6181
Sendy Is Insecure: How Not to Implement ReCAPTCHA
Sendy's reCAPTCHA implementation doesn't do anything.
Topics /
Web & Frontend
The most popular blog posts about web & frontend on Hacker News. 8,468 posts.
6182
Making the Internet Boring
I once overrode my own website blocker for 444 minutes. After that I stopped relying on willpower and started making the internet boring: app deletions, LeechBlock, grayscale mode, and a custom userscript.
6183
6184
WordPress Core to start using SQLite
This post is an update to the proposal for officially support SQLite in WordPress. The initial implementation was included in the Performance Lab plugin and then released as a stand-alone plugin. T…
6185
37signals Launches Haystack for Web Designers and Clients To Find Each Other
A few years ago we launched the 37signals Job Board to answer a question we heard all the time: “Do you know where we can find a programmer or a designer? We need to hire one but we don’t know where to find one.” Since then, over 5,700 jobs have been posted, and many positions hav…
6186
Mechanical sympathy for QR codes: making NSW check-in better
QR codes are now critical infrastructure here in NSW, Australia. Let's learn how to make them better.
6187
6188
Django Views – The Right Way
It is the result of mistakes made and lessons learned in a range of Django and Python projects over 15+ years.
6189
Hyperlink maximalism (2022)
I’m a hyperlink maximalist: everything should be a hyperlink , including everything that is hyperlinked by the author, everything that isn’t hyperlinked by the author, and perhaps even the hyperlinks themselves. Words should be hyperlinked, but so should be every interesting phrase, quote, name, proper noun…
6190
6191
Amber.js (formerly SproutCore 2.0) is now Ember.js (and released)
After we announced Amber.js last week, a number of people brought Amber Smalltalk, a Smalltalk implementation written in JavaScript, to our attention. After some communication with the folks behind Amber Smalltalk, we started a discussion on Hacker News [http://news.ycombinator.com/item?id=3335916] about what we should
6192
The Chrome Javascript editor can do hot swapping
Hot swapping is the process of replacing code while the application is running. It allows a developer to see changes immediately - no recompiling, no waiting on page reloads, and no clicking to get to the application state where the code was changed. Just save the file and you’ll see the changes. I would say hot…
6193
Effectively Managing Memory at Gmail Scale
While JavaScript employs garbage collection for automatic memory management, it is not a substitute for effective memory management in applications. JavaScript applications suffer from the same memory related problems that native applications do, such as memory leaks and bloat, yet they must also deal with garbage…
6194
Brute Force Incognito Browsing
Both Firefox and Chrome have a feature for creating temporary private browsing sessions. Firefox calls it Private Browsing and Chrome calls it Incognito Mode . Both work essentially the same way. A temporary browsing session is started without carrying over most existing session state (cookies, etc.), and no state…
6195
6196
Developer Tools Update – Firefox 22
This is the first in a series of posts published on or about the time a new Firefox version graduates from 'Nightly' status and becomes Firefox Aurora. We think that ...
6197
HTTP/2 Approved
After more than two years of discussion, over 200 design issues, 17 drafts, and 30 implementations, the HTTP/2 and HPACK specifications have now been approved by the IETF’s steering group for publication as standards-track RFCs.
6198
How to deploy your node app on Linux, 2016 edition
This time we do the work for you.
6199
6200
Migrating Away from Google Analytics
I switched away from Google Analytics to Plausible for a better user experience, privacy and performance
6201
Google Logo Ligature Bug
Jeffrey Yasskin recently pointed out an interesting security bug: The idea is, if you had registered googlelogoligature.net then Chrome on Android (and possibly other Google products) would have displayed it as Google.net, potentially tricking users into thinking they were really interacting with Google. To see how…
6202
6203
CSS: Absolutely positioning things relatively
Using CSS grid to render complex webpages responsively.
6204
Micro.blog launches new 'Studio' tier with video hosting
The core of Micro.blog’s mission is to make it easy for people to own their presence on the web. At first, it was a simple blog host that also
6205
The Rules of Margin Collapse
“Margin collapse” has a dastardly reputation, one of the trickier parts of CSS. Fortunately, it gets a lot easier once you learn a few rules! In this tutorial, we take a deep dive into the governing principles, and learn how to use them to our advantage.
6206
Powerful New Additions to the CSS Grid Inspector in Firefox Nightly
CSS Grid is revolutionizing web design. It’s a flexible, simple design standard that can be used across all browsers and devices. That's why we built CSS Grid Inspector. We’ve been ...
6207
The W3C asks for help finding Prior Art to two Apple Patents.
The W3C seeks information about access control systems available before October 2005 and content distribution systems before April 2006 that offer a viable solution that may apply to the use of access requests policy in Widgets . Such information could suggest ways to define a specification that can achieve the…
6208
SearchGPT Prototype
We’re testing SearchGPT, a temporary prototype of new search features that give you fast and timely answers with clear and relevant sources.
6209
6210
Cloudflare deploys protections against php2shell vulnerability
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers.