Turn your site into a place people can bump into each other
Releasing Town Square. Bring back the feeling that real people are browsing your site with you.
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 377 posts.
Releasing Town Square. Bring back the feeling that real people are browsing your site with you.
My new book guides you through the start-to-finish build of a real world web application in Go — covering topics like how to structure your code, manage dependencies, create dynamic database-driven pages, and how to authenticate and authorize users securely .
A regression in external display support on Apple Silicon M4/M5 generation chips prevents full HiDPI modes on 4K monitors, limiting users to either blurry non-HiDPI or reduced workspace HiDPI.
Words from me as developer, student and human.
Today, the Web and Internet are owned and controlled by large for-profit corporations and a few governments 1 . Corporate ownership combined with government policies has left us as tenant and product. It has given us a surveillance economy and enshittification 2 .
While exploring the file system on a jailbroken iPhone 6s, I stumbled upon an interesting folder:
Gwtar is a new polyglot HTML archival format which provides a single, self-contained, HTML file which still can be efficiently lazy-loaded by a web browser. This is done by a header’s JavaScript making HTTP range requests. It is used on Gwern.net to serve large HTML archives.
We're open sourcing dbt Charts, a declarative language for dashboards, so that even the dashboards you build by chatting with an agent can be governed.
How bots used our sign-up and forgot password pages to bomb real people's inboxes, and what we did to stop it. A practical guide to subscription bombing for founders and developers who think CAPTCHA is an "I'll do it later" task.
Office.eu launches in The Hague as a 100% European alternative to Microsoft 365 and Google Workspace, built on open-source technology and European infrastructure.
Go 1.27 includes a change to the HTTP client that can make programs sending many sequential HTTP/1 requests significantly faster.
The Glassworm supply chain attack is back. Researchers uncovered malware hidden in invisible Unicode characters across 150+ GitHub repositories, plus npm packages and VS Code extensions.
The vulnerability has been fixed as of July 7, 2026, but the exploit was simple, and hidden email addresses may still be in third-party logs.
How I embedded replies from Bluesky directly on my site.
Today marks 15 years of Waterfox!
Yeah yeah, I know, data-point of 1. I recently read Susam's blog post where they said that "most of the traffic to my personal website still comes from web feeds" - I wondered if that was true for my site. I've been writing this blog for a while. I've never much bothered with "aggressive" SEO - I have a fairly…
Google Safe Browsing missed 84% of confirmed phishing sites in our dataset. Here's what we found and what it means.
A blog about software craft and quality
We rewrote our Rust WASM Parser in TypeScript - and it got 3x Faster
An enticing social media preview summary.
How do they fare with (not so) recent additions to HTML?
This was posted in the TIL section, the low-effort section of my website where I post things that I find useful, but that don't get the full quality checks content elsewhere on this site does.
The one where I mourn the best runtime and speculate idly.
FFmpeg is truly a multi-tool for media processing. As an industry-standard tool it supports a wide variety of audio and video codecs and container formats. It can also orchestrate complex chains of…
Passkeys are the future of authentication, but using them for data encryption is a disaster waiting to happen. Overloading these credentials creates a dangerous blast radius that can lead to the irreversible loss of a user's most sacred memories and documents.
Back in 2019, SwiftUI was announced as the future of Apple development. Seven years later, it still feels like a beta version struggling with stability, performance, and many other aspects. What’s actually wrong with SwiftUI?
Discover the infinite possibilities of the Prompt API.
We’re happy to announce a new release of ClojureScript. If you’re an existing user of ClojureScript please read over the following release notes carefully.
I really dislike Apple’s choice to clutter macOS Tahoe’s menus with icons. It makes menus hard to scan, and a bunch of the icons Apple has chosen make no sense and are inconsistent between system applications. Steve Troughton-Smith is my hero for finding a Terminal command to disable them: Here’s one for the…