Stealing Downloads from Slack Users
Stealing Downloads from Slack Users I’m going to go over an interesting feature abuse that could have been used to steal and even manipulate downloads from Slack users using the Slack desktop app …
The latest blog posts to take off on Hacker News. 540 posts.
Stealing Downloads from Slack Users I’m going to go over an interesting feature abuse that could have been used to steal and even manipulate downloads from Slack users using the Slack desktop app …
Let’s retire the ‘virtual DOM is fast’ myth once and for all
Now that we've launched, I can finally talk about the secret project I've been working on for the last two years. One interesting piece of the Teamwork CRM puzzle was the "list view". It's a powerful page component which exists seven times in the app — a table on steroids essentially. I could talk about it…
Not too long ago, I made a living working as a contractor where I would hop from project to project. Some were short term where I would work for a week and quickly deliver my service. Others lasted a
I don't like AMP. I think that Google's Accelerated Mobile Pages are a bad idea, poorly executed, and almost-certainly anti-competitive. So, I decided to join the AC (Advisory Committee) for AMP. I don't want them surrounded with sycophants and yes-men. A few weeks ago, a bunch of the AC met in London for our first…
谁向云端着此亭,檐前树木映窗棂。 -- 释绍嵩《陪赵知府登桃岭山亭》 (image from 中国窗棂) The traditional Chinese window lattice has a symmetrical beauty, as well as a very beautiful formal name -- 窗棂.
Advancing the state of the art of HTTP/2 to deliver a faster user experience. See why it matters and how much of a differenc
The globalThis proposal introduces a unified mechanism to access the global this in any JavaScript environment. It sounds like a simple thing to polyfill, but it turns out it’s pretty hard to get right. I didn’t even think it was possible until Toon blew my mind with an unexpected, creative solution.
While links aren’t widely used in APIs, some very prominent web APIs use links based on HTTP URLs to represent relationships, which has several advantages. This post shows you why.
A list of free, cross-platform GUI solutions for C++.
There is something very exciting I have to show to you today: a completely rewritten notification system for Plasma that will be part of our next feature update 5.16 to be released in June.
The :npm-deps compiler option now defaults to false . Previously, :npm-deps defaulted to true .
It’s clear that this year’s WWDC is going to be a doozy. We’ve written here previously with our thoughts about Dark Mode, now it’s time to talk about iOS apps coming to the Mac. Of course I’m talking about Marzipan, a technology Apple introduced with few details during last year’s Keynote. We knew that some […]
Recently, Firefox had an incident in which most add-ons stopped working. This was due to an error on our end: we let one of the certificates used to sign add-ons ...
Update (September 23, 2020) – Over the last year, we’ve heard feedback from many customers who have asked us to extend the deprecation date. Based on this feedback we have decided to delay the deprecation of path-style URLs to ensure that customers have the time that they need to transition to virtual hosted-style…
Guide to using HTTP headers for a better web. Learn about HTTPS, HSTS, CSP, Cacheable, immutable resources, serving WebP images, Feature-Policy and more.
Today marks an important milestone for the Flutter framework , as we expand our focus from mobile to incorporate a broader set of devices and form factors. At I/O, we’re releasing our first technical preview of Flutter for web , announcing that Flutter is powering Google’s smart display platform including the Google…
In 2008, we launched Chrome with the goal of building a speedy, simple, secure and stable web for everyone, everywhere. Ten years later, use...
If you still use Internet Explorer, you will need to switch to a more secure, modern web browser to access Proton Mail.
We wrote a cryptography library entirely in PHP to make your WordPress site secure against supply-chain attacks.
I’ve been working on the FullCalendar for a really long time.
Incident summary Updates - Last updated 14:35 PST May 14, 2019. We expect this to be our final update. If you are running Firefox versions 61 - 65 ...
I wanted to share a pretty simple setup on how to serve a Vue.js app using Github Pages. I’m writing this because I had to search around online for awhile...
Discover lesser-known Rails 6 features that stay out of the spotlight but can bring a lot to your current applications.