181
An Update on the Lock Icon
Editor’s note: based on industry research (from Chrome and others), and the ubiquity of HTTPS, we will be replacing the lock icon in Chrome’...
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 552 posts.
182
WebP is so great except it's not (2021)
I’m a responsible web designer, and as such, since WordPress (finally) accepts media uploads of image/webp MIME type and since all web browsers newer than …
183
184
It’s not wrong that "🤦🏼♂️".length == 7 (2019)
From time to time, someone shows that in JavaScript the .length of a string containing an emoji results in a number greater than 1 (typically 2) and then proceeds to the conclusion that haha JavaScript is so broken—and is rewarded with many likes. In this post, I will try to convince you that ridiculing JavaScript for…
185
How to start a React Project in 2023
React starter kits (Vite, Next, Astro, Remix, React Router) which help React developers to start a React project in 2025 ...
186
Firefox for Android will soon support extensions
During the release cycle of Firefox 120, we’ll begin to see the emergence of dozens of new, openly available extensions on Firefox for Android on addons.mozilla.org (AMO). We’re taking a ...
187
Things I wish I knew before moving 50K lines of code to React Server Components
Server Components run on the server instead of the client, giving you control over your bundle size and data fetching. Here’s everything we learned about them.
188
Wordpress.com Now Supports ActivityPub
The fediverse has arrived at WordPress.com.
189
JavaScript import maps are now supported cross-browser
ES modules are a modern way to include and reuse JavaScript code in web applications. They are supported by modern browsers and provide several benefits over older, non-modular approaches to JavaScript development.
190
Why even let users set their own passwords?
Today we seem to be living through a war on passwords. This is manifested in various ways; in its most passive form, it takes the form of people blogging about how passwords are bad. The more material changes are the general trend towards no longer treating passwords as a sufficient condition for access in favour of…
191
Why I tend not to use content negotiation
In this essay, Carson Gross explores his preference for separating JSON and hypermedia APIs instead of using content negotiation, a feature in HTTP that allows clients to request different formats (e.g., HTML, JSON). He discusses the limitations of content negotiation in APIs, especially when mixing stable, versioned…
192
Atom feed format was born 20 years ago
This month marks the 20th anniversary of the effort that became the Atom feed format. It all began on June 16, 2003,
193
Deno 1.34: Deno compile supports NPM packages
This update augments compatibility with npm and Node.js, incorporates glob support, and enhances TLS certificates with IP addresses. It also brings forth improvements to the configuration, language server, APIs, and updates to V8 and TypeScript.
194
195
Google Introduces Passkey Authentication
By: Arnar Birgisson and Diana K Smetters, Identity Ecosystems and Google Account Security and Safety teams Starting today , you can create a...
196
This year in Servo: over 1000 pull requests and beyond
Reflections on Servo’s progress in 2023: contributor stats, new features, layout improvements, WPT pass rates, and plans for next year.
197
Web Components Eliminate JavaScript Framework Lock-In
Web components can dramatically loosen the coupling of JavaScript frameworks. To prove it, we're going to do something kinda crazy: build an app where every single component is written in a different JavaScript framework.
198
Buggy animation in Atlassian Bitbucket is wasting half a CPU core at all times
I was running some benchmarks the other day. I usually have a lot of things running (Teams, Chrome, IDE, etc…) but I have to close everything to run some tight benchmarks. When I am done, one of th…
199
Target's EasySweep – Simplifying Skimmer Detection
An article by Anonymous : Target's patented EasySweep device protects guests' data from skimmers.
200
What 2023 will bring for PeerTube
We (Framasoft, a small not-for-profit association!) are proud to present our roadmap for the developments and side projects we have planned for PeerTu...
201
The `hanging-punctuation property` in CSS
(I did a Twitter thread on this a while back, against my better judgment, and now moving to a proper blog.) The hanging-punctuation property in CSS is almost a no-brainer. The classic example is a …
202
Push notifications are now supported cross-browser
Push notifications were standardized in 2016 with the release of the Push API and the Notification API, which are part of the W3C's Web Applications Working Group. These APIs provide the necessary functionality for web developers to incorporate push notifications into their web applications and for users to receive…
203
Chrome pushes forward with plans to limit ad blockers in the future
Google has set a date for the introduction of Manifest V3 which will hurt the capabilities of many ad blockers.
204
How to turn off Google's "privacy sandbox" ad tracking, and why you should
Google has rolled out "Privacy Sandbox," a Chrome feature first announced back in 2019 that, among other things, exchanges third-party cookies—the most common form of tracking technology—for what the company is now calling "Topics." Topics is a response to pushback against Google’s proposed...
205
Cosmic DE update: System76's new Linux desktop environment
Alex shares more progress on the work-in-progress COSMIC DE for Pop!_OS. This one’s got new mockups for you to poke around in!
206
Phoenix Dev Blog – Streams
LiveView's new Streams feature is set to be a game changer and yet easy to use at the same time. Chris McCord writes this dev blog post shining a light onto this new feature.
207
Remote code execution vulnerability in Google they are not willing to fix
This is a story about a security vulnerability in Google that allowed me to run arbitrary code on the computers of 50+ Google employees. Although Google initially considered my finding a serious security incident, later on, it changed its mind and stated that my finding is not, in fact, a vulnerability, but the…
208
Article 45 of eIDAS 2.0 will roll back web security by 12 years
The EU is poised to pass a sweeping new regulation, eIDAS 2.0. Buried deep in the text is Article 45, which returns us to the dark ages of 2011, when certificate authorities (CAs) could collaborate with governments to spy on encrypted traffic—and get away with it. Article 45 forbids browsers from...
209
Every Mastodon user has an RSS feed
The distributed social network Mastodon has grown to 12.8 million user accounts, supporting itself through user
210
Instant flood fill with HTML Canvas
TLDR: Demo is at , code is at . The Problem When building a website or app using HTML Canvas, it’s often a requirement to support a flood fill. That is, when the user chooses a colour and cli…