browse/
7 results
infrastructure/rate-limiting-how-a-token-bucket-stops-one-caller-from-using-up-the-wh.md
Rate limiting: how a token bucket stops one caller from using up the whole server
How do websites stop one noisy caller from using up all the server's time? Many use a token bucket: a bucket that holds a few tokens and…
web/cors-why-a-browser-blocks-a-request-your-server-happily-answered.md
CORS: why a browser blocks a request your server happily answered
You call your own API from a web page and the browser says blocked by CORS policy, even though the address works in a new tab. The server…
security/cross-site-scripting-how-a-comment-box-can-run-someone-else-s-code.md
Cross-site scripting: how a comment box can run someone else's code
A comment box looks harmless until someone types a tiny program instead of a comment. This article explains cross-site scripting, or XSS…
security/password-strength-why-length-beats-a-capital-letter-and-a-symbol.md
Password strength: why length beats a capital letter and a symbol
Everyone says passwords need a capital, a number and a symbol, and also that they should be long. Which one actually matters more? The…
software-design/idempotency-why-clicking-pay-twice-should-charge-you-once.md
Idempotency: why clicking Pay twice should charge you once
You tap Pay, the screen shows an error, you tap again, and your card is charged twice. Networks drop messages, so a phone often cannot tell…
web/what-is-json-edit-it-live-and-see-why-apis-are-so-strict-about-it.md
What is JSON? Edit it live and see why APIs are so strict about it
When an app asks a server for data, the reply has to travel as plain text. JSON is the format most web APIs use: six kinds of value…
security/why-a-long-password-beats-a-complicated-one.md
Why a long password beats a complicated one
Websites tell you to add a capital, a number and a symbol. But length does far more for a password than funny characters ever can. Count…