Techreport blog

Engineering Insights & Guides

The best problem-solving writing in software engineering — databases, performance, security, frontend and distributed systems, in one feed.

11,845 articles
Security — Avoiding npm substitution attacks

Avoiding npm substitution attacks

Supply chain attacks are a reality in modern software development. Thankfully, you can reduce the attack surface by taking precautions and being thoughtful about how you manage your dependencies. We…

IZIsaac Z. SchlueterIsaac Z. Schlueter·February 12, 2021Security
SRE & Ops — Using Betas to Deploy New Features Safely - Shopify

Using Betas to Deploy New Features Safely - Shopify

For companies like Shopify that practice continuous deployment, our code is changing multiple times every day. We have to de-risk new features to ship safely and confidently without impacting the million+ merchants using our platform. Beta flags are one approach to feature development that gives us a number of notable advantages.

SEShopify Engineering·February 12, 2021SRE & Ops
Design & UX — What Saul Bass Can Teach Us About Web Design — Smashing Magazine

What Saul Bass Can Teach Us About Web Design — Smashing Magazine

Saul Bass is a graphic design legend. Responsible for title sequences in films like North by Northwest and Anatomy of a Murder, as well as a number of iconic posters and brand logos over the years. His work, in the words of Martin Scorsese, “distilled the poetry of the modern, industrialized world.” Film credits, brand logos, posters… Saul did it all, and the principles that informed his work are

FOFrederick O BrienFrederick O Brien·February 12, 2021Design & UX
Security — WordPress 5.7: Big ol' jQuery Update

WordPress 5.7: Big ol' jQuery Update

WordPress core is making the jump from jQuery 1.12.4 to jQuery 3.5.1! This is a big deal for lots of reasons — like modern features, better DX, and security

GGGeoff GrahamGeoff Graham·February 11, 2021Security
Engineering — iframe feedback

iframe feedback

What if an <iframe> had within it another <iframe> of the exact same source? Inception, as they say. Baptise Crespy does this all-important

CCChris Coyier·February 11, 2021Engineering
Frontend — Building A Web App With React, Redux And Sanity.io — Smashing Magazine

Building A Web App With React, Redux And Sanity.io — Smashing Magazine

Headless CMS is a powerful and easy way to manage content and access API. Built on React, Sanity.io is a seamless tool for flexible content management. It can be used to build simple to complex applications from the ground up. In this article, Ifeanyi Dike explains how to build a simple listing app with Sanity.io and React. The global states will be managed with Redux and the application will be s

IDIfeanyi DikeIfeanyi Dike·February 11, 2021Frontend
Engineering — New global ID format coming to GraphQL

New global ID format coming to GraphQL

The GitHub GraphQL API has been publicly available for over 4 years now. Its usage has grown immensely over time, and we’ve learned a lot from running one of the…

WAWissam AbirachedWissam Abirached·February 10, 2021Engineering
Engineering — Technical Mentorship Reimagined: Time-bound and No Awkward Asks Necessary - Shopify

Technical Mentorship Reimagined: Time-bound and No Awkward Asks Necessary - Shopify

Authors: Sarah Naqvi and Steve Lounsbury Struggling with a concept and frantically trying to find the answers online? Are you thinking: I should just ping a teammate or Is this something I should already know? That’s fine, I’ll ask anyway. And then you do ask and get an answer and are feeling pretty darn proud of yourself and move forward. But wait, now I have about 25 follow-up questions. Sound f

SEShopify Engineering·February 10, 2021Engineering
Security — 2020 U.S. Election: Cybersecurity Analysis

2020 U.S. Election: Cybersecurity Analysis

As we protect many entities in the election space, we have the ability to identify, learn and analyze attack trends targeted at these sites that provide authoritative election information.

JJocelynJocelyn·February 9, 2021Security
Frontend — Nested Media Queries

Nested Media Queries

We don't have "regular" nesting in CSS. Maybe this becomes a thing someday, or something like it. That would be cool, although that pre-spec doesn't mention

CCChris Coyier·February 9, 2021Frontend
Frontend — An Interactive Guide to CSS Transitions

An Interactive Guide to CSS Transitions

This comprehensive guide shows how to use CSS transitions! A back-to-basics look at the fundamental building blocks we need to create microinteractions and other animations.

JWJosh W. Comeau·February 9, 2021Frontend