deletethis.net

In IE10 and other new browsers one may create MessageChannel objects that have two MessagePorts each connected (w3c spec calls it entangled) to one another such that postMessage on one port results in the message event firing on the other.

My third completed Windows Store app is Percent Clock which displays portions of a time span like the time of the day or time until your next birthday, as a percentage.

The Windows Runtime API Windows.Foundation.Collections.PropertySet class is a nice string name to object value map that has a changed event that fires when the contents of the map is modified.

My second completed app for the Windows Store was Words with Hints a companion to Words with Friends or other Scrabble like games that gives you *ahem* hints.

If you want to represent a value larger than 32bits in an enum in MSVC++ you can use C++0x style syntax to tell the compiler exactly what kind of integral type to store the enum values.

My first app for Windows 8 was Shout Text.

Having worked on Windows 8 I'm not in a neutral position to review aspects of it, however I'll say from a high level I love taking the following various positives from smart phone apps and app stores and applying it to the desktop: Independent developers…

The recent short story Twitter API returning results that do not respect arrow of time by Tim May written as a Twitter bug report reminded me of a few other short sci-fi stories written in the style of some sort of Internet document: comp.basalisk FAQ by…

Level 8 of the Stripe CTF is a password server that returns success: true if and only if the password provided matches the password stored directly via a RESTful API and optionally indirectly via a callback URI.

To setup my home Windows dev box to be accessible from outside I followed two main steps: Configure my router to forward the remote desktop port.

Level 5 of the Stripe CTF revolved around a design issue in an OpenID like protocol.

Level 4 and level 6 of the Stripe CTF had solutions around XSS.

Stripe's web security CTF's Level 1 and level 2 of the Stripe CTF had issues with missing input validation solutions described below.

Stripe's web security CTF's level 0 and level 3 had SQL injection solutions described below.

I was the 546th person to complete Stripe's web security CTF and again had a ton of fun applying my theoretical knowledge of web security issues to the (semi-)real world.

Stripe is running a web security capture the flag - a series of increasingly difficult web security exploit challenges.

There's a lot of name reuse in HTTP compression so I've made the following to help myself keep it straight.

In Windows 8 you can still register a desktop application to handle a particular URI scheme, but now you can also register a Metro Win8 application to handle a particular URI scheme.

Use of my old Hotmail account has really snuck up on me as I end up caring more and more about all of the services with which it is associated.

I keep seeing crowdsource projects with big names that I actually want to back: New Ben Folds Five album New Double Fine Adventure game New Amanda Palmer album New Space Quest (like) game

According to MSDN the proper way to permanently add a path to your system's PATH environment variable is by modifying a registry value.

Built-in map input | %{ expression($_) } forEach input | %{ [void]expression($_) } filter input | ?

Fixed in Windows 8 is intra-line tab completion - you can try it out on the Windows 8 Consumer Preview now.

I'm done playing Fez.

Do we have a word or phrase to describe the following situation: You code up something complicated and it compiles and works on the first try.

By the URI RFC there is only one way to represent a particular IPv4 address in the host of a URI.

With Facebook changing its privacy policy and settings so frequently and just generally the huge amount of social sites out there, for many of us it is far too late to ensure our name doesn't show up with unfortunate results in web searches.

The goal of this experiment was to combine the flipping tables emoticons with the Threw It On The Ground video using shiny new HTML5-ish features and the end result is the table flipper flipping the Threw It On the Ground video.

I've been working on the Glitch Helperator.

One of the more limiting issues of writing client side script in the browser is the same origin limitations of XMLHttpRequest.

Elaborating on a previous brief post on the topic of Web Worker initialization race conditions, there's two important points to avoid a race condition when setting up a Worker: The parent starts the communication posting to the worker.

These are the primeHTTP status codes: 101 Switching Protocols 103 Checkpoint 307 Temporary Redirect 401 Unauthorized 409 Conflict 431 Request Header Fields Too Large 449 Retry With 499 Client Closed Request 503 Service Unavailable 509 Bandwidth Limit Exce…

As a professional URI aficionado I deal with various levels of ignorance on URI percent-encoding (aka URI encoding, or URL escaping).

Sarah and I have been enjoying Glitch for a while now.

As a professional URI aficionado I deal with various levels of ignorance on URI percent-encoding (aka URI encoding, or URL escaping).

Most existing DRM attempts to only allow the user to access the DRM'ed content with particular applications or with particular credentials so that if the file is shared it won't be useful to others.

As a professional URI aficionado I deal with various levels of ignorance on URI percent-encoding (aka URI encoding, or URL escaping).

Cool and (relatively) new methods on the JavaScript Array object are here in the most recent versions of your favorite browser!

The following code compiled just fine but did not at all act in the manner I expected: BOOL CheckForThing(__in CObj *pObj, __in IFigMgr* pFigMgr, __in_opt LPCWSTR url) { BOOL fCheck = FALSE; if (SubCheck(pObj)) { ...

Last time I wrote about how I switched from Delicious to Google Reader's shared links feature only to find out that week that Google was removing the Google Reader shared links feature in favor of Google Plus social features (I'll save my Google Plus rant…

Shortly after joining the Internet Explorer team I got a bug from a PM on a popular Microsoft web server product that I'll leave unnamed (from now on UWS).

A bug came up the other day involving markup containing <input type="image" src="http://example.com/....

I had previously replaced my use of Delicious with Google Reader.

I haven't been updating my blog recently.

As it turns out the WPAD Server Fiddler Extension I made a while back actually has a non-malicious purpose.

I wanted to ensure that my switch statement in my implementation of IInternetSecurityManager::ProcessURLAction had a case for every possible documented URLACTION.

When you run clip.exe, whatever comes into its standard input is put onto the clipboard.

I always have trouble remembering where the opt goes in SAL in the __deref_out case.