481
Finding an authorization bypass on my own website
The mysqljs parameterized query parser handles objects as column name and key, leading to alterations of the query.
New
The latest blog posts to take off on Hacker News. 596 posts.
482
Self-host your static assets (2019)
Why is it so much better to self-host your static assets?
483
Retrieving your browsing history through a CAPTCHA
Web developer and cybersecurity researcher
484
Building a web app with no framework
Is it as hard as you think?
485
Native Matrix VoIP with Element Call
Hopefully in-person meet-ups will prove much easier in 2022 - but, there’s still a need for video calls, so let’s face it, they’re here to stay. This makes it really exciting to present Element Call: the world’s first decentralised voice and video conferencing app powered entirely
486
It's always been you, Canvas2D
The API-next-door gets a makeover.
487
Brave Talk: Unlimited, private video calls, in browser
Brave Talk brings unlimited, private video calls, right to your browser. No extra apps. No tracking. Just free connections, powered by Brave.
488
Interop 2022
Interop 2022 is a cross-browser initiative to find and address the most important interoperability pain points on the web platform.
489
SPAs Were a Mistake
For years, a trend in our industry has been to build single-page apps, or SPAs. With an SPA, the entire site or app lives in a single HTML file. After the initial load, everything about the app is handled with JavaScript. This is, in theory, supposed to result in web apps that feel as fast and snappy as native apps…
490
MDN Redesign
If you’ve accessed the MDN website today, you probably noticed that it looks quite different.
491
Things you don't need JavaScript for
Javascript can do a lot, but it's really over-used. HTML and CSS are surprisingly powerful on their own, so let's have a look at some of the things you can achieve without Javascript (or a backend) - from animated diagrams to dark mode.
492
Solid.js feels like what I always wanted React to be
I'm sold on Solid.
493
Anatomy of a JWT
Technical article explains JSON Web Tokens (JWT), their component parts, and how they are used for authentication.
494
A planned EU regulation about website certificates is causing concern
Feisty Duck’s Cryptography & Security Newsletter is a periodic dispatch bringing you commentary and news surrounding cryptography, security, privacy, SSL/TLS, and PKI. It's designed to keep you informed about the latest developments in this space. Enjoyed every month by more than 50,000 subscribers. Written by Hanno…
495
CSS as the back end – Cascading Server Sheets
Here we go again! Another one of these, and promise, you will be questioning my sanity after this...
496
497
498
499
A guide to IPFS connectivity in web browsers
A minimal chat example using js-ipfs in the browser.
500
How I Built LoginWithHN
How I built LoginWithHN, an OAuth2+OpenID Connect provider for HackerNews.
501
502
The fastest GIF does not exist
Some games on a website
503
Server-sent events, WebSockets, and HTTP
The orange site is currently discussing an article about Server-Sent Events, especially as compared with WebSockets (and the emerging WebTransport). Both the article and discussion are well-informed, but I think they miss out on one aspect that has fairly deep implications.
504
How to set up a blog with Hugo and Cloudflare, and why you should
The internet is not as good as it used to be. Information is siloed into walled gardens like Facebook, Nextdoor, and so on. Google results are saturated with SEO spam. Wordpress is a mess that keeps on chugging through inertia; Medium, while clean, is behind a paywall; Reddit and Twitter are increasingly hiding their…
505
Safari now supports File System Access API with private origin
WebKit supports new API that makes it possible for web apps to create, open, read, and write files directly, or create directories and enumerate their contents.
506
An example of why RSS is useful and important
Let’s say I want to be an informed, engaged local citizen. Let’s say my town has a website set up where they post local updates and alerts that I might care about. Specifically, let’s say there was a water main break a few days ago that led to everyone in the town being asked to … Continue reading An example of why…
507
WebGL 2.0 Achieves Pervasive Support from All Major Web Browsers
One of the great headaches of developing interactive graphics applications for online deployment is covering every base. Your targets likely include a near-infinite combination of browser vendors, browser versions, and graphics hardware. The Khronos Group created WebGL to slice through this Gordian knot, rendering…
508
509
Everything we're told about website identity assurance is wrong
I have a vehement dislike for misleading advertising. We see it every day; weight loss pills, make money fast schemes and if you travel in the same circles I do, claims that extended validation (EV) certificates actually do something useful: > Why are you still claiming this @digicert [https://twitter.com/
510
SendGrid appends a tracking pixel even when disabled
Commenting, venting, or ranting. Usually about entrepreneurship, tech, or self-reflection.