The latest blog posts to take off on Hacker News. 8,470 posts.
Short domains are useful for security testing. If you only have a limited number of characters, you need to be able to reference code on a remote server in as few characters as possible. A few years ago, I tried to find a Minimum Viable XSS. The conclusion that I (and others) came to is that 20 characters is the bare…
Firefox is sometimes recommended as a supposedly more secure browser because of its parent company's privacy practices. This article explains why this notion is not true and enumerates a number of security weaknesses in Firefox's security model when compared to Chromium. In particular, it covers the less granular…
With Django 3.1, you can put async code in production if you don’t have to do heavy-lifting with some parts of Django that don’t support async yet.
Yesterday or so a new initiative I Love MDN was unveiled. People can show their appreciation for the MDN staff and volunteers by leaving a comment.
People who are involved in the open-source community often ask us why Vivaldi browser isn’t available under a unified open-source license. Here we explain why.
Yet another existential threat to PainScience.com.
For a terrible half an hour last night I thought Firefox was on the brink of disappearing as an independent browser and rendering engine. I was frightened silly by the rumour that Mozilla laid off significant portions of its browser team. The official press release being full of useless corporate open web blah didn’t…
Easy to follow guide to building SPAs using Rust, WebAssembly and Yew
This blog site has been archived. Go to react.dev/blog to see the recent posts. Today, we are publishing the first Release Candidate for React 17. It has been two and a half years since the previous major release of React, which is a long time even by our standards! In this blog post, we will describe the role of this…
The favicon was a total experiment, the result of a bit of serendipity and luck.
Authenticate and authorize your users with Supabase Auth
Today, Firefox is introducing Enhanced Tracking Protection (ETP) 2.0, our next step in continuing to provide a safe and private experience for our users. E
Last month we removed our live chat bubble and replaced it with a link to live chat in our navigation.
Browsers are changing the default value of the SameSite attribute for cookies from None to Lax. This will greatly improve security for users. However, some web sites may depend (even ...
In spite of an increase in Internet speed, webpage speeds have not improved over time.
Posted by Mariusz Felisiak on Aug. 4, 2020
LEGO interface panels are beautiful, iconic, and great for learning interface design basics. I bought 52 of them from BrickLink to explore the design, layout and organisation of complex interfaces.
The story of how a couple of failed SaaS ideas and a bunch of ugly Less stylesheets turned into my life's work.
A “cold start” is the time it takes to load and execute a new copy of a serverless function for the first time. It’s a problem that’s both complicated to solve and costly to fix.
This post highlights a few powerful lines of CSS that do some serious heavy lifting and help you build robust modern layouts.
Firefox 79 offers a new Promise method, more secure target=_blank links, logical assignment operators, tooling improvements for better JavaScript debugging, and many other updates of interest to web developers. In ...
The software ecosystem has a lot of useful but unsafe code, and the easier it is to sandbox that code, the moreoften that’ll happen. If it were as simple as ...
