Techreport blog

Engineering Insights & Guides

The best problem-solving writing in software engineering — databases, performance, security, frontend and distributed systems, in one feed.

11,784 articles
Frontend — Proposal for CSS @when

Proposal for CSS @when

CSS is on a tear lately. Again, I've heard of a brand new thing I've never seen before, and again it's via Miriam: CSS Conditionals.

CCChris Coyier·September 21, 2021Frontend
Security — Apache Dubbo: All roads lead to RCE

Apache Dubbo: All roads lead to RCE

During an audit of Apache Dubbo v2.7.8 source code, I found multiple vulnerabilities enabling attackers to compromise and run arbitrary system commands on both Dubbo consumers and providers. In this blog post I detailed how I leveraged CodeQL as an audit oracle to help me find these issues.

AMAlvaro MunozAlvaro Munoz·September 21, 2021Security
Systems — How To Build Your Own Mouseless Development Environment — Smashing Magazine

How To Build Your Own Mouseless Development Environment — Smashing Magazine

Building a development environment with the shell as a keystone offers multiple benefits. You can use tools that fit nicely with each other, you can customize everything depending on your own needs, and the biggest of all, you can control your entire development environment with your keyboard. This can save a lot of cognitive energy as well as deliver a pleasant user experience.

MCMatthieu CneudeMatthieu Cneude·September 21, 2021Systems
Engineering — How Web Development Tools Are Helping Users Keep Pace With Rapid Change — Smashing Magazine

How Web Development Tools Are Helping Users Keep Pace With Rapid Change — Smashing Magazine

The last 18 months have been a time of unprecedented turbulence. As the people of the world have flooded online, businesses have joined them, using web development tools to adapt in real-time. Several years ago there seemed to be a gulf between drag-and-drop tools and full-blown web development. Today, it’s heartening to see the likes of Wix adding more code-heavy options to their repertoire.

FOFrederick O BrienFrederick O Brien·September 21, 2021Engineering
Design & UX — Embracing Asymmetrical Design

Embracing Asymmetrical Design

I'll never forget one of Karen McGrane's great lessons to the world: truncation is not a content strategy. The idea is that just clipping off text

CCChris Coyier·September 20, 2021Design & UX
Frontend — imba

imba

It's not every day you see a new processor for building websites that reinvents the syntax for HTML and CSS and JavaScript. That's what imba is doing.

CCChris Coyier·September 20, 2021Frontend
Engineering — Are Imposter Domains Re-Publishing Your Website? — Smashing Magazine

Are Imposter Domains Re-Publishing Your Website? — Smashing Magazine

In the right circumstances, your web analytics or real user measurement data can offer visibility into the world of imposter domains, used by web scrapers to re-publish your site content on their servers. Content scraping is a fact of life on the Internet. When you think of web scraping, you probably do not think about the scrapers turning around and immediately serving your entire, whole page con

KHKen HarkerKen Harker·September 20, 2021Engineering