New Khan Academy Exercise Framework Is Live
Today we’re pushing live a complete rewrite of the Khan Academy Exercise framework ( live demo ).
CNN, NYTimes, Mashable all vulnerable to XSS
Pretending innocence, I ask why all these high profile websites have their homepages covered in spinning images? CNN (screenshot) The New York Times (screenshot) Mashable (screenshot) Fox News (screenshot) Okay, obviously enough, I’m messing with them. But how can I do that? The answer is cross site scripting (“XSS”)…
IOS RAGE rendered with WebGL
As promised, here's the new WebGL demo that I've been working on! I won't be posting a live version this time (watch the video to find out w...
Flash is dead. Long live the internet.
When I was in high school I didn’t own a computer. I used to read the occasional Popular Mechanics magazine and would linger for a while on the articles about the internet or HTML, fascinated by this new technology that I had barely even used. I don’t know why, but for some reason I’ve always been drawn toward…
JS is Assembly Language for the Web: Brendan Eich, Crockford, & others comment
UPDATE: Check out the Podcast I did with Erik Meijer on Hanselminutes this week ...
Django Advice
For the past year and a half or so I've been working full-time at Dumbwaiter Design doing Django development. I've picked up a bunch of useful tricks along the way that help me work, and I figured I'd share them.
Speeding up Rails startup time
In which I provide easy instructions to try a new patch that drastically improves the start up time of Ruby applications, in the hope that with wide support it will be merged into the upcoming 1.9.3 release. Skip to the bottom for instructions, or keep reading for the narrative.
The relationship between Readability and Instapaper
I know it’s bad form to mention your competitors, but I’ve been asked about Readability’s announcement enough today that it’s more of a charade not to talk about it, especially since a lot of people are under the wrong impression.
Sane RSS usage
The first time I went without RSS in August, I simply went around to three or so of what I consider to be the best sites to get the latest news from. I combined that with my usual e-mail communications … and my regular scans of Twitter in order to figure out what was going on during the day. It was stress-free, and I…
CSS3 Isometric text
not much at the moment
Understanding "Prototypes" in JavaScript
For the purposes of this post, I will be talking about JavaScript objects using syntax defined in ECMAScript 5.1. The basic semantics existed in Edition 3, but they were not well exposed. A Whole New Object In JavaScript, objects are pairs of keys and values (in Ruby, this structure
Electronic Arts Hates Strong Passwords
EA does not allow passwords longer than 16 characters or passwords that contain symbols. However passwords like cool, pass and love are totally acceptable.
Neat trick for getting private info for Facebook, GMail, Twitter and Digg users
Hidden img and script tags with onload and onerror let any site tell if you're logged into GMail, Facebook, Twitter or Digg. Google called it expected.