7651
OAuth Attack Vectors
Intro The OAuth2 authorization protocol has been under fire for the past ten years. You've probably already heard about plenty of "return_uri" tricks, token leakages, CSRF-style attacks on clients, an
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,470 posts.
7652
7653
7654
7655
How I rebuilt "Flying Toasters" using only CSS animations
One of my favorite classic screensavers from back in the day was “Flying Toasters,” a part of the After Dark bundle.
7656
Nginx image processing server with OpenResty and Lua
Today I'll be showing you how to create a fast on the fly image processing server. The whole system can be created in less than 100 lines of code. We'll be using OpenResty , an enhanced distribution of Nginx. We'll also need to write a...
7657
Generate static sites from Markdown files with Caddy (2018)
Caddy can not only serve files fast and safely. It can also generate static files from markdown, so you dont need a generator.
7658
WordPress Launches Google Adsense Alternative, WordAds
Over the years one of the most frequent requests on WordPress.com has been to allow bloggers to earn money from their blog through ads. We’ve resisted advertising so far because most of it we…
7659
7660
Serving Vue.js Apps on GitHub Pages
I wanted to share a pretty simple setup on how to serve a Vue.js app using Github Pages. I’m writing this because I had to search around online for awhile...
7661
7662
7663
Getting started with Meteor and React
A mid-depth cap with classic style for any occasion, this Nike Club Cap comes in smooth cotton twill that's been softly washed for casual, daily comfort. Soft and unstructured, the precurved bill makes for easy styling, and the adjustable back-strap lets you find the right fit. Nike Hat Size 6 1/2 6 5/8 6 3/4 6 7/8 7…
7664
Tor Browser 7.0a4 is released
Tor Browser 7.0a4 is now available from the Tor Browser Project page and also from our...
7665
7666
Ways to leak your data: apps’ circumvention of the Android permissions system
50 ways to leak your data: an exploration of apps’ circumvention of the Android permissions system Reardon et al., USENIX Security Symposium 2019 The problem is all inside your app, she said to me …
7667
Remix's concurrent submissions are fundamentally flawed
In this article we discuss the complexity of introducing concurrent operations on the client wuthout causal ordering on the server.
7668
Intelligent Tracking Prevention 2.1
Note: Read about past updates to this technology in other blog posts about Intelligent Tracking Prevention, and the Storage Access API.
7669
The algebraic structure of functions, illustrated using React components
Did you know there’s an algebraic structure for functions? That may not surprise you at all. But it surprised me when I first found out about it. I knew we used functions to build algebraic structures. It never occurred to me that functions themselves might have an algebraic structure. The structure is fascinating…
7670
New Anti-Toxicity Features on Bluesky
Trust and Safety (T&S) affects everything — from community policy and spam detection, all the way to the order that replies show up on a post. At Bluesky, the product team works hand-in-hand with T&S to design features that balance safety, ease of use, and fun.
7671
The Third Web
(This text is very long. Maybe too long. You can find a PDF and an EPUB of it below.The current version of this text will always live at https://web3.tante.ccSatya has created an audio version of this essay. Eine deutsche Version findet sich hier. Una versione italiana di questo testo è qui – grazie Nebbia! En […]
7672
Domain hacks with unusual Unicode characters
Unicode contains a range of symbols which don't get much use. For example, there are separate symbols for TradeMark - ™, Service Mark - ℠, and Prescriptions - ℞. Nestling among the "Letterlike Symbols" are two curious entries. Both of these are single characters: Telephone symbol - ℡ Numero Sign - № What's interesting…
7673
Show HN: Designing Web Applications
It's not that you set out to create a poorly designed product, but lots of mistakes—big or small—along the way left you with an interface that does its job, but is painful to use.
7674
Regexp-based RFC822 email address validation
Mail::RFC822::Address is a Perl module to validate email addresses according to the RFC 822 grammar. It provides the same functionality as RFC::RFC822::Address, but uses Perl regular expressions rather that the Parse::RecDescent parser. This means that the module is much faster to load as it does not need to compile…
7675
Banish missing glyphs with Unifont
The GNU Unifont project is amazing. It contains every Unicode glyph in one single file! I am going to argue that you should bundle it with your apps, your operating systems, and - at a pinch - your websites. The Unifont is a perfect fallback font. If your app or website uses a Unicode character which isn't supported…
7676
You don't need Next.js – Why we migrated from Next to React
Why we moved the ComfyDeploy dashboard from Next.js to React with TanStack Router and Rspack: build time fell from 3 minutes to 18 seconds.
7677
7678
7679
7680
Wrong by Default
A few programming languages use a “defer” pattern for resource cleanup. This is a construct such as a defer keyword which schedules cleanup code to run at the end of the enclosing block (or function). This is available in Zig, Go and even in GCC C.