Last week, we released our first annual State of Open Source Security report. One of the discoveries the report mentions is that an analysis of around 433,000 sites found that 77% of them use at least one front-end JavaScript library with a known security vulnerability. In this post, we take a deep dive into that…
Recently, I reported a security issue in the new Firefox Screenshots feature (fixed in Firefox 56). This issue is remarkable for a number of reasons. First of all, the vulnerable code was running within the Web Extensions sandbox, meaning that it didn’t have full privileges like regular Firefox code. This code was…
A few months ago, I had the opportunity to try out several WebVR experiences for the first time, and I was blown away by the possibilities. Using just a headset ...
I've been thinking a lot about the social graph for awhile now: aggregating the graph, decentralization, social network portability, etc.
One unfortunate (albeit entirely predictable) consequence of making HTTPS certificates “fast, open, automated, and free” is that both good guys and bad guys alike will take advantage of the offer a…
No matter if you are a software developer, a copywriter or you are just writing an e-mail, you need to have in mind these text traps.
Programing in Clojure and ClojureScript
Visit the post for more.
Change is coming to MDN. In a recent post, we talked about updates to the MDN brand, and this time we want to focus on the upcoming design changes for ...
Tor Browser 7.0a4 is now available from the Tor Browser Project page and also from our...
Explore the Qt Blog for the latest insights on e.g. Qt Creator, your go-to source for cross-platform development tips and updates.
Now for queries containing sequences of 2-3 special characters such as [== vs ===] and [+=], Google will return results on the meaning of these sequences in programming …
Pair typefaces effectively: Categorize fonts by properties. Use 3×3 grid method to find combinations.
Neutrino is a tool which brings together the best parts of the modern JavaScript toolchain with the ease of zero upfront configuration. Built to let you hit the ground running, ...
Unless otherwise noted, changes described below apply to the newest Chrome Beta channel release for Android, Chrome OS, Linux, Mac, and Wi...
Shing Lyu's blog
Explore exciting job opportunities at Getaround. Join our international team revolutionizing carsharing and sustainable transportation. Apply today!
Read the latest about Microsoft Defender for Cloud Apps, and find helpful solutions from the digital security experts at Microsoft Security Blog.
Back in March, Rolf Weber wrote about a potential vulnerability in the WhatsApp protocol that would allow Facebook to defeat perfect forward secrecy by forcibly change users’ keys, allowing it—or more likely, the government—to eavesdrop on encrypted messages. It seems that this vulnerability is real: WhatsApp has the…
This guide will walk you through setting up Rust, WebAssembly, and Webpack to easily interoperate between low-level Rust code and…
The library for web and native user interfaces
If you’re considering an external display for your Mac, there’s a few important decisions to make. Apple doesn’t sell external displays any more, so you can’t just default to their wisdom. That’s an issue, because not all displays are well suited for Macs.
Which libraries are vulnerable to attacks and how to prevent them.
