johannh

7 ms·

1.
by johannh 6y ago
Both the more technical blog post as well as the MDN page are linked shortly after that paragraph.
2.
by johannh 6y ago
No, there’s no allow-list, you get the same heuristics as described on that MDN page.
3.
by johannh 6y ago
Yes, it’s essentially that, FPI with workarounds for common breakage. You should switch from FPI, this is essentially another take on FPI by some of its original developers, so it should have fewer issues overall, not just site breakage.
4.
by johannh 6y ago
(I’m one of the developers of this feature and co-author of the blog posts) This is a great question and I’m glad you found the answer, you probably understand that for many blog posts we avoid going into too much technical detail. To answe
5.
by johannh 7y ago
If your users are clicking a button then it should actually show the permission prompt, unless you're losing the user interaction somewhere in the callback (by doing something async first) https://hacks.mozilla.org/2019
6.
A cartoon intro to DNS over HTTPS(hacks.mozilla.org)
400 points by johannh 8y ago|134 comments
7.
by johannh 10y ago
Congrats! Please note that Servo is a work in progress that is still lacking some modern browser security features, so enjoy responsibly. See also https://github.com/servo/servo/labels/A-security
8.
What’s new in curl(daniel.haxx.se)
99 points by johannh 11y ago|7 comments
9.
by johannh 12y ago
https://en.wikipedia.org/wiki/Egg_of_Columbus
10.
by johannh 12y ago
I find it ironic if banks and post offices are using combination locks as advertised security measures but the people selling those install steel doors on their storefront.
11.
by johannh 12y ago
True, I'm not surprised at all. HTTPS Everywhere-like functionality should be integrated into browsers and not a downloadable extra, tricking people into feeling fully secured.
12.
by johannh 12y ago
> AMO doesn't do any code signing for extensions, so they're only protected by HTTPS. As we saw with Heartbleed, SSL private keys can be compromised. I find it quite ironic that HTTPS Everywhere is arguing HTTPS is not safe eno
13.
5 things you didn’t know were possible with JavaScript(medium.com)
4 points by johannh 12y ago|4 comments
14.
The Trouble with Job Titles(haneycodes.net)
2 points by johannh 12y ago|0 comments
15.
Why Is Node Being Forked?(dtrejo.com)
76 points by johannh 12y ago|18 comments
16.
Job Title: It’s Complicated(bradfrostweb.com)
1 points by johannh 12y ago|0 comments
17.
Yet another woman in gaming has been driven from her home by death threats(wehuntedthemammoth.com)
2 points by johannh 12y ago|1 comments
18.
Building a Better Node Community(medium.com)
3 points by johannh 12y ago|0 comments
19.
Excel.vim(github.com)
143 points by johannh 12y ago|57 comments
20.
by johannh 12y ago
This was originally published a year ago in this blog post: http://berzniz.com/post/68001735765/javascript-hacks-for-hip... Makes for a nicer read than slideshare imo.
21.
by johannh 12y ago
True, but it still feels like the right thing to do. I'd like people do be responsible when they discover a serious flaw in my programs, so I'll try to be responsible when discovering one in theirs. Also Linus basically insults an
22.
by johannh 12y ago
This is something that could definitely have been reported to Slack before disclosing it publicly. Maybe he did that, but it's not mentioned in the blog post so I assume he didn't. It's just a nice thing to do and they might
23.
Hello World Quiz(helloworldquiz.com)
3 points by johannh 12y ago|0 comments
24.
CLAHub – Easily add a Contributor License Agreement to your GitHub project(clahub.com)
3 points by johannh 12y ago|0 comments
25.
Meet Microsoft's Sharks Cove: A Raspberry Pi-style mini-PC running Windows 8.1(pcworld.com)
1 points by johannh 12y ago|1 comments
26.
by johannh 13y ago
What if I'm not from the US and require a work permission? Any chance of applying?
27.
by johannh 13y ago
Looks promising! May I ask why you forked from the original ( https://github.com/JamesFator/GoogleMusicMac )? Looking at the commit history it seems to be under active development.
28.
by johannh 13y ago
So what exactly makes Mongo such a bad implementation (apart from things that were already fixed)? I don't mean to defend MongoDB, i'm genuinely interested in finding a better NoSQL DB. I just usually get to hear the same "Fi
29.
by johannh 13y ago
So he's saying MySQL is bad, and MongoDB (because of a statement on their home page) is kind of like MySQL, so MongoDB is also bad. Also there was some article about scaling it to "only" 100GB which means it damages NoSQL as
30.
by johannh 14y ago
Its his choice how he wants his works to be distributed. You can still link to it. And if you want to translate it just ask him.

More ›