61
OAuth for all
Self-Managed OAuth is now available to all developers on Cloudflare. Here's how we executed a zero-downtime migration of our core OAuth engine to make it happen.
New
The latest blog posts to take off on Hacker News. 3,855 posts.
62
The new HTTP QUERY method explained
In this blog post, we take a deep dive into the new HTTP QUERY method, explaining the history behind it as well as the advantages and disadvantages of using it.
63
Zero-Touch OAuth for MCP
The Enterprise-Managed Authorization extension to the Model Context Protocol is now stable, enabling organizations to centrally provision MCP server access through their identity provider so users get connected servers on first login without per-app OAuth.
64
How we run Firecracker VMs inside EC2 and start browsers in less than 1s
Every Browser Use Cloud session runs in its own Firecracker microVM on regular EC2. It starts in under a second and costs $0.02 per browser hour, down from $0.06.
65
KDE Plasma 6.7 Released
Plasma 6.7 brings powerful new features to KDE’s classic desktop, and refines its user experience to new levels.
66
Phoenix LiveView 1.2
LiveView 1.2 is a small release that adds support for colocating CSS.
67
The Future of Email
As AI starts reading and actioning our inboxes, email authentication becomes the trust layer that the future of email depends on.
68
Nextcloud Hub 26 Spring: Built together, designed for the future
Today we present Nextcloud Hub 26 Spring, our anniversary release. Discover all the new features and get started with the new Nextcloud Hub.
69
Upcoming breaking changes for npm v12
Our next npm major version, v12, introduces security-related default changes to npm install. All these changes are available behind warnings in npm today on 11.16.0 or newer, so you can…
70
Biff.core: system composition for Clojure web apps
System composition and other interfaces for Biff projects
71
VoidZero Is Joining Cloudflare
VoidZero, the team behind Vite, Vitest, Rolldown, Oxc, and Vite+, is joining Cloudflare. Vite stays open source, vendor-agnostic, and built for everyone.
72
Angular v22
Today, we are thrilled to announce the release of Angular v22. We continue to be proud of the work we do with each release. Our goal is to…
73
Is AI causing a repeat of frontend’s lost decade?
AI is doing to programming what framework-brain did to the frontend before. Deskilling, or just working at a higher level of abstraction?
74
Deno 2.8
`import defer`, six new subcommands (`deno transpile`, `deno pack`, `deno bump-version`, `deno ci`, `deno why`, `deno audit fix`), network debugging in Chrome DevTools, framework-aware `deno compile`, and 3.66x faster cold npm installs.
75
Vivaldi 8.0
More than thirteen years in, and I am still as excited about building this browser as I was on day one. Maybe more. That excitement comes from a genuine belief that the people who use Vivaldi deserve…
76
Saying goodbye to asm.js
Disabling asm.js optimizations in SpiderMonkey
77
Google changes its search box
We shared the next step in our journey to bring together the best of a search engine with the best of AI.
78
Forking the Web
This document contains a set of informal notes on how to build an alternative specification to the Web, in such a way that hopefully prevents many of its drawbacks while still preserves many of the good points. This document is not an specification, and is therefore subject to change over time.
79
80
ClojureScript Gets Async/Await
We’re happy to announce a new release of ClojureScript. If you’re an existing user of ClojureScript please read over the following release notes carefully.
81
OpenAI’s WebRTC problem
Media over QUIC: There are ways to do voice AI without being traumatized by WebRTC.
82
Google Cloud fraud defense, the next evolution of reCAPTCHA
Today at Next ‘26, we’re launching Google Cloud Fraud Defense, the trust platform for the agentic web and the next evolution of reCAPTCHA.
83
YouTube, your RSS feeds are broken
We'd love to keep using your feeds in our feed readers, but we're gonna need them to work.
84
Your website is not for you
A note from a developer who keeps watching good design die in boardrooms.
85
LinkedIn is scanning browser extensions
When companies get caught doing this sort of thing, the response is almost always the same: "we're using this technology to combat fraud," or "ensure positive user experience," or "save computing resources," or some other hog wash. The simple truth, there's no reason to be collecting data that can be used to identify…
86
The Prompt API
Discover the infinite possibilities of the Prompt API.
87
We found a stable Firefox identifier linking all your private Tor identities
We discovered a privacy vulnerability in Firefox Private Browsing and Tor Browser that allows websites to fingerprint and track users across origins using IndexedDB database ordering, even after closing all private windows.
88
Prove you are a robot: CAPTCHAs for agents
How we built a reverse-CAPTCHA for agents, and what we learned.
89
Someone bought 30 WordPress plugins and planted a backdoor in all of them
Last week, I wrote about catching a supply chain attack on a WordPress plugin called Widget Logic. A trusted name, acquired by a new owner, turned into
90
Servo is now available on crates.io
Initial crates.io release and LTS version of Servo