Thousands of Vibe-Coded Apps Expose Corporate and Personal Data on the Open Web

Wterm – A terminal emulator for the web

WordPress at 23

I’ve banned query strings

A Linux-like kernel in a browser tab - deep dive in the BrowserPod architecture

I’ve banned query strings

Website checklist

The Unreasonable Effectiveness of ProseMirror Model in Rich Text Transformation

The <Noscript> Element as a Trap

How do you E2E test your Go web apps?

On Rendering Diffs

In Yesterday's IO Keynote Google Declared War on the Remnants of the Web

Web Feeds in 2026: A Survey

Forking the Web

From Supabase to Clerk to Better Auth

Evolving Webflow for the Agentic Web

Amazonbot is finally respecting robots.txt

On The <dl> (2021)

BadHost – CVE-2026-48710: Starlette Host-Header Auth Bypass

No query strings here either

Piping terminal output to the browser using systemfd

My pastebin clone Vivipara and language musings

Fully in-browser container builds

A Forth-inspired language for writing websites

Nordstjernen Web Browser

A modern feed reader (2024)

Web Serial Support in Firefox

Front-End’s Missing Metric: The TBT Window

RSS feeds send me more traffic than Google

RIPE NCC session fixation: poaching logins with an Atlas probe

More →