Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 6,985 posts.
Encrypt-then-MAC
First things first: Why use a composition of encryption and MAC instead of a single primitive which achieves both? Because people are very good at writing bad code. In my experience on the FreeBSD security team, writing dozens of security advisories, there are three types of code which are especially prone to have…
Development Journal for Price of Persia
Jordan Mechner is an author, graphic novelist, screenwriter and video game designer, best known as the creator of Prince of Persia. Follow his latest projects here.
Mistakes in Web Design
The 10 most egregious UX offenses against users. Web design disasters and HTML horrors are legion, though many usability atrocities are less common than they used to be.
Goodbye, Clean Code
Let clean code guide you. Then let it go.
They Used To Last 50 Years
Now refrigerators last 8–10 years, if you are fortunate. How in the world have our appliances regressed so much in the past few decades? I’ve bought and sold refrigerators and freezers from the 1950’s that still work perfectly fine. I’ve come across washers and dryers from the 1960’s and 1970’s that were still working…
Hit men, click whores, and paid apologists: Welcome to the Silicon Cesspool
It’s tough being a journalist, especially if you’re covering technology and living in Silicon Valley, because it seems as if everyone around you is getting fabulously rich while you’re stuck in a job that will never, ever make you wealthy. What’s worse is that all these people who are getting rich don’t seem to be any…
Why Is This Website Port Scanning Me?
Investigation of the practice of port scanning site visitors for fingerprinting and tracking.
How uv got so fast
uv’s speed comes from engineering decisions, not just Rust. Static metadata, dropping legacy formats, and standards that didn’t exist five years ago.
Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years
Hundreds of millions of Facebook users had their account passwords stored in plain text and searchable by thousands of Facebook employees — in some cases going back to 2012, KrebsOnSecurity has learned. Facebook says an ongoing investigation has so far found no indication that employees have abused access to this data.
Apple's New Map
Four years in the making, it covers just 3% of the U.S.’s area and 4.9% of its population:
H.264 is Magic
A high level walkthrough of the basics of video compression techniques used in MPEG, AVC/H.264, codecs.
Resigning as Asahi Linux project lead
May 2026 update This post was written at a time of significant turmoil in my life, when multiple correlated events happened in quick succession. What I wrote in the post below is true, but a lot was left unsaid, as some things were still being investigated. At the time when I wrote the post, despite resigning from my…
Zero-day in Sign in with Apple
What if I say, your Email ID is all I need to takeover your account on your favorite website or an app. Sounds scary, right? This is what a…
Victory Lap for Ask Patents
There are a lot of people complaining about lousy software patents these days. I say, stop complaining, and start killing them. It took me about fifteen minutes to stop a crappy Microsoft patent fr…
I sold TinyPilot, my first successful business
Four years after starting TinyPilot from scratch, I’ve sold the company and handed complete control over to a new owner.
Open Social
The protocol is the API.
20 lines of code that beat A/B testing every time
<img src="http://research.microsoft.com/en-us/projects/bandits/MAB-2.jpg"/> A/B testing is used far too often, for something that performs so badly. It is defective by design: Segment users into two groups. Show the A group the old, tried and true stuff. Show the B group the new whiz-bang design with the bigger…
The New Firefox and Ridiculous Numbers of Tabs
website de dietrich ayala
Why Bother with What Three Words?
I'll be wording this post carefully as What 3 Words (W3W) have a tenacious PR team and, probably, have a lot more lawyers than I do. W3W is a closed product. It is a for-profit company masquerading as an open standard. And that annoys me. A brief primer. The world is a sphere. We can reference any point on the surface…
How web bloat impacts users with slow devices
In 2017, we looked at how web bloat affects users with slow connections . Even in the U.S., many users didn't have broadband speeds , making much of the web difficult to use. It's still the case that many users don't have broadband speeds, both inside and outside of the U.S. and that much of the modern web isn't…
My full statement regarding DOOM Eternal
This statement is issued in response to id Software Studio Director Marty Stratton’s “DOOM Eternal OST Open Letter”, published on Reddit.
The “Cobra Effect” that is disabling paste on password fields
Back in the day when the British had a penchant for conquering the world, they ran into a little problem on the subcontinent; cobras. Turns out there were a hell of a lot of the buggers wandering around India and it also turned out that they were rather venomous which