Top posts

Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,469 posts.

Web & Frontend
Any year
2020

CSRF is really dead

A little while back I wrote a blog post about how "CSRF is dead". It focused on SameSite cookies, a powerful yet simple feature to protect your website against CSRF attacks. As powerful as it was, and as much as it will kill CSRF, you had to enable it on

2026

A simple web we own

Today, the Web and Internet are owned and controlled by large for-profit corporations and a few governments 1 . Corporate ownership combined with government policies has left us as tenant and product. It has given us a surveillance economy and enshittification 2 .