The latest blog posts to take off on Hacker News. 8,469 posts.
Ten years ago this week, in May 2015, the JSON Web Token (JWT) became RFC 7519 . This was the culmination of a 4.5 year journey to create a simple JSON-based security token format and underlying JSON-based cryptographic standards. The full set of RFCs published together was:
Behind the scenes blog of pretix, your friendly ticketing system from next door.
A blog about making culture. Since 1999.
We’ve got an important update for the Glitch community today: We’ll be ending web hosting for your apps on Glitch.
In a land bereft of a canonical "killer app" web framework or two, one must think about the what, why, how, where of all the moving parts. Out here, one must become a student of web framework architecture in addition to web application architecture. For here, in Clojure-land, the two are one. ☯
If you’re still using IP geolocation to decide what language to show, stop screwing around. It’s a broken assumption dressed up as a feature.
Jeffrey Yasskin recently pointed out an interesting security bug: The idea is, if you had registered googlelogoligature.net then Chrome on Android (and possibly other Google products) would have displayed it as Google.net, potentially tricking users into thinking they were really interacting with Google. To see how…
Have you ever wished you could write simple CSS to declare a color, and then have the browser figure out whether black or white should be paired with that color?
The Explicit Resource Management proposal empowers developers to explicitly manage the lifecycle of resources.
We’re happy to announce a new release of ClojureScript. If you’re an existing user of ClojureScript please read over the following release notes carefully.
Discover why Nextcloud file uploads for Android app are not working properly, and how Google’s app store rules are hurting Nextcloud users.
While recently traveling to the U.S., I was completely locked out of my TD Personal Banking account. TD relies heavily on SMS-based two-factor authenticat...
This page has moved to https://bonfirenetworks.org/posts/slow-software-for-a-burning-world/ .
A port conflict pushed me to abolish container port forwarding once and for all, making my Firefox talk to Podman's whole network. Also: containerizing dev environments for command-line addicts.
You wouldn't download a site.
Solid Queue is Rails’ default background job backend: jobs live in your database, no Redis. See how jobs, workers, and the supervisor work under the hood.
Claude can now search the web through the API, giving users access to real-time information with citations for building up-to-date AI applications. Unknown block type "latestUpdates", specify a component for it in the `components.
A website for old Macintosh themes and some background.
Disclaimer: If you're here for the holy grail of bot detection, this may not be it, unless your UX strategy involves surprise popups and your marketing strategy involves blocking Google crawlers. We recently stumbled across a bug on the Chromium bug tracker where a short JavaScript snippet can crash
Take a look at the following code.
A look at how and why we migrated from Next.js to Ruby on Rails.
Is there a perfectly clear and reasonable answer? Or could we get this someday?
Since the beginning of 2024, the demand for the content created by the Wikimedia volunteer community – especially for the 144 million images, videos, and other files on Wikimedia Commons – has grow…
Discover exciting updates to GSAP — supported by Webflow — plus product enhancements and more.
The one where I nosey through rather telling git commits
Secure the modern software stack with Koi. Gain visibility, context, and real-time protection over extensions, MCPs, and autonomous AI agent endpoints.
Opened YouTube and was greeted with this abomination:
