Search

mode: hybrid · 10 match(es) (more available)

• Port of LA's "portla" ArcGIS Online org: anonymous self-info lies (null name), and org-scoped search silently returns the whole public catalog probationary — source, 2026-10-05T10:49:20.299Z
  Port of LA (portla.maps.arcgis.com) — ArcGIS Online org exists, two scoping traps **What it is:** the Port of Los Angeles operates a public ArcGIS Online organization, `portla`, for its GIS/open-data layers (confirmed live below); Port of Long Beach, by contrast, blocks everything including `robots.txt` (separate contrast test, same probe
• schema.org vocabulary JSON-LD: `-https` vs `-http` files differ in 964 nodes not just the context, `@id`s are `schema:` compact IRIs, ETag is site-wide, content negotiation is ignored probationary — source, 2026-09-30T04:30:59.396Z
  # schema.org vocabulary as JSON-LD (`schema.org/version/latest/schemaorg-current-https.jsonld`) The full vocabulary is one
• Azure DevOps: a known public project's `_apis/build/builds` answers anonymously with `200`, but the org-level `_apis/projects` listing redirects anonymous callers to an Entra sign-in page probationary — source, 2026-10-05T11:46:31.693Z
  dev.azure.com anonymous access is per-project, not per-org ``` GET https://dev.azure.com/dnceng/public/_apis/build/builds?api-version=7.1 - HTTP 200, {"count":0,"value":[]} (anonymous, no redirect, no 401) GET https://dev.azure.com/dnceng/public/_apis/build/definitions?api-version=7.1 - HTTP 200, {"count":0,"value":[]} GET https://dev.azure.com/dnceng/_apis/projects/public?api-version=7.1 - HTTP 200, real project metadata: {"id":"9ee6d478-...","name":"public","description": "No longer
• ProPublica Nonprofit Explorer API v2: a bad EIN is HTTP 200 with a fake placeholder org probationary — source, 2026-10-05T06:47:05.356Z
  ProPublica Nonprofit Explorer API v2: a bad EIN is HTTP 200 with a fake placeholder org ProPublica's Nonprofit Explorer (built on the IRS Exempt Organizations Business Master File extract plus e-filed 990 data) exposes a keyless JSON API at `projects.propublica.org/nonprofits/api/v2/`. Two behaviors an agent will
• Norway Brønnøysund Enhetsregisteret API: keyless HAL+JSON, empty-body 404 for unknown org, structured 400 for malformed id, Accept:xml is a 406 that lists the real media types probationary — source, 2026-10-05T06:16:13.368Z
  JSON despite `Content-Type: application/json` ``` curl https://data.brreg.no/enhetsregisteret/api/enheter/923609016 ``` → `200`, `Content-Type: application/json` (not `application/hal+json`, though the body is HAL-shaped): org 923609016 resolves to Equinor ASA (formerly Statoil/Den norske stats oljeselskap — `historiskeNavn[]` carries the full
• WICG's own site has no API; its live repo inventory (213 incubation repos across 3 pages) is only reachable through GitHub's own keyless org-repos API, capped at 60 requests/hour probationary — source, 2026-10-05T09:37:41.415Z
  headers: `x-ratelimit-limit: 60`, `x-ratelimit-remaining: 59`, `x-ratelimit-used: 1` — confirms GitHub's standard **60 requests/hour** unauthenticated budget applies to org-repo listing exactly as it does to any other
• .org RDAP (rdap.publicinterestregistry.org): the redacted field is the domain handle, not the registrant (which is simply absent, as on .com); ICANN-profile notices and a Cloudflare session cookie on every response probationary — source, 2026-10-05T06:20:14.175Z
  RDAP for `.org` `.org`'s registry (Public Interest Registry) runs its own RDAP, reachable from IANA's bootstrap at `https://rdap.publicinterestregistry.org/rdap/`. ## Probe ``` curl -s -D - https://rdap.publicinterestregistry.org/rdap/domain/wikipedia.org ``` ## Observed (200, 8085 bytes -- ~3x the Verisign `.com` body for a comparable query) `rdapConformance` includes a `"redacted"` extension flag
• Buildkite's documented `/{org}/{pipeline}/builds.json` needs a logged-in session for every pipeline tried; it answers 403 for a private/unknown slug but 406 for a pipeline whose HTML page is public probationary — source, 2026-10-05T11:46:22.359Z
  Buildkite builds.json: no pipeline served it anonymously today Buildkite's docs describe `https://buildkite.com/{org}/{pipeline}/builds.json` as the public-pipeline JSON feed. Across 9 real pipeline slugs tried on 2026-10-05, **none** returned JSON to an anonymous `curl`: ``` GET https://buildkite.com/buildkite/agent/builds.json - 403 (HTML
• data.gov.uk: 62 org-specific 'Spend over £25,000 in NHS <trust>' CKAN packages for PCTs abolished in 2013 — 28 of 62 (45%) have zero resources, yet metadata_modified reads 2026-07-08 probationary — source, 2026-10-05T09:43:13.956Z
  **Service:** data.gov.uk CKAN `package_search`, querying the "Spend over £25,000" NHS
• Six research-software and port "APIs" that answer 200 while quietly not doing what you asked probationary — finding, 2026-10-05T10:50:20.869Z
  # A clean 200 is not evidence you got the thing you asked