61
Obtaining Wildcard SSL Certificates from Comodo via Dangling Markup Injection
A Hacker's Blog of Unintended Use and Insomnia.
62
63
Google’s AMP is a gilded cage
AMP is Google's attempt to re-fight the transcoding wars of the early 2000s. It is actively dangerous to the web ecosystem, helps disseminate propaganda, and is disliked by many users. If, like me, you made the mistake of trying out AMP on your website - you're in a tricky position if you try to remove it. Google…
64
65
Serverless Sync in Web Apps Using Bit Torrent
This post explores using WebTorrent for serverless data synchronization in web apps, demonstrated by modifying the Voice Memos PWA. The goal was to enable data sharing between devices without a backend server. The solution involves generating magnet URLs that allow peer-to-peer data transfer via WebTorrent. The demo…
66
A SoundCloud client in React and Redux
Build a React + Redux SoundCloud Client. It is a huge tutorial where you build an example real world application. Learn React JS and Redux along the way. Consume the SoundCloud API, login and interact...
67
Falsehoods programmers believe about video
Inspired by numerous other such lists of falsehoods. Pretty much every video player in existence gets a good chunk if not the vast majority of these wrong. (Some of these also/mostly apply to users, though)
68
MathML is a failed web standard
Since I'm expecting more than my 1 2 regular readers to read this, let me add a preface. I've been managing the MathJax project for 4 years now. In the last two years, I've also been consulting for publishers regarding math-related workflows, in particular TeX-to-XML and XML-to-web, both on the back and front-end. Not…
69
Twitter's missing manual
I mentioned recently, buried in a post about UI changes, that Twitter’s latest earnings report included this bombshell: We are going to fix the broken windows and confusing parts, like the .@name syntax and @reply rules, that we know inhibit usag
70
Learn Raw React – No JSX, No Flux, No ES6, No Webpack
Learn React from the ground up, without worrying about JSX, Flux, ES6, Webpack, etc.
71
72
A technical guide to SEO
Complete technical SEO checklist covering HTTPS, meta tags, sitemaps, robots.txt, page speed, duplicate content, and Google Webmaster Tools setup.
73
Pencil: A Microframework Inspired by Flask for Rust
Just create the static folder under your application root path, it just works. Now you can visit http://localhost:5000/static/example.png and get your file. You can customize the static folder and static url path.
74
Let’s replace Twitter with something much better
(There is also a Russian language version of this post available, translated and published by SoftDroid on 2017-04-12.) I love Twitter. I love that by following certain people, my timeline has become a stream of interesting and entertaining information. I love that sometimes I am able to fit my little publication just…
75
YouTube has apparently reinstated RSS feeds
Well if there's something I wasn't expecting to find tonight, it was that apparently YouTube has decided to allow users to follow channels via RSS again , and unlike the last few years, this time it actually looks to be officially supported!
76
The Basics of Web Application Security
Security is both very important and often under-emphasized. While many targeted techniques help, there are some basic clean code habits which every developer can and should be doing
77
More Chinese Mobile UI Trends
Another look through mobile UI design patterns in the Middle Kingdom.
78
79
Our best practices are killing mobile web performance
Web performance rules invented for desktop web access need to be revised for the mobile era.
80
81
My url isn't your url
When I started the precursor to the curl project, httpget, back in 1996, I wrote my first URL parser. Back then, the universal address was still called URL: Uniform Resource Locators. That spec was published by the IETF in 1994. The term "URL" was then used as source for inspiration when naming the tool and … Continue…
82
Why I stopped using StartSSL (Hint: it involves a Chinese company)
StartSSL uses https://auth.startssl.com/ for the front-end to access to their PKIs (login to the PKI, create, revoke certificates...). It's the Core of their service and the critical part of their infrastructure.
83
84
Undocumented Facebook API to identify friends in photos
So last week I was casually browsing through Facebook feed and looking at some random photo posted by a friend. So hovering over the pictur...
85
86
A Simple Request: VLC.js
Almost five years ago to today, I made a simple proposal to the world: Port MAME/MESS to Javascript. That happened. I mean, it cost a dozen people hundreds of hours of their lives…. and there…
87
Nginx: a caching, thumbnailing, reverse proxying image server
A month or two ago, I decided to remove Varnish from my site and replace it with Nginx's built-in caching system . I was already using Nginx to proxy to my Python sites, so getting rid of Varnish meant one less thing to fiddle with. I spent a few days reading up on how to configure Nginx's cache and overhauling the…
88
HTML Kong
There are two things I’ve always wanted to try in HTML : generating a photorealistic image using CSS , and creating an interactive game without the need for JavaScript. HTML Kong is the end result of those two ambitions – a reproduction of the Game & Watch video game, Donkey Kong , using just HTML and CSS .
89
90