31
How Does setState Know What to Do?
Dependency injection is nice if you don’t have to think about it.
New
The latest blog posts to take off on Hacker News. 480 posts.
32
Rocket v0.4: Typed URIs, Database Support, Revamped Queries
Rocket is a web framework for the Rust programming language that makes it simple to write fast web applications without sacrificing flexibility or type safety.
33
WordPress 5.0: A Gutenberg FAQ
Update: On December 6th we released WordPress 5.0. It was definitely the most controversial release in a while, but the usage and adoption metrics are looking similar to previous releases. I’m look…
34
Choose Firefox Now, or Later You Won't Get a Choice (2014)
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
35
We busted a fake Chrome extension that was trying to steal data
A mysterious (and fake) Chrome extension. A clever data exfiltration scheme. They would have gotten away with it, too, if it weren't for those meddling security analysts using ExtraHop Reveal(x)! Follow along as we go from threat detection to response in this real-life threat hunt with network traffic analysis.
36
Neither PWA nor AMP are needed to make a website load fast
Good performance practices are still needed when developing fast web experience.
37
Repl.it Multiplayer
Today we're announcing the most-significant evolution of our platform — something we've been building towards for a long time that we're thrilled to share with you. Introducing Multiplayer: code with friends in the same editor, execute programs in the same interpreter, interact with the same terminal, chat in the IDE…
38
Goodbye, EdgeHTML
Microsoft is officially giving up on an independent shared platform for the internet. By adopting Chromium, Microsoft hands over control of even more of on
39
Microsoft Edge and open source collaboration
For the past few years, Microsoft has meaningfully increased participation in the open source software (OSS) community, becoming one of the world’s largest supporters of OSS projects. Today we’re announcing that we intend to adopt the Chromium open source project in the development of Microsoft Edge on the desktop to…
40
State of web browsers in 2018
Late 2018 edition
41
Proof That iOS Still Hasn’t Gotten Undo Right
Imagine going back in time to tell a MacPaint user in 1985 that they’d have to learn how to use Undo in an Apple-award-winning paint app in 2018. That’s where we are.
42
Searching the Creative Internet
I had of late been lamenting the loss of the internet of the 1990s. A place where everything was obscure or new. If you saw something mainstream like a Disney princess, it was because someone had taken the time to handcraft an ASCII art portrait. Today if you type [disney] into the ubiquitous search engine , every…
43
How Does React Tell a Class from a Function?
We talk about classes, new, instanceof, prototype chains, and API design.
44
45
Maximizing password manager attack surface
Kaspersky Password Manager uses a unique approach to maximize the attack surface. A quick introduction.
46
Major sites running unauthenticated JavaScript on their payment pages
A few months ago, British Airways' customers had their credit card details stolen. How was this possible? The best guess goes something like this: BA had 3rd party JS on its payment page <script src="https://example.com/whatever.js"></script> The 3rd party's site was hacked, and the JS was changed. BA's customers ran…
47
48
“Stylish” is back, and you still shouldn't use it
2 days after I published ‘“Stylish” browser extension steals all your internet history’, Stylish was pulled from the Chrome and Firefox stores. The story echoed around parts of the internet for a few days, my name was misspelled on several right-wing British news websites, and I felt that I’d helped make the world a…
49
50
ECMAScript regular expressions are getting better (2017)
Sixteen years later, ES6/ES2015 introduced Unicode mode (the u flag) , sticky mode (the y flag) , and the RegExp.prototype.flags getter .
51
52
One of the world’s most visited websites that nobody is aware of (2017)
The editorial department of well-known Dutch broadcaster RTL News recently asked for my assistance. Multiple tax files of Dutch citizens had been published via www.docplayer.nl and no one could explain – where did these files come from? Who would have thought that my research would lead to the discovery of one of the…
53
WebAssembly doesn’t make unsafe languages safe
WebAssembly is all the rage these days. And for good reasons. It’s pretty exciting to see many compiled languages adopting a common intermediate represe...
54
55
Some notes about HTTP/3
HTTP/3 is going to be standardized. As an old protocol guy, I thought I'd write up some comments. Google (pbuh) has both the most popular ...
56
Flutter: the good, the bad and the ugly
Having created my first app using Flutter, I weigh up the technology’s pros and cons against React Native
57
Model View Controller isn't
Maybe the most misunderstood design pattern.
58
59
Advanced web security topics
(Updated 22 May 2020) This post discusses web security issues that I come across – so far thankfully mostly by reading about them. It is a work in progress which I’ll keep updating. The…
60
Post-REST
More or less all the big APIs are RESTful these days. Yeah, you can quibble about what “REST” means (and I will, a bit) but the assertion is broadly true. Is it going to stay that way forever? Seems unlikely. So, what’s next?