1
The Modern Guide to OAuth
Learn how OAuth 2.0 works with this simplified explanation and guide. Learn what it is, why it's essential for secure authorization, and best practices for implementation.
New
The latest blog posts to take off on Hacker News. 573 posts.
2
A Guide to Twitter
We hope that this guide to Twitter will be useful to you, wherever you are in your Twitter journey.
3
Unicode Normalization Forms: When ö ≠ ö
How special characters in file names can ruin your day.
4
Self-Hosting Dozens of Web Applications and Services on a Single Server
Over the years, I've accumulated quite a collection of websites, web applications, APIs, and other services that I've built and continue to host publicly. I've experimented with a lot of different hosting methods for them, switched between several different providers, and have finally arrived at something that I feel…
5
Sciter, the 5 MB Electron alternative, has switched to JavaScript
Without too much fanfares Sciter has officially transitioned from TIScript to JavaScript this week.
6
How did LastPass master passwords get compromised?
LastPass accounts are under attack. I look into how user’s master passwords might have leaked.
7
Why Web3?
Over the last month, there has been a ton of debate and conversation about web2 vs web3 with many leading voices raising doubts about web3. Debate and doubt are healthy. And web3 enthusiasts, particularly on Twitter, remind me of missionaries trying to recruit the unwashed to their belief system. Frankly, it is all…
8
Is It Time for the JavaScript Temporal API?
Date handling in JavaScript is a pain, it's time for a proper Temporal API
9
10
Maybe we could tone down the JavaScript (2016)
I’m having a really weird browser issue, where scripts on some pages just won’t run until about 20 seconds have passed. Whatever you’re about to suggest, yes, I’ve thought of it, and no, it’s not the problem. I mention this not in the hope that someone will help me debug it, but because it’s made me acutely aware of a…
11
How a hypermedia approach can address usability concerns with multi-page apps
In this essay, Carson Gross gives an analysis of Rich Harris's talk 'Have Single-Page Apps Ruined the Web?', exploring the debate between Single-Page Applications (SPAs) and Multi-Page Applications (MPAs). Carson examines Harris's criticisms of both approaches and proposes hypermedia-oriented solutions using htmx…
12
You block ads in your browser, why not in your city?
There are defences against badvertising on the internet, and you should use them. But there are defences against bad advertising in real life too, and you should use them too. Put badvertising in its place: nowhere!
13
14
15
There's never been a better time to build websites
We're closing in on the end of 2021 and I'm as excited now about building websites as I've been in ~25 years.
16
An iframe from googlesyndication.com tries to access the camera and microphone
The last thing we want is for an advertising network to access the Camera or Microphone on our computer. But, while looking for something else, I stumbled upon messages in the Safari JavaScript console saying that an iframe loaded from safeframe.googlesyndication.com tried to do exactly that.
17
An NFT without a blockchain
This is a small proof-of-concept. It relies on PGP - but you could use Keybase, GPG, or any other hard-to-use encryption program. Background Suppose you want to support an artist and give them money. That's easy. Most artists take PayPal, bank transfer, or cash. But how can you prove that you've paid an artist for a…
18
Notches Gone Wild
This holiday season we have a special gift for Mac users everywhere, especially ones with a new MacBook Pro and notch. We’re proud to announce the immediate availability of Notchmeister. So what does Notchmeister do? Think of it as a fun way to spruce up your notch. Or as a screen saver for something you […]
19
20
Fuite: a tool for finding memory leaks in web apps
Debugging memory leaks in web apps is hard. The tooling exists, but it’s complicated, cumbersome, and often doesn’t answer the simple question: Why is my app…
21
The Third Web
(This text is very long. Maybe too long. You can find a PDF and an EPUB of it below.The current version of this text will always live at https://web3.tante.ccSatya has created an audio version of this essay. Eine deutsche Version findet sich hier. Una versione italiana di questo testo è qui – grazie Nebbia! En […]
22
Two custom React hooks
Open-source, swappable packages and an AI that assembles them into full-stack apps that scale.
23
Introduction to WebAssembly Components
WebAssembly and WASI show great promise for the future of computing outside the browser, and the WebAssembly component model aims to improve the portability, cross-language, and composition story for Wasm. This article explains the goals of the component model, and showcases how to use tooling from the Bytecode…
24
Authoring a SIMD enhanced WASM library with Rust
All the pieces have come together for widespread Wasm SIMD usage. The majority of browsers and Node 16 LTS support Wasm SIMD out of the box, and Rust recently learned how to compile Wasm intrinsics. Now I need to port a library from x86 SIMD to Wasm SIMD and distribute it in such a way that will fallback to a non-SIMD…
25
Log4j 2.15.0 – Previously suggested mitigations may not be enough
Log4j 2.15.0 and previously suggested mitigations may not be enough, Author: Renato Marinho
26
Rails 7 Released
This version of Rails has been years in the conceptual making. It’s the fulfillment of a vision to present a truly full-stack approach to web development that tackles both the front- and back-end challenges with equal vigor. An omakase menu that includes everything from the aperitif to the dessert.
27
Preventing Pool-Party Attacks
Brave has identified a new category of tracking vulnerability, forms of which are present in all browsers. We call this category of attack “pool-party” attacks because the attack uses collections (or “pools”) of limited-but-shared resources to create side channels.
28
HTTP/3 Is Fast
HTTP/3 promises speed and efficiency, but does it actually deliver? In our latest article, we put HTTP/3 to the test,comparing it against HTTP/2 in real-worl...
29
Reimagining projections for the interactive maps era
A deep dive into Adaptive Projections, a novel way to make interactive maps more accurate without compromises to user experience or rendering quality.
30
Frickin' shaders with frickin' laser beams
Solve all your shader problems with this one weird trick.