
Securing our home labs: Frigate code review
This blog post describes two linked vulnerabilities found in Frigate, an AI-powered security camera manager, that could have enabled an attacker to silently gain remote code execution.
The best problem-solving writing in software engineering — databases, performance, security, frontend and distributed systems, in one feed.

This blog post describes two linked vulnerabilities found in Frigate, an AI-powered security camera manager, that could have enabled an attacker to silently gain remote code execution.

We’ve added new improvements to default setup, including automatically scheduling scans on repositories and support for all CodeQL covered languages.

Have you run into a situation where you need the padding of one element to align with the padding of another element? In this article, Brecht De Ruyte demonstrates the issue with a full-width slider component that breaks out of the main page container and shares a couple of techniques to keep it visually aligned with other elements on the page.

The 2023 Cloudflare Radar Year in Review is our fourth annual review of Internet trends and patterns observed throughout the year at both a global and country/region level...

Building on similar reports we’ve done over the past two years, we have compiled a ranking of the top Internet properties of 2023

With our biggest ever investment in sustainability, Figma ensures that vanguard technologies the future depends on will continue to scale.

We are heavy users of Amazon Compute Compute Cloud (EC2) at Slack — we run approximately 60,000 EC2 instances across 17 AWS regions while operating hundreds of AWS accounts. A multitude of teams own and manage our various instances. The Instance Metadata Service (IMDS) is an on-instance component that can be used to gain an…

Enterprise businesses turn to Stripe for innovation and reliability. Stripe has invested in enterprise payment solutions such as payment optimizations, payment method coverage, faster payouts, multiprocessor support, and streamlined account structure.

Figma’s editorial newsletter about how products take shape—and shape our world.


The limits of my language mean the limits of my world.

Design systems can be of immense help, but failure to adopt them invalidates the hard work that goes into building the thing in the first place! In this two-part series of articles, Luis shares his experience with design systems and how you can overcome the potential pitfalls.

How the Figma security engineering team protects GitHub release branches.

Prototyping, once an eleventh-hour nice-to-have, has risen to become a critical tool at multiple points in the product development workflow.

From the Handoff Hero to the Scroll-stopper, we crown our favorite updates and features rolled out in 2023.

Signing off to 2023 and bringing the best of Figma into 2024.

New norms call for new terms. Our new unofficial work term glossary uncovers how work defined us and how we define it.

Explore how to build AI features that users trust with insights from Product Managers at Figma, Duolingo, Asana, and LinkedIn.

How mechanical keyboards unite joy and efficiency, and a look at our collaboration with Work Louder.

Facilitators and participants alike can take meetings from “meh” to magical.

GitHub uses MySQL to store vast amounts of relational data. This is the story of how we seamlessly upgraded our production fleet to MySQL 8.0.

Read a roundup of the exciting, new innovation coming from GitHub Actions.

Discover the latest trends and insights on public software development activity on GitHub with the release of Q2 2023 data for the Innovation Graph.
