61
62
63
The Line of Death
When building applications that display untrusted content, security designers have a major problem— if an attacker has full control of a block of pixels, he can make those pixels look like anything…
64
Washington Post integrates Talk – Mozilla’s open-source commenting platform
To engage readers, build community, and strengthen journalism, Mozilla’s open-source commenting platform will be integrated across washingtonpost.com
65
Web Scraping: Bypassing “403 Forbidden,” captchas, and more
The full code for the completed scraper can be found in the companion repository on github. Introduction I wouldn’t really consider web scraping one of my hobbies or anything but I guess I sort of do a lot of it.
66
The .feedback scam
Do you have feedback you'd like to give to Google, Facebook, StackOverflow, Inc., or Gandi? Now there's a website that will collect that feedback. Or... not.
67
68
iOS 11's Misleading "Off-Ish" Setting for Radios Is Bad for User Security
Turning off your Bluetooth and Wi-Fi radios when you’re not using them is good security practice (not to mention good for your battery usage). When you consider Bluetooth’s known vulnerabilities, it’s especially important to make sure your Bluetooth and Wi-Fi settings are doing what you want them...
69
On React and WordPress
Big companies like to bury unpleasant news on Fridays: A few weeks ago, Facebook announced they have decided to dig in on their patent clause addition to the React license, even after Apache had sa…
70
71
72
Replacing Disqus with GitHub Comments
I considered removing comments from the blog after looking into Disqus load-time behaviour and seeing what it was imposing on visitors.
73
Flexbox and Grids: your layout’s best friends
We decided to debunk the myths around Flexbox & Grids in order to show you the power of these two technologies working together.
74
Super Tiny Website Logos in SVG
You may not realise it, but bandwidth is expensive. It costs you time, money, and battery power whenever you download a file larger than it needs to be. That's why I've become a little bit obsessed with SVG - Scalable Vector Graphics. They're the closest thing to magic that the web has when it comes to image…
75
A Classic Extension Reborn: Tree Style Tab
Yuki “Piro” Hiroshi is a trailblazer and a true do-it-yourselfer. Whenever the Tokyo-based programmer gets irritated with any aspect of his browsing experience, he builds a workaround for himself and ...
76
77
The Google Analytics Setup I Use on Every Site I Build
Google Analytics is a powerful yet quite complicated tool. And unfortunately, the truth is most people who use it don’t reap its full benefits. There’s a lot of excellent and free content out there that explains how to use Google Analytics, but most of it is rather narrowly focused on use cases that primarily apply to…
78
Practical Color Theory for People Who Code
Hi! I'm Natalya! I'm a classically trained fine artist who spent 6 years teaching people how to paint, draw, and grow their creativity. I am now a front end developer, and I love writing code as much as I love painting. I have a degree in Studio Art, a bachelor's in Developmental Psychology, and a master's degree in…
79
Firefox 52 released
We'd also like to extend a special thank you to all of the new Mozillians who contributed to this release of Firefox!
80
81
JSON Feed
We — Manton Reece and Brent Simmons — have noticed that JSON has become the developers’ choice for APIs, and that developers will often go out of their way to avoid XML. JSON is simpler to read and write, and it’s less prone to bugs. So we developed JSON Feed, a format similar to RSS and Atom but in JSON. It reflects…
82
83
Why I left Medium and moved back to my own domain
When I’ve started writing my stories on Medium it felt really good. Medium was the perfect "medium" to share your thoughts with all your followers. However in couple of years it changed a lot and I didn’t liked those changes. What were these? 1. Setting up a domain
84
How JavaScript works: inside the V8 engine
PlaybookUX is an all-in-one software that allows you to recruit, conduct and analyze both qualitative and quantitative research, enhanced by AI.
85
86
Rust: Enable WebAssembly backend by default
Yesterday the Pull Request 46115: "rustbuild: Enable WebAssembly backend by default" was merged into Rust master. With the Nightly build from that night, the wasm32-unknown-unknown target is natively available.
87
Firefox 57 delays requests to tracking domains
Firefox Quantum - version 57 - introduced number of changes to the network requests scheduler. One of them is using data of the Tracking Protection database to delay load of scripts from tracking domains when possible during the time a page is actively loading and rendering - I call it tailing. This has a positive […]
88
Malicious Subtitles Threaten Kodi, VLC and Popcorn Time Users
Check Point researchers revealed a new attack vector which threatens millions of users worldwide – attack by subtitles. By crafting malicious subtitle %
89
HTTP is obsolete. It's time for the Distributed Web (2015)
Early this year, the Internet Archive put out a call for a distributed web . We heard them loud and clear.
90
Chrome Won
Disclaimer: I worked for 7 years at Mozilla and was Mozilla’s Chief Technology Officer before leaving 2 years ago to found an embedded AI startup. Mozilla published a blog post two days ago h…