2911
Storage is now available in Supabase (YC S20)
Launching Supabase Storage and how you can use it in your apps
New
The latest blog posts to take off on Hacker News. 8,470 posts.
2912
Let’s fix font size
What happens when you set fontSize: 32 in your favorite editor
2913
How to Build a Web App with and Without Rails Libraries
Ruby on Rails is a web framework that contains many libraries you’d need to create and deploy a successful web application. We often take for granted the ability to run rails new to create a fully functional web application with tons of built-in features.
2914
2915
A new Cloudflare Web Application Firewall
Today we are announcing a new Cloudflare Web Application Firewall for all Cloudflare paid zone customers.
2916
Netmask NPM package, used by 270k+ projects, vulnerable to octal input data
The following research outlines a vulnerability discovered in netmask npm package that is currently used by 278,722+ other projects. The vulnerability has been present for 9 years. Since this package is so incredibly widespread, I would suggest every nodejs developer to check their package.jsons to see if they use…
2917
OAuth 2.0 Authentication Vulnerabilities
While browsing the web, you've almost certainly come across sites that let you log in using your social media account. The chances are that this feature is ...
2918
OAuth Attack Vectors
Intro The OAuth2 authorization protocol has been under fire for the past ten years. You've probably already heard about plenty of "return_uri" tricks, token leakages, CSRF-style attacks on clients, an
2919
Emoji Under the Hood
Detailed look into all the machinery involved in rendering Emoji
2920
Comparing Svelte and React
Last year I created Pomodone , a small time tracking application based on the Pomodoro technique of working in 25 minute intervals. It's a pretty basic app; it has a 25 minute timer (that runs in a Web Worker) and saves a history of your "poms" to a small Firebase database. I initially built it using React (well…
2921
Firefox 87 introduces SmartBlock for Private Browsing
Today, with the launch of Firefox 87, we are excited to introduce SmartBlock, a new intelligent tracker blocking mechanism for Firefox Private Browsing and Strict Mode. SmartBlock ensures that strong ...
2922
Closing web browser windows doesn't close connections
Months ago I noticed something strange in the Little Snitch Network Monitor: Safari was still connecting to web sites after every window had been closed. At the time, I thought this was just a Safari bug. I brought the issue to the attention of some Safari engineers, who I had hoped would look into it. Since then…
2923
2924
The End of AMP?
I am hopeful that 2021 will be the beginning of the end for two of my least favorite things – the pandemic and Accelerated Mobile Pages (AMP). For the past
2925
SvelteKit Is in Public Beta
And we’d love to have your feedback
2926
Live previews with Rails and Stimulus 2
Who wouldn’t want a live preview for writing their great content? If you happen to be running Rails with Hotwire, it’s surprisingly easy with a small Stimulus controller.
2927
Substack's UI and 1Password temporarily cost me $2k
An event-tech partner for ambitious experiential teams.
2928
Firefox 87 trims HTTP Referrers by default to protect user privacy
We are pleased to announce that Firefox 87 will introduce a stricter, more privacy-preserving default Referrer Policy. From now on, by default, Firefox will trim path and query string ...
2929
2930
2931
Nobody designs for small iPhone devices anymore
Nobody designs for small iPhone devices anymore. Why do I say this? Well, if you've been rocking the iPhone SE 2020 you would know. What I'm saying is there a lot of UI glitches from apps running on iPhone SE. Clubhouse Forgot to measure the screen's width? Spotify I can't see the Refresh button. I…
2932
Safari is now probably the influential wild card browser for user privacy
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
2933
Google Took Down My Chrome Extension for Using Lodash
So there I was, happily closing out some tabs before heading to bed, when I noticed a new email from the Chrome Web Store at 12:30am: I went to Intention's…
2934
2935
A Spectre proof-of-concept for a Spectre-proof web
Posted by Stephen Röttger and Artur Janc, Information Security Engineers Three years ago, Spectre changed the way we think about security b...
2936
2937
A look at search engines with their own indexes
A cursory review of all the non-metasearch, indexing search engines I have been able to find.
2938
I bought 300 emoji domain names from Kazakhstan and built an email service
I bought 300 emoji domain names from Kazakhstan and built an emoji email address service. In the process I went viral on Tik Tok, made $1000 in a week, hired a Japanese voice actor, and learnt about the weird world of emoji domains.
2939
Why I don't like Tailwind CSS
On paper, Tailwind CSS sounds like a great idea. In reality, it suffers from the same problems that it tries to solve.
2940
Guide: Full Wayland Setup for Linux
This article is a guide for achieving a full-as-possible Wayland setup on Arch Linux. If you follow the entire guide, by the end you will have: