1
The Modern Guide to OAuth
Learn how OAuth 2.0 works with this simplified explanation and guide. Learn what it is, why it's essential for secure authorization, and best practices for implementation.
New
The latest blog posts to take off on Hacker News. 267 posts.
2
Unicode Normalization Forms: When ö ≠ ö
How special characters in file names can ruin your day.
3
Is It Time for the JavaScript Temporal API?
Date handling in JavaScript is a pain, it's time for a proper Temporal API
4
How a hypermedia approach can address usability concerns with multi-page apps
In this essay, Carson Gross gives an analysis of Rich Harris's talk 'Have Single-Page Apps Ruined the Web?', exploring the debate between Single-Page Applications (SPAs) and Multi-Page Applications (MPAs). Carson examines Harris's criticisms of both approaches and proposes hypermedia-oriented solutions using htmx…
5
6
7
Notches Gone Wild
This holiday season we have a special gift for Mac users everywhere, especially ones with a new MacBook Pro and notch. We’re proud to announce the immediate availability of Notchmeister. So what does Notchmeister do? Think of it as a fun way to spruce up your notch. Or as a screen saver for something you […]
8
Two custom React hooks
Open-source, swappable packages and an AI that assembles them into full-stack apps that scale.
9
Log4j 2.15.0 – Previously suggested mitigations may not be enough
Log4j 2.15.0 and previously suggested mitigations may not be enough, Author: Renato Marinho
10
Rails 7 Released
This version of Rails has been years in the conceptual making. It’s the fulfillment of a vision to present a truly full-stack approach to web development that tackles both the front- and back-end challenges with equal vigor. An omakase menu that includes everything from the aperitif to the dessert.
11
Preventing Pool-Party Attacks
Brave has identified a new category of tracking vulnerability, forms of which are present in all browsers. We call this category of attack “pool-party” attacks because the attack uses collections (or “pools”) of limited-but-shared resources to create side channels.
12
HTTP/3 Is Fast
HTTP/3 promises speed and efficiency, but does it actually deliver? In our latest article, we put HTTP/3 to the test,comparing it against HTTP/2 in real-worl...
13
Reimagining projections for the interactive maps era
A deep dive into Adaptive Projections, a novel way to make interactive maps more accurate without compromises to user experience or rendering quality.
14
Chrome users beware: Manifest v3 is deceitful and threatening
Like FLoC and Privacy Sandbox before it, Google Chrome’s Manifest V3 is another example of the inherent conflict of interest that comes from Google controlling both the dominant web browser and one of the largest internet advertising networks.
15
Tailwind CSS v3.0
Tailwind CSS v3.0 is here — bringing incredible performance gains, huge workflow improvements, and a seriously ridiculous number of new features.
16
Firefox 95 Released
RLBox — a new technology that hardens Firefox against potential security vulnerabilities in third-party libraries — is now enabled on all platforms.
17
Django 4.0
Posted by Mariusz Felisiak on Dec. 7, 2021
18
uBlock, I exfiltrate: exploiting ad blockers with CSS
Ad blockers like uBlock Origin are extremely popular, and typically have access to every page a user visits. Behind the scenes, they're powered by community-provided filter lists - CSS selectors that
19
Pg_GraphQL: A GraphQL Extension for PostgreSQL
GraphQL support is in development for PostgreSQL + Supabase.
20
AWS Amplify Studio: Figma design to full-stack apps
Discover more about what's new at AWS with Introducing AWS Amplify Studio
21
Vivaldi Browser 5.0
Get all of the highlights and details of this release by visiting the blog. Read the release blog • [New][Themes] Theme sharing (VB-38363) • [New][Translate][Panel] Provide a new way to translate…
22
Chrome phasing out Manifest v2 support from Jan 2022
Details of the Manifest V2 phase-out and end of life.
23
Making Websites Small
Practical notes on smaller websites: reduce page weight, optimize images, and simplify frontend dependencies.
24
Realtime Postgres Row Level Security
Realtime database changes are now broadcast to authenticated users, respecting the same PostgreSQL policies that you use for Row Level Security.
25
PeerTube 4 RC
Customization, content discovery, empowering through more control... Here is an overview of the new version of our software solution to create alternative platforms to YouTube and federate them together. « Frama is not just... » Each week of Fall 2021, we want to present you the diversity of what Framasoft does. As…
26
Vinegar: Safari extension that replaces YouTube embeds with HTML5 video tags
Remember YouTube5? And a Dinosaur remembers. YouTube5 was a Safari extension back when Flash was still a thing and hated by everyone. It replaced the YouTube...
27
Microsoft pushes ahead with controversial ‘buy now, pay later’ feature for Edge
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
28
How JavaScript engines achieve great performance
Ever wondered what browsers do to get JavaScript to execute quickly? Let’s take a look.
29
Django, HTMX and Alpine.js: Modern websites, JavaScript optional
Building a modern front end in Django without reaching for a full-blown JavaScript framework. Choosing the right tools for the job, and bringing them into your project.
30
Why IndexedDB is slow and what to use instead
Struggling with IndexedDB performance? Discover hidden bottlenecks, advanced tuning techniques, and next-gen storage like the File System Access API.