Parsing JSON is a Minefield
[2016-10-26] First version of the article [2016-10-28] Presentation at Soft-Shake Conference, Geneva ( slides ) [2016-11-01] Article and comments in The Register [2017-11-16] Presentation at Black Alps Security Conference, Yverdon ( slides ) [2018-03-09] Presentation at Toulouse Hacking Conference ( slides )…
Contextual Identities on the Web
The Containers Feature in Firefox Nightly enables users to login to multiple accounts on the same site simultaneously and gives users the ability to segregate site data for improved privacy and security. We all portray different characteristics of ourselves in different situations. The way I speak with my son is much…
Firefox Focus – a free, fast and easy to use private browser for iOS
Today, we’re pleased to announce the launch of Firefox Focus – a free, fast and easy to use private browser for iOS. We live in an age where too ma
Google May Be Stealing Mobile Traffic
Update 10/17/2016 6:30pm: You can read a response from the tech lead of the AMP Project for Google, in the comment area. Update 11/01/2016 10:40pm: After learning more about AMP, it became clear that…
Svelte – A UI framework that compiles into tiny standalone JavaScript modules
You can’t write serious applications in vanilla JavaScript without hitting a complexity wall. But a compiler can do it for you.
Servo Nightly Builds Available
Try out the new Servo nightly builds
Saving the Internet 2000TB a Day: Fixing Font Awesome’s Fonts
Front-end antics and typographic mischievousness
A few HTML tips
A while ago I wrote an article with some CSS tips, now it’s time to give some polish to our HTML! In this article I’ll share some tips and advice ...
Introducing the Firefox debugger.html
debugger.html is a modern JavaScript debugger from Mozilla, built as a web application with React and Redux. This project was started early this year in an effort to replace the ...
Update on Multi-Process Firefox
About four months ago, we launched multi-process Firefox to a small group of Firefox 48 users. Shortly after the carefully measured roll-out, we increased to approximately 50% of our user ...
Gone in Six Characters: Short URLs Considered Harmful for Cloud Services
[This is a guest post by Vitaly Shmatikov, professor at Cornell Tech and once upon a time my adviser at the University of Texas at Austin. — Arvind Narayanan.] TL;DR: short URLs produced by bit.ly, goo.gl, and similar services are so short that they can be scanned by brute force. Our scan discovered a large […]
A Quantum Leap for the Web
Over the past year, our top priority for Firefox was the Electrolysis project to deliver a multi-process browsing experience to users…
Wikipedia and Internet Archive partner to fix 1M broken links on Wikipedia
More than one million formerly broken links in the English Wikipedia have been updated to archived versions from the Wayback Machine, thanks to a partnership between the Internet Archive, volunteer…
Google is Forcing Routebuilder to Shut Down
TLDR: Google suddenly claims a “terms of service” violation on a route plotting site that has been built on the Maps API for a decade.
Choose Firefox Now, or Later You Won't Get a Choice (2014)
Robert O'Callahan. Christian. Kiwi. Software guy. All content human-authored unless otherwise noted.
HyperDev – Developer Playground for Full-Stack Web Apps
One more thing… It’s been awhile since we launched a whole new product at Fog Creek Software (the last one was Trello, and that’s doing pretty well). Today we’re announcing the public beta of Hyper…
Xplain – Explaining X11 for the rest of us
The goal of Explanations is to try to allow people to play with fun parts of computers. Graphics, compression, audio. The tagline is my biggest inspiration: "Play, don't show", riffing off the typical "Show, don't tell" rule of writers and authors everywhere. Why bother giving a diagram when I give you an inspector…
Async/await support in Firefox
Support for async/await has been added in the Nightly build from the 31st of October (bug #1185106). Great stuff! Time to start removing those JavaScript transpilers from your experimental projects, ...
How it feels to learn JavaScript in 2016
No JavaScript frameworks were created during the writing of this article.
Gmail Will Warn If Message Is Not Authenticated/Encrypted
Making email safer for you with two new security features in Gmail on the web.
How I could have hacked any Facebook account
Note: This is being published with the permission of Facebook under the responsible disclosure policy. The vulnerability is now fixed. ...
Let's Encrypt has issued its first million certificates
At 9:04am GMT today, the Let's Encrypt Certificate Authority issued its millionth certificate. This is an amazing success, coming only 3 months and 5 days since a beta version of the service became publicly available. We're very excited to be building a more secure and fully encrypted future for...
Introducing Webpack Dashboard
Analysis for enterprise leaders from Nearform on AI-native delivery, spec-driven development, AI ROI, governance and modernisation.
Yoga: A cross-platform layout engine
Visit the post for more.