mathias

POSTS

• Chrome’s Headless mode gets an upgrade: introducing –headless=new

  by mathias on 2/22/2023, 10:09 PM with 2 comments

• Faster Apps with JSON.parse (Chrome Dev Summit 2019)

  by mathias on 11/25/2019, 6:28 PM with 0 comments

• What’s new in JavaScript (Google I/O ’19)

  by mathias on 5/10/2019, 5:06 PM with 0 comments

• JavaScript engine fundamentals: optimizing prototypes

  by mathias on 8/16/2018, 7:33 PM with 0 comments

• What’s new in modern JavaScript and V8? (Google I/O ’18)

  by mathias on 5/15/2018, 8:53 PM with 0 comments

• by mathias on 1/26/2018, 2:54 AM with comments

• Asynchronous stack traces: why await beats .then()

  by mathias on 10/5/2017, 3:12 PM with 0 comments

• Browser-based timing attacks: demos

  by mathias on 8/2/2016, 8:47 PM with 1 comments

• Unicode property escapes `\p{…}` and `\P{…}` in JavaScript regular expressions

  by mathias on 7/27/2016, 3:39 PM with 0 comments

• ES6 `const` is not about immutability

  by mathias on 2/4/2016, 3:12 PM with 0 comments

• Security certification services may harm your website

  by mathias on 11/26/2014, 7:11 PM with 0 comments

• Hacking with DNS

  by mathias on 9/27/2014, 3:16 PM with 9 comments

• Why Google is Hurrying the Web to Kill SHA-1

  by mathias on 9/8/2014, 3:26 PM with 131 comments

• by mathias on 9/8/2014, 11:07 AM with comments

• by mathias on 8/26/2014, 7:52 PM with comments

• by mathias on 7/4/2014, 2:37 PM with comments

• by mathias on 7/4/2014, 7:48 AM with comments

• Regular expression that matches only itself

  by mathias on 6/17/2014, 9:23 AM with 1 comments

• Hacking with Unicode (examples similar to the TweetDeck XSS)

  by mathias on 6/11/2014, 9:19 PM with 0 comments

• Firefox 30 adds support for CSS `line-height` on s

  by mathias on 6/11/2014, 1:34 PM with 0 comments

• Hacking with Unicode

  by mathias on 5/28/2014, 8:38 PM with 0 comments

• The correct abbreviation for Firefox is ‘Fx’, not ‘FF’

  by mathias on 5/27/2014, 9:44 AM with 55 comments

• Flickr: Invitations disclosure (resend feature)

  by mathias on 4/6/2014, 7:50 AM with 90 comments

• Any Android app can read your WhatsApp database

  by mathias on 3/11/2014, 4:09 PM with 131 comments

• Evil.sh — subtle shell tweaks that will slowly drive people insane

  by mathias on 12/18/2013, 5:09 PM with 0 comments

• Exploit for PHP Objection Injection vulnerability in WordPress 3.5.1 released

  by mathias on 12/10/2013, 2:37 PM with 0 comments

• ~/.osx updated — sensible hacker defaults for OS X 10.9 Mavericks

  by mathias on 10/24/2013, 2:59 PM with 0 comments

• JavaScript has a Unicode problem

  by mathias on 10/21/2013, 2:12 PM with 0 comments

• Leanne Wijnsma is documenting her 484m² garden 1:1 using a flatbed scanner

  by mathias on 10/4/2013, 9:18 AM with 7 comments

• Processing Content Security Policy violation reports in PHP

  by mathias on 9/19/2013, 2:59 PM with 0 comments

• Lo-Dash v2.0.0 released — supports custom builds

  by mathias on 9/13/2013, 6:49 PM with 0 comments

• Object injection vulnerability enables remote code execution in WordPress 3.6

  by mathias on 9/12/2013, 2:52 PM with 19 comments

• Exceptional exception handling

  by mathias on 8/29/2013, 8:39 AM with 0 comments

• Hiding JSON-formatted data in the DOM with CSP enabled

  by mathias on 8/28/2013, 5:44 PM with 1 comments

• Things that broke with the Opera 15 release due to the switch to Blink/Chromium

  by mathias on 7/26/2013, 11:07 AM with 9 comments

• Loading JSON-formatted data with Ajax and `xhr.responseType='json'`

  by mathias on 7/24/2013, 2:37 PM with 0 comments

• Google Image Search results for “Atari Breakout”

  by mathias on 5/14/2013, 7:37 AM with 0 comments

• Abusing MySQL’s type coercion to bypass WAFs

  by mathias on 4/9/2013, 1:54 PM with 0 comments

• Git koans

  by mathias on 4/8/2013, 2:29 PM with 141 comments

• Opera will use Blink

  by mathias on 4/3/2013, 10:05 PM with 41 comments

• Google Maps: “Treasure Map” mode

  by mathias on 3/31/2013, 6:30 PM with 80 comments

• Optimizing the new Google Universal Analytics JavaScript snippet

  by mathias on 3/27/2013, 2:06 PM with 0 comments

• Everything you always wanted to know about touch icons

  by mathias on 3/15/2013, 9:42 AM with 0 comments

• GitHub is getting DDoSed again

  by mathias on 3/10/2013, 11:00 AM with 69 comments

• Ten things I didn’t know about HTML, CSS and JavaScript

  by mathias on 11/8/2012, 7:23 PM with 0 comments

• MySQL’s `utf8` only supports 5.88% of all possible Unicode code points

  by mathias on 7/30/2012, 1:35 PM with 0 comments

• ~/.osx updated — sensible hacker defaults for OS X Mountain Lion

  by mathias on 7/28/2012, 9:29 PM with 90 comments

• Detecting device orientation and acceleration in JavaScript

  by mathias on 7/11/2012, 1:53 PM with 0 comments

• Codepoints.net, a fully open-source Unicode resource

  by mathias on 7/6/2012, 6:43 PM with 0 comments

• Why Boxer.app isn’t in the Mac App Store

  by mathias on 7/1/2012, 5:38 PM with 0 comments

• Wakoopa Social is shutting down

  by mathias on 6/15/2012, 1:40 PM with 4 comments

• How to speedrun Dropbox’s Dropquest 2012 (and get 1 GB extra storage space)

  by mathias on 5/14/2012, 2:43 PM with 2 comments

• Application Cache Is A Douchebag

  by mathias on 5/8/2012, 1:50 PM with 61 comments

• 1366×768px overtakes 1024×768px as the most popular screen resolution worldwide

  by mathias on 4/11/2012, 11:24 AM with 119 comments

• `font-family: Comic Sans MS` (without quotes) is valid, working CSS

  by mathias on 4/3/2012, 12:43 PM with 5 comments

• How to create and use custom keyboard layouts on OS X

  by mathias on 3/29/2012, 9:59 AM with 1 comments

• How to create and use custom keyboard layouts in OS X

  by mathias on 3/23/2012, 10:10 AM with 0 comments

• Which JavaScript property names can be unquoted? When can dot notation be used?

  by mathias on 3/5/2012, 2:41 PM with 6 comments

• Valid JavaScript variable names

  by mathias on 2/21/2012, 3:27 PM with 39 comments

• JavaScript’s internal character encoding: UCS-2 or UTF-16?

  by mathias on 1/20/2012, 12:03 PM with 15 comments

• Userscript that removes the SOPA overlay on English Wikipedia

  by mathias on 1/18/2012, 7:44 AM with 1 comments

• Everything you always wanted to know about JavaScript character escapes

  by mathias on 12/21/2011, 8:00 PM with 0 comments

• GitHub repository collecting the smallest possible syntactically valid files

  by mathias on 12/19/2011, 8:25 PM with 0 comments

• The smallest possible valid (X)HTML documents

  by mathias on 12/15/2011, 3:03 PM with 1 comments

• Punycode.js: a fully compliant & cross-platform Punycode converter in JavaScript

  by mathias on 11/22/2011, 3:24 PM with 1 comments

• 7 minutes on recent DOM APIs with Paul Irish

  by mathias on 9/29/2011, 10:52 AM with 0 comments

• ~/.osx — a collection of sensible defaults for OS X Lion

  by mathias on 9/8/2011, 5:54 PM with 87 comments

• How I detect and use localStorage: a simple JavaScript pattern

  by mathias on 7/29/2011, 3:12 PM with 0 comments

• How to escape any character in CSS

  by mathias on 7/1/2011, 7:01 AM with 0 comments

• Firefox 5 can already be downloaded from Mozilla’s FTP server

  by mathias on 6/21/2011, 10:26 AM with 6 comments

• Mother-effin’ unquoted attributes

  by mathias on 6/15/2011, 9:42 AM with 0 comments

• Everything about unquoted attribute values in HTML and CSS

  by mathias on 6/13/2011, 7:24 PM with 0 comments

• In defense of CSS hacks — introducing “safe CSS hacks”

  by mathias on 5/19/2011, 10:09 AM with 0 comments

• Pixel-perfect CSS3 border-image in depth

  by mathias on 3/29/2011, 12:19 PM with 1 comments

• Everything you always wanted to know about touch icons on iOS and Android

  by mathias on 3/2/2011, 8:15 PM with 0 comments

• Shell script to convert ​font-face fonts on any OS

  by mathias on 2/28/2011, 2:07 PM with 0 comments

• You don’t need any HTML to add a favicon to your site

  by mathias on 2/22/2011, 2:50 PM with 13 comments

• Web service that automatically adds lasers shooting from eyes in pictures

  by mathias on 2/14/2011, 10:34 AM with 0 comments

• Respond.js: min/max-width CSS3 media queries for IE 6-8, and more

  by mathias on 2/7/2011, 3:34 PM with 5 comments

• The cost of feature testing (screencasts)

  by mathias on 2/6/2011, 10:54 AM with 0 comments

• AirPlay video support in Mobile Safari — a bookmarklet

  by mathias on 2/3/2011, 9:36 PM with 0 comments

• A favicon? That’ll be £585 please.

  by mathias on 2/3/2011, 4:30 PM with 102 comments

• How to complete Dropquest 2011 in 60 seconds

  by mathias on 1/16/2011, 6:10 PM with 0 comments

• JSLint just got a major update

  by mathias on 1/9/2011, 10:08 AM with 1 comments

• How to write and run bulletproof JavaScript benchmarks

  by mathias on 12/31/2010, 9:07 AM with 0 comments

• “Uncovered”: Ask any questions about the jQuery source and the team will explain

  by mathias on 12/27/2010, 11:11 AM with 0 comments

• HTML5 Video for Everyone generator

  by mathias on 11/18/2010, 1:05 PM with 0 comments

• How to create simple Mac apps from shell scripts

  by mathias on 11/12/2010, 5:25 PM with 1 comments

• jQueery — the gayest JavaScript library around

  by mathias on 11/10/2010, 10:19 AM with 1 comments

• Visualization of jQuery file size over the years

  by mathias on 10/11/2010, 3:47 PM with 0 comments

• Using setTimeout to speed up the onload event

  by mathias on 9/14/2010, 9:39 PM with 0 comments

• How to implement non-blocking Google AdSense on your site

  by mathias on 9/1/2010, 7:37 AM with 0 comments

• jsPerf: Easily create and share JavaScript performance test cases / benchmarks

  by mathias on 8/1/2010, 1:47 PM with 2 comments

• How to use HTML5 to make your CSS look like brainfuck

  by mathias on 7/12/2010, 10:31 AM with 29 comments

• How to use the XHTML serialization of HTML5, aka ‘XHTML5’

  by mathias on 6/17/2010, 7:50 PM with 0 comments

• Safari Reader’s generated HTML and CSS, and how to manipulate it

  by mathias on 6/13/2010, 8:07 PM with 0 comments

• How to enable Safari Reader on your website?

  by mathias on 6/10/2010, 11:57 AM with 0 comments

• The three levels of HTML5 usage

  by mathias on 6/6/2010, 3:35 PM with 4 comments

• HTML5: it goes to ELEVEN

  by mathias on 5/28/2010, 1:40 PM with 5 comments

• Some quick notes on the HTML5 `document.head` DOM tree accessor

  by mathias on 5/9/2010, 9:24 AM with 0 comments

• Bulletproof HTML5 <details> fallback using jQuery

  by mathias on 4/26/2010, 11:19 AM with 2 comments