2821
Phishing attack against Lastpass
Updated 2016-02-04 : LastPass has removed the button from notifications and now requires email confirmation for all logins from new IPs . This substantially mitigates LostPass, but does not eliminate it.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,615 posts.
2822
Trie in JavaScript: The data structure behind autocomplete
We've already covered the basics of tree data structure in three posts. If you haven't gone through those yet, I would strongly going through the…
2823
Undeletable Cookies
A couple of weeks ago Wired reported the discovery of a new, undeletable, web cookie: Researchers at U.C. Berkeley have discovered that some of the net’s most popular sites are using a tracking service that can’t be evaded—even when users block cookies, turn off storage in Flash, or use browsers’ “incognito”…
2824
Liberating out-of-copyright photos from SmartFrame's DRM
During the middle of the 20th Century, the UK's Royal Air Force took thousands of photographs of the country from above. Think of it like a primitive Google Earth. Those photographs are "Crown Copyright". For photographs created before 1st June 1957, the copyright expires after 50 years. Recently, the organisation…
2825
2826
2827
Fluid Layout from Hicksdesign
Hicks.design is Jon Hicks, established 2002.
2828
Preload, prefetch and other link tags
There’re lots of ways to improve web performance (see Web Performance 101 for a full overview). One of those ways is to preload content you’ll need later in advance. Prefetch a CSS file, prerender a full page, or resolve a domain ahead of time – and you won’t have to wait for it when it’s actually needed! Sounds cool.
2829
2830
Phoenix WebSockets under a Microscope
This is a code-reading and exploration post about the WebSockets side of Phoenix. It builds upon some of the tracing techniques showcased in the previous post, to observe some of the internals of Phoenix. It also features some tricks I commonly employ to debug WebSocket related issues. The title and nature of this…
2831
2832
Writing a toy WebSocket server from scratch
WebSocket (WS) connections are pretty neat. I’ve gotten to play around with them before, both for personal and professional projects, but my view has mostly been at a high level and concerned mainly with the things that I can build on top of them. I haven’t spent much time digging through the protocol. I thought it…
2833
Learn React with Copywork
Tired of making TODO apps over and over? Try this instead.
2834
Animate a mesh across a sphere's surface
Notes about creative coding on the Web.
2835
Passkeys are just passwords that require a password manager
You reset your passkey the same way you reset your password. But you’ll find that passkeys make it harder to switch between password…
2836
Why Choose Vue.js
In the past five years or so, while the web development world was going mad with the JavaScript revolution – I stayed mostly indifferent, occupying myself with backend work and distracting myself with things like Kubernetes .
2837
The Controversial State of JavaScript Tooling
There have been many different blog posts on the “State of the Web” , problems people face around tooling, and similar-style musings of late. This article is about summarizing my thoughts on recent events. Rather than yet another rant about the state of web development, this piece aims to pour some thought into what…
2838
2839
OpenGL Is Broken
UPDATE (3/20/2015) If you read this, know that Vulkan has addressed every issue I raise in this article. See my postscript here .
2840
2841
You can serve static data over HTTP
This will be short. I need to let some steam off and flush this thing out of my mind because it's already hanging around for too long. The story goes like this: we're prototyping small tool for whatever and we're at the point where there is a visible need to store some (most likely) static data. Oh, the thing is in…
2842
JPEG-XL vs. AVIF and Others: 27 Images Compared
The current debate surrounding AVIF versus JPEG XL needs some third-party quantitative data to support arguments on either side. I've compiled a dataset of 27 high-resolution photographic images to compare performance across them all at a wide fidelity range.
2843
Using XPath in 2023
In the latest release of htmx , you can add event listeners to elements with hx-on :
2844
The Destruction of the Web
Search engine spam was invented the moment search engines started to be good enough to send significant volumes of traffic to websites based on keyword searches.
2845
2846
2847
How I Build Web Apps As A Freelancer
It's now roughly seven or eight years that I'm building dynamic front ends for the web. From digital art wallets to games (1, 2) and synthesizers, I've seen it all. And since my process
2848
Datasette Apps: Host custom HTML applications inside Datasette
Today we launched a new plugin for Datasette, datasette-apps, with this launch announcement post on the Datasette project blog. That post has the what, but I’m going to expand on …
2849
Malicious Use of the HTML5 Vibrate API
There is a new API in town! HTML5 will (soon) let you make the user's device vibrate. What fun! Obviously, it's useful for triggering alerts, improved immersivness during gameplay, and all sorts of other fun things like sending Morse Code messages via vibration. At the moment, Chrome (and other Android browsers) ask…
2850
Fake ad blockers in Chrome Web Store
People searching for a Google Chrome ad blocking extension have to choose from dozens of similarly named extensions. Only few of these are legitimate, most are forks of open source ad blockers trying to attract users with misleading extension names and descriptions. What are these up to? Thanks to Andrey Meshkov we…