481
Qt for Android better than ever before
As you already know KDAB is the largest independent contributor to Qt code. Of course we didn't get lazy and we've added a lot of cool stuff to Qt 5.14.
482
Native image lazy-loading for the web
In this post, we’ll look at the new loading attribute which brings native <img> and <iframe> lazy-loading to the web!. For the curious, here’s a ...
483
484
Firefox Local Files Theft – Not Patched Yet
Recently, I was performing a research on Same Origin Policy attacks, I managed to realize that the la version of Firefox (currently 67) is vulnerable to local files theft attack (on any supported OS), due to improper implementation of Same Origin Policy for file scheme URIs. Let’s go over the PoC details then I will…
485
486
487
Google HTML/CSS style guide suggests omitting head and body tags
Style guides for Google-originated open-source projects
488
Stealing sensitive browser data with the W3C Ambient Light Sensor API (2017)
In this post we describe and demonstrate a neat trick to exfiltrate sensitive information from your browser using a surprising tool: your smartphone or laptop’s ambient light sensor. In short: 1. We provide background about the light sensor API and current discussions to expose it more broadly to websites.
489
Why I prefer objects over switch statements
A different approach to handle your conditions...
490
Building a hackable editor in the browser
Warning: All of this doesn’t really follow any best practices for working with html, css or javascript - on the contrary: what we will be doing may look horrible to some people, and rightfully so - so you may not want to try those things at work just yet.
491
492
Rethinking Files
In Unix, everything is a file. This is often viewed as a positive, but it's often a poor abstraction for many things. This discussion goes into some of the issues.
493
494
Using GoAccess for self-hosted web analytics
Intro With current hot topic of ditching Google services wherever and whenever we can, we often forget about that little piece of JavaScript code embedded in …
495
496
Google – polling like it's the 90s
A technical review of the live score feature in Google search results, delivered with some surprisingly old-school tech from the 90s.
497
498
New CSS Features in Firefox 68
Firefox 68 landed earlier this month with a bunch of CSS additions and changes. In this blog post Rachel Andrew takes a look at some of the things you can ...
499
An HTML attribute potentially worth $4.4M to Chipotle
I recently found myself racing to fill out Chipotle’s online order form before my mother could find her credit card. In the process, I discovered a bug that could cost Chipotle $4.4 million annually. My parents are retired. They continue to try to pay for meals. I don’t want them…
500
AirPods Pro Page Performance
foobartel Ltd. - Web Design & Development
501
WordPress 5.2: Mitigating Supply-Chain Attacks
We wrote a cryptography library entirely in PHP to make your WordPress site secure against supply-chain attacks.
502
The Evolution of Web Design (2016)
The Evolution Of Webdesign is a collection and imitation of Webdesign Trends from 1991 to 2020.
503
Spoofing Google Search Results
By adding two parameters to any Google Search URL, you can replace search results with a Knowledge Graph card of your choice. A malicious user can use this to generate false information or ‘fake news’.
504
Stealing Downloads from Slack Users
Stealing Downloads from Slack Users I’m going to go over an interesting feature abuse that could have been used to steal and even manipulate downloads from Slack users using the Slack desktop app …
505
Let's Clarify Some Misunderstandings Around Sign in with Apple
tl;dr This is a good move for users in the iOS ecosystem, and is primarily designed as an alternative for apps that currently use "Sign in with [Facebook/Twitter/Google]" to avoid leaking sensitive user info. Yes, Apple is entering the ...
506
339 Bytes of Responsive CSS
7 CSS declarations and a/an (optional) font import is all it takes to change a drab basic website to a minimalistic easy to read piece of beauty.
507
The Vision for Decentralized Web
created by tautvilas, powered by dpage
508
Serving Vue.js Apps on GitHub Pages
I wanted to share a pretty simple setup on how to serve a Vue.js app using Github Pages. I’m writing this because I had to search around online for awhile...
509
510
Ways to leak your data: apps’ circumvention of the Android permissions system
50 ways to leak your data: an exploration of apps’ circumvention of the Android permissions system Reardon et al., USENIX Security Symposium 2019 The problem is all inside your app, she said to me …