New
The latest blog posts to take off on Hacker News. 4,614 posts.
Inspecting Web Views in macOS
I recently received a tantalizing email from a reader I’ve never met: Sam Henri-Gold . Sam showed me how you can key in a couple write commands in the macOS…
Why does Google use location for language rather than browser settings?
“Internationalization” is, roughly speaking, geek-speak for the process of supporting multiple languages on a website. For a company doing business in multiple countries, it needs to be done - otherwise you’ll risk losing the attention of people who don’t speak your development team’s native language. There are…
AVIF has landed (2020)
AVIF is the first browser image format we've had in 10 years. Let's see how it performs…
WebGPU – All of the cores, none of the canvas
WebGPU is an upcoming Web API that gives you low-level, general-purpose access GPUs.
HTML comments work in JavaScript too
Some weird legacy behavior in JavaScript
Finding an authorization bypass on my own website
The mysqljs parameterized query parser handles objects as column name and key, leading to alterations of the query.
Self-host your static assets (2019)
Why is it so much better to self-host your static assets?
Retrieving your browsing history through a CAPTCHA
Web developer and cybersecurity researcher
Building a web app with no framework
Is it as hard as you think?
SPAs Were a Mistake
For years, a trend in our industry has been to build single-page apps, or SPAs. With an SPA, the entire site or app lives in a single HTML file. After the initial load, everything about the app is handled with JavaScript. This is, in theory, supposed to result in web apps that feel as fast and snappy as native apps…
Solid.js feels like what I always wanted React to be
I'm sold on Solid.
CSS as the back end – Cascading Server Sheets
Here we go again! Another one of these, and promise, you will be questioning my sanity after this...
How I Built LoginWithHN
How I built LoginWithHN, an OAuth2+OpenID Connect provider for HackerNews.
The fastest GIF does not exist
Some games on a website
Server-sent events, WebSockets, and HTTP
The orange site is currently discussing an article about Server-Sent Events, especially as compared with WebSockets (and the emerging WebTransport). Both the article and discussion are well-informed, but I think they miss out on one aspect that has fairly deep implications.
How to set up a blog with Hugo and Cloudflare, and why you should
The internet is not as good as it used to be. Information is siloed into walled gardens like Facebook, Nextdoor, and so on. Google results are saturated with SEO spam. Wordpress is a mess that keeps on chugging through inertia; Medium, while clean, is behind a paywall; Reddit and Twitter are increasingly hiding their…
An example of why RSS is useful and important
Let’s say I want to be an informed, engaged local citizen. Let’s say my town has a website set up where they post local updates and alerts that I might care about. Specifically, let’s say there was a water main break a few days ago that led to everyone in the town being asked to … Continue reading An example of why…
Everything we're told about website identity assurance is wrong
I have a vehement dislike for misleading advertising. We see it every day; weight loss pills, make money fast schemes and if you travel in the same circles I do, claims that extended validation (EV) certificates actually do something useful: > Why are you still claiming this @digicert [https://twitter.com/