Found means fixed: Secure code more than three times faster with Copilot Autofix
With Copilot Autofix, developers and security teams can keep new vulnerabilities out of code and confidently remediate their backlog of security debt.
How Meta animates AI-generated images at scale
We launched Meta AI with the goal of giving people new ways to be more productive and unlock their creativity with generative AI (GenAI). But GenAI also comes with challenges of scale. As we deploy new GenAI technologies at Meta, we also focus on delivering these services to people as quickly and efficiently as possible. […]
Decoding an old SkyScan wireless weather sensor
Mitigating Deadlocks in high concurrency environments - Shopify
The problem In order to guarantee data integrity, MySQL requires locks prior to updating existing records. If multiple processes update data in the same table in parallel, deadlocks can occur depending on how the data is stored in disk and managed by MySQL. That can happen even if the different processes target different records. This blog post explores the problem of deadlocks in MySQL while upda
Introducing HTTP request traffic insights on Cloudflare Radar
The traffic graphs on Cloudflare Radar have been enhanced to include HTTP request traffic. This new metric complements the existing bytes-based “HTTP traffic” view, and the new graphs can be found on Radar’s Overview and Traffic pages.
Database industry: The Rise and Rise of PostgreSQL
In this blog I will tell you more about the database industry in general. How did the rise of PostgreSQL come about?
Remote Sinks in pgwatch3 by Akshat Jaimini
I have the pleasure of working on an project that aims to enhance PostgreSQL monitoring through the development of RPC sinks for pgwatch3.
The Atlassian method: The power of developer joy
How developer joy became the north star for a workstream that overhauled tooling, systems, and company culture.
What are AI agents and why do they matter?
Learn how AI agents and agentic AI systems use generative AI models and large language models to autonomously perform tasks on behalf of end users.
The ultimate guide to developer happiness
Five actionable tips and strategies to supercharge developer happiness—and a more innovative workplace.
From object transition to RCE in the Chrome renderer
In this post, I’ll exploit CVE-2024-5830, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site.
Advancing Threat Intelligence: JA4 fingerprints and inter-request signals
Explore how Cloudflare's JA4 fingerprinting and inter-request signals provide robust and scalable insights for advanced web security and threat detection.
HTML Attribute to Allow/Disallow Handwriting Input
A new explainer for a new HTML attribute to handle handwritten inputs. Like this:
Mental Health in Tech Podcast Interview
Mental health is always tough to talk about, especially in an industry that, to me, often rewards ego over vulnerability. I still find it tough even after
Quick Hit #9
Heydon with a reminder that <address> isn't for, you know, mailing addresses.
Beginner’s guide to GitHub: Creating a pull request
As part of the GitHub for Beginners guide, learn how to create pull requests. This will enable you to suggest changes to existing repositories.
An update on another feed reader from its author
Feedback on github, mangling code, and a feed reader
If I Was Starting My Career Today: Thoughts After 15 Years Spent In UX Design (Part 2) — Smashing Magazine
In this two-part series, Andrii Zhdan outlines common challenges faced at the start of a design career and offers advice to smooth your journey based on insights from his experience hiring designers. In Part 2, Andrii speaks about how you can grow faster in your brand-new junior UX job.
Update regarding Vercel service disruption on August 7, 2024
Understanding the service disruption and Vercel's next steps
Introducing Automatic SSL/TLS: securing and simplifying origin connectivity
This new Automatic SSL/TLS setting will maximize and simplify the encryption modes Cloudflare uses to communicate with origin servers by using the SSL/TLS Recommender.
Celebrating one year of Project Cybersafe Schools
August 8, 2024, marks the first anniversary of Project Cybersafe Schools, Cloudflare’s initiative to provide small K-12 public school districts in the United States with a package of Zero Trust cybersecurity solutions – for free, and with no time limit.
Let’s make a simpler, more accessible web
Christian Heilmann gave this talk at Typo3 Developer Days. I'm linking it up because it strikes an already stricken nerve in me. The increasing complexity of
How we migrated onto K8s in less than 12 months
Migrating onto Kubernetes can take years. Here’s why we decided it was worth undertaking, and how we moved a majority of our core services.