151
Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
The vulnerability has been fixed as of July 7, 2026, but the exploit was simple, and hidden email addresses may still be in third-party logs.
New
The latest blog posts to take off on Hacker News. 8,467 posts.
152
I ported Kubernetes to the browser
Almost 100,000 lines of LLM-generated code in 2 months, and none of it is slop.
153
Working With AI: A concrete example
In this essay, Carson Gross walks through a concrete bug fix in hyperscript to show where AI helped, where it fell short, and why keeping a knowledgeable human in the loop is what kept complexity in check.
154
Turn your site into a place people can bump into each other
Releasing Town Square. Bring back the feeling that real people are browsing your site with you.
155
A peek into Reddit's anti-spam internals
How Reddit accidentally leaked its spamurai system.
156
Deno 2.9
`deno desktop` for building native desktop apps from web tech, first-class migration from npm/pnpm/yarn/Bun, CSS module imports, snapshot and parameterized testing, smaller `deno compile --bundle` binaries, and Node.js 26 compatibility.
157
OAuth for all
Self-Managed OAuth is now available to all developers on Cloudflare. Here's how we executed a zero-downtime migration of our core OAuth engine to make it happen.
158
Don't verify email addresses by sending spam to them
Much have been said about futility of trying to validate email addresses. Generally accepted advice is that you should just send verification link and don’t care about trying to validate it beforehand.
159
The new HTTP QUERY method explained
In this blog post, we take a deep dive into the new HTTP QUERY method, explaining the history behind it as well as the advantages and disadvantages of using it.
160
Tw-fade: pure CSS scroll-driven edge masking
A Tailwind CSS v4 plugin for CSS mask fades on scroll containers. Add one class and content edges dissolve into any surface.
161
window.showDirectoryPicker opens up a whole new world
Chrome introduced a new API, window.showDirectoryPicker() that allows the user to grant access to a directory on their computer and allow a website to read/write everything inside.
162
JSON-LD explained for personal websites
A guide to implementing JSON-LD on your personal website for better SEO, covering WebSite, Person, BlogPosting, and more with ready-to-use code snippets.
163
Windows UI evolution: Clicking an unassociated file
(I don't plan on doing lots more of these Windows UI blog posts. I just happened to come across this and found it interesting. Besides, it's super hot where I live and I can't do anything meaningful anyway, so here we go.)
164
I Stored a Website in a Favicon
Words from me as developer, student and human.
165
Google workspace threatening to block Firefox access
Google workspace threatening to block firefox
166
There are no instances in ATProto
Like RSS and Google Reader.
167
So You Want to Define a Well-Known URI
When to reach for a well-known URI — and the traps that catch most protocol designers.
168
Datasette Apps: Host custom HTML applications inside Datasette
Today we launched a new plugin for Datasette, datasette-apps, with this launch announcement post on the Datasette project blog. That post has the what, but I’m going to expand on …
169
Zero-Touch OAuth for MCP
The Enterprise-Managed Authorization extension to the Model Context Protocol is now stable, enabling organizations to centrally provision MCP server access through their identity provider so users get connected servers on first login without per-app OAuth.
170
I've always wondered if anyone used sharing buttons on news sites and blogs
I've always wondered if anyone actually used the social sharing buttons embedded on news sites and (some) WordPress blogs.
171
How we run Firecracker VMs inside EC2 and start browsers in less than 1s
Every Browser Use Cloud session runs in its own Firecracker microVM on regular EC2. It starts in under a second and costs $0.02 per browser hour, down from $0.06.
172
KDE Plasma 6.7 Released
Plasma 6.7 brings powerful new features to KDE’s classic desktop, and refines its user experience to new levels.
173
Phoenix LiveView 1.2
LiveView 1.2 is a small release that adds support for colocating CSS.
174
Map Clustering Is Not My Favorite
Friends, this post has been in the making for maybe, 20 years.
175
Adaptive PDFs
An idea for PDFs that render normally for humans while exposing clean markdown structure to extractors and LLMs in the same file.
176
Slightly reducing the sloppiness of AI generated front end
I've been trying to make progress on a herculean task; I want decent looking programs for personal use which I can generate quickly using AI agents yet I'm a person without taste controlling an AI without taste. I found "one weird trick" that does enough for me, the results are not extra nice but it doesn't make me…
177
Ryanair dark UX patterns summer 2026 refresher
Ryanair are Europe’s most profitable airline and they are masters of this noble form.
178
The Future of Email
As AI starts reading and actioning our inboxes, email authentication becomes the trust layer that the future of email depends on.
179
Tailwind and slop apps
Tailwind is great. It's a quick way to style a webpage and offers incredible flexibility. The problem is, despite Tailwind being incredibly customisable I can instantly tell when a site is using Tailwind. It has a certain look and feel that is hard to shake. A few years ago this "look and feel" was fresh and classy…
180
Nextcloud Hub 26 Spring: Built together, designed for the future
Today we present Nextcloud Hub 26 Spring, our anniversary release. Discover all the new features and get started with the new Nextcloud Hub.