361
An XSS on Facebook via PNGs and Wonky Content Types
Bug Bounty & Application Security
New
The latest blog posts to take off on Hacker News. 467 posts.
362
363
The Deep Roots of JavaScript Fatigue
Explore technical topics, solutions, and resources for building with Twilio – and beyond.
364
365
366
367
368
A WebAssembly Milestone: Experimental Support in Multiple Browsers
WebAssembly is an emerging standard whose goal is to define a safe, portable, size- and load-time efficient binary compiler target which offers near-native performance—a virtual CPU for the Web. WebAssembly ...
369
Experimental support for WebAssembly in V8
Starting today, experimental support for WebAssembly is available in V8 and Chromium behind a flag.
370
The web's original sin
What do a recent A List Apart article , the ad blocker discussion of a few months back, and my browser testing plans have in common?
371
372
373
A technical guide to SEO
Complete technical SEO checklist covering HTTPS, meta tags, sitemaps, robots.txt, page speed, duplicate content, and Google Webmaster Tools setup.
374
Trackers
A couple of weeks ago I went to the local shopping centre looking for a thermometer. After entering one store upon leaving without buying anything a tracker was assigned to me. I didn’t think much of it at first, but he followed me dutifully around the shopping centre, took careful note of how I walked. Whenever I…
375
Frameworks Don't Make Much Sense
Frameworks are one of the hugest anti-patterns in software development. They're hard to learn. They limit your creativity. They increase your project's complexity and dependencies. They go out of business and get abandoned. You have to maintain and upgrade your code to match the latest framework versions for no good...
376
377
Opera: Introducing native ad-blocking feature for faster browsing
If there were no bloated ads, some top websites would load up to 90% faster. Today we introduce Opera's ad-blocking feature.
378
Facebook's new front-end server design
Visit the post for more.
379
380
How we built Facebook Lite for every Android phone and network
Visit the post for more.
381
Pencil: A Microframework Inspired by Flask for Rust
Just create the static folder under your application root path, it just works. Now you can visit http://localhost:5000/static/example.png and get your file. You can customize the static folder and static url path.
382
Let's Encrypt has issued its first million certificates
At 9:04am GMT today, the Let's Encrypt Certificate Authority issued its millionth certificate. This is an amazing success, coming only 3 months and 5 days since a beta version of the service became publicly available. We're very excited to be building a more secure and fully encrypted future for...
383
How I could have hacked any Facebook account
Note: This is being published with the permission of Facebook under the responsible disclosure policy. The vulnerability is now fixed. ...
384
How Changing WebFonts Made Rubygems.org 10x Faster
WebFonts are awesome and here to stay. However, if used improperly, they can also impose a huge performance penalty. In this post, I explain how Rubygems.org painted 10x faster just by making a few...
385
The Sad State of the Backbone Ecosystem
For the past 2 years, ~90% of my coding time has been spent working on a large scale Backbone.js app. In February 2014, the Backbone community was in a fairly good place. The core library had reached 1.0 the previous year and had a strong team around it. Marionette had emerged as a de-facto standard for web…
386
Widespread XSS Vulnerabilities in Ad Network Code
For most of us, the title of this post may not be very surprising. Any time we allow 3rd party scripts to run on our sites, we effectively relinquish control of the code that executes on the client. This is particularly important when integrating ad network scripts since they are inherently more dynamic than most…
387
388
389
390
A love letter to jQuery
A very tongue-in-cheek article about why jQuery is good for the web.