How widely used are security-based HTTP response headers?
In this blog I look at how widespread the usage of common security based HTTP response headers are in the Alexa Top 1 Million most visited sites.
Why you should wait on upgrading to .Net 4.6
Update (August 11th): A patch for this bug has been released by Microsoft. Here’s their update to the advisory: We released an updated version of RyuJIT tod...
Why Web Pages Suck
Everyone complains about web pages that suck, but the reality is that it is advertisers who call the shots. This should, at a minimum, put Facebook’s Instant Articles and Apple’s News a…
Invisible Click Tracking Using “Empty” UTF-8 Characters
Have a look at this URL linking to this post: https://kaspars.net/blog/invisible-click-tracking Notice any tracking variables? Me neither! But check out the HTTP request and response in the network inspector of your browser -- it is redirecting to the "same" URL: URL encoded special characters in the browser console…
Browser Engines 2015: Commit Rates and Active Developer Counts
I used to work as a developer in the “core” group at Opera that developed thePresto web engine. During this period, I often wondered just how many developers...
Do you really know why you prefer REST over RPC?
A few weeks ago I’ve seen an interesting flock of tweets initiated by this question: This question and the tweets that followed put my brain on quite an animated discussion…
Links as originally imagined were a separate layer of annotation on documents
There’s a follow-up to this article, now, which explains the federated wiki angle to this more clearly.. “Everyone here will of course say they are carrying on his work, by whatever twi…
What Comes After MVC
Rails apps start out quickly and beautifully, but after a year features are a struggle, tests are slow, developers are grinding, and stakeholders are unhappy. “Skinny controllers and fat models” ha...
WebRTC file sharing broker using Elixir Phoenix
WebRTC was created primarily for video and voice communication but it has the API to send raw binary data between two browsers as well. This opens up a lot of opportunities to create more peer to peer web application which are supported by modern browser. There are already a lot
Streams: Mail 3.0 concept
Introducing concept of Streams, aiming to fix most of email-as-a-medium flaws
HTTP/2 for TCP/IP Geeks
I attended a TCP/IP Geeks Stockholm meetup yesterday and did a talk about HTTP/2. Below is the slide set, but as usual it might not be entirely self explanatory... HTTP/2 - for TCP/IP Geeks Stockholm from Daniel Stenberg
ElixirConfEU Keynote – Phoenix Takes Flight [video]
I’m Chris McCord, a programmer with a passion for science and building things. I spend my time crafting the Phoenix Framework, working with …
Double-clicking on the Web
Here's a usability feature for the web: disable double-clicks on links and form submits. Before you think I'm a complete idiot, allow me to talk some sense into …
Getting started with Meteor and React
A mid-depth cap with classic style for any occasion, this Nike Club Cap comes in smooth cotton twill that's been softly washed for casual, daily comfort. Soft and unstructured, the precurved bill makes for easy styling, and the adjustable back-strap lets you find the right fit. Nike Hat Size 6 1/2 6 5/8 6 3/4 6 7/8 7…
Lisp for the Web, Part III
This piece is about how to build a modern web application with Common Lisp in the backend, from scratch.