1
Kill sticky headers (2013)
There is currently a trend for using sticky headers on websites. There's even a sticky header web startup .
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 38 posts.
2
The Line of Death
When building applications that display untrusted content, security designers have a major problem— if an attacker has full control of a block of pixels, he can make those pixels look like anything…
3
The web sucks if you have a slow connection
A couple years ago, I took a road trip from Wisconsin to Washington and mostly stayed in rural hotels on the way. I expected the internet in rural areas too sparse to have cable internet to be slow, but I was still surprised that a large fraction of the web was inaccessible. Some blogs with lightweight styling were…
4
Medium and the Scourge of Persistent Sharing Bars
When people click a URL and see that it’s a Medium site, their reaction should be “Oh, good, a Medium site — this will be nice to read.” Right now it’s gotten to the point where when people realize an article is on Medium, they think, “Oh, crap, it’s on Medium.”
5
Sans Bullshit Sans: leveraging the synergy of ligatures (2015)
Front-end antics and typographic mischievousness
6
Electron is flash for the desktop (2016)
What is slack doing? The process was in the background when this happened. I wasn't even interacting with it - I was in a meeting. I only noticed because my laptop fans were whurring when I got back. Restarting slack seemed to fix it for now. But that's not abnormal
7
On the Perceived Value of EV Certs, Commercial CAs, Phishing and Let's Encrypt
Last week I wrote about how Life Is About to Get a Whole Lot Harder for Websites Without HTTPS [https://www.troyhunt.com/life-is-about-to-get-harder-for-websites-without-https/]. Somewhere in the comments there, the discussion went off on a tangent about commercial CAs, the threat
8
GUI Architectures (2006)
Describing the way architectures for UIs have evolved over the years, in particular the many and often misunderstood definitions for Model-View-Controller.
9
Google, Facebook, and Amazon have fundamentally transformed the web
Open Source Freelancer
10
Replacing Disqus with GitHub Comments
I considered removing comments from the blog after looking into Disqus load-time behaviour and seeing what it was imposing on visitors.
11
Dangers of CSV Injection
I’ve been doing the local usergroup circuit with this lately and have been asked to write it up.
12
HTTPS on Stack Overflow: The End of a Long Road
Today, we deployed HTTPS by default on Stack Overflow. All traffic is now redirected to https:// and Google links will change over the next few weeks. The ac...
13
A Year of Google and Apple Maps
Shortly after I published my Cartography Comparison last year, I noticed Google updating some of the areas we had focused on:
14
ASCII and Unicode quotation marks
Do not use the ASCII character 0x60 (grave accent) as a left quotation mark together with 0x27 (apostrophe), because it will look silly with modern correct fonts.
15
The browser bugs and edge cases of HTTP/2 push
There are lots of edge cases I hadn't considered, and it's very inconsistent between browsers. Here's what I found…
16
17
On React and WordPress
Big companies like to bury unpleasant news on Fridays: A few weeks ago, Facebook announced they have decided to dig in on their patent clause addition to the React license, even after Apache had sa…
18
I don’t know who the Web Audio API is designed for
WebGL is, all things considered, a pretty decent API. It’s not a great API, but that’s just because OpenGL is also not a great API. It gives you raw access to the GPU and is pretty low-level. For those intimidated by something so low-level, there are quite a few higher-level engines like three.js and Unity which are…
19
The Problem with AMP
Details about accelerated mobile pages and their numerous issues
20
Chrome Won
Disclaimer: I worked for 7 years at Mozilla and was Mozilla’s Chief Technology Officer before leaving 2 years ago to found an embedded AI startup. Mozilla published a blog post two days ago h…
21
Reverse Engineering the Hacker News Ranking Algorithm
A data-driven exploration of how the Hacker News ranking algorithm works.
22
Bad UX: How Booking.com deceives clients
Hi, guys, wanted to make some kind of warning for you to make sure no one gets into situation like this.
23
24
I'm giving up on HPKP
HTTP Public Key Pinning is a very powerful standard that allows a host to instruct a browser to only accept certain public keys when communicating with it for a given period of time. Whilst HPKP can offer a lot of protection, it can also cause a lot of harm too.
25
26
Stories that Hacker News removes from the front page
An analysis of which stories are removed from the front page of Hacker News due to moderator intervention.
27
Password Rules Are Bullshit
Of the many, many, many bad things about passwords, you know what the worst is? Password rules. Let this pledge be duly noted on the permanent record of the Internet. I don’t know if there’s an afterlife, but I’ll be finding out soon enough, and I plan
28
Defending a website with Zip bombs
Personal Blog of Christian Haschek
29
Maintaining an Independent Browser Is Expensive
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
30
Google AMP Is Not a Good Thing
You might have used Google’s new AMP project without even knowing. It’s a technology that makes mobile page results load very quickly on Google, it