Web

The browser platform, standards and web performance.

3 posts

10 min read

Your Unique Visitor Count Has a One-Month Shelf Life

Umami is MIT-licensed, so the identification path is readable. Where, who and when turn out to be a CDN header, a hash that expires on the 1st, and a bucket quantized to the clock hour.

10 min read

Your Browser Agent Is Not Bound by the Same-Origin Policy

The web's oldest isolation guarantee is a string comparison. Put an agent inside the browser and it becomes a model's ability to resist a prompt injection.

8 min read

Googlebot Is Not Your Browser

Rendering is a separate, queued, stateless stage between crawling and indexing. Almost everything confusing about JavaScript and search comes from ignoring that.