1
The Website Obesity Crisis
This is the text version of a talk I gave on October 29, 2015, at the Web Directions conference in Sydney. [ 53 minute video ].
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 29 posts.
2
Parsing JSON is a Minefield
[2016-10-26] First version of the article [2016-10-28] Presentation at Soft-Shake Conference, Geneva ( slides ) [2016-11-01] Article and comments in The Register [2017-11-16] Presentation at Black Alps Security Conference, Yverdon ( slides ) [2018-03-09] Presentation at Toulouse Hacking Conference ( slides )…
3
You Might Not Need Redux
People often choose Redux before they need it. “What if our app doesn’t scale without it?” Later, developers frown at the indirection Redux…
4
How Plex is doing HTTPS for all its users
This week Plex , a self-hosted media server, announced that they now offer TLS to secure all connections, including those to the user’s servers. This is actually pretty interesting.
5
Show HN: Web Design in 4 minutes
Learn the basics of web design in 4 minutes with this interactive tutorial.
6
How Safe Browsing Works in Firefox
Firefox has had support for Google's Safe Browsing since 2005 when it started as a stand-alone Firefox extension . At first it was only available in the USA, but it was opened up to the rest of the world in 2006 and moved to the Google Toolbar . It then got integrated directly into Firefox 2.0 before the public launch…
7
Full-Stack Redux Tutorial
Tero Parviainen
8
Subresource Integrity Addressable Caching
A small number of popular JavaScript frameworks and libraries account for a substantial portion of the network, battery, and time budgets of users of the contemporary Web. Many applications include these libraries even if they only use a small portion of the functionality they provide. Large improvements seem possible…
9
Bots won't replace apps, only better apps will replace apps
Why conversational UI fails in practice and what the West can really learn from Asian messaging apps.
10
Xplain – Explaining X11 for the rest of us
The goal of Explanations is to try to allow people to play with fun parts of computers. Graphics, compression, audio. The tagline is my biggest inspiration: "Play, don't show", riffing off the typical "Show, don't tell" rule of writers and authors everywhere. Why bother giving a diagram when I give you an inspector…
11
Learn Raw React – No JSX, No Flux, No ES6, No Webpack
Learn React from the ground up, without worrying about JSX, Flux, ES6, Webpack, etc.
12
The “Cobra Effect” that is disabling paste on password fields
Back in the day when the British had a penchant for conquering the world, they ran into a little problem on the subcontinent; cobras. Turns out there were a hell of a lot of the buggers wandering around India and it also turned out that they were rather venomous which
13
My url isn't your url
When I started the precursor to the curl project, httpget, back in 1996, I wrote my first URL parser. Back then, the universal address was still called URL: Uniform Resource Locators. That spec was published by the IETF in 1994. The term "URL" was then used as source for inspiration when naming the tool and … Continue…
14
The Basics of Web Application Security
Security is both very important and often under-emphasized. While many targeted techniques help, there are some basic clean code habits which every developer can and should be doing
15
Cache-Control: immutable
About one year ago our friends at Facebook brought an interesting issue to the IETF HTTP Working Group - a lot (20%!) of their transaction...
16
Google May Be Stealing Mobile Traffic
Update 10/17/2016 6:30pm: You can read a response from the tech lead of the AMP Project for Google, in the comment area. Update 11/01/2016 10:40pm: After learning more about AMP, it became clear that…
17
Poll on macOS 10.12 is broken
When Mac OS X first launched they did so without an existing poll function. They later added poll() in Mac OS X 10.3, but we quickly discovered that it was broken (it returned a non-zero value when asked to wait for nothing) so in the curl project we added a check in configure for that … Continue reading poll on mac…
18
19
Google’s QUIC protocol: moving the web from TCP to UDP
QUIC replaces TCP with UDP for faster connections, eliminating head-of-line blocking and reducing latency. Learn how it works and why it matters.
20
21
22
23
24
25
Pwncloud – Bad crypto in the Owncloud encryption module
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
26
Phishing attack against Lastpass
Updated 2016-02-04 : LastPass has removed the button from notifications and now requires email confirmation for all logins from new IPs . This substantially mitigates LostPass, but does not eliminate it.
27
Moving from Native Apps to Progressive Web Apps
From now on, I won’t be building any more native apps. All my apps going forward will be progressive web apps. Progressive web apps are web…
28
29
Introducing OpenType Variable Fonts
“” is published by John Hudson in VariableFonts.io.