New
The latest blog posts to take off on Hacker News. 4,615 posts.
Dropbox starts using POST, and why this is poor API design
Today Dropbox announced in a blogpost titled “Limitations of the GET method in HTTP” that it will start allowing POST requests for APIs that would otherwise only be accessible using GET .
A game running in your browser's address bar
Interactive animations and even a game in your URL bar.
Tired of Safari
Yesterday, in reaction to pointer events becoming a W3C recommendation, Tim Kadlec published an important piece about Apple’s huge influence on the mobile web.
Introduction to Facebook's Flux architecture
If you’re like me and you wanted to go further with React, you more than likely would’ve checked out Flux , had a glance, closed the tab and then reassessed…
React Tips and Best Practices
I've spent a good deal of the past year working with React. I've written, refactored, and re-written many components in that time, and I've seen some best practices and anti-patterns emerge. I'm not going to get into what React is...
Comodo ships Adware Privdog worse than Superfish
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
ECMAScript 6
An overview of some of the most interesting features of ECMAScript 6, the latest version of the JavaScript specification.
Exploiting the Superfish certificate
As discussed in my previous blogpost, it took about 3 hours to reverse engineer the Lenovo/Superfish certificate and crack the password. In...
Extracting the SuperFish certificate
I extracted the certificate from the SuperFish adware and cracked the password (" komodia ") that encrypted it. I discuss how down below. T...
HTTP/2 Is Done
The IESG has formally approved the HTTP/2 and HPACK specifications, and they’re on their way to the RFC Editor, where they’ll soon be assigned RFC numbers, go through some editorial processes, and be published.
Invisible Click Tracking Using “Empty” UTF-8 Characters
Have a look at this URL linking to this post: https://kaspars.net/blog/invisible-click-tracking Notice any tracking variables? Me neither! But check out the HTTP request and response in the network inspector of your browser -- it is redirecting to the "same" URL: URL encoded special characters in the browser console…
The “Web Application” Myth
The last few weeks were full of lots of great articles about an old topic: should things on the internet be dependent on JavaScript and…
Non-blocking UI's with interface previews
Improving the perceived speed of interfaces using skeleton loading screens plus other front-end/UX performance gains.
Over 20 designers have copied my website and I don't mind
Over 20 designers copied my website and I don't mind at all, it's actually quite flattering. How would you feel if you were in my shoes - flattered or offended?
What the Flux?
Flux by Facebook is an architectural pattern for using their React library. This post helps explain flux in easy to understand ways.
OAuth1, OAuth2, OAuth..? (2013)
TL;DR OAuth2 sucks. Please don't think about OAuth2 as about the next generation of OAuth1. They are completely different like colors: O...
An experimental real world adblock
Corporate branding and advertisements are ubiquitous in society today and almost impossible to avoid. What if we lived in a world where consumers were blind to this surplus of corporate branding? Brand Killer is a technology demonstration that envisions a future in which consumers can use augmented reality to opt out…
Don't Make Visitors Make Accounts
Few things bother me more than when I am forced to make an account to have some basic interaction with a website.
Falsehoods programmers believe about addresses
Perhaps you've read posts like Falsehoods Programmers Believe About Names and Falsehoods programmers believe about time . Maybe you've also read Falsehoods programmers believe about geography .