Techreport blog

Engineering Insights & Guides

The best problem-solving writing in software engineering — databases, performance, security, frontend and distributed systems, in one feed.

11,847 articles
Engineering — Demo Front-End

Demo Front-End

Have you ever attended a “demo” where developers were proudly showing screen after screen of JSON output from their API, while users were confused and distracted, unable to make any sense of it? Have you ever tried to use an API in development, and been frustrated by how difficult it is to find the correct JSON payload and header incantations to be able to test a feature? A Demo Front-End is a sim

MVMatteo Vaccari·August 23, 2023Engineering
SRE & Ops — Slack’s Migration to a Cellular Architecture

Slack’s Migration to a Cellular Architecture

Summary In recent years, cellular architectures have become increasingly popular for large online services as a way to increase redundancy and limit the blast radius of site failures. In pursuit of these goals, we have migrated the most critical user-facing services at Slack from a monolithic to a cell-based architecture over the last 1.5 years.…

SZStephan Zuercher·August 22, 2023SRE & Ops
Security — Application Security Report: Q2 2023

Application Security Report: Q2 2023

We are back with a quarterly update of our Application Security report. Read on to learn about new attack trends and insights visible from Cloudflare’s global network

MTMichael Tremante, David BelsonMichael Tremante, David Belson·August 21, 2023Security
Design & UX — Better Context Menus With Safe Triangles — Smashing Magazine

Better Context Menus With Safe Triangles — Smashing Magazine

Discover how to improve the user experience of nested menus and tackle a minor yet common issue with them when the user’s pointer leaves the menu item for a moment, and the nested menu goes away, requiring the user to re-hover and try again. A well-known concept called the “safe triangle” solves this problem.

CACosta AlexoglouCosta Alexoglou·August 21, 2023Design & UX
Security — mTLS: When certificate authentication is done wrong

mTLS: When certificate authentication is done wrong

In this post, we’ll deep dive into some interesting attacks on mTLS authentication. We’ll have a look at implementation vulnerabilities and how developers can make their mTLS systems vulnerable to user impersonation, privilege escalation, and information leakages.

MSMichael StepankinMichael Stepankin·August 17, 2023Security
SRE & Ops — The Swedbank Outage shows that Change Controls don't work - High Scalability -

The Swedbank Outage shows that Change Controls don't work - High Scalability -

This week I’ve been reading through the recent judgment from the Swedish FSA on the Swedbank outage. If you’re unfamiliar with this story, Swedbank had a major outage in April 2022 that was caused by an unapproved change to their IT systems. It temporarily left nearly a million customers with incorrect balances, many of whom were unable to meet payments. After investigation, the regulator found th

BJBruce Johnston·August 16, 2023SRE & Ops
Security — Curbing Connection Churn in Zuul - Netflix TechBlog

Curbing Connection Churn in Zuul - Netflix TechBlog

When Zuul was designed and developed, there was an inherent assumption that connections were effectively free, given we weren’t using mutual TLS (mTLS). It’s built on top of Netty, using event loops…

NTNetflix TechBlog·August 16, 2023Security
Engineering — Release Radar

Release Radar

After the last Release Radar, I promised the next one wouldn’t be far away, so here it is. This is the low down on some of the best open source…

MDMichelle DukeMichelle Duke·August 15, 2023Engineering
Security — Hardening repositories against credential theft

Hardening repositories against credential theft

Some best practices and important defenses to prevent common attacks against GitHub Actions that are enabled by stolen personal access tokens, compromised accounts, or compromised GitHub sessions.

MMMatthew MasarikMatthew Masarik·August 15, 2023Security
SRE & Ops — Introducing Immortal Objects for Python

Introducing Immortal Objects for Python

Instagram has introduced Immortal Objects – PEP-683 – to Python. Now, objects can bypass reference count checks and live throughout the entire execution of the runtime, unlocking exciting avenues for true parallelism. At Meta, we use Python (Django) for our frontend server within Instagram. To handle parallelism, we rely on a multi-process architecture along with […]

CWChris Wiltz·August 15, 2023SRE & Ops