DAILY NEWS

Stay Ahead, Stay Informed – Every Day

Advertisement
Properties of scroll-timeline: creating animations on scroll without JavaScript



Stop Using JS for Scroll Animations: Meet Scroll-Timeline

Grab a coffee, friend. We need to talk about that heavy JavaScript library you are probably using just to make a header shrink or a progress bar move. It is 2026, and the days of hijacking the main thread with scroll listeners are officially over. We finally have scroll-timeline, and it is a total game-changer for both performance and developer sanity. Imagine creating complex parallax effects with the same ease as a simple hover transition.

How we suffered before

Remember the struggle? To create a simple parallax effect or a reading indicator, we had to attach an event listener to the window scroll. Then came the “scroll-jank” – that stuttering mess when the browser could not keep up with the JavaScript calculations and the rendering at the same time. We tried to fix it with requestAnimationFrame, debouncing functions, or bringing in heavy-duty libraries like ScrollMagic or GSAP. While those tools are powerful, they are often overkill for simple UI polish. We even spent time styling the scrollbar in all modern browsers just to make things look cohesive, but the logic remained bulky and JS-dependent. It was a lot of code for something that should have been native.

The modern way in 2026

Now, we have CSS Scroll-driven Animations. The core idea is simple: instead of an animation progressing over time (seconds), it progresses over scroll distance (pixels or percentage). Using scroll-timeline, we can define a named timeline on a scrollable container. Then, we link any element’s animation to that timeline using animation-timeline. It is declarative, it is readable, and most importantly, it runs off the main thread. If you have already mastered managing scroll behavior with overscroll-behavior, this is the natural next step in your CSS journey. You are no longer calculating offsets; you are just describing how things should look at the start and end of the scroll.

Ready-to-use code snippet

Here is a classic example: a reading progress bar that grows as you scroll down the page. Notice how we do not need a single line of script to make this happen.

/* 1. Define the animation as you normally would */
@keyframes grow-progress {
from { transform: scaleX(0); }
to { transform: scaleX(1); }
}

/* 2. Setup the scroll container and name the timeline */
body {
scroll-timeline-name: –reading-timeline;
scroll-timeline-axis: block; /* ‘block’ refers to the vertical scroll axis */
}

/* 3. Link the progress bar element to the scroll timeline */
.progress-bar {
position: fixed;
top: 0;
left: 0;
width: 100%;
height: 8px;
background: #ff4757;
transform-origin: 0 50%;
z-index: 100;

/* The magic happens here: no duration in seconds, but ‘auto’ */
animation: grow-progress auto linear;
animation-timeline: –reading-timeline;
}

Common beginner mistake

The most common pitfall is forgetting the animation-duration. Even though the animation is driven by scrolling and not time, the CSS specification still requires a duration value (set to auto or any time value like 1s) for the animation to actually initialize. If you omit it, your animation might just sit there doing nothing, leaving you scratching your head. Also, ensure your scroll-timeline-name is defined on an actual scrollable parent; if the container does not have overflow: auto or scroll (or it is the body), the timeline will not have any range to work with and your animation will stay stuck at the first frame.

πŸ”₯ We publish more advanced CSS tricks, ready-to-use snippets, and tutorials in our Telegram channel. Subscribe so you don’t miss out!



Source link

qqq (IDE): Paste Everything into VS Code / Code-OSS / VSCodium


Make everything pasteable. Orchestrate ideas. Turn the IDE into an operating system.

qqq IDE lets you paste images, files, folders, HTML pages, videos, and media directly into VS Code / Code-OSS / VSCodium β€” with WYSIWYG preview.

Repository:

https://github.com/gh555com/qqq

Official download:

https://www.gh555.com/qqq

Project discussion and roadmap:

https://github.com/gh555com/qqq/discussions/6

Why I built qqq

I use the IDE as my main workspace.

Not only for code.

I use it for notes, files, references, images, documents, experiments, ideas, and project organization.

But there is one basic action that still feels too limited in most editors:

Paste.

In most editors, paste mainly means text.

If you want to paste an image, a folder, an HTML page, a video, or a mixed set of creative materials, the workflow often breaks.

You need to open another app, save files manually, choose a folder, insert links, convert formats, or rebuild context later.

qqq tries to remove that friction.

The idea is simple:

Copy. Paste. Preview. Organize. Continue.

What qqq does

qqq makes many kinds of content pasteable and previewable inside the editor.

You can paste:

images
screenshots
files
folders
HTML pages
web images
videos
media resources
documents
mixed creative materials

This works not only in Markdown.

qqq is designed to work in plain text files, custom file extensions, and even files without extensions.

The goal is to make the IDE a place where useful materials can be captured immediately.

Paste Everything

The core workflow of qqq is enhanced paste.

You can use:

to paste images, files, folders, HTML pages, videos, and media directly into VS Code / Code-OSS / VSCodium.

This turns paste from a text-only operation into a universal input action.

Instead of treating the IDE only as a code editor, qqq treats it as a workspace that can receive almost anything.

WYSIWYG preview

Pasting is not enough.

If everything becomes only a hidden path or a plain text reference, the workflow is still broken.

qqq focuses on making pasted content visible and usable inside the editor.

That is why WYSIWYG preview matters.

The idea is not only:

paste an image path

but:

paste the image, see it, use it, organize it, and keep moving.

This is also why qqq is not only a paste-image extension.

It is a paste-anything workflow for the IDE.

Roam File Explorer

qqq also includes a built-in file explorer called Roam.

Roam is designed for fast file navigation and creative organization.

It is not limited to the current project folder.

It helps you move quickly between directories, recent locations, files, folders, media, and external resources.

The direction is simple:

If the IDE is becoming the main workspace, file navigation must become faster and more flexible.

Roam is part of that direction.

Why this matters

Modern IDEs are becoming more than places for writing code.

For many developers, writers, creators, and AI tool users, the IDE is already becoming the center of daily work.

It is where we:

write code
collect references
manage files
talk to AI
read documentation
organize projects
capture ideas
build products

But if the IDE cannot easily receive images, folders, HTML pages, videos, documents, and media, then the workspace is incomplete.

qqq tries to complete that missing layer.

That is why the direction of qqq is:

Make everything pasteable.Orchestrate ideas.Turn the IDE into an operating system.

Current features

qqq currently supports workflows around:

paste images
paste files
paste folders
paste HTML
paste videos
WYSIWYG preview
media preview
resource organization
DOC / DOCX export
ZIP export
clipboard-related workflows
Roam file explorer
multilingual UI

The project is open source and available for review:

https://github.com/gh555com/qqq

Current direction

qqq is currently an extension.

But the long-term direction is qqq IDE.

qqq IDE is a Code-OSS / VSCodium based IDE direction focused on:

paste-anything workflows
all-media notes
creative organization
file and folder orchestration
WYSIWYG editor experiences
AI-era IDE workflows

The goal is not to make another small editor plugin.

The goal is to explore a different kind of IDE workspace.

One where ideas, files, images, HTML pages, videos, documents, and media can all enter through the same simple action:

Paste.

Links

Repository:

https://github.com/gh555com/qqq

Official download:

https://www.gh555.com/qqq

Project discussion and roadmap:

https://github.com/gh555com/qqq/discussions/6

Feedback

Feedback is welcome, especially from people interested in:

VS Code workflows
Code-OSS / VSCodium
AI IDEs
all-media notes
paste image workflows
paste file workflows
WYSIWYG editing
creative organization inside the editor

If this direction is useful to you, feel free to open an issue or discussion on GitHub.

Since 2025 Β· GH Health



Source link

How I Discovered and Deobfuscated a Hidden PHP Backdoor on My Server


As developers and system architects, we often secure our code but neglect the silent threats lurking in old directories or clever obfuscations. Recently, I caught a stealthy PHP backdoor ((random_name).php) embedded in a system.

Instead of just deleting it, I decided to perform a full reverse engineering to understand exactly how it works, how it bypasses scanners, and how it maintains persistence on a server.

Here is a quick summary of what I found during the analysis.

πŸ” The Anatomy of the MalwareAt first glance, the file was heavily obfuscated using multiple layers of encoding to look like harmless gibberish. However, the core mechanism relied on a classic but dangerous pattern:

PHP// The malicious pattern used to execute hidden codeeval(base64_decode($_POST(‘encoded_payload’)));Key Techniques Used by the Attacker:Layered Obfuscation: The code utilized deep base64 nesting combined with string manipulation functions to evade signature-based security scanners.

Hidden Tar Extraction: Deep inside the encoded strings, the malware contained a compressed TAR structure. Once triggered, it extracts a full-featured web shell into the server directories.

SSH Persistence: The ultimate goal wasn’t just to execute commands onceβ€”the script was designed to inject malicious public keys into the server’s ~/.ssh/authorized_keys file, granting the attacker permanent, direct SSH access without leaving a footprint in the web logs.

πŸ› οΈ How to Protect Your SystemIf you suspect your server has been compromised, simply deleting the .php file might not be enough. You need to:

Check your ~/.ssh/authorized_keys for unauthorized entries.

Audit your system cronjobs to ensure the malware doesn’t have a re-infection script scheduled.

Implement strict file permissions (chmod 644 for files, 755 for directories) and disable dangerous PHP functions like eval(), exec(), and passthru() in your php.ini.

πŸ“– Read the Full Deep DiveI have documented the complete step-by-step deobfuscation process, the code breakdown, directory structures, and full remediation steps on GitHub.

πŸ‘‰ See full analysis and source code breakdown here:

https://github.com/KhaiTrang1995/Malware-Analysis-Reports-PHP-Backdoor

Alternatively, you can view the repository directly:

Tags: #php #security #devsecops #malware



Source link