Your Unique Visitor Count Has a One-Month Shelf Life
Umami is MIT-licensed, so the identification path is readable. Where, who and when turn out to be a CDN header, a hash that expires on the 1st, and a bucket quantized to the clock hour.
Security
Threat models, hardening and secure defaults.
2 posts
Your Browser Agent Is Not Bound by the Same-Origin Policy
The web's oldest isolation guarantee is a string comparison. Put an agent inside the browser and it becomes a model's ability to resist a prompt injection.