Bookmarks

はじめに こんにちは、GMO Flatt Security株式会社 セキュリティエンジニアの佐藤(@Nick_nick310)です。 これまで公開した記事にて、GitHub Actionsにおける攻撃手法や防御策、緩和策を解説してきました。 Vol.1: 相次ぐGitHub Actions 侵害から学ぶ、初期アクセス手…

エージェント用の Chrome DevTools は、コーディング エージェントがコードをリアルタイムで検証、デバッグ、最適化するために必要な可視性を提供します。

A QR code generator in a TrueType font: https://qr.jim.sh/ - jimparis/qr-font

Chrome 150 以降で利用可能なオリジン トライアルでメール確認プロトコルをテストします。

The sound of riding the Yamanote Line all the way around Tokyo, station by station.

Where should your auth token live so an XSS bug can't steal it? Here's how to build auth that survives the crazy non-secure world we live in.

こんにちは。タイムリープ株式会社でソフトウェアエンジニアをやっております id:moznion です。 タイムリープ株式会社は遠隔接客サービス RURA (https://timeleap-rura.com/) を提供しているテクノロジースタートアップです。 このサービスは主としてブラウザで動作するReactアプリで構…

Better Auth is joining Vercel. We're joining to accelerate our work on open-source auth and securing agent workflows.

I’ve been using Rspec since 2012 and in all this time I’ve never had a really clear picture of how to best use . I don’t have this issue with any other aspect of Rspec. Probably our most common…

Browser infrastructure engineered for the agent era

Browser4: a lightning-fast, coroutine-safe browser for your AI. - platonai/Browser4

An anti-AI font that can be read by humans but not leading AI models. Type your text below, then download and share the video clip containing your message.

はじめに こんにちは。リーガルブレイン開発部の蛭川（@shotanue）です。 2025 年の WWDC で発表・公開された Apple Container が、先日の WWDC 2026 で v1 となりました。仮想環境といえば、従来は Docker のようなコンテナ環境や、VirtualBox のような ISO イ…

Ghostty and Terraform maker and Hashicorp founder talks about open source, terminals and Zig.

On-device sentence embeddings — engine, weights, and tokenizer in 7 MB of WASM. Search the React docs entirely on your CPU.

A technical deep dive into how OpenAI built ChatGPT's web app: React Router 7, streaming SSR, code splitting, and feature flags at billion-user scale.

A practical guide for starting and sustaining a local Ruby meetup — from finding your first venue to keeping it going years later.

In Safari Technology Preview 247, we’re introducing the Safari MCP server — a Model Context Protocol server for web developers that makes your web development and debugging workflow faster and more powerful.

For slim progress bars like on YouTube, Medium, etc - rstacruz/nprogress

Learn how to migrate a production Next.js app to React Compiler v1.0, including real breakages with React Hook Form, useMemo, useCallback, and DevTools tips.

Vercel commits to being a design partner on the open source rebuild of Hydrogen, Shopify's framework for headless storefronts.

Long Ho writes and builds around frontend infrastructure, build systems, and product engineering.

Think you know your way around a test suite? These React testing interview questions cover act(), debounced inputs, mocking pitfalls, IntersectionObserver, and more. They can be harder than they look.

Like jq, but for HTML. Contribute to mgdm/htmlq development by creating an account on GitHub.