Top all-time · #5165
Mike West
Personal blog · mikewest.org · on HN as mikewestwebsecurity
Mike West's personal blog at mikewest.org covers web and security. Since 2008, 15 different Hacker News readers have linked it 20 times, most often “IndexedDB: An Introduction to the JavaScript API”. The last post was in 2020, but the archive is still widely read.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers link his posts on browser web platform topics: an IndexedDB intro, Chrome's DNS-hijack detection, XSLT escaping, and JavaScript runtime error stack traces.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- IndexedDB: An Introduction to the JavaScript API3 people · 3 mentions · first linked 2010-12-14
- Chrome connects to three random domains at startup3 people · 3 mentions · first linked 2012-02-18
- Solid improvements to 'window.onerror' in Blink.2 people · 2 mentions · first linked 2013-08-08
What Hacker News says?
It's a fairly regular thing. If you are a Google Chrome user, then your WWW browser has been doing much the same check, for fairly similar reasons (detecting whether it is running inside an environment where DNS service is being generally altered to redirect clients to a special server), for the past half decade. * https://mikewest.org/2012/02/chrome-connects-to-three-random...
Comment linking /2012/02/chrome-connects-to-three-random-domains-at-startup
on “Accidentally Stopping a Global Cyber Attack”Submitted Chrome connects to three random domains at startup as a story · 349 points
HN discussionThe Google Search Appliance, with roots in Google proper, generates XML results, which are then (normally) transformed via XSLT. (I'm looking at you, XPath.) http://mikewest.org/2007/06/escaping-curly-braces-in-xslt-at... I s'pose attributes don't enter into it, but still, I wonder if the XSLT pass (if any) has anything to do with this?
Comment linking /2007/06/escaping-curly-braces-in-xslt-attributes
on “Break Google”Submitted Chrome Privacy as a story · 200 points
HN discussion> A common solution to this problem, is to make a 2 stage process, where step 1 is a request of "should I download?", where there are 2 possible replies: "no, check again in N time" and "yes, here is a token". Step 2 is then presenting the token to the api point for download, and getting the file. You don't even need two steps, just have one step with previously known data. That's how HTTP conditional requests (Last…
Comment linking /2008/11/generating-etags-for-static-content-using-nginx
on “Downloading a file regularly - how hard can it be?”Submitted Content Security Policy: A Primer as a story · 21 points
HN discussionThere is some great discussion and excellent examples of using indexedDB in both Chrome and Firefox in this blog post from Mike West, Google evangelist: http://mikewest.org/2010/12/intro-to-indexeddb
Comment linking /2010/12/intro-to-indexeddb
on “Firefox 4 RC now available”Submitted IndexedDB: An Introduction to the JavaScript API as a story · 7 points
HN discussionLogging JS errors is quickly becoming easier than you think. :) On the spec side, we have access to the the column number and… <drumroll>… the stack trace! This took a long time, but it's in now. https://mikewest.org/2013/08/debugging-runtime-errors-with-w... Chrome already has support and.. if past release schedules are maintained, all users of Chrome should have this feature within the next week . Firefox already…
Comment linking /2013/08/debugging-runtime-errors-with-window-onerror
on “So you're thinking of tracking your JS errors”Submitted Google Chrome resolves three random domains at startup (2012) as a story · 3 points
HN discussionSubmitted Chrome connects to three random domains at startup as a story · 2 points
HN discussionSubmitted Web Platform Security CMS Security Summit 2020 as a story · 2 points
HN discussionSubmitted What is Content-Security-Policy by mikewest as a story · 2 points
HN discussionSubmitted Solid improvements to 'window.onerror' in Blink. as a story · 2 points
HN discussionSubmitted Google Developer Day Berlin: The HTML5 Demos as a story · 2 points
HN discussionSubmitted A JavaScript Detection Pattern as a story · 2 points
HN discussionSubmitted Scriptless attacks: CSSConfEU presentation on cross-site styling. as a story · 1 points
HN discussionSubmitted Content Security Policy: defining policies for an extension as a story · 1 points
HN discussionSubmitted “Intro to IndexedDB” — Mike West as a story · 1 points
HN discussionSubmitted The Inspiration of Ownership as a story · 1 points
HN discussion
