Techreport blog

Engineering Insights & Guides

The best problem-solving writing in software engineering — databases, performance, security, frontend and distributed systems, in one feed.

11,851 articles
Engineering — Running Zig with WASI on Cloudflare Workers

Running Zig with WASI on Cloudflare Workers

After the recent announcement regarding WASI support in Workers I decided to see what it would take to get code written in Zig to run as a Worker, and it turned out to be pretty trivial. This post documents the process I followed

DHDaniel HarperDaniel Harper·August 1, 2022Engineering
Frontend — Fluid Sizing Instead Of Multiple Media Queries? — Smashing Magazine

Fluid Sizing Instead Of Multiple Media Queries? — Smashing Magazine

If you like math and CSS, you’ll love this one. We don’t need to use media queries to change the values of some CSS properties — *font-size*, *padding*, *margin* etc. — depending on the viewport width, with the CSS `clamp` function. But: we still need to use media queries for changing colors, borders, shadows and other CSS styles.

RYRuslan YevychRuslan Yevych·August 1, 2022Frontend
Security — How We Maintain Security Testing within the Software Development Life Cycle

How We Maintain Security Testing within the Software Development Life Cycle

TL;DR The (SDLC) has always been followed by functional testing to ensure software solutions have all the necessary features and functions. Because of the growing number of cyberattacks, software development stakeholders have been forced to implement security testing as the main track in SDLC to prevent vulnerabilities and flaws in applications or software (assets). A software security assessment

SESpotify Engineering·August 1, 2022Security
Engineering — Memories Of August (2022 Desktop Wallpapers Edition) — Smashing Magazine

Memories Of August (2022 Desktop Wallpapers Edition) — Smashing Magazine

Do you need a little inspiration boost? Well, then our new batch of desktop wallpapers is for you. In this post, you’ll find their wallpapers for August 2022. All of them come in versions with and without a calendar, so no matter if you need to count down the days to a big deadline or plan to use your favorite wallpaper even after the month has ended, we’ve got you covered. Designed by artists and

CMCosima MielkeCosima Mielke·July 31, 2022Engineering
Frontend — Recreating MDN's Truncated Text Effect

Recreating MDN's Truncated Text Effect

It's no secret that MDN rolled out a new design back in March. It's gorgeous! And there are some sweet CSS-y gems in it that are fun to look at. One of those

GGGeoff GrahamGeoff Graham·July 28, 2022Frontend
Security — Five security principles for billions of messages across Meta’s apps

Five security principles for billions of messages across Meta’s apps

At Meta, our messaging apps help billions of people around the world stay connected to those who matter most to them. This scale brings potential threats from criminals and hackers, so we have a responsibility to keep people and their data safe. We’re sharing a set of principles to ensure that security is central to […]

CWChris Wiltz·July 28, 2022Security
Frontend — Testable Frontend: The Good, The Bad And The Flaky — Smashing Magazine

Testable Frontend: The Good, The Bad And The Flaky — Smashing Magazine

How to organize their testing between unit, integration, and E2E testing and how to test their UI components? Testing is not just about tools and processes. It’s about architecture. In this article, Noam Rosenthal will share his experience on how to organize testing and find the right balance between front-end and subsystems and between different strategies.

NRNoam RosenthalNoam Rosenthal·July 28, 2022Frontend
Engineering — Release Radar

Release Radar

It’s been a crazy couple of months with the end of financial year and lots of products shipping. Our community has been hard at work shipping projects too. These projects…

MDMichelle DukeMichelle Duke·July 27, 2022Engineering
Security — Corrupting memory without memory corruption

Corrupting memory without memory corruption

In this post I’ll exploit CVE-2022-20186, a vulnerability in the Arm Mali GPU kernel driver and use it to gain arbitrary kernel memory access from an untrusted app on a Pixel 6. This then allows me to gain root and disable SELinux. This vulnerability highlights the strong primitives that an attacker may gain by exploiting errors in the memory management code of GPU drivers.

MYMan Yue MoMan Yue Mo·July 27, 2022Security
SRE & Ops — Programming languages endorsed for server-side use at Meta

Programming languages endorsed for server-side use at Meta

Supporting a programming language at Meta is a very careful and deliberate decision. We’re sharing our internal programming language guidance that helps our engineers and developers choose the best language for their projects. Rust is the latest addition to Meta’s list of supported server-side languages. At Meta, we use many different programming languages for a […]

CWChris Wiltz·July 27, 2022SRE & Ops
Security — Introducing even more security enhancements to npm

Introducing even more security enhancements to npm

New npm security enhancements include an improved login and publish experience with the npm CLI, connected GitHub and Twitter accounts, and a new CLI command to verify the integrity of packages in npm.

MBMyles Borins, Monish MohanMyles Borins, Monish Mohan·July 26, 2022Security