1
A Critique of GPUI
Personal Notes
New
The latest blog posts to take off on Hacker News. 377 posts.
2
The Web Is More Than Enough, by Paul Ford
Web browsers enable incredibly rich app development—and that’s radically easier than it used to be.
3
Restaurant Delivery Payment-Skimming Campaign
InfoHawk research has uncovered a network of 820 suspicious restaurant domains impersonating major US chains, including Jersey Mike's, Jimmy John's, Firehouse Subs, Chipotle, and Dave's Hot Chicken. Some are running sophisticated payment-skimming attacks that capture credit card information and ask customers for their…
4
We know 15k websites are infected. how do we tell them?
We've identified 15,579 websites that are currently infected with malicious JavaScript and between them, we conservatively estimate that they receive more than 135 million visits every month. We know they're infected, and we have the evidence to back that up, but there's a problem: how on
5
September in Servo: <progress>, rounded rectangles, and more
Plus new CSS functions and WEbGL2 improvements.
6
Download your favourite YouTube videos
Signal boosting Laura's post that you should absolutely download and archive the stuff that matters to you.
7
Safari introduces Adaptive Dark Mode in 27.3
We’re excited to announce Adaptive Dark Mode in Safari 27.3 beta.
8
9
Spreading Liquid with Three.js
We create beautiful expressions through programming and deliver the best possible experiences.
10
If you love a website, back it up
This story starts with a little tragedy. See, I’ve got these old webpages I love to go back and look on every now and then. There’s websites that h...
11
The AI cost of JavaScript frameworks
One of my pet peeves with the web development community is that so many of the decisions we make are vibes-based. Frameworks are “blazing fast,” tools will…
12
HackerTube: YouTube built from videos recommended by HN
Instead of YouTube, watch HackerTube!
13
Understanding Email Encryption (2025)
A comprehensive overview of how email is encrypted, the benefits, and the trade-offs.
14
Why is this fingerprinting script creating bioweapons?
I've always had a fascination with reverse-engineering browser fingerprinting scripts. Most of my time has been spent looking at the usual suspects (popular fingerprinting libraries like FingerprintJS and more sophisticated scripts used by anti-bots like Cloudflare Turnstile, Akamai, and others).
15
Discord will soon let anyone find public server messages through Google
Starting on November 16, 2026, conversations in Discoverable Servers will be easier to find for people searching the web. Admins can choose which channels are surfaced on the web. Private servers, DMs, and GDMs are not included.
16
Websites Should Be Printable
I read a lot of printed papers these days. While I enjoy reading on a laptop as much as the next guy, marking up a printed document engages me better. Also, there's something about sitting with a whit…
17
Removing Next.js Got My Blog to 100 on Every Lighthouse Category
My blog just scored a perfect 100 on every Lighthouse category. I love blogging. I wanted to build a blog that’s light, fast, free of clutter, able to run multiple blogs, and fully accessible on top of that. And finally, at long last, I’ve more or less pulled it off. It was quite a tedious proces...
18
Local Wikipedia: Wikipedia, but only for things a half hour walk from you
Wikipedia, but only for things a half hour walk from you.
19
The HTML-in-Canvas API origin trial
Learn about the HTML-in-Canvas origin trial in Chrome, and how it can help bring the DOM to your Canvas-driven applications.
20
Overgrown, when plants invade your abandoned tabs
A fun little project that came out of a creative exercise around the word 'Overgrowth'.
21
There isn't an easy exploit for this PHP vulnerability
Mass hysteria, or something.
22
Cloudflare deploys protections against php2shell vulnerability
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers.
23
The Future of CSS
Every year, browser vendors collaborate via the Interop project to synchronize their efforts on new HTML/CSS/JS features. This year, there’s a ton of super exciting features being considered! In this blog post, we’ll explore the CSS of the future, to get a glimpse of what we’ll soon be able to do.
24
No more icons in every menu by default
Have you heard the good news? I bemoaned the approach of putting an icon in every menu item by default which shipped with macOS Tahoe — but now it’s gone in…
25
Drupal is now light-years ahead of its reputation
DrupalCon Rotterdam 2026 DriesNote presentation.
26
Superlite: A Faster Alternatie to Superpowers
Why I built superlite, an autonomous build workflow for Claude Code that doesn't ask permission every four minutes: how it works, how to use it, and the benchmarks.
27
Chrome and Edge are removing XSLT: what breaks and what does not
Chrome 158 stops running XSLT on 17 November 2026. What it does to your XML sitemap, your feeds and your crawling, with a before and after capture.
28
JPEG XL vs. AVIF for web use-cases
JPEG XL has landed, but how does it compare?
29
Thank You, Deno
Deno is joining Cloudflare & winding down its investment in the runtime. We're all better off because of its existence.
30
Fancy Curl Sites
So a good while ago I added a fun curl version of my site, meant for viewing in the terminal. Try running these commands!