Link archive: January 7th, 2018

I’m harvesting credit card numbers and passwords from your site. Here’s how.

This is a “what if?” scenario, but it’s all too plausible.

For site owners, the (partial) solution is to have a strong Content Security Policy.

For users, the solution is to disable JavaScript.

(In the wake of Spectre and Meltdown, this is now a perfectly legitimate action for security-conscious web users to take; I hope your site can support that.)

The HSB Color System: A Practicioner’s Primer – Learn UI Design

A nice clear explanation of specifying colour using HSB (not to be confused with HSL).

Barry P*********t on Twitter: “To better understand my web experience, and how I can control my privacy online, I’m undertaking a few little ‘experiments’.

Following in Charlie’s footsteps.