151
Turn your site into a place people can bump into each other
Releasing Town Square. Bring back the feeling that real people are browsing your site with you.
152
153
How I use HTMX with Go
My new book guides you through the start-to-finish build of a real world web application in Go — covering topics like how to structure your code, manage dependencies, create dynamic database-driven pages, and how to authenticate and authorize users securely .
154
New Apple Silicon M4 and M5 HiDPI Limitation on 4K External Displays
A regression in external display support on Apple Silicon M4/M5 generation chips prevents full HiDPI modes on 4K monitors, limiting users to either blurry non-HiDPI or reduced workspace HiDPI.
155
I Stored a Website in a Favicon
Words from me as developer, student and human.
156
A simple web we own
Today, the Web and Internet are owned and controlled by large for-profit corporations and a few governments 1 . Corporate ownership combined with government policies has left us as tenant and product. It has given us a surveillance economy and enshittification 2 .
157
Instagram's URL Blackhole
While exploring the file system on a jailbroken iPhone 6s, I stumbled upon an interesting folder:
158
Gwtar: A static efficient single-file HTML format
Gwtar is a new polyglot HTML archival format which provides a single, self-contained, HTML file which still can be efficiently lazy-loaded by a web browser. This is done by a header’s JavaScript making HTTP range requests. It is used on Gwern.net to serve large HTML archives.
159
Charts built for Chat
We're open sourcing dbt Charts, a declarative language for dashboards, so that even the dashboards you build by chatting with an agent can be governed.
160
Subscription bombing and how to mitigate it
How bots used our sign-up and forgot password pages to bomb real people's inboxes, and what we did to stop it. A practical guide to subscription bombing for founders and developers who think CAPTCHA is an "I'll do it later" task.
161
Office.eu launches as Europe's sovereign office platform
Office.eu launches in The Hague as a 100% European alternative to Microsoft 365 and Google Workspace, built on open-source technology and European infrastructure.
162
Better HTTP/1 connection reuse in Go 1.27
Go 1.27 includes a change to the HTTP client that can make programs sending many sequential HTTP/1 requests significantly faster.
163
Glassworm is back: A new wave of invisible Unicode attacks hits repositories
The Glassworm supply chain attack is back. Researchers uncovered malware hidden in invisible Unicode characters across 150+ GitHub repositories, plus npm packages and VS Code extensions.
164
Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
The vulnerability has been fixed as of July 7, 2026, but the exploit was simple, and hidden email addresses may still be in third-party logs.
165
I added a Bluesky comment section to my blog
How I embedded replies from Bluesky directly on my site.
166
15 Years of Forking
Today marks 15 years of Waterfox!
167
RSS feeds send me more traffic than Google
Yeah yeah, I know, data-point of 1. I recently read Susam's blog post where they said that "most of the traffic to my personal website still comes from web feeds" - I wondered if that was true for my site. I've been writing this blog for a while. I've never much bothered with "aggressive" SEO - I have a fairly…
168
Google Safe Browsing missed 84% of confirmed phishing sites
Google Safe Browsing missed 84% of confirmed phishing sites in our dataset. Here's what we found and what it means.
169
Unsung heroes: Flickr's URLs scheme
A blog about software craft and quality
170
We rewrote our Rust WASM parser in TypeScript and it got faster
We rewrote our Rust WASM Parser in TypeScript - and it got 3x Faster
171
A compelling title that is cryptic enough to get you to take action on it
An enticing social media preview summary.
172
Text-based web browsers
How do they fare with (not so) recent additions to HTML?
173
Making big downloads resumable in Firefox
This was posted in the TIL section, the low-effort section of my website where I post things that I find useful, but that don't get the full quality checks content elsewhere on this site does.
174
404 Deno CEO not found
The one where I mourn the best runtime and speculate idly.
175
FFmpeg at Meta: Media Processing at Scale
FFmpeg is truly a multi-tool for media processing. As an industry-standard tool it supports a wide variety of audio and video codecs and container formats. It can also orchestrate complex chains of…
176
Don't use passkeys for encrypting user data
Passkeys are the future of authentication, but using them for data encryption is a disaster waiting to happen. Overloading these credentials creates a dangerous blast radius that can lead to the irreversible loss of a user's most sacred memories and documents.
177
SwiftUI After 7 Years
Back in 2019, SwiftUI was announced as the future of Apple development. Seven years later, it still feels like a beta version struggling with stability, performance, and many other aspects. What’s actually wrong with SwiftUI?
178
The Prompt API
Discover the infinite possibilities of the Prompt API.
179
ClojureScript Gets Async/Await
We’re happy to announce a new release of ClojureScript. If you’re an existing user of ClojureScript please read over the following release notes carefully.
180
Hide macOS Tahoe's Menu Icons
I really dislike Apple’s choice to clutter macOS Tahoe’s menus with icons. It makes menus hard to scan, and a bunch of the icons Apple has chosen make no sense and are inconsistent between system applications. Steve Troughton-Smith is my hero for finding a Terminal command to disable them: Here’s one for the…