Nine years of the GitHub Security Bug Bounty program
It was another record year for our Security Bug Bounty program! We’re excited to highlight some achievements we’ve made together with the bounty community in 2022!
Knip: An Automated Tool For Finding Unused Files, Exports, And Dependencies — Smashing Magazine
Most of the projects have at least a few unused files, exports, and dependencies lying around, often because it’s difficult knowing when one thing relies on another and scary removing something you’re not sure is in use. Lars Kappert shares a tool he’s been working on that offers a solution.
Introducing scheduled deletion for Cloudflare Stream
Easily manage storage with scheduled deletion for Cloudflare Stream, available for live recordings and on-demand video
Debug Queues from the dash: send, list, and ack messages
Today, we are thrilled to share that customers can now debug their Queues directly from the Cloudflare dashboard. This new feature allows customers to send, list, and acknowledge messages in their Queues from the Cloudflare dashboard, enabling a more user-friendly way to interact with their Queues
Notes on using a single-person Mastodon server
Notes on using a single-person Mastodon server
Designing Accessible Text Over Images: Best Practices, Techniques And Resources (Part 2) — Smashing Magazine
In part 2 of the series, Hannah Milan reviews various accessible text over images techniques for designing your content, including framing the image, soft-colored gradients technique, text styles and text position, solid color shapes, and use of colored backgrounds.
Navigating the intersection of design and business: A conversation with Airbnb’s Brian Chesky
Airbnb’s Brian Chesky talks about design’s catalytic potential for business and the central role it played in Airbnb’s post-IPO growth story.
Running A Page Speed Test: Monitoring vs. Measuring — Smashing Magazine
What does your performance “stack” look like? There are all kinds of tools available for measuring page speed, but what data and assumptions do they use to measure performance? And speaking of *measuring* performance, there’s quite a difference between that and *monitoring* performance. Let’s dig in!
Introducing per hostname TLS settings — security fit to your needs
Starting today, customers that use Cloudflare’s Advanced Certificate Manager can configure TLS settings on individual hostnames within a domain
Enhanced push protection features for developers and organizations
Introducing two new secret scanning push protection features that will enable individual developers to protect all their pushes and organizations to gain insights and trends across their repositories.
GitHub Availability Report: July 2023
In July, we experienced one incident that resulted in degraded performance across GitHub services.
How to secure GitHub Actions workflows: 4 tips to handle untrusted input and tighten permissions
Researchers from Purdue and NCSU have found a large number of command injection vulnerabilities in the workflows of projects on GitHub. Follow these four tips to keep your GitHub Actions workflows secure.
Scaling the Instagram Explore recommendations system
Explore is one of the largest recommendation systems on Instagram. We leverage machine learning to make sure people are always seeing content that is the most interesting and relevant to them. Using more advanced machine learning models, like Two Towers neural networks, we’ve been able to make the Explore recommendation system even more scalable and […]
Project Cybersafe Schools: Bringing security tools for free to small K-12 school districts in the US
Announced as part of the Back to School Safely: K-12 Cybersecurity Summit at the White House on Aug 7, Proj Cybersafe Schools will support eligible K-12 public school districts with Zero Trust
A guide to designing and shipping AI developer tools
GitHub’s design experts share 10 tips and lessons for designing magical user experiences for AI applications and AI coding tools.
What helps people get comfortable on the command line?
What helps people get comfortable on the command line?
How Meta is improving password security and preserving privacy
Meta is developing new privacy-enhancing technologies (PETs) to innovate and solve problems with less data. These technologies enable teams to build and launch privacy-enhanced products in a way that’s verifiable and safeguards user data. Using state-of-the-art cryptographic techniques, we have developed Private Data Lookup (PDL) that allows users to privately query a server-side data set. […] Rea
Some tactics for writing in public
Some tactics for writing in public
Fixit 2: Meta’s next-generation auto-fixing linter
Fixit is dead! Long live Fixit 2 – the latest version of our open-source auto-fixing linter. Fixit 2 allows developers to efficiently build custom lint rules and perform auto-fixes for their codebases. Fixit 2 is available today on PyPI. Python is one of the most popular languages in use at Meta. Meta’s production engineers (PEs) […]
Using short-lived certificates to protect TLS secrets
Short-lived certificates (SLCs) are part of our latest efforts to further secure our Transport Layer Security (TLS) private keys on our edge networks. SLCs have a very short exposure compared to traditional certificates and lower the chances of a compromised private key being abused. Implementing SLCs has required us to address tradeoffs between operability and […]
Using Friction As A Feature In Machine Learning Algorithms — Smashing Magazine
Friction often has a negative connotation in user experience design, but it actually has many benefits. Its best-known use case is mitigating unintended consequences in high-risk scenarios, yet it has a new place in the age of artificial intelligence. Adding strategic friction to interfaces can lead to profound efficiency gains in machine learning algorithms.
Next.js Commerce: A headless Shopify ecommerce template built with the App Router
A high-performance ecommerce template, including support for BigCommerce, Medusa, Saleor, Shopify, and Swell.
Unmasking the top exploited vulnerabilities of 2022
The Cybersecurity and Infrastructure Security Agency (CISA) just released a report highlighting the most commonly exploited vulnerabilities of 2022.
Is your work style written in the stars?
Product Research Intern Jacky Huang and Software Engineer Willy Wu discuss their FigJam widget that matches up your work style with the stars, and how fun is the future of collaborative work.