New
The latest blog posts to take off on Hacker News. 540 posts.
How SAML 2.0 Authentication Works
At its core, Security Assertion Markup Language (SAML) 2.0 is a means to exchange authorization and authentication information between services. Learn how saml works.
Browser extensions are underrated: the promise of hackable software
In a world of closed platforms, browser extensions are the rare exception that let users modify the apps that we use.
Explore Qt Demos: Interactive Examples for Your Next Project
Explore interactive Qt demos that showcase the power of Qt’s cross-platform tools—ideal for developers seeking real-world applications to boost their projects.
Problems with the CSS background-image property
The CSS background-image property allowed us to do some amazing things, but in most cases, it's time to leave it behind.
Adblocking: How about Nah?
For more than a decade, consumer rights groups (including EFF) worked with technologists and companies to try to standardize Do Not Track, a flag that browsers could send to online companies signaling that their users did not want their browsing activity tracked. Despite long hours and backing from...
Amazon Transcribe Streaming Now Supports WebSockets
I love services like Amazon Transcribe. They are the kind of just-futuristic-enough technology that excites my imagination the same way that magic does. It’s incredible that we have accurate, automatic speech recognition for a variety of languages and accents, in real-time. There are so many use-cases, and nearly all…
How we built a GDPR-compliant website analytics platform without using cookies
How Fathom Analytics build a totally GDPR compliant website analytics without cookies.
Browsers are pretty good at loading pages
Client-side navigation is supposed to make your pages load faster. But when I tried it, it was actually slower! Why?
Google Chrome is ditching its XSS detection tool
The Sophos Blog
PHP 5 and 7.0 end of life
Critical PHP Security Release 21 Oct 2026: PHP released emergency patches on 21 October 2026 for two critical unauthenticated remote code execution (RCE) Learn why PHP EOL matters, the security & compliance risks of running unsupported PHP, and how to plan, test, and upgrade to supported versions.
Front-end design, React, and a bridge over the great divide
I'm Brad Frost, an independent creator, web designer & developer, teacher, speaker, writer, musician, and artist based in Pittsburgh, PA.
HTTP Security Headers – A Complete Guide
A description of each security header, why it is important, and how to configure your website in a secure way.
Github became the web's largest font piracy site (2017)
Front-end antics and typographic mischievousness
Not So Fast: Analyzing the Performance of WebAssembly vs. Native Code
Abhinav Jangda, Bobby Powers, Emery D. Berger, and Arjun Guha, University of Massachusetts Amherst
DuckDuckGo Expands Use of Apple Maps
Earlier this year we announced that we're using Apple's MapKit JS framework to power our mapping features. Today, we're excited to show you some new improvements.
The Vision for Decentralized Web
created by tautvilas, powered by dpage
Building a hackable editor in the browser
Warning: All of this doesn’t really follow any best practices for working with html, css or javascript - on the contrary: what we will be doing may look horrible to some people, and rightfully so - so you may not want to try those things at work just yet.
Add-Ons Outage Post-Mortem Result
We've been conducting an ongoing post-mortem on the add-ons outage that occurred earlier this year. There was a lot more digging to do than we expected. In addition to this ...
Developers don't understand CORS
The recent Zoom vulnerability is just one of many examples which show us that many developers do not understand how CORS works
Prime Video on Chromecast and Android TV, YouTube on Fire TV
Starting today, you can watch Amazon Prime Video on Chromecast and Android TV devices.