The latest blog posts to take off on Hacker News. 596 posts.
On Tuesday, December 7th 2021 I discovered a critical vulnerability in Cloudflare’s Email Routing service. This vulnerabilty enabled anyone to modify the routing configuration of any domain using the service. A bad actor could have overwritten the destination address to their own email address in order to read any…
Posted by Carlton Gibson on Aug. 3, 2022
After the recent announcement regarding WASI support in Workers I decided to see what it would take to get code written in Zig to run as a Worker, and it turned out to be pretty trivial. This post documents the process I followed
Has TypeScript gotten slow for you? Run this one magic command to visualize what TypeScript is compiling, and maybe get to the root of the issue.
Today we are extremely happy to finally announce Docusaurus 2.0! 🥳️
In some ways, we've taken a few steps back from a programmable web—two things I miss: bookmarklets and user scripts. Imagine having a bookmarked shortcut to do complex things like taking screenshots or saving a PDF. O...
Historical tutorial for building a web framework on Vercel, updated with current Vercel Functions and Routing Middleware terminology.
It has taken Lea and I far too long – there is always something more that really should be added, always some conversion that really needs an authoritive set of data to validate our code against – but we finally decided, time to actually release Color.js .
WebContainers are now supported on Firefox for desktop and mobile as a result of StackBlitz and Mozilla collaboration! 🥳
Two competing syntaxes need your help in determining which should be championed through to a specification candidate.
A look at some interesting use-cases for CSS flexbox and grid in Figma app.
The Build Output API enables any framework, including your own custom-built solution, to take advantage of Vercel’s infrastructure building blocks.
Discover the latest PeerTube news, the YouTube decentralized alternative developed by Framasoft.
Another year, another Apple iOS/iPadOS/MacOS release, right? But shortly before the iOS 16 betas dropped, Apple made an interesting announcement.
👋 Hello everyone. I'm Matt Mecham and today I will be your Rosieland guide. It feels that every other week a new article is written proclaiming the death of the venerable forum platform. The author often cites forums they used to frequent in the early 2000s and how they now hang out on Twitter and Discord, which, in…
This post explores the experimental WebGPU API through examples and helps you get started with performing data-parallel computations using the GPU.
In this essay, Carson Gross explores alternatives to Single Page Applications (SPAs), advocating for an 'HTML-Centric' development approach. He highlights the drawbacks of SPA complexity and the benefits of embracing HTML as the core medium for web development, offering a simpler, more efficient way to build…
In this article, Carson Gross explores how the term REST (Representational State Transfer) evolved to mean nearly the opposite of its original definition in modern web development. It traces how REST, originally defined by Roy Fielding to describe the web's architecture of hypermedia-driven interactions, came to be…
RSS is the API they couldn't kill. It's back stronger than ever as an underpinning of SlackOps in many organizations.
An exclusive membership for web pages weighing less than 1 megabyte.
As it continues to evolve, WebAssembly has the potential to be the platform executing an enormous amount of IoT computation.
A few times a week, someone asks on the #gui-and-ui channel on the Rust Discord, “what is the best UI toolkit for my application?” Unfortunately there is still no clear answer to this question. Generally the top contenders are egui, Iced, and Druid, with Slint looking promising as well, but web-based approaches such…
Top 1 million domains? More like the top 1 million lies
We're so excited to announce that Video Rooms is entering beta in Element, just as a new Room Search is exiting beta!
Vite 3 Release Announcement
Are magic links are still viable as an authentication method or are you better off using newer passwordless alternatives?
How in the world do you pirate an API?
