Top all-time · #2398
lyra.horse
Personal blog · lyra.horsegameswebsecurity
lyra.horse is a personal blog at lyra.horse about games, web and security. Since 2023, 34 different Hacker News readers have linked it 51 times, most often “JavaScript Crossword”. No feed was found, so read it on the site itself.
hi!
Most-linked posts?
- JavaScript Crossword6 people · 6 mentions · first linked 2026-05-24
- Aspects of modern HTML/CSS you may not be familiar with5 people · 7 mentions · first linked 2025-08-28
- Show HN: X86CSS – An x86 CPU emulator written in CSS5 people · 6 mentions · first linked 2026-02-24
- Using YouTube to steal your files5 people · 5 mentions · first linked 2024-09-19
- CSS Clicker – incremental game about making a personal web, written in pure CSS4 people · 4 mentions · first linked 2025-04-01
- Antonymph: An audiovisual experience using the browser3 people · 3 mentions · first linked 2024-01-31
- Show HN: Tic-Tac-Toe in Pure CSS (No JavaScript/HTML)2 people · 3 mentions · first linked 2025-06-27
- Exploiting V8 at OpenECSC2 people · 2 mentions · first linked 2024-05-25
- Chromium bug bounty money tree browser2 people · 2 mentions · first linked 2023-11-21
- Foldy Bird2 people · 2 mentions · first linked 2026-01-02
What Hacker News says?
this is my favorite one one I've seen: https://lyra.horse/css-clicker/
Comment linking /css-clicker/
on “CSS Minecraft”Submitted Aspects of modern HTML/CSS you may not be familiar with as a story · 453 points
HN discussionIf you're just concerned about light vs dark, then this article (which was posted to HN) does an auto/light/dark toggle button without javascript, and it shows using CSS variables for your colors: https://lyra.horse/blog/2025/08/you-dont-need-js/
Comment linking /blog/2025/08/you-dont-need-js/
on “The least amount of CSS for a decent looking site (2023)”Submitted Chromium bug bounty money tree browser as a story · 358 points
HN discussionFWIW you can add a light/dark toggle button without any javascript. You only need javascript if you want to persist that preference in localStorage. Here is an article that was posted to HN which implements the three-state (auto/light/dark) toggle in HTML and CSS only: https://lyra.horse/blog/2025/08/you-dont-need-js/
Comment linking /blog/2025/08/you-dont-need-js/
on “The least amount of CSS for a decent looking site (2023)”Submitted Trick users and bypass warnings – Modern SVG Clickjacking attacks as a story · 336 points
HN discussionYeah, like this https://lyra.horse/fun/tic-tac-nohtml/ tic tac toe without JS and HTML, only a <style> tag. I mean it's incredible, but you know what will happen to you if you write a production code like this.
Comment linking /fun/tic-tac-nohtml/
on “It's time for modern CSS to kill the SPA”Submitted Using YouTube to steal your files as a story · 176 points
HN discussionI did find this Idle Game entirely in CSS amusing: https://lyra.horse/css-clicker/
Comment linking /css-clicker/
on “Minimal CSS-only blurry image placeholders”Submitted CSS Clicker – incremental game about making a personal web, written in pure CSS as a story · 31 points
HN discussionJust want to drop in and say I love this site (With the name of Vega, I might be biased, but still <3 ). The entire site's style is great and this page's content is awesome and I'll definitely be linking it to anyone I know doing web-dev stuff in the future. I also love https://lyra.horse/arrupted/ I've made some pretty cool pieces with it in the past, so it was really cool to see a domain I recognize on the front p…
Comment linking /arrupted/
on “Aspects of modern HTML/CSS you may not be familiar with”Submitted Antonymph: An audiovisual experience using the browser as a story · 25 points
HN discussionDid you read the article? The author specifically addresses accessibility in multiple places, including taking extra steps to work around browser bugs [0]. [0]: https://lyra.horse/blog/2025/08/you-dont-need-js/#fn:10
Comment linking /blog/2025/08/you-dont-need-js/
on “Aspects of modern HTML/CSS you may not be familiar with”Submitted Stealing your Telegram account in 10 seconds flat as a story · 24 points
HN discussion> <feTile> is a single element filter just like all the other ones. It just tiles the current image to the desired size. If the input is bigger than the output, it functions as a crop instead. So I use two of them to achieve a crop + tile. Aha. > I touched on it in this post: https://lyra.horse/blog/2025/08/you-dont-need-js/ I coincidentally was given that link elsewhere since posting and have been reading it and cl…
Comment linking /blog/2025/08/you-dont-need-js/
on “Trick users and bypass warnings – Modern SVG Clickjacking attacks”Submitted Show HN: CSS Clicker – a pure-CSS idle game where you build your own website as a story · 12 points
HN discussion> I'm so lost, or at least, struggling. Why is modern HTML/CSS like this? I think it's pretty neat. It allows me to build cool interactive stuff such as the post in question without having to use JavaScript. > And also apparently clicking on the label toggles the checkbox because, it just works that way by default? Yes, that's how semantic HTML forms work. > And then the CSS properties can vary depending on the chec…
Comment linking /blog/2025/08/you-dont-need-js/
on “Trick users and bypass warnings – Modern SVG Clickjacking attacks”Submitted SVG Filters – Clickjacking 2.0 as a story · 10 points
HN discussionI don't think clickjacking is overrated, it's usually the opposite with it being not even accepted by many bug bounty programs. I've been able to make realistic attacks against multiple targets. Many services, such as Google Docs, need to enable cross-origin framing for their functionality. And beyond that, even if you restrict the framing, it might still be possible to clickjack as a part of a more complex attack c…
Comment linking /blog/2024/09/using-youtube-to-steal-your-files/
on “Trick users and bypass warnings – Modern SVG Clickjacking attacks”Submitted Stealing your Telegram account in 10 seconds flat as a story · 10 points
HN discussionhttps://lyra.horse/x86css/
Comment linking /x86css/
on “Show HN: A working Nintendo in ~1GB of Qwen weights”Submitted A peek into Reddit's anti-spam internals as a story · 7 points
HN discussionFor tabs, see: https://lyra.horse/blog/2025/08/you-dont-need-js/#lyres-and-... As far as I can tell, my implementation there fits the guidelines.
Comment linking /blog/2025/08/you-dont-need-js/
on “Replacing JavaScript with Just HTML”Submitted Exploiting V8 at OpenECSC as a story · 6 points
HN discussionSee https://lyra.horse/blog/2025/08/you-dont-need-js/ , via https://news.ycombinator.com/item?id=45056878 (which discussion contains some deeper explanation).
Comment linking /blog/2025/08/you-dont-need-js/
on “Replacing JavaScript with Just HTML”Submitted Show HN: X86CSS – An x86 CPU emulator written in CSS as a story · 5 points
HN discussionYeah, CSS is Turing Complete: https://lyra.horse/x86css
Comment linking /x86css
on “Kevin Boone: The "small web" is bigger than you might think”Submitted Exploiting V8 at OpenECSC as a story · 5 points
HN discussionIt's not just closer. Someone wrote an x86 emulator with CSS (it uses JS only for clock to make it more reliable). https://lyra.horse/x86css/ . So, CSS is officially Turing complete (which is a bit scary IMHO).
Comment linking /x86css/
on “CSS is DOOMed”Submitted Show HN: Tic-Tac-Toe in Pure CSS (No JavaScript/HTML) as a story · 4 points
HN discussion
