Topics /
Web & Frontend
The most popular blog posts about web & frontend on Hacker News. 8,467 posts.
Announcing Amber.js
A little over a year ago, I got my first serious glimpse at SproutCore, the JavaScript framework Apple used to build MobileMe (now iCloud). At the time, I had worked extensively with jQuery and Rails on client-side projects, and I had never found the arguments for the "solutions for
Googlebot’s JavaScript random() function is deterministic
I was conducting some experiments on how Googlebot parses and renders Javascript, and I came across a couple of interesting things about the way it does so. The first…
Discord Desktop App RCE
A few months ago, I discovered a remote code execution issue in the Discord desktop application and I reported it via their Bug Bounty Prog...
Ember.js 1.0 Released
Today, we're excited to announce the final release of Ember.js 1.0. The first commit to the repository that would become Ember.js happened on April 30th, 2011, almost two and...
Instagram's URL Blackhole
While exploring the file system on a jailbroken iPhone 6s, I stumbled upon an interesting folder:
Amazon follows Google and Apple and bans system-wide ad blockers on app store
AdGuard is the best way to get rid of annoying ads and online tracking and protect your computer from malware. Make your web surfing fast, safe and ad-free
Redefining what a map can be with new information and AI
Here's a snapshot of how we're using AI to make Maps work better for you with a number of updates coming this year.
Web components will outlive JavaScript frameworks
If we're building things that we want to work in five or ten or even 20 years, we need to avoid dependencies and use the web with no layers in between.
Towards a JavaScript Binary AST
In this blog post, I would like to introduce the JavaScript Binary AST, an ongoing project that we hope will help make webpages load faster, along with a number of other benefits. A little background Over the years, JavaScript has grown from one of the slowest scripting languages available to a high-performance…
Lessons learned as a React contractor
I didn’t know I was looking for it, but when I found it something clicked.
Google+ Hacker News Circle makes Search plus Your World Amazing
When Google+ first launched, I hustled my way to get an early invite so that I could grope the shiny UI touches like circles, and oogle the sexy tech features like Hangouts, but up until now, I...
AWS AppSync – Build data-driven apps with real-time and off-line capabilities
September 8, 2021: Amazon Elasticsearch Service has been renamed to Amazon OpenSearch Service. See details. In this day and age, it is almost impossible to do without our mobile devices and the applications that help make our lives easier. As our dependency on our mobile phone grows, the mobile application market has…
Cool URIs don't change (1998)
There are no reasons at all in theory for people to change URIs (or stop maintaining documents), but millions of reasons in practice.
How did LastPass master passwords get compromised?
LastPass accounts are under attack. I look into how user’s master passwords might have leaked.
The indieweb doesn't need to “take off”
There's a corner of the Internet where people have been reclaiming their digital independence by hosting their own websites and promoting the idea of owning your own content. It's called the IndieWeb. The community has its own website , IRC channels, social media presence, etc. as well
300ms tap delay removed on Chrome for Android
Every click interaction in mobile browsers is hampered with a 300ms delay, but that's gone in Chrome 32 for mobile-optimized sites!
Let's Encrypt now supports ACME-CAA: closing the DV loophole
Today, Let's Encrypt announced that they are enabling an extension to DNS CAA records known as ACME-CAA ( RFC 8657 ). This came as a surprise to me, but a very pleasant one, since I wrote the ACME-CAA specification back in 2016 with Let's Encrypt in mind, and it was finally published as RFC 8657 back in 2019. To my…
Some killjoys have removed the blink tag from Firefox
Some killjoys have removed the <blink> tag from Firefox. Dropped blink effect from text-decoration: blink; and completely removed <blink> element. Of course, <blink> still works on my sites. And with proper MILSPEC 3 units on, 1 unit off timing, as is right and proper, and which I believe the non-Unix versions of…
Why you should not pirate Google’s geo APIs
Picture by Scott Vandehey This morning I ran across a wonderful open source project called “Crime doesn’t climb”, analyzing how crime rates vary with altitude in San Francisco. Th…
Mozilla Advances JPEG Encoding with Mozjpeg 2.0
We’re pleased to announce the release of mozjpeg 2.0. Early this year, we explained that we started this project to provide a production-quality JPEG encoder that improves compression while maintaining ...
New layouts with CSS Subgrid
Subgrid allows us to extend a grid template down through the DOM tree, so that deeply-nested elements can participate in the same grid layout. At first glance, I thought this would be a helpful convenience, but it turns out that it’s so much more. Subgrid unlocks exciting new layout possibilities, stuff we couldn’t do…
Why does that QR Code go to justinsomnia.org?
Back in 2007 I stumbled upon something called a QR Code . It was a neat two-dimensional barcode that encodes textual information visually—with URLs being a promising application for the emerging smartphone market (thanks to the release of the iPhone that year). So I did what any self-respecting personal blogger would…
An XSS on Facebook via PNGs and Wonky Content Types
Bug Bounty & Application Security