Captchas are Becoming Ridiculous
I am a software engineer based out of Seattle, WA
I am a software engineer based out of Seattle, WA
Today I am going to publicly disclose a critical vulnerability I have found during my research in PayPal, This vulnerability enabled me to completely bypass the CSRF Prevention System implemented by PayPal, The vulnerability is patched very fast and PayPal paid me the maximum bounty they give ;).
Heartbleed is a catastrophic bug in OpenSSL: “The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of…
At Dropbox, security is our highest priority. Find out how Dropbox secures your files and data, and why millions of people trust us with what matters most.
My wife likes to set reminders for herself in Google Calendar. Recently, she added a note to her personal Google Calendar reading "Email alice@example.com to discuss pay rise" and set the date for a few months from now. She'd had a discussion with her boss, Alice, and they'd agreed to talk about salary later in the…
Lotus is a complete web framework for Ruby with a strong emphasis on object oriented design and testability. If you use it, you employ less DSLs and more objects, zero monkey-patching, separation of concerns between MVC layers. Each library is designed to be small, fast and testable.
Why HTML/CSS is broken and how to fix it.
programming, philosophy, history, internet, startups
Let me open with an apology to John Gruber for my previous blog post. We’ve been working on the Standard Markdown project for about two years now. We invited John Gruber, the original creator of Markdown, to join the project via email in November 2012, but never heard back.
CSS, a language for specifying visual appearance on the web, is … so complex that it has never been implemented correctly; yet, successive versions specify even more complexity. At the same time, it is so underpowered that many elementary graphic designs are impossible or prohibitively difficult, and…
There’s some really cool stuff going on on the ASP.NET and Web Tools team. The ...
These documents make the original specification for HTTP/1.1 obsolete . As a HTTP geek, this is a big deal.
It’s not an interface adjustment or tweak. It’s not a bug fix. It’s a complete re-envisioning of Firefox’s user experience, and it’s been brewing for the past five years.
Stop writing Javascript frameworks. Translations: Chinese Japanese Russian Here's the talk, based on this essay, that I gave at OSCON 2015. [Slides] The 100-line templating library presented as a Gist has been cleaned up, documented, and published as the Stamp library. JavaScript frameworks seem like death and taxes…
Free yourself from the chains of jQuery by embracing and understanding the modern Web API and discovering various directed libraries to help you fill in the gaps.
The Screen Shotgun, as mentioned before, is continuing its never-ending quest to play tens of thousands of games and programs, take screenshots, and upload them into the Internet Archive. Like any …
Script-injected scripts block on CSS and delay script execution. Their era has passed, and we now have a much better, cleaner, and faster solution: add an async attribute to your script tags.
After reading countless articles about the wonders of Go, I wanted to learn more. But, learning a new language— I mean really learning it, not just getting familiar with the general capabilities and syntax—is hard. I'm sure there are tons of books that would purport to teach me all about it, but there is no substitute…
I love Wikipedia, but too often the articles are just not that easy to read. It’s not that my English isn’t good enough. My English good. There is Simple English Wikipedia, but it doesn’t cover as many topics and it’s not as thorough.
Internet History The Internet from every angle has always been a house of cards held together with defective duct tape. It's a miracle tha...
Scroll-based interaction is incredibly popular for interactive storytelling . There are many compelling reasons for this, yet scrolling is surprisingly nuanced and easy to break. So here are five rules for employing scrolling effectively.
wingolog: article: generators in firefox now twenty-two times faster