481
SwiftUI Defaults Considered Harmful
A few notes on SwiftUI and why UI frameworks should not try to be “smart”
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 555 posts.
482
Speeding up this site by 50x (2014)
I've seen all these studies that show how a 100ms improvement in page load time has a significant effect on page views, conversion rate, etc., but I'd never actually tried to optimize my site. This blog is a static Octopress site, hosted on GitHub Pages. Static sites are supposed to be fast, and GitHub Pages uses…
483
Stop Validating Email Addresses with Regex (2012)
Just stop, y’all. It’s a waste of your time and your effort. Put down your Google search for an email regular expression, take a step back, and breathe.
484
A surprising JavaScript memory leak found at Meteor
This week, my teammates at Meteor tracked down a surprising JavaScript memory leak . I searched the web for variations on javascript closure memory leak and came up with nothing relevant, so maybe this is a relatively unknown issue. (Most of what you find for that query talks about the bad garbage collection algorithm…
485
486
Deploying ES2015+ Code in Production Today
Most web developers I talk to these days love writing JavaScript with all the newest language features—async/await, classes, arrow functions, etc. However, despite the fact that all modern browsers can run ES2015+ code and natively support the features I just mentioned, most developers still transpile their code to…
487
Training a Neural Net to Generate CSS
A log of experiments done on the site design, intended to render pages more readable, focusing on the challenge of testing a static site, page width, fonts, plugins, and effects of advertising.
488
Pwncloud – Bad crypto in the Owncloud encryption module
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
489
WebAssembly Is Not A Stack Machine
This is the final part of a 4-part miniseries on issues with WebAssembly and proposals to fix them.
490
Backbone patterns
Here, I try to document the good practices that our team has learned along the way building Backbone applications. This document assumes that you already have some knowledge of Backbone.js , jQuery , and of course, JavaScript itself.
491
Clojure: Realtime collaborative web apps without ClojureScript
A blog mostly about Clojure programming
492
Increasing the surface area of blogging
Open feeds, OPML, books, blogs and graphs
493
Bringing the web up to speed with WebAssembly
Bringing the web up to speed with WebAssembly Haas et al., PLDI 2017 This is a joint paper from authors at Google, Mozilla, Microsoft and Apple describing the motivations for WebAssembly together w…
494
Twitter’s poor API documentation practices
The personal website of Idan Gazit
495
Node.js and the new web front-end
The Official Web Site of Nicholas C. Zakas
496
URLs: It's Complicated
Let's play silly games with URLs...
497
Every webpage deserves to be a place
Posted on Thursday 5 Sep 2024. 1,133 words, 5 links. By Matt Webb.
498
The strange story of etherpad
I don't actually know this story - certainly no more of it than anyone who has read a few web pages. But luckily, I'm pretty good at making...
499
The Ambiguity of Open and H.264 vs. VP8
Google has recently announced their intention to remove the H.264 video codec from its Chrome browser. This decision has been smeared as an evil campaign for controlling video on the web, akin to not-invented-here syndrome. It’s also been lauded as the push that the web needs to remain open and free. Mostly, it’s been…
500
Phishing attack against Lastpass
Updated 2016-02-04 : LastPass has removed the button from notifications and now requires email confirmation for all logins from new IPs . This substantially mitigates LostPass, but does not eliminate it.
501
Cross-Site Request Forgery
Cross-Site Request Forgery countermeasures can be greatly simplified using request metadata provided by modern browsers.
502
Stop Validating Email Addresses With Your Complex Regex
Just stop, y’all. It’s a waste of your time and your effort. Put down your Google search for an email regular expression, take a step back, and breathe.
503
Why and how to avoid hamburger menus
The issues of this pattern are now widely recognized, but what’s the real solution?
504
PUT or POST: The REST of the Story
Web service designers have tried for some time now to correlate CRUD (Create, Retrieve, Update and Delete) semantics with the Representational State Transfer (REST) verbs defined by the HTTP specif…
505
How Browsers Store Your Passwords (and Why You Shouldn't Let Them)
Introduction In a previous post , I introduced a Twitter bot called dumpmon which monitors paste sites for account dumps, configuration fi...
506
Too Much Color
I spent too much time looking at too many colo(u)rs to try and optimise them for csskit. Here are some interesting findings.
507
HTTP cookies, or how not to design protocols
For as long as I remember, HTTP cookies have been vilified as a grave threat to the privacy of online browsing. I don't quite agree, but I f...
508
Neat trick for getting private info for Facebook, GMail, Twitter and Digg users
Hidden img and script tags with onload and onerror let any site tell if you're logged into GMail, Facebook, Twitter or Digg. Google called it expected.
509
Playing Fasttracker2 .XM files in JavaScript
Hit the play button above and it will play music; specifically, music composed with (or at least, compatible with) a program released in 1994 called FastTracker 2; this is a Javascript homage I wrote in a fit of nostalgia. The source code is on GitHub if you'd like to check it out.
510
Brendan Eich on Ecma TC39, JavaScript.next, and Google Dash
I spoke at TXJS , a really excellent regional JS conference, in June. Thanks to @SlexAxton , rmurphey , and everyone else involved. My talk was concerned with the good, bad, and ugly of Ecma TC39 (and I mean those words in the best possible way!), mixing philosophy with historical events from the last 14 years.