New
The latest blog posts to take off on Hacker News. 8,470 posts.
First-party isolation in Firefox: what breaks if you enable it?
Firefox’s FPI system keeps websites from tracking your movements across websites. This gives excellent privacy protections but at a cost of web compatibility.
The mysterious case of missing URLs and Google's AMP
When I saw a speculative article about Google wanting to “kill” URLs appear in my news feed, I didn’t think too much about it. Trying to hide “ugly” URLs… well, that feels like a natural thing for an app to try and do. Designers of apps often (erroneously) assume that users cannot cope with “technical” things like…
Keybase’s browser extension subverts its encryption
The Keybase browser extension subverts the app's end-to-end encryption. Keybase considers that "an acceptable risk" and not worth fixing.
How Spam Filtering Works: From SPF to DKIM to Blacklists
There is no one key to making sure WordPress site emails are sent reliably and stay out of the recipient’s spam folder. A common recommendation is to use a dedicated…
Brute Force Incognito Browsing
Both Firefox and Chrome have a feature for creating temporary private browsing sessions. Firefox calls it Private Browsing and Chrome calls it Incognito Mode . Both work essentially the same way. A temporary browsing session is started without carrying over most existing session state (cookies, etc.), and no state…
Tor Browser 8.0 released
We gave the world’s most private browsing experience a UX overhaul.
Distrust of Symantec TLS Certificates
A Certification Authority (CA) is an organization that browser vendors (like Mozilla) trust to issue certificates to websites. Last year, Mozilla published and discussed a set of issues with one ...
Firefox 62.0 Released
Thank you to all of the new Mozillians who contributed to this release of Firefox!
The Performance Cost of CORS Requests on Single-Page Applications
The title may lead you to think that this post is another ranting post about the downside of a “Single Page Application”. It is more about…
My Own Private CDN
Yet another edition of Why Would You Ever Want To Do That
Changing Our Approach to Anti-Tracking
In the near future, Firefox will -- by default -- protect users by blocking tracking while also offering a clear set of controls to give our users more choice over what information they share with sites.
Approaching Access Control on the Web (Part I)
Learn how to build future-proof, state of the art login, access control and API security systems in this multipart series.
We are rewriting CodeMirror
In-browser code editor
Dweb: Building a Resilient Web with WebTorrent
The web is healthy when the financial cost of self-expression isn’t a barrier. This installment of the Dweb series describes WebTorrent – an implementation of the BitTorrent protocol that runs ...
Why Static Websites Need HTTPS
It was Jan last year that I suggested HTTPS adoption had passed the "tipping point" [https://www.troyhunt.com/https-adoption-has-reached-the-tipping-point/], that is, it had passed the moment of critical mass [https://en.wikipedia.org/wiki/The_Tipping_Point] and as I said at the
Service Workers
When authoring JavaScript for the browser, you don't think twice about embedding that JavaScript within an HTML document. Perhaps you load your script via a resource request, or embed it directly within a script tag, but in either scenario the lifecycle of your JavaScript is irrevocably married to its parent document.
Is Rails still relevant in 2018?
Few days ago I’ve received email where I was asked for an advice from a web developer who was considering switching from Ruby to something else. I was asked ...
Babel 7 Released
After almost 2 years, 4k commits, over 50 pre-releases, and a lot of help we are excited to announce the release of Babel 7. It's been almost 3 years since the release of Babel 6! There's a lot of moving parts so please bear with us in the first weeks of release. Babel 7 is a huge release: we've made it faster…
The Real Deal About rel="me"
Earlier today , Barry Schwartz published a piece over on Search Engine Roundtable called Google Does Not Use rel=me Microformats . The article got shared around Twitter a lot, and those tweets surfaced on the microformats IRC channel . In it he mentions a few things that I would like to respond to, that is probably…
Dear Ad Networks
In 1 week, I plan to benchmark all your advertisment delivery systems from IP address block 184.20/16.
Small Assets without the Headache in Elm 0.19
A delightful language with friendly error messages, great performance, small assets, and no runtime exceptions.