Let's Build the Web We Want
General web technology post
A couple quick hits while I rev the content engine back up over here! CSS Weaponized at Black Hat 2026: Security researcher Gareth Heyes dropped a research paper showing how CSS alone can break out of webmail sanitizers. Without a single line of JavaScript, malicious stylesheets in Gmail and Outlook were manipulated to spoof UI […]
I’m looking at the future of the HTML5 Boilerplate (H5BP) organization and repos right now and, in addition to formulating plans for the existing projects, I’ve decided to try something new. Maintenance of the existing projects is vital, but passive stewardship isn’t enough for where I’m at right now. The web changes too quickly. AI […]
The modern JavaScript ecosystem is incredible. If you need a utility, library or framework for anything it’s probably out there in the npm registry. Things that used to take us a week are now available as a simple `npm install.` But last week, the ecosystem reminded us of the exact tax we pay for that […]
For the past few years, a big portion of my professional energy has been focused on managing scale, overseeing engineering teams, and navigating corporate technology strategy in private equity and traditional asset management. Global finance! It was challenging work, but it pulled me away from a fundamental truth: I am a builder who loves to […]
