1
Instagram's Million Dollar Bug
How participation in Facebook's bug bounty not only led to the complete compromise of Instagram, but also legal threats and intimidation
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 224 posts.
2
Web Design: The First 100 Years (2014)
This is the expanded version of a talk I gave on September 9, 2014 , at the HOW Interactive Design conference in Washington, DC.
3
From Asm.js to WebAssembly
tl;dr I’m burying the lede with context and catch-up material first, so impatient or already-clued-in readers should skip to below the videos for today’s big news. Or just read Luke Wagner ‘s blog post right now.
4
Extracting the SuperFish certificate
I extracted the certificate from the SuperFish adware and cracked the password (" komodia ") that encrypted it. I discuss how down below. T...
5
Safari is the new IE
Update: This post represents my views before I joined the Microsoft Edge team, and before I got involved with browsers or web standards in general. I leave it…
6
What Happens Next Will Amaze You
This is the text version of a talk I gave on September 14, 2015, at the FREMTIDENS INTERNET conference in Copenhagen, Denmark.
7
The Pixel Factory
"I think a lot of mathematics is really about how you understand things in your head. It's people that did mathematics, we're not just general purpose machines, we're people. We see things, we feel things, we think of things. A lot of what I have done in my mathematical career has had to do with finding new ways to…
8
A story about <input>
Monica Dinculescu's blog
9
Web vs. native: let’s concede defeat
I feel it’s time to revisit the web vs. native debate, and concede defeat — or, at least, concede that the web cannot, and should not , compete with native when it comes to complex, app-like structures.
10
The best icon is a text label
Icons are an essential part of many user interfaces. The thing is: more often than not, they break clarity. Just replace them by a text label. Or an icon plus label.
11
Pure UI
The growing convergence of the designer and programmer roles by way of React
12
The secret message hidden in every HTTP/2 connection
If you spy on an HTTP/2 connection starting up you'll notice that it sends an almost-but-not-quite valid HTTP request at the very start of...
13
A Guide to Fast Page Loads
Your website is slow, but the backend is fast. How do you diagnose performance issues on the frontend of your site? We'll discuss everything involved in constructing a webpage and how to profile it...
14
Stop pushing the web forward
Fair warning. You’re going to hate this one. I want to stop pushing the web forward for a while. I want a moratorium on new browser features for about a year or so.
15
Give Google Contributor a try: Pay to remove ads
Recently I’ve seen several interesting conversations about ad blocking, and I wanted to remind people about a great offering called Google Contributor. With Google Contributor, you contribute…
16
17
Dropdowns Should Be the UI of Last Resort
All too often mobile forms make use of dropdown menus for input when simpler or more appropriate controls would work better. Here's several alternatives to drop...
18
Flux is the new WndProc
React, if you’ve somehow missed it, is the new hotness in web programming. The idea is simple: each React component describes its view idempotently, in JavaScript. The view is rendered entirely based on a small amount of state the component keeps internally. Given the same state, a given component will always render…
19
20
Firefox tracking protection decreases page load time by 44%
Edited to add: I wrote a followup post to address comments here and elsewhere that advertising is working as intended. This paper has been ...
21
Image diffing using CSS
Since the last post [http://franklinta.com/2014/09/08/computing-css-matrix3d-transforms/] on CSS was popular here is another simple CSS trick that I found useful in the past. Let’s say we want to find the difference between these two images: You can do this by simply inverting the colors and then stacking them…
22
23
Choosing an HTTP Status Code
What could be simpler than returning HTTP status codes? Did the page render? Great, return 200. Does the page not exist? That’s a 404. Do I...
24
HTTP/2 Is Done
The IESG has formally approved the HTTP/2 and HPACK specifications, and they’re on their way to the RFC Editor, where they’ll soon be assigned RFC numbers, go through some editorial processes, and be published.
25
One in every 600 websites has .git exposed
Deeply technical and hands-on AI and tech leader. Built, scaled and sold my own… · Experience: Cubes · Education: Nanzan University · Location: London Area, United Kingdom · 500+ connections on LinkedIn. View Jamie Brown’s profile on LinkedIn, a professional community of 1 billion members.
26
JavaScript in 2015
In the last few days of 2014, I resurrected my long-neglected GIF-beatmatching project DJGif to throw a New Year’s party on my rooftop:
27
28
29
30