https://eaton-works.com/2026/06/24/jnj-webapp-hacks/
Auth/SSO bypass on a web app. This is fascinating to see, because it might look like it’s secure using SSO, but then the details tell a different story. Also classic getAllUsers API does what it says…
https://nand2mario.github.io/posts/2026/z386/
Open-Source 80386, I remember reading/hearing “C64 is going to be the last computer you can fully understand”, that’s why I think things like this project are highly interesting and important to share!
Quake 1 rendered to CSS. Absolutely crazy, I love it, though the code smells vibecoded (crazy to pull off nevertheless)
https://graphicore.github.io/librebarcode/documentation/ean13.html
I like the idea to simply use a font to generate EAN13 barcodes. Makes it much better than I what I used in the past (some python script, library etc.)
I noticed that people ask me from time to time what stuff I come across and I usually cannot really recall and it’s spread across multiple mediums. So I started to write the most interesting (to me at least) things down together with maybe a few bullet points.
I also want to post them, might be interesting for others as well.
I’m going to use this #chrisnotes hashtag as well as I’m going to reply to this post.
This week I decided to release my pet project called Hellwave. A Quake mod that runs in the browser for casual player-vs-enemy game play with peer-to-peer networking support.
Remember when Internet Explorer warned us from going to an https website?
![You are about to view pages aver a secure connection.
Any information you exchange with this site cannot be viewed by anyone else on the web.
[_] In the future, do not show this warning](https://assets.chaos.social/media_attachments/files/114/739/100/374/549/634/original/058e6d77ad4cec11.png)
Everyone should have a good reason why they will end up in hell.
Mine is going to be porting over Quake Game to relatively modern JavaScript.
https://github.com/chrisnew/quakeshack/tree/master/source/game/id1/
The game works both in frontend (singleplayer mode) and backend (dedicated server mode).
Still not complete, monsters are missing as well as a couple of auxiliary items.