- Discussion of WebSocket cross-origin security: ParahSailin questioned why the Origin header is trusted when a malicious client could simply lie about its origin, prompting kanzure to note that nefarious clients are indeed possible.  
- castAR AR/VR system highlighted: nmz787 posted the Kickstarter campaign for Technical Illusions’ castAR, described as “the most versatile AR and VR system,” and abetusk reported having seen Jeri Ellsworth demonstrate it at Maker Faire NYC.