361
Topics /
Web & Frontend
The most popular blog posts about web & frontend on Hacker News. 4,614 posts.
362
363
Should I use JWTs for authentication tokens?
Let’s talk about what we’re talking about. JWT stands for JSON Web Tokens, a reasonably well defined standard for authenticated tokens. Specifically they have a header with format information, a payload, and a signature or message authentication code. The core idea is that whoever has the corresponding verification…
364
I’ve banned query strings
I don’t like people adding tracking stuff to URLs. Still less do I like people adding tracking stuff to my URLs.
365
TIL: You can access a user’s camera with just HTML
The HTML capture attribute is interesting because it allows you to activate a user's camera with just HTML. This article covers it in more depth.
366
367
Nice things with SVG
Exploring SVG and its visual effects applications
368
369
How many layers of UI inconsistencies are in Windows 11?
Hello and happy new year! It’s 2023, and Windows 11 is finally a mature operating system that most people would be happy to use. Sun Valley has finally arrived, and it’s all about a lon…
370
HTTPS on Stack Overflow: The End of a Long Road
Today, we deployed HTTPS by default on Stack Overflow. All traffic is now redirected to https:// and Google links will change over the next few weeks. The ac...
371
I discovered a browser bug
I accidentally discovered a huge browser bug a few months ago and I'm pretty excited about it. Security engineers always seem like the "cool kids" to me, so I'm hoping that now I can be part of the club, and y'know, get into the special parties or whatever.
372
Zero-Width Characters: Invisibly fingerprinting text
In early 2016 I realized that it was possible to use zero-width characters, like zero-width non-joiner or other zero-width characters like the zero-width space to fingerprint text. Even with just a single type of zero-width character the presence or non-presence of the non-visible character is enough bits to…
373
Brave and Firefox to intercept links that force-open in Microsoft Edge
Brave and Firefox implement support for the microsoft-edge: URL scheme. Brave to hijack Bing search links. Plus, the history of all this anti-competitive crap.
374
Stop pushing the web forward
Fair warning. You’re going to hate this one. I want to stop pushing the web forward for a while. I want a moratorium on new browser features for about a year or so.
375
376
You block ads in your browser, why not in your city?
There are defences against badvertising on the internet, and you should use them. But there are defences against bad advertising in real life too, and you should use them too. Put badvertising in its place: nowhere!
377
378
Legends of the Ancient Web (2017)
This is the text version of a talk I gave on May 24, 2017, at the Front Trends conference in Warsaw.
379
Hosting SQLite Databases on GitHub Pages
I was writing a tiny website to display statistics of how much sponsored content a Youtube creator has over time when I noticed that I often write a small tool as a website that queries some data from a database and then displays it in a graph, a table, or similar. But if you want to use a
380
Self hosting in 2023
Why I've decided to host my page on my own in home server and how community is building amazing tools like Coolify.
381
The Line of Death
When building applications that display untrusted content, security designers have a major problem— if an attacker has full control of a block of pixels, he can make those pixels look like anything…
382
Is this the end of social networking?
Scott Rosenberg , in a piece with the title “Sunset of the social network” , writes at Axios:
383
I’ve removed Disqus. It was making my blog worse
Disqus turned my clean blog into an ad-riddled mess. Here’s why I pulled the plug—for your privacy and reading sanity
384
Web Scraping: Bypassing “403 Forbidden,” captchas, and more
The full code for the completed scraper can be found in the companion repository on github. Introduction I wouldn’t really consider web scraping one of my hobbies or anything but I guess I sort of do a lot of it.
385
The Future of JavaScript MVCs
often devs still approach performance of JS code as if they are riding a horse cart but the horse had long been replaced with fusion reactor
386
387
Google and Mozilla are failing to support browser extension developers
It is a regular occurrence to hear about open source developers selling their browser extensions, only for their users to be exploited later on by the new owners. Purchase offers for browser extensions usually range between $0.1 and $0.3 per user, depending on factors such as the geographical distribution of users…
388
Color: From Hex codes to Eyeballs
If you're curious about rainbows, colorimetry, gamma encoding, and experiments run in the late 1920s, then this is the post for you!
389
An iframe from googlesyndication.com tries to access the camera and microphone
The last thing we want is for an advertising network to access the Camera or Microphone on our computer. But, while looking for something else, I stumbled upon messages in the Safari JavaScript console saying that an iframe loaded from safeframe.googlesyndication.com tried to do exactly that.
390
HTML is the Web
In which I lament the fact that many frontend Web engineers don't understand the end product of their work, HTML.