Web Development Reading List #172: On Reporting Bugs, DNS Subdomain Takeovers, And Sustainable UX

As web developers, we all approach our work very differently. And even when you take a look at yourself, you’ll notice that the way you do your work does vary all the time. I, for example, have not reported a single bug to a browser vendor in the past year, despite having stumbled over a couple. I was just too lazy to write them up, report them, write a test case and care about follow-up comments.

This week, however, when integrating the Internationalization API for dates and times, I noticed a couple of inconsistencies and specification violations in several browsers, and I reported them. It took me one hour, but now browser vendors can at least fix these bugs. Today, I filed two new issues, because I’ve become more aware again of things that work in one browser but not in others. I think it’s important to change the way we work from time to time. It’s as easy as caring more about the issues we face and reporting them back.

Further Reading on SmashingMag: Link

• Getting Ready For HTTP/2: A Guide For Web Designers And Developers¹
• Front-End Performance Checklist 2017 (PDF, Apple Pages)²
• CSS Grid, Flexbox And Box Alignment: Our New System For Web Layout³
• Help The Community! Report Browser Bugs!⁴

News Link

• Web annotations⁵ are now a web standard⁶, with a defined data model, vocabulary, and protocol. Let’s hope many of the browser vendors (Microsoft Edge) and service platforms will adopt the standard soon. For us developers it’s a huge opportunity, too, to build standardized annotations that are interoperable and to communicate with each other.

Security Link

• Let’s have a look at how Mr. Trump was hacked via DNS subdomain takeover¹⁰, a long-known technique¹¹ that most people who configure DNS entries for a domain aren’t aware of.
• Google Chrome now allows permitted site owners of a Chrome extension to override selected user settings¹². This means that a browser extension vendor who verified their domain via Google Webmaster Tools can override user settings such as homepage or the default search provider via their website. After reading this attack scenario¹³, I fear this could take the DNS subdomain attack to a new level.

Web Performance Link

• Justin Avery shares how you can configure HTTP/2 Server Push to work with WordPress¹⁴.

CSS/Sass Link

• Sometimes it’s the small things that help you a lot. Did you know that you can save time and avoid confusion in CSS by using the :not(:last-of-type) selector instead of two different selectors, for example? Timothy B. Smith explains how this little trick works¹⁵.
• Jen Simmons wrote yet another great article about the benefits of learning how to code layouts with CSS¹⁶.

Going Beyond… Link

• Vicki Boykis wrote an excellent piece called “Fix the internet by writing good stuff and being nice to people¹⁷” in which she points out one of the major issues on the internet: the fact that making money off content became worth more than the content itself.
• The free Sustainable UX conference took place two weeks ago. To get some insights into how we can achieve sustainability in tech, you can now watch the conference talks for free¹⁸.

¹⁹

And with that, I’ll close for this week. If you like what I write each week, please support me with a donation²¹ or share this resource with other people. You can learn more about the costs of the project here²². It’s available via email, RSS and online.

— Anselm

Footnotes Link

1. 1 https://www.smashingmagazine.com/2016/02/getting-ready-for-http2/
2. 2 https://www.smashingmagazine.com/2016/12/front-end-performance-checklist-2017-pdf-pages/
3. 3 https://www.smashingmagazine.com/2016/11/css-grids-flexbox-and-box-alignment-our-new-system-for-web-layout/
4. 4 https://www.smashingmagazine.com/2011/09/help-the-community-report-browser-bugs/
5. 5 https://hypothes.is/blog/annotation-is-now-a-web-standard/
6. 6 https://www.w3.org/blog/news/archives/6156
7. 7 https://hypothes.is/blog/annotation-is-now-a-web-standard/
8. 8 https://hypothes.is/blog/annotation-is-now-a-web-standard/
9. 9 https://hypothes.is/blog/annotation-is-now-a-web-standard/
10. 10 http://www.networkworld.com/article/3171732/security/iraqi-hacker-took-credit-for-hijacking-subdomain-and-defacing-trump-site.html
11. 11 https://labs.detectify.com/2014/10/21/hostile-subdomain-takeover-using-herokugithubdesk-more/
12. 12 https://developer.chrome.com/extensions/settings_override
13. 13 https://labs.detectify.com/2014/10/21/hostile-subdomain-takeover-using-herokugithubdesk-more/
14. 14 https://responsivedesign.is/articles/configuring-http2-push-wordpress/
15. 15 https://theboldreport.net/2017/02/css-tip-use-not-to-save-time-and-lines-of-code/
16. 16 http://jensimmons.com/post/feb-28-2017/benefits-learning-how-code-layouts-css
17. 17 http://blog.vickiboykis.com/2016/11/20/fix-the-internet/
18. 18 https://www.youtube.com/playlist?list=PLrJVv8APJhWnHo_Gzt_cVwhLpABKtQi9R
19. 19 http://blog.vickiboykis.com/2016/11/20/fix-the-internet/
20. 20 http://blog.vickiboykis.com/2016/11/20/fix-the-internet/
21. 21 https://wdrl.info/donate
22. 22 https://wdrl.info/costs/

↑ Back to topTweet itShare on Facebook