Techreport blog

Engineering Insights & Guides

The best problem-solving writing in software engineering — databases, performance, security, frontend and distributed systems, in one feed.

11,851 articles
Frontend — Deploying key transparency at WhatsApp

Deploying key transparency at WhatsApp

WhatsApp has launched a new cryptographic security feature to automatically verify a secured connection based on key transparency. The feature requires no additional actions or steps from users and helps ensure that a conversation is secure. Key transparency solutions help strengthen the guarantee that end-to-end encryption provides to private, personal messaging applications in a transparent

CWChris Wiltz·April 13, 2023Frontend
Frontend — How Device Verification protects your WhatsApp account

How Device Verification protects your WhatsApp account

WhatsApp has launched a new security feature that further helps prevent attackers from using vectors like on-device malware. This security feature, called Device Verification, requires no action or additional steps from users and helps protect your account. This feature is part of our broader work to increase security for our users from the growing threat […]

CWChris Wiltz·April 13, 2023Frontend
Engineering — Internet disruptions overview for Q1 2023

Internet disruptions overview for Q1 2023

In this post, we review selected Internet disruptions observed by Cloudflare during the first quarter of 2023, supported by traffic graphs from Cloudflare Radar and other internal Cloudflare tools, and grouped by associated cause or common geography

DBDavid BelsonDavid Belson·April 12, 2023Engineering
Security — DDoS threat report for 2023 Q1

DDoS threat report for 2023 Q1

Threat actors kicked off 2023 with a bang. The start of the year was characterized by a series of hacktivist campaigns against Western targets, and record-breaking hyper volumetric attacks

OJOmer, JorgeOmer, Jorge·April 11, 2023Security
Frontend — Why xHE-AAC is being embraced at Meta

Why xHE-AAC is being embraced at Meta

We’re sharing how Meta delivers high-quality audio at scale with the xHE-AAC audio codec. xHE-AAC has already been deployed on Facebook and Instagram to provide enhanced audio for features like Reels and Stories. At Meta, we serve every media use case imaginable for billions of people across the world — from short-form, user-generated content, such […]

CWChris Wiltz·April 11, 2023Frontend
Engineering — Real-time Messaging

Real-time Messaging

Did you know that ground stations transmit signals to satellites 22,236 miles above the equator in geostationary orbits, and that those signals are then beamed down to the entire North American subcontinent? Satellite radios today serve hundreds of channels across 9,540,000 square miles. Unless you’re working at a secret military facility, deep underground, you can…

STSameera Thangudu·April 11, 2023Engineering
Engineering — Game Bytes

Game Bytes

Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!

LRLee ReillyLee Reilly·April 7, 2023Engineering
Engineering — Protect your domain with Zone Holds

Protect your domain with Zone Holds

Protect against accidental additions of your domain, subdomain, or custom hostnames in other accounts with Zone Holds. Available by default for all enterprise customers

GGarrettGarrett·April 6, 2023Engineering
Performance — Building GitHub with Ruby and Rails

Building GitHub with Ruby and Rails

Since the beginning, GitHub.com has been a Ruby on Rails monolith. Today, the application is nearly two million lines of code and more than 1,000 engineers collaborate on it daily.…

AHAdam HessAdam Hess·April 6, 2023Performance
Security — Pwning Pixel 6 with a leftover patch

Pwning Pixel 6 with a leftover patch

In this post, I’ll look at a security-related change in version r40p0 of the Arm Mali driver that was AWOL in the January update of the Pixel bulletin, where other patches from r40p0 was applied, and how these two lines of changes can be exploited to gain arbitrary kernel code execution and root from a malicious app. This highlights how treacherous it can be when backporting security changes.

MYMan Yue MoMan Yue Mo·April 6, 2023Security
SRE & Ops — Build faster with Buck2: Our open source build system

Build faster with Buck2: Our open source build system

Buck2, our new open source, large-scale build system, is now available on GitHub. Buck2 is an extensible and performant build system written in Rust and designed to make your build experience faster and more efficient. In our internal tests at Meta, we observed that Buck2 completed builds 2x as fast as Buck1. Buck2, Meta’s open […]

CWChris Wiltz·April 6, 2023SRE & Ops