New
The latest blog posts to take off on Hacker News. 8,472 posts.
New Paypal gateway UI susceptible to spoofing
Hey. I decided to get a paid plan on Github and Paypal looked like a good payment option to me. Click the blue button here : This looks ...
XSLT is a failure wrapped in pain
“ The essence of XML is this: the problem it solves is not hard, and it does not solve the problem well.” – Phil Wadler, POPL 2003
Why I like XSLT
I first fell in love with XSL in 1999, when Microsoft rolled an XSLT processor into MSXML. I got my hands on the works of Shakespeare marked up in XML
The No CAPTCHA problem
When I read about No CAPTCHA for the first time I was really excited. Did we finally find a better solution? Hashcash? Or what? Finally it...
Firebug 3 and Multiprocess Firefox
Firebug 3 alpha was announced couple of weeks ago. This version represents the next generation of Firebug built on top of Firefox native developer tools. There are several reasons why ...
Hacking PayPal Accounts with one click
Today I am going to publicly disclose a critical vulnerability I have found during my research in PayPal, This vulnerability enabled me to completely bypass the CSRF Prevention System implemented by PayPal, The vulnerability is patched very fast and PayPal paid me the maximum bounty they give ;).
Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
Posted by Vinay Shet, Product Manager, reCAPTCHA reCAPTCHA protects the websites you love from spam and abuse. So, when you go online—say...
Chinese Mobile UI Trends
A summary of common idioms and visual language found in Chinese smartphone apps.
The State of JavaScript in 2015
Developing Opinions - A blog by Jimmy Breck-McKye
Nobody expects CDATA sections in XML
I made a very explicit, pragmatic design decision with afl-fuzz : for performance and reliability reasons, I did not want to get into stati...
2 years with Angular
AI fair value $183 vs ask $100 — fse.guru looks under-priced for a ultra-short .guru.
GitHub dropped Pygments
My first-ever open source contribution, a couple years ago, was to a project called Pygments. My motivation? GitHub was displaying Racket source code poorly. Pygments didn't have a Racket lexer. GitHub was using a Scheme lexer for Racket code. The Scheme ...
Going under the hood of Inbox
Posted by Garrick Toubassi, Engineering Director Editor’s note: Be forewarned that the following post has much more technical mumbo-jumbo ...
Rules for Creating Gorgeous UI, Part 2
A guide to visual aesthetics, written by a nerd
New Search Strategy for Firefox
Ten years ago, we built Firefox to keep the Internet in each of our hands — to create choice and put people in control of their lives online. Our focus h
Rules for Creating Gorgeous UI
A non-artsy primer in digital aesthetics
Facebook Launches Flow, Static Type Checker for JavaScript
Visit the post for more.
Launching in 2015: A Certificate Authority to Encrypt the Entire Web
Today EFF is pleased to announce Let’s Encrypt, a new certificate authority (CA) initiative that we have put together with Mozilla, Cisco, Akamai, IdenTrust, and researchers at the University of Michigan that aims to clear the remaining roadblocks to transition the Web from HTTP to HTTPS.Although...
VP8 and H.264 to both become mandatory for WebRTC
WebRTC is one of the most exciting things to happen to the Web in years: it has the potential to bring instant voice and video calling to anyone with a browser, finally unshackling us from propriet…
Generators in Firefox now 22 times faster
wingolog: article: generators in firefox now twenty-two times faster