Hacker News – Front Page (native)
Web
Web platforms, browsers, e-commerce
dev.to (home feed)
OAuth SDK accepted forged postMessage logins via missing origin check and predictable IDs
Cloudflare blog
Cloudflare BotBase update adds submission tracking, editable entries and automated bot verification
dev.to (home feed)
Study of 8,010 vulnerable WordPress plugins finds 3,780 quietly pulled from directory
dev.to (home feed)
Chrome's two-week release cycle from September 2026 puts two majors in one CrUX window
Hacker News – Front Page (native)
Erbium and yttrium: China's rare earth squeeze threatens fiber networks and turbines
dev.to (home feed)
Solana raises transaction limit to 4,096 bytes, but reading v1 transactions can break existing apps
Hacker News – Front Page (native)
As X targets Nitter, a developer revives Berners-Lee's Giant Global Graph argument
Hacker News – Front Page (native)
htmx 4.0 ships after eight months: fetch() core, explicit inheritance, morph swaps
dev.to (home feed)
OAuth SDK accepted forged postMessage logins via missing origin check and predictable IDs
Cloudflare blog
Cloudflare BotBase update adds submission tracking, editable entries and automated bot verification
dev.to (home feed)
Study of 8,010 vulnerable WordPress plugins finds 3,780 quietly pulled from directory