075. Small Horn Sound by the Lake

X

I visited Xianghu Lake in Binjiang over the weekend and saw someone playing the trumpet. Just one person, one lake, and a trumpet—it had such a great vibe.

Record the down-to-earth trending technologies seen every week, and publish them here after screening. If you find it good, you can follow this weekly to get update notifications.

Technical Insights

The “Browser-in-the-Browser” Phishing Attack
https://mrd0x.com/browser-in-the-browser-phishing-attack/
A sophisticated phishing technique that simulates a separate browser window within the page to trick users into entering credentials on an apparently legitimate domain.

A JS Sandbox Stronger than eval or iframe
https://mp.weixin.qq.com/s/wAI-L3we6uK0HvvPtOcIjg
A look at the new ShadowRealm API, a Stage 3 JavaScript proposal that provides a more robust and secure way to execute code in an isolated environment.

AST: What Every Frontend Dev Needs to Know
https://juejin.cn/post/7087075805884809252
Follow this hands-on guide to finally understand Abstract Syntax Trees and how they power your favorite development tools.

Trending Open Source

jsii: Cross-Language Interop for JavaScript Classes
https://github.com/aws/jsii
The magic behind the AWS Cloud Development Kit. It allows you to build a library once in TypeScript and automatically provide idiomatic versions for Go, Java, Python, and more.

// TypeScript source
export class Greeter {
  public greet(name: string) {
    return `Hello, ${name}!`;
  }
}

// Go usage
greeter := NewGreeter()
greeter.Greet("World") // => Hello, World!

// Python usage
greeter = Greeter()
greeter.greet("World") # => Hello, World!

OSSArt: Turn your GitHub Activity into a Work of Art
https://getoss.art/generator
Simply enter your GitHub username to generate a beautifully abstract representation of your contributions that you can even print out.

Astro: The Next-Gen Static Site Builder
https://github.com/withastro/astro
Astro claims to be powerful while shipping zero JavaScript by default. I tried it out and the developer experience is fantastic—the project structure is incredibly clean.

Lexical: Facebook’s Extensible Text Editor Framework
https://github.com/facebook/lexical
A new, high-performance editor framework from the Meta team designed for accessibility and reliability.

Just Looking Around

Is the Era of Nike and Adidas in China Ending?
https://mp.weixin.qq.com/s/HC7c9Yj147oDZvWWOvqzow
While Adidas’ global revenue grew by 15%, it only saw 3% growth in Greater China. Nike’s revenue in the region dropped by 11% over the first nine months. Local brands are gaining serious ground.

Why Fujian’s GDP Per Capita is Now 4th in China
https://mp.weixin.qq.com/s/HnJ941s6aP7FZVkyj2c45A
A surprising look at how Fujian has climbed to 4th place, trailing only Beijing, Shanghai, and Jiangsu—surpassing even Zhejiang and Guangdong.

What are the U.S. Tech Giants Up To?
https://mp.weixin.qq.com/s/lO4SegxnI1jqL1tGHsyQ6A
A comparative look at Microsoft, Apple, Google, and Amazon, with a rather sharp critique of Meta’s current direction.

---