baseline, our goal is to justify that anyone coding alongside an delegate can obtain complete advantage of the power and capabilities of the contemporary web platform.

Regardless of what models or delegate harnesses you're using, if you're construction for the web, Modern Web Guidance belongs in your agentic workflow.

To instal Modern Web Guidance, run this command from your project directory:

npx modern-web-guidance@latest install 

Or if you already installed an before version, you can update to 1.0 by running:

npx modern-web-guidance@latest update 

For additional facility instructions or to study more, inspect out the Modern Web Guidance documentation, or observe this video for a concise overview:

Why developers and businesses should use Modern Web Guidance

It's undeniable that coding agents have helped developers compose code faster than always before. But in a earth anywhere everyone is using coding agents, speed is no longer a rivalrous advantage.

These days, it's additional crucial than always to differentiate on essential factors akin usability and norm of experience. Here are a few ways Modern Web Guidance can help:

Reinforce finest practices that models frequently miss

While frontier coding models do have a fine grasp on many finest practices, our evals show that there are motionless a figure of crucial areas anywhere they autumn short, specified as:

• Accessibility: Keyboard concentration and inert management, reduced-motion support, and accessible form validation.
• User experience: Swipe and contact gestures, dialog and popover transitions, and light/dark theme implementations.
• Performance: Main-thread project scheduling, offscreen rendering isolation, and layout change prevention.
• Security: Safe HTML sanitization, strict Content Security Policies, and passkey credential management.

Accessibility finest practices are particularly crucial to get correct since mistakes akin bad ARIA can create a leaf small accessible than no ARIA at all. For type 1.0, our user-facing guides were reviewed and tested alongside genuine assistive technologies by accessibility experts who depend on them all day.

Use the finest web characteristic for the job

AI models are extremely fine at figuring out how to create item activity alongside JavaScript, but in many cases, there are HTML or CSS features that can do the identical item alongside much small code. And since they're handled by the browser, they normally execute improved and arrive alongside accessibility affordances. For example:

• Features to enliven popovers and dialogs
• Features to enhance scroll- and swipe-based interactions
• Better APIs for gentle and fluid leaf transitions

New features can additionally enhance the cognition of a location in ways that matter to users. For example:

• Passkeys and WebAuthn: For faster and additional safe login experiences
• Autofill: To enhance checkout flows (especially on mobile) that frequently neglect whenever using tradition JavaScript-based form controls

Modern Web Guidance is designed to propose the finest characteristic for the job, according to your browser assistance requirements. Its guides have embedded Baseline and browser compatibility data, so it can tailor its recommendations to your project's needs.

Scan your codebase and discover opportunities to modernize

Most web betterment doesn't happen in brand-new projects. It happens in existing codebases that have accumulated years of outdated workarounds, unnecessary dependencies, and polyfills that are no longer needed.

Version 1.0 adds a new modernization workflow that can analyze your existing HTML, CSS, JavaScript, and package.json to discover opportunities to safely upgrade, and afterward guide your delegate through the changes.

/modern-web-guidance Modernize the code in this directory 

In this archetypal release, the modernization workflow uses fixed inspection to inspect for a constricted set of patterns. We chose to commencement alongside a narrow range that yields predictable results, and afterward develop from there. Over time, we scheme to shield many additional areas, including agentic audits anywhere your delegate reasons concerning your code immediately alternatively of fair matching known patterns.

Stay up to date as the web phase evolves

The web phase is a moving target. New features container in browsers all milestone, and existing features that you perchance couldn't use before are becoming Baseline alongside all new browser release.

Since Modern Web Guidance is built on top of Baseline compatibility data, and its recommendations are maintained by browser engineers, web standards experts, and accessibility specialists, these recommendations develop alongside alongside the phase itself, and now your project can too.

Learn concerning new web features and finest practices

While Modern Web Guidance is chiefly built as a tool for agents, one item we've heard from many developers is that they've really established the direction to be fairly helpful on its own—as a learning resource.

Even in this era of agentic coding, there's motionless value in construction up domain expertise. And Modern Web Guidance can assistance you do that: either by study the guides themselves, or using the CLI to hunt use cases and detect new techniques that may be applicable to your project.

In agentic web development, authoring code is lone one part of the workflow. You additionally need to run that code to justify it plant as expected. This is why we propose developers use Modern Web Guidance alongside alongside Chrome DevTools for agents.

• Modern Web Guidance gives your delegate the up-front ability needed to compose code following contemporary finest practices.
• Chrome DevTools for agents gives your delegate runtime visibility so it can verify, debug, and optimize that code throughout a broad range of equipment capabilities, person preferences, and network conditions.

Together these assistance your delegate attain at a improved resolution in small turns. Next are a few examples of how you can use these tools together to maximize effectiveness:

Optimize until you hit your achievement target

Modern Web Guidance can instruct your delegate how to efficiently interrupt up long-running JavaScript tasks that obstacle the chief thread, but it can't test your code to see how lengthy those JavaScript tasks really obstacle the chief thread for.

With Chrome DevTools for agents, you can run a achievement trace on a simulated low-end CPU to see whether or not you have a problem, and afterward use the achievement direction from Modern Web Guidance to iterate until your code never blocks the chief thread for additional than 50 milliseconds (so it doesn't contribute to mediocre INP).

Test and refine your animations

Modern Web Guidance can display your delegate how to correctly and performantly enliven features akin modal dialogs, tooltips, and popover menus, but equal alongside this direction you motionless need to verify that the animations really activity and appearance fine whenever used in the environment of your complete application.

Chrome DevTools for agents can run your code, engage alongside the page, and obtain a display record of the animation in action. It can afterward study the record to justify the two that the animation runs and that it fits the manner and awareness of the remainder of the site.

You can additionally use Chrome DevTools for agents to verify that whenever prefers-reduced-motion is set, the component honors the user's preferences.

Cache views without recollection leaks

Modern Web Guidance can instruct your delegate how to create SPA transitions awareness instant by rendering and caching views in memory, during additionally correctly hiding them from the accessibility tree.

However, whenever doing this it's crucial to justify you correctly spotless up unused views to not leak recollection if the person stays on the leaf for a lengthy time. Chrome DevTools for agents has recollection debugging tools, so your delegate can justify recollection use isn't expanding without bound.

For a nearer appearance at how to use Modern Web Guidance and Chrome DevTools for agents together, inspect out this video:

Success stories

Engineering teams about the earth are already using Modern Web Guidance and Chrome DevTools for agents to enhance code quality, speed up delivery, and eliminate manual debugging bottlenecks:

Pensionbazaar and Policybazaar

Pensionbazaar, a new withdrawal preparedness phase launched by Indian fintech business Paisabazaar, paired Modern Web Guidance alongside Chrome DevTools for agents to build and verify new pages, shortening turnaround by more than 90% (from concerning four days to a few hours) and reducing UI bugs on new screens by over 90%. Its sister phase Policybazaar, one of India's foremost coverage platforms alongside additional than 97 myriad registered customers, used Chrome DevTools for agents to automate achievement audits throughout concerning 30 high-traffic landing pages, cutting manual auditing attempt by 92%:

"For Pensionbazaar, our precedence was construction norm code from day one to avoid specialized debt later. Modern Web Guidance steered our coding delegate to adopt contemporary web standards and achievement finest practices during respecting our specific browser compatibility targets. This made our frontend code reviews substantially easier and faster, ultimately improving our development turnaround time."

—Aman Soni, Engineering Manager, Policybazaar

WeTV

WeTV, Tencent's global video streaming platform, added an AI coding delegate to its CI/CD pipeline that uses Chrome DevTools for agents to diagnose achievement regressions and Modern Web Guidance to fix them using contemporary web phase features. The delegate now automatically diagnoses and resolves 90% of unsuccessful achievement checks, cutting debugging and resolution period by 87% (from four hours to 30 minutes, including manual evaluation):

"The results have been extremely productive in conditions of the two speed and quality. The diagnostic insights provided by Chrome DevTools for agents and Modern Web Guidance gave us dependable references for fixing complex layout issues. We perform strict verification following all fix, and the current achievement charge and stability have considerably improved our publish confidence."

—Yangjie Zheng, Head of Engineering, WeTV (Tencent)

note inc.

note inc., one of Japan's largest creator and media platforms alongside complete 90 myriad monthly energetic users, used Modern Web Guidance alongside its in-house scheme system as part of an ongoing attempt to modernize its Next.js frontend. Across a 180-run evaluation on its manufacturing codebase, Modern Web Guidance raised continue rates on contemporary web checks from 61% to 94% by steering agents to use native HTML and CSS features alternatively of tradition JavaScript for scroll animations, tooltips, and accordions. It additionally risen appropriate LCP depiction prioritization by 28% throughout 431 merged PRs:

"Our goal at note is 'Start, and Keep on Creating,' so our phase has to stay accelerated and accessible for all creator and reader. As additional of our code is written alongside AI coding agents, Modern Web Guidance helps them attain for modern, standards-based solutions alternatively of falling rear on older JavaScript patterns. It additionally points out particulars that are uncomplicated to miss, specified as image loading precedence and form accessibility. Combined alongside our scheme system, it lets us keep improving note during keeping our UI consistent."

—Takehiko Itabashi, VP of Technology, note inc.

MetaMask

MetaMask, a self-custodial financial phase alongside additional than 100 myriad downloads throughout about 190 countries, runs Modern Web Guidance as an automated assessment bot on all drag petition to its open origin browser extension, configured alongside fair a three-line prompt. In its archetypal five weeks, the bot reviewed approximately 480 drag requests and commented on 64 of them, foremost engineers to fix 43 findings (mostly accessibility, HTML semantics, and forms issues that linters don't catch) alongside a median period of 15 minutes from comment to fix:

"The reviews are really helpful. They've helped exterior and get our engineers familiar alongside contemporary APIs akin Interest invokers and the Popover API. It hasn't risen PR assessment times, if item it apt reduced them. The issues MWG caught would have alternatively required a individual reviewer acquainted with these contemporary web techniques."

—Francis Nepomuceno, UX Engineer, MetaMask

Ecosystem and community support

Modern Web Guidance started as an undertaking inside Chrome, but reaching this 1.0 milestone was a collaborative attempt alongside many experts throughout the web community.

Thank you to the satisfied area tech leads overseeing all web phase area, our browser partners at Firefox and Edge, the autonomous web standards and accessibility experts who authored and tested guides, and all of the open origin contributors on GitHub who helped form this release!

If you place a gap in what coding agents cognize concerning the web, or desire to assistance enhance an existing guide, see the contribution guide to get involved.

Get started alongside Modern Web Guidance

To add Modern Web Guidance to your project, run the CLI installer from your project directory:

npx modern-web-guidance@latest install 

Or if you already installed an before version, you can update to 1.0 by running:

npx modern-web-guidance@latest update 

In supplement to the CLI, you can instal and update Modern Web Guidance immediately through most famous coding delegate plugin marketplaces, including Claude Code, Codex, Cursor, Antigravity, Copilot, WebStorm, Kimi Code, and Grok Build.

To study more, inspect out these resources:

• Modern Web Guidance documentation
• Evaluation dashboard
• GitHub repository
• YouTube video playlist

A broad intent Apple Silicon tier for x86-64 PCs. It is a UEFI boot program alongside an arm64-to-x86-64 translator, a Metal controller for NVIDIA GPUs and a example of Apple silicon hardware. macOS and most apps start, but it is dilatory and needs much additional testing, as of v0.1.0

An ahead-of-time and just-in-time compiler translates arm64e code to x86-64. It covers additional than 3,000 AArch64 education encodings, maps visitant registers to presenter registers and caches translated code. It runs on any x86-64-v2 CPU, Intel or AMD.

The Metal controller supports GTX 16 and RTX 20 sequence GPUs and newer. It compiles AIR, Metal's shader IR, immediately to NIR, Mesa's IR, and supports the Metal3 and Apple7 GPU families.

• An x86-64-v2 CPU (about 2011 or newer), UEFI alongside Secure Boot off, 8 GB of RAM.
• An NVIDIA GTX 16 or RTX 20 sequence GPU or newer.
• A USB rod of 8 GB or more.
• An bare GPT partition of at smallest 60 GB.
• Network admission during the install, which downloads macOS.

Stela currently models the Mac mini (M2) and runs macOS 27.

1. Download stela from the releases page.
2. Run sudo ./stela setup (Linux, macOS) or double-click stela.exe (Windows).
3. Choose the USB stick, the macOS type and the Mac model, afterward confirm. Setup erases the USB stick.
4. Boot the PC from the USB stick.

To update a USB rod made alongside an older version, download the new stela, plug the rod in and run sudo ./stela setup update stela (Linux, macOS) or stela.exe setup update stela (Windows).

You need Rust and LLVM alongside Clang 21 or newer.

git copy https://github.com/tylertms/Stela cd Stela cargo xtask dist

This writes target/release/stela. The archetypal build fetches and compiles Linux, Mesa and LLVM sources and takes a lengthy time.

Stela contains no Apple software. You are liable for following Apple's software licence accord and conditions of use.

Stela's code is GPL-2.0-or-later. See LICENSE and NOTICE.

Discord Server

The dreary web isn't fair for illicit activities. In fact, many lawful online platforms keep a ".onion" domain on the dreary web for privacy reasons, including media outlets akin ProPublica and BBC News, social media sites akin Facebook, and privacy-conscious communication platforms akin Proton Mail and SecureDrop. 

But this additionally provides ideal shield for criminals and hackers who create clones of lawful dreary web sites to pilfer delicate data and cryptocurrency from privacy-conscious users. And stated that onion links are lengthy and jumbled, it’s uncomplicated for users to accidentally click on the incorrect nexus and end up on a counterfeit website alternatively of the genuine one. When the FBI seized 276 bulb addresses during 2014's Operation Onymous, they established that 153 of them were phishing sites.

Thankfully, Tor Browser already has a cryptography-backed characteristic that can verify the authenticity of an bulb site, by confirming whether it has end-to-end encryption and extended validation certificates. Here's how this characteristic works, anywhere it falters, as fine as what another red flags you should appearance for. 

You May Also Like

How phishing plant on the dreary web

While phishing on the dreary web plant as it does on the apparent web, scammers have a few distinctive advantages because of the secretive nature of the environment. Most importantly, you can’t fair glance at an bulb nexus to inform if the location is genuine. Normal website URLs lean to be abbreviated and memorable, during bulb links are 56-character strings of alphanumeric content that appearance mostly akin gibberish. 

When you try to connect, Tor Browser verifies the URL against the originating website’s cryptographic key, which is how you cognize nobody has hijacked the location or tampered alongside it midway. But since this has the unwanted consequence of making domains harder to recall, scammers have a much easier period generating lookalike addresses or creating website clones. 

For example, many famous websites use “vanity prefixes” to create their bulb addresses additional effortlessly identifiable or to add several branding appeal. That method their 56-character bulb nexus starts alongside item akin “facebook,” “bbcnews,” or “ciadotgov.” But scammers can use a liberated tool akin mkp224o to create lookalike addresses alongside the identical vanity prefix as the lawful website, which gives users a false awareness of security. 

Of course, most dreary web users don’t category addresses immediately into Tor Browser; they use dreary web directories akin the Hidden Wiki to discover helpful bulb sites applicable to their search. Scammers volition create counterfeit hunt engines or nexus directories to item users to their counterfeit websites, akin whenever the Ahmia hunt engine discovered that a copy of its phase was directing users to 255 cloned services rear in 2015. 

Of course, it’s imaginable to orchestrate phishing attempts that don’t affect cloning sites at all. Researchers at Freie Universität Berlin depict a advanced method anywhere attackers assist the genuine website through their own reverse proxy, which lets them manipulate parts of the location or log your online action without your awareness. In 2019, ESET equal established a trojanized type of Tor Browser that replaced Bitcoin addresses on websites to straightforward payments to hackers. So the two genuine websites and your browser itself are additionally susceptible to manipulation if you download or admission them from an unverified source. 

How to verify an bulb location in Tor Browser

There are a few finest practices to evade phishing attacks whenever using the dreary web. None of them are foolproof on their own, but together, they considerably lesser the hazard of ending up on a counterfeit or manipulated website. 

1. The Tor Project has a characteristic called Onion-Location, which lets apparent web websites advertise that they have a dreary web type accessible for users who favor additional privacy. If beginning a regular TLS-backed website using the Tor Browser reveals a purple “onion available” clasp in the location bar, you can click on it and be redirected to the authoritative bulb nexus connected alongside that site. 

2. On the desktop type of Tor Browser, you can admission an bulb location using a shortened type of its URL called an Onion Name. For now, this characteristic lone plant alongside SecureDrop, so newsrooms can established tip lines alongside addresses akin mysitename.securedrop.tor.onion, which would afterward redirect to the 56-character first bulb address. This characteristic is in energetic development, so additional platforms power assistance it in the future.

3. When you burden up an bulb location using the Tor Browser, you’ll see an bulb icon on the location bar, which confirms that your association is end-to-end encrypted. But you can additionally click on the bulb icon to inspect if the location has an Extended Validation (EV) certificate, which tells you that its authenticity has been verified by a trusted certificate authority akin DigiCert. While not all lawful bulb location volition have an EV certificate, celebrated ones akin Facebook lean to. 

4. On the another hand, if you see a alert sign next to the bulb icon, that method the location is using a self-signed or expired certificate that isn’t guaranteed by a trusted authority. It may additionally connote that the location is being served complete an insecure URL. This doesn’t certainly inform you it’s a phishing site, but it’s a red emblem to observe out for nevertheless.

5. Don’t depend on hunt engines, nexus directories, Reddit threads, or Telegram channels too heavily on the dreary web. Once you’re certain you’ve established the bulb location for a genuine site, bookmark it so you can admission it immediately the next period you desire to visit. 

What to do if you think you've been phished

If you realized that you’ve been the casualty of a phishing attempt, the archetypal stage is to near the browser opening alongside the counterfeit location and admission the genuine bulb location to reset any document passwords you may have accidentally divulged. 

Also, mostly try to allow two-factor authentication and PGP logins on any dreary web document that supports it for added security. And if you downloaded Tor Browser from anyplace another than the official Tor Project site, uninstall it now and catch a caller copy from the authoritative address. 

Read next

Please allow JS and disable any ad blocker

I’ve been evaluation the Aux-2 for a brace days and I’ve established it unsurprisingly helpful and amazingly uncomplicated to set up. The Aux-2 is a $69 box concerning the size of a phase of cards. It has 2.4GHz Wi-Fi, Bluetooth, Ethernet, USB-A, USB-C, a digital/analog audio jack, a Grove port for interfacing alongside peripherals akin sensors, buttons, and LEDs, and a brace of RS-232 serial ports.

It can extend Bluetooth devices into your Home Assistant setup. Its USB harbor lets you plug in a Nabu Casa Z-Wave or Zigbee antenna in case your Home Assistant hub isn’t in a fine spot. You can authority devices akin TVs, AV receivers, sun-related inverters, and additional via serial connector. And you can nexus an amplifier or powered speakers to its audio jack to stream music to older audio equipment.

All of these things leverage Home Assistant’s capabilities as an open-source platform. The Aux-2 is according to ESPHome, an open phase for making DIY astute residence devices from cheap, elastic ESP boards, and it uses existing Home Assistant/ESPHome integrations for all its features. The serial integration was developed earlier this year; Music Assistant and SendSpin, which power the audio-out feature, are in energetic development.

I have a Home Assistant install, but equal following multiple years it is not my chief astute residence phase merely since of conflict and period constraints. Instead, I have a hodgepodge of Google Home, Apple Home, and a few devices that are lone in Home Assistant. The circumstance is not ideal.

But the Aux-2’s capabilities absolutely intersect alongside two things I’d been definition to do anyway, one of which I’m already using Home Assistant for. First, I have a car shed fridge, since I live in Texas. I additionally have children, which method sometimes the fridge or freezer entrance gets remaining open. I desire to cognize whenever that happens before all my food goes bad.

A brace years ago, I set up a few Aqara heat sensors, connected to Home Assistant via a now-discontinued Zigbee dongle, and set up an automation to vigilant me if the fridge or freezer get too warm. But they frequently autumn association (probably since they’re inner a fridge in the garage), they chew through coin division batteries, and they have no displays, which method I additionally have a cheap Acu-rite hygrometer in the fridge so I can see the heat without pulling out my phone. Someone tipped me off to Govee’s Bluetooth hygrometers, but I’d need a Bluetooth proxy to get them into Home Assistant. That happens to be a characteristic of the Aux-2.

I additionally have a set of in-wall speakers in my living area that I’ve never used. I’d been definition to get an amp, but inspection paralysis set in. Do I get a Wiim Amp? A stereo receiver? A cheap Bluetooth amp? Do I try to get them to activity alongside my four Sonos speakers? Maybe my ancient Google Home speaker? Turns out I do nothing for five years. Maybe the Aux-2 could help.

Setting up the Aux-2 was much easier than I expected. I plugged it into my device via USB-C and was capable to download and instal the latest firmware correct from a browser. I could additionally add my Wi-Fi credentials. Then I unplugged it, moved it complete to my media console and connected it to power (it takes USB-C or power complete Ethernet), and did the remainder of the setup in the Home Assistant interface.

In HA, I was prompted to instal ESPHome, which discovered the Aux-2 and sent me to a “set up your ESPHome equipment page” that walked me through the capabilities. Enabling Bluetooth proxying took a brace of clicks; I added the Govee Bluetooth integration and put batteries into the sensors and they showed up automatically. Mercifully, they maintained their Bluetooth association through three walls and a fridge, and now my fridge monitoring setup plant again.

The audio capability took a small longer, but most of that was spent hooking the speakers up to the amp I ended up buying and environment up Music Assistant, which I didn’t have installed. Music Assistant lives on your Home Assistant hardware and can perform from many distinct services — from Spotify to YouTube Music to local records and additional — and to many distinct outputs, akin Sonos, Wiim, AirPlay, Google Cast, and others, but they all need to be configured, and that took a beat. Not a lengthy beat: small than fractional an hr total.

I can now perform music to the in-wall speakers using Music Assistant. Sendspin, the whole-home audio norm (also developed by the Open Home Foundation) is expected to be capable to let you collection speakers from distinct protocols under certain conditions, but I haven’t gotten that operating yet. The norm is motionless in development, and I’ve additionally been busy, so I’m not certain if that’s a me issue or a them problem.

I would additionally akin to see the Aux-2 display up as an AirPlay or Spotify Connect target, which (again) is likely fair a item I need to set up.

Serial authority is the most intriguing characteristic of the Aux-2, and it’s unfortunately the item I haven’t yet had period to test. But the capability to hook in things akin sun-related inverters, TVs, and receivers is fascinating and one I desire to appearance into additional whenever I get the chance. Maybe I’ll hook it up to my LG TV.

The Aux-2 doesn’t do item you couldn’t do already alongside an ESP32 commission and assorted accessories, or equal another ESP-based devices. The Apollo Automations Cast-1, for example, expenses $35 and supports the identical music-casting and Bluetooth proxy features I’m really using from the Aux-2 at the moment. You could bodge together item equal cheaper alongside DIY parts.

That’s not a tap against the Aux-2. That’s the entire point. The ecosystem is open by design, which I discover endlessly refreshing. Both Nabu Casa and Apollo prosperity the Open Home Foundation, which develops Home Assistant and ESPHome (and Sendspin and Music Assistant), and the two provision hardware that’s a small easier to use than DIY options. But there’s nothing stopping you from making your own devices. It’s actively encouraged.

I bought a three-pack of ESP32 boards for $16 three years ago. I could have built a Bluetooth proxy from one of those. I could have built an LED controller. I could have built a dirt sensor, or a media player, or any of a dozen another things. I didn’t do item at all.

But now that I’ve used the Aux-2 and dipped my toe into the ESPHome waters, perchance I will.