1681
Screw it, I’ll host it myself
It’s all fun and games until someone loses an eye. Likewise, it’s all fun and games until someone loses access to their private and/or business data because they trusted it to someone else.
New
The latest blog posts to take off on Hacker News. 4,614 posts.
1682
Wuffs’ PNG image decoder
Summary: Wuffs’ PNG image decoder is memory-safe but can also clock between 1.22x and 2.75x faster than libpng , the widely used open source C implementation. It’s also faster than the libspng , lodepng and stb_image C libraries as well as the most popular Go and Rust PNG libraries. High performance is achieved by…
1683
Breaking GitHub Private Pages for $35k
Abusing CRLF, cache poisoning, and other misconfigurations for a no-interaction XSS against GitHub Private Pages.
1684
Elixir and Phoenix after two years
Thoughts on the Elixir language and its Phoenix framework after two years of professional work.
1685
Prescriptive software is better than descriptive software
For a while now I’ve been telling people that I want Polypane to be prescriptive, not descriptive. In this article I want to expand on that and explain what I mean when I say “prescriptive”. I usually explain it like this: there is no shortage of tooling that will tell you everything you do wrong […]
1686
1687
Fighting cryptojacking and doing good things with content security policies
If you've landed on this page because you saw a strange message on a completely different website then followed a link to here, drop a note to the site owner and let them know what happened. If, on the other hand, you're on this page because you're
1688
Building a Magical 3D Button with Vanilla HTML/CSS
Every action we take on the web starts with a button click, and yet most buttons are ho-hum and uninspired. In this tutorial, we'll build an animated 3D button with HTML and CSS that sparks joy.
1689
Let’s fix font size
What happens when you set fontSize: 32 in your favorite editor
1690
1691
Netmask NPM package, used by 270k+ projects, vulnerable to octal input data
The following research outlines a vulnerability discovered in netmask npm package that is currently used by 278,722+ other projects. The vulnerability has been present for 9 years. Since this package is so incredibly widespread, I would suggest every nodejs developer to check their package.jsons to see if they use…
1692
Emoji Under the Hood
Detailed look into all the machinery involved in rendering Emoji
1693
Comparing Svelte and React
Last year I created Pomodone , a small time tracking application based on the Pomodoro technique of working in 25 minute intervals. It's a pretty basic app; it has a 25 minute timer (that runs in a Web Worker) and saves a history of your "poms" to a small Firebase database. I initially built it using React (well…
1694
Closing web browser windows doesn't close connections
Months ago I noticed something strange in the Little Snitch Network Monitor: Safari was still connecting to web sites after every window had been closed. At the time, I thought this was just a Safari bug. I brought the issue to the attention of some Safari engineers, who I had hoped would look into it. Since then…
1695
1696
The End of AMP?
I am hopeful that 2021 will be the beginning of the end for two of my least favorite things – the pandemic and Accelerated Mobile Pages (AMP). For the past
1697
Live previews with Rails and Stimulus 2
Who wouldn’t want a live preview for writing their great content? If you happen to be running Rails with Hotwire, it’s surprisingly easy with a small Stimulus controller.
1698
Substack's UI and 1Password temporarily cost me $2k
An event-tech partner for ambitious experiential teams.
1699
1700
Nobody designs for small iPhone devices anymore
Nobody designs for small iPhone devices anymore. Why do I say this? Well, if you've been rocking the iPhone SE 2020 you would know. What I'm saying is there a lot of UI glitches from apps running on iPhone SE. Clubhouse Forgot to measure the screen's width? Spotify I can't see the Refresh button. I…
1701
Safari is now probably the influential wild card browser for user privacy
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
1702
Google Took Down My Chrome Extension for Using Lodash
So there I was, happily closing out some tabs before heading to bed, when I noticed a new email from the Chrome Web Store at 12:30am: I went to Intention's…
1703
1704
A look at search engines with their own indexes
A cursory review of all the non-metasearch, indexing search engines I have been able to find.
1705
I bought 300 emoji domain names from Kazakhstan and built an email service
I bought 300 emoji domain names from Kazakhstan and built an emoji email address service. In the process I went viral on Tik Tok, made $1000 in a week, hired a Japanese voice actor, and learnt about the weird world of emoji domains.
1706
Why I don't like Tailwind CSS
On paper, Tailwind CSS sounds like a great idea. In reality, it suffers from the same problems that it tries to solve.
1707
Guide: Full Wayland Setup for Linux
This article is a guide for achieving a full-as-possible Wayland setup on Arch Linux. If you follow the entire guide, by the end you will have:
1708
Building a high-scale chat server on Cloud Run
In this blog, I will show you how to use WebSockets support to build a fleet of serverless containers that make up a chatroom server that can scale a high number of concurrent connections (250,000 clients).
1709
RSS as a Facebook alternative
Making the case for RSS feeds and feed readers as the best alternative to big tech news consumption services like Facebook newsfeeds.
1710
The Future of Group Messaging
An analysis of modern messaging, and the evolutionary next steps.