2010 Mar 10, 5:19Covers same origin policy and how it applies to different HTML and HTTP features.
technical web browser javascript csrf ajax html security xss XMLHttpRequest 2010 Mar 10, 3:40Notes on the features and performance of an HTML minification tool.
html javascript performance toolweb minifier web technical 2010 Mar 9, 9:08
I've just put up an update for Encode-O-Matic with the following improvements:
- Hex editor: the output and input views can now be switched between a UTF8 textbox view and a hex editor view. This is built using the free Be.HexEditor.
- Compression: I've added the .NET GZip, deflate, and inflate streams to the list of supported encodings.
- Quick Show Output: There are now 'Show Output' radio buttons next to each encoding in the encoding stack. Clicking on them changes the output view to show the output from that encoding in the
stack. This lets you easily jump between different parts of your encoding process. Adding or removing an encoding to the stack resets the view.
- Minor visuals improvement: added app icon, changed buttons with one word symbols to command names.
technical encodeomatic project 2010 Mar 9, 5:35Comparison of US claim 'the tort of appropriation' to Google video case in Italy.
italy google privacy law legal us technical 2010 Mar 8, 1:50Paper suggests history stealing to find what popular social networking site groups a visitor to your web site belongs to and stats on how easy it is to then uniquely identify the visitor on the
popular social networking site.
security privacy social social-network paper research web browser css technical system:filetype:pdf system:media:document 2010 Mar 5, 12:33ClickOnce is a .NET app deployment technology that lets you easily install apps with minimal user interaction even from the web. This is what Google Chrome uses to install so easily.
msdn technical development security windows .net csharp programming clickonce google chrome 2010 Mar 5, 10:21Document explaining the relationship between the various web storage APIs coming out of HTML 5. To summarize:
Web Storage (aka DOM Storage) - simple key/value pairs API.
WebSimple DB API - now called Indexed Database API.
Indexed Database API and Web SQL Database - competing database APIs.
Application Cache - Storage of HTTP resources for offline apps.
DataCache API - A programmatically modifiable Application Cache.
html html5 standard programming technical wiki w3c database storage web 2010 Mar 5, 2:54LiveJournal replaces affiliate links with their own... Between this and not being able to stick in videos, script, etc maybe its time to switch blogging sites...
blog livejournal technical 2010 Mar 4, 3:05Intro to Google App Engine plus get a somewhat more trustworthy web proxy than you'd normally find on the Internet...
api proxy web google free technical 2010 Mar 3, 6:15Finally giving the javascript URI scheme its own IETF doc.
javascript ietf url uri scheme reference technical 2010 Mar 2, 5:25HTML5 Contacts API allows HTML pages access to a user's contacts info.
contact business-card html html5 api javascript technical w3c reference 2010 Feb 28, 2:41"The complete set of HTML elements is the set of elements described in the following sections."
technical reference html html5 w3c web 2010 Feb 27, 10:17Weave syncs web browser user data. Its an open platform using JSON data, RESTful URL based APIs, with basic auth over HTTPS.
weave firefox web browser mozilla development technical reference 2010 Feb 27, 10:06A web browser add-on security research paper that describes the Google Chrome security model. "We propose a new browser extension system that improves security by using least privilege, privilege
separation,
and strong isolation. Our system limits the misdeeds an attacker can perform through an extension vulnerability.
Our design has been adopted as the Google Chrome extension system."
security design google chrome firefox addon plugin web browser technical research adam-barth system:filetype:pdf system:media:document 2010 Feb 26, 10:12Interesting stuff about Google determining synonyms based on folks changing their search queries.
google search synonym machine-learning english language technical 2010 Feb 26, 2:42Adam Barth has tons of papers on web browser security.
adam-barth security web browser privacy javascript google chrome research technical 2010 Feb 25, 4:10Comcast is running an opt-in DNSSEC trial for all Comcast customers. Their FAQ covers the incompat. of DNSSEC with their Comcast Domain Helper (typo DNS redirects to Comcast ads... bleh!): "What
happens to Comcast Domain Helper, which offers DNS redirect services, when you fully implement DNSSEC? We believe that the web error redirection function of Comcast Domain Helper is technically
incompatible with DNSSEC. Comcast has always known this and plans to turn off such redirection when DNSSEC is fully implemented." Yay!
dns dnssec comcast faq internet ip security technical 2010 Feb 24, 9:21"Onstage at TED2010, TED curator Chris Anderson interviews Google's Sergey Brin about the company's recent statement on China."
ted video sergey-brin google china security privacy censorship technical 2010 Feb 24, 4:13Wow, its true... the CSS appendices titles start with the letter of their appendix. The 'Appendix E. Elaborate description of Stacking Contexts' is pushing it though.
humor css technical specification reference