New
The latest blog posts to take off on Hacker News. 8,470 posts.
Add-Ons Outage Post-Mortem Result
We've been conducting an ongoing post-mortem on the add-ons outage that occurred earlier this year. There was a lot more digging to do than we expected. In addition to this ...
Developers don't understand CORS
The recent Zoom vulnerability is just one of many examples which show us that many developers do not understand how CORS works
Prime Video on Chromecast and Android TV, YouTube on Fire TV
Starting today, you can watch Amazon Prime Video on Chromecast and Android TV devices.
Camera and microphone require HTTPS in Firefox 68
As of Firefox 68—releasing next week—camera and microphone will require an https connection to work. Access from insecure http will cease to work, matching how Chrome works. Camera and microhone are powerful features, and Firefox will now only expose them in secure contexts, a security and privacy improvement. Largely…
Firefox 68.0
Today, we release two versions of Firefox 68 — a rapid release as well as an Extended Support Release (ESR).
3D Wireframes Using SVG
How to use Python to generate 3D SVG.
The death watch for the X Window System has probably started
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
Speedy Desktop Apps with GTK and Rust
The web platform is the delivery mechanism of choice for a ton of software these days, either through the web browser itself or through Electron, but that doesn’t mean there isn’t a place for a good old fashioned straight-up desktop application in the picture.
Run Your Own Website
I go back and forth on running my own website. I love [working](Re Introducing First Crack.txt) [on](First Crack Release Notes 0619.txt) [First Crack](/projects.html#firstCrack), but that work can become trying. I have little time for [projects](/projects.html), and the more I spend coding, the less I [read](My…
Superhuman: Read Statuses
I’m Rahul Vohra, founder and CEO of Superhuman. I’d like to talk about what Superhuman does, why we do it, and what we are changing.
Firefox Local Files Theft – Not Patched Yet
Recently, I was performing a research on Same Origin Policy attacks, I managed to realize that the la version of Firefox (currently 67) is vulnerable to local files theft attack (on any supported OS), due to improper implementation of Same Origin Policy for file scheme URIs. Let’s go over the PoC details then I will…
How Google Pagespeed works
How Google PageSpeed Insights works: where its field data comes from, how Lighthouse calculates the Performance score, and how to improve your page speed.
Superhuman embeds tracking pixels in user emails
Over the past 25 years, email has weaved itself into the daily fabric of life. Our inboxes contain everything from very personal letters, to work correspondence, to unsolicited inbound sales pitches. In many ways, they are an extension of our …
Svelte is the most beautiful web framework I've seen
I first heard about Svelte a year ago, when Rich Harris presented it at JSConf EU 2018. The demo gods were a bit harsh on him, but it didn't matter to me, because I was so impressed by his philosophy and ideas that I was already sold. I knew he'd work out the kinks, go through a few major versions, and Svelte would be…
Google’s robots.txt parser is now open source
The latest news from Google on open source releases, major projects, events, and outreach programs for early career developers.
SwiftWebUI
Beginning of the month Apple announced SwiftUI at the WWDC 2019. A single “cross platform”, “declarative” framework used to build tvOS, macOS, watchOS and iOS UIs. SwiftWebUI is bringing that to the Web ✔️
Open Letter from the OpenID Foundation to Apple Regarding Sign in with Apple
June 27, 2019Mr. Craig Federighi Apple Senior Vice President of Software Engineering One Apple Park Way Cupertino, CA 95014RE: Open Letter from the OpenID Foundation to Apple Regarding Sign In with AppleDear Mr. Federighi,The OpenID Foundation applauds Apple’s efforts to allow users to login to third-party mobile and…
OS X/Linker: New Mac malware attempts zero-day Gatekeeper bypass
Last week, Intego researchers discovered new Mac malware, OSX/Linker, that attempts to leverage a recently disclosed zero-day flaw in macOS' Gatekeeper protection. Let's examine what we know about this latest Mac malware campaign. What is the back story? Before digging into the OSX/Linker malware, it would be helpful…
Reinventing Firefox for Android
With Firefox Preview, we’re combining the best of what our lightweight Focus application and our current mobile browsers have to offer to create a best in class mobile experience. The new application is powered by Firefox's own mobile browser engine -- GeckoView -- the same high-performance, feature enabling motor…
Why are the username and password on two different pages?
Twilio posts cloud communications trends, customer stories, and tips for building scalable voice and SMS applications with Twilio's APIs.
Brave Improves Its Ad-Blocker Performance with New Engine in Rust
Brave Shields, which protect users’ privacy from trackers and ads, are one of the cornerstone components of the browser involved in handling every single web request made for loading a website.
150k Small Business Website Teardown 2019
I set out to understand which website platforms are the best (and the worst), what drives really fast websites, the state of small business SEO, and how well this stuff correlates with Google...
Hey advertisers, track this
If it feels like the ads chasing you across the internet know you a little too well, it’s because they do (unless you’re an avid user of ad blockers, i