New
The latest blog posts to take off on Hacker News. 8,469 posts.
Happy Birthday, OpenStreetMap
Looking to learn more about what makes TomTom tick? Read the latest articles and news about maps, location data and the world they power in the TomTom Newsroom.
The World of CSS Transforms
The “transform” property is such a powerful part of the CSS language! In this blog post, we'll take a deep look at this property and see some of the nifty things it can do.
Apps Getting Worse
Too often, a popular consumer app unexpectedly gets worse: Some combination of harder to use, missing features, and slower. At a time in history where software is significantly eating the world, this is nonsensical. It’s also damaging to the lives of the people who depend on these products.
Screw You, Microsoft Edge
Recently while searching for a book on Bookshop.org, I was interrupted by a popup apparently generated by Microsoft Edge advising me of an alternative:
Why WebAssembly is innovative even outside the browser
WebAssembly (Wasm) has many applications in the cloud-native world today – WASI, edge cloud computing, Proxy-Wasm, and cloud-native runtime for server
30 years on from introducing the Web to the World
The World Wide Web Consortium (W3C) is an international community where Member organizations, a full-time staff, and the public work together to develop Web standards.
Firefox: Performance in Progress
In the last six months the Firefox performance team has implemented changes to improve startup, responsiveness, security (Fission), and web standards. Startup and perceived startup Doug Thayer and Emma Malysz ...
How MDN's Autocomplete Search Works
Autocomplete search added to MDN Web Docs allows you to quickly jump to the document you're looking for by typing parts of the document title
How to boost your popularity on OkCupid using CSRF and a JSON type confusion
This is a quick blog post about a security vulnerability (now fixed) that allowed me to make anyone like or message a profile on okcupid.com simply by getting them to click a link on my website. In doing so, I used one of the most boring web application security issues (CSRF) combined with a somewhat interesting JSON…
Building a Django driver for Psycopg 3
Psycopg is the most popular PostgreSQL adapter for the Python programming language.
It looks like a product but is secretly a subscription
The mental minefield of capex and opex
Hosting SQLite Databases on GitHub Pages
I was writing a tiny website to display statistics of how much sponsored content a Youtube creator has over time when I noticed that I often write a small tool as a website that queries some data from a database and then displays it in a graph, a table, or similar. But if you want to use a
The mermaid is taking over Google search in Norway
A weird thing is going on with Google search in Norway right now. Spammers are taking over.
Invasive ad targeting is bad for journalism and other high-quality publishers
The lie from ad tech is that there's no such thing as a premium publisher and all ad views are basically the same.
A critique of Safari's influence on the web
There's been a lot of discussion recently about how "Safari is the new IE" (1, 2, 3, 4, 5). I don't want to rehash the basics of that, but I have seen some...
Discord Launches Threads
Today, we’re excited to introduce a new home for all those winding discussions happening in your communities: Threads!
My First CSS
Insights from the Kablamo Engineering Team
Google results for PHP tutorials contain SQL injection vulnerabilities
Today, out of curiosity, I googled for php mysql email register . This returns tutorials, how-tos, code snippets. Most results include flawed DB statements. This usually means something like
Freenom, the free domains website, is a scam
Self-taught developer. Go, Rust, Python and Javascript. - hackermondev
Hobson's Browser: How Apple, Facebook and Google broke the mobile browser market
Mobile OSes and their most successful apps have drained browser choice of meaning for more than a decade. This has lead to confusion for users and loss of control over data. Web developers, meanwhile, face higher costs and reduced ability to escape walled gardens. It's time for the charade to end.
Cloudflare's Handling of an RCE Vulnerability in Cdnjs
Recently, a RCE vulnerability in the way cdnjs’ backend is automatically keeping web resources up to date has been disclosed. Read about how Cloudflare handled the security incident and what will prevent similar exploits in the future.
Most URLs are syntactically valid JavaScript code
Further adventures in JavaScript
How do Chrome extensions impact browser performance?
This article looks at how 1000 popular Chrome extensions impact the performance of the browser.
Stopping FTP support in Firefox 90
The File Transfer Protocol (FTP) has long been a convenient file exchange mechanism between computers on a network. While this standard protocol has been supported in all major browsers ...
KDE Plasma Mobile 21.07
The Plasma Mobile team is happy to present the Plasma Mobile updates for July 2021. Read on to found out about all the new stuff included in this release: Shell First and foremost: Marco Martin made the shell more responsive by improving the performance of the top panel.
Remote code execution in cdnjs of Cloudflare
Preface (日本語版も公開されています。) Cloudflare, which runs cdnjs, is running a “Vulnerability Disclosure Program” on HackerOne, which allows hackers to perform vulnerability assessments. This article describes vulnerabilities reported through this program and published with the permission of the Cloudflare security team. So this…