Latest Removal of Ogg Vorbis and Theora from HTML5: an outrageous disaster

Nokia and Apple have privately pushed to give Ogg the noose treatment (and so far succeeded) in HTML5. This destroyed all hope of having free (as in freedom) media embedded in HTML5 in an interoperable way.

Read the rest »


Recently popular


Recent articles « older

25 guidelines to iPhone Web development

The iPhone Web guidelines. All the rage now. Long, boring read. To save you the trouble of actually reading it, I’ve checklisted the wheat and trimmed the chaff for you:

Read the rest »

XHTML validator validated by the W3C

I’m on a roll here; this is one of those great days when you get paid, solve customer problems, and get featured in important places on the Web. Let me quote.

Read the rest »

ACAP: fixing what ain’t broke

The article at piBlog » Blog Archive » ACAP: A way to make AJAX search-friendly? wants to spread the usage of a new protocol on the World Wide Web. This protocol, named ACAP, is supposed to be the cure of modern Web indexing problems.

Read the rest »

Creación de una revista en línea efectiva con WordPress: resultados preliminares

Recuerdan el reciente artículo making a magazine out of WordPress? Hoy podrán ver, en exclusiva, un avance preliminar:

Read the rest »

Creating an effective online magazine with WordPress: the HTML mockups

Remember yesterday’s post about making a magazine out of WordPress? Today, you’ll get to see an exclusive sneak peek:

Read the rest »

The Iconfactory is being renewed

The Iconfactory is being renewed. These videos that depict the renovation process… ah, they are hilarious!

At least if you’re into Web development and design.

Nonces and WordPress

What is all this Nonce-sense? - Asymptomatic gives us a quick introduction on nonces.

Nonces alone sound very stupid to me. Instead of having implemented nonces alone, what the WP team should have been doing all along is obvious: every action that is not idempotent should be done through POST. Technically, it’s quite simple. Programmatically, it’s harder to do than GETs. But surely coding GETs + nonces must be much harder than simply coding POSTs.

No one is discussing how useful nonces are. They are useful. But in the context of the greater picture, they’re used to avoid WP admins from being tricked — which is exactly why POSTs should be used as well. Sure, POSTs alone don’t buy us a whole lotta security. But they surely do buy us some.

(Please don’t tell me I haven’t read the whole thread. The fact that nonces were introduced does not contradict one iota the fact that POSTs should be used for destructive operations, and that’s it.)

Update: to visitors from the #wordpress channel: I updated the article, correcting statements of fact. I’m very glad to see that you’re receptive to the POST idea. It’s no surprise that it has been floated before as an issue.

Five tenets of high-quality Web application building

Here are the five most important tenets to keep in mind when building high-quality Web applications. I won’t go into standards compliance here, because that topic has already been debated to death, and the conclusions are old news now. Instead, let’s review the modern tendencies applied in high-quality Web applications:

Read the rest »