151
What's OAuth2, anyway?
Why the OAuth2 protocol was designed the way it is and how it works.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 499 posts.
152
Serving 200M requests per day with a CGI-bin
Jake Gold tests how well 90s-era CGI works today, using a Go + SQLite CGI program running on a 16-thread AMD 3700X. Using CGI on modest hardware, it’s possible to …
153
Trick users and bypass warnings – Modern SVG Clickjacking attacks
A novel and powerful twist on an old classic.
154
Android 16 is here
Here’s a look at the new features coming to Android 16.
155
Be a property owner and not a renter on the internet
Why owning your own domain and publishing on the open web beats renting attention from Reddit, Discord, Facebook, and other mega-concentrated platforms.
156
JavaScript's New Superpower: Explicit Resource Management
The Explicit Resource Management proposal empowers developers to explicitly manage the lifecycle of resources.
157
Sync Engines Are the Future
We've been building frontends that talk to backends for years. But in the meantime the browser has become an OS. In that case what should your stack look like?
158
Five years of React Native at Shopify
Five years ago, we announced that React Native (RN) is the future of mobile at Shopify. Today, we are excited to share the progress we've made, lessons learned, and what the future holds. To recap, we decided to switch to RN for 3 main reasons: Write it once - Stop building the same features twice, once on iOS and…
159
Understanding gRPC, OpenAPI and REST and when to use them in API design (2020)
When designing a modern API, learn when to use RPC (gRPC), OpenAPI or REST.
160
Firefox expands fingerprint protections
With Firefox 145, we’re rolling out major privacy upgrades that take on browser fingerprinting — a pervasive and hidden tracking technique that lets we
161
The beauty of a text only webpage
There's something I love about opening a text-only webpage. They're a refuge from the GDPR cookie banners, the trashy ads, the email opt-ins, and the god...
162
Servo Revival: 2023-2024
Summary of the things that have happened in the Servo project since January 2023 when Igalia started to maintain it.
163
Everyone knows your location, Part 2: try it yourself and share the results
Learn how to record and analyse your mobile device traffic, take an app from the list of "shady" apps and share the results.
164
RSS is awesome
Evan briefly discusses rss
165
I switched from Htmx to Datastar
In 2022, David Guillot delivered an inspiring DjangoCon Europe talk , showcasing a web app that looked and felt as dynamic as a React app. Yet he and his team had done something bold. They converted it from React to HTMX , cutting their codebase by almost 70% while significantly improving its capabilities.
166
How RSS beat Microsoft
Microsoft tried to own content syndication with ICE. How open RSS beat it, and what that war teaches us about open formats like email.
167
Reshaped is now open source
After five years of closed-source, Reshaped is finally open for all – both in React and Figma.
168
The React Foundation
Meta open-sourced React over a decade ago to help developers build better user experiences. Since then, React has grown into one of the world’s most popular open source projects, powering over 50 m…
169
The indieweb doesn't need to “take off”
There's a corner of the Internet where people have been reclaiming their digital independence by hosting their own websites and promoting the idea of owning your own content. It's called the IndieWeb. The community has its own website , IRC channels, social media presence, etc. as well
170
New layouts with CSS Subgrid
Subgrid allows us to extend a grid template down through the DOM tree, so that deeply-nested elements can participate in the same grid layout. At first glance, I thought this would be a helpful convenience, but it turns out that it’s so much more. Subgrid unlocks exciting new layout possibilities, stuff we couldn’t do…
171
Simulating hand-drawn motion with SVG filters
A practical guide to implementing the boiling line animation effect using SVG filter primitives and JavaScript - Blog post by Camillo Visini
172
Memory safety for web fonts
Learn how and why the Chrome team has replaced FreeType with Skrifa.
173
Map Features in OpenStreetMap with Computer Vision
Mozilla.ai developed and released the OpenStreetMap AI Helper Blueprint. If you love maps and are interested in training your own computer vision model, you’ll enjoy diving into this Blueprint.
174
Feed the bots
A week ago , I set up a dynamically generated nonsense maze to catch LLM scrapers. Now, requests to it make up 99.9% of my server's traffic, but my total request volume did not increase. The bots didn't come to my site because of the trap.
175
Vanilla JavaScript support for Tailwind Plus
Every UI block in Tailwind Plus is now fully functional, accessible, and interactive, even if you don't use a framework like React or Vue.
176
URL-Driven State in HTMX
Build stateful HTMX applications using URL parameters as your state store, creating naturally bookmarkable and shareable interfaces
177
CSRF protection without tokens or hidden form fields
A couple of months ago, I received a request from a random Internet user to add CSRF protection to my little web framework Microdot, and I thought it was a fantastic idea.When I set off to do this…
178
HTTPS by default
One year from now, with the release of Chrome 154 in October 2026, we will change the default settings of Chrome to enable “Always Use Secure Connections”. This means Ch…
179
When Figma starts designing us
The subtle ways in which design tools shape how we think and what we make
180
Tidewave Web: in-browser coding agent for Rails and Phoenix
Today, we're introducing Tidewave Web for Rails and Phoenix: a coding agent that runs directly in the browser alongside your web application, in your own development environment, with full page and code context.