The latest blog posts to take off on Hacker News. 4,614 posts.
Short domains are useful for security testing. If you only have a limited number of characters, you need to be able to reference code on a remote server in as few characters as possible. A few years ago, I tried to find a Minimum Viable XSS. The conclusion that I (and others) came to is that 20 characters is the bare…
Firefox is sometimes recommended as a supposedly more secure browser because of its parent company's privacy practices. This article explains why this notion is not true and enumerates a number of security weaknesses in Firefox's security model when compared to Chromium. In particular, it covers the less granular…
Yesterday or so a new initiative I Love MDN was unveiled. People can show their appreciation for the MDN staff and volunteers by leaving a comment.
Yet another existential threat to PainScience.com.
For a terrible half an hour last night I thought Firefox was on the brink of disappearing as an independent browser and rendering engine. I was frightened silly by the rumour that Mozilla laid off significant portions of its browser team. The official press release being full of useless corporate open web blah didn’t…
Easy to follow guide to building SPAs using Rust, WebAssembly and Yew
The favicon was a total experiment, the result of a bit of serendipity and luck.
LEGO interface panels are beautiful, iconic, and great for learning interface design basics. I bought 52 of them from BrickLink to explore the design, layout and organisation of complex interfaces.
The story of how a couple of failed SaaS ideas and a bunch of ugly Less stylesheets turned into my life's work.
The software ecosystem has a lot of useful but unsafe code, and the easier it is to sandbox that code, the moreoften that’ll happen. If it were as simple as ...
Many browsers today are gigantic resource hogs, which are basically VMs for various web applications. On the other hand, Links is a HTML browser. It is not able to do everything. It allows me to avoid most distractions and control the content-experience. The goal of this exercise is not to force anyone to use this…
The most common mistakes I found while writing react components, why they are mistakes and how to avoid or fix them.
I’m here to warn you about the dangers of front-end user tracking. Not because Google is tracking you, but because it doesn’t track you quite well enough.
There’s widespread use of adblockers on the web but users are increasingly blocking cookies and other tracking scripts too. Browsers such as Safari, Firefox and Brave are privacy-focused.
Leverage S3 and CloudFront to host your web app in an infinitely scalable way.
I switched away from Google Analytics to Plausible for a better user experience, privacy and performance
But hey, at least Reddit gets less ad fraud!
Modern OpenGL, and by extension WebGL, is very different from the legacy OpenGL I learned in the past. I understand how rasterization works, so I’m comfortable with the concepts. However, every tutorial I’ve read introduced abstractions and helper functions that make it harder for me to understand which parts are…
Privacy regulations such as the GDPR say that you need to seek permission from your website visitors before tracking them. Most GDPR consent banner implementations are deliberately engineered to be…
When social media was taking shape fifteen-odd years ago, the concept of “context collapse” helped frame and explain the phenomenon. Young scholars like Danah Boyd and Michael Wesch, bu…
