Plenty of sound advices for the written part of an application.

Definitely this, use standard locations as much as possible. We can tame the mess of dotfiles in user homes.

Interesting new side-channel attack. A bit mind boggling to be honest. Only one browser seems affected so far (since it's Chrome probably most of its variants are affected as well).