Techreport blog

Engineering Insights & Guides

The best problem-solving writing in software engineering — databases, performance, security, frontend and distributed systems, in one feed.

11,845 articles
SRE & Ops — Getting started with DevOps automation

Getting started with DevOps automation

This is the second post in our series on DevOps fundamentals. For a guide to what DevOps is and answers to common DevOps myths check out part one. What role…

JMJared MurrellJared Murrell·October 29, 2020SRE & Ops
Databases — How to Introduce Composite Primary Keys in Rails - Shopify

How to Introduce Composite Primary Keys in Rails - Shopify

One line of code can 5x your Rails application performance. What if you could make a small change to your database design that would unlock massively more efficient data access? At Shopify, we dusted off some old database principles and did exactly that with the primary Rails application.

SEShopify Engineering·October 29, 2020Databases
Frontend — How To Build A GraphQL Server Using Next.js API Routes — Smashing Magazine

How To Build A GraphQL Server Using Next.js API Routes — Smashing Magazine

With this guide, Ibrahima Ndaw will teach you the basics of Next.js API Routes. He will start by explaining what they are and why API Routes are useful compared to REST or GraphQL APIs. Then, he will guide you through a step by step tutorial on how to build your very first GraphQL server with Next.js and the Github API. If you want to extend your React or Next.js skills to the server-side and be a

INIbrahima NdawIbrahima Ndaw·October 29, 2020Frontend
Engineering — Building with Dropbox Webinar

Building with Dropbox Webinar

Join our webinar to learn about Dropbox developer tools, meet our Developer Evangelists, and get started building with the Dropbox API.

MRMarcel Ribas·October 28, 2020Engineering
Engineering — How We Run Online Workshops — Smashing Magazine

How We Run Online Workshops — Smashing Magazine

Many companies had to struggle in one way or another in the last couple of months. We had to get creative, and we had to rethink our conferences and workshops altogether. In this article, CEO and co-founder Vitaly Friedman shares how Smashing runs online workshops and online conferences these days, and the lessons learned along the way.

VFVitaly FriedmanVitaly Friedman·October 28, 2020Engineering
Systems — Diving into /proc/[pid]/mem

Diving into /proc/[pid]/mem

A few months ago, after reading about Cloudflare doubling its intern class, I quickly dusted off my CV and applied for an internship. Long story short: now, a couple of months later, I found myself staring at Linux kernel code and adding a pretty cool feature to gVisor.

LMLennart, Marek MajkowskiLennart, Marek Majkowski·October 27, 2020Systems
Security — Exploiting a textbook use-after-free security vulnerability in Chrome

Exploiting a textbook use-after-free security vulnerability in Chrome

In this post I’ll give details about how to exploit CVE-2020-6449, a use-after-free (UAF) in the WebAudio module of Chrome that I discovered in March 2020. I’ll give an outline of the general strategy to exploit this type of UAF to achieve a sandboxed RCE in Chrome by a single click (and perhaps a 2 minute wait) on a malicious website.

MYMan Yue MoMan Yue Mo·October 27, 2020Security
Security — Authentication In Vue.js — Smashing Magazine

Authentication In Vue.js — Smashing Magazine

Every web application that handles user-specific data needs to implement authentication. Knowing how to do this is important for Vue developers, and that’s what this article aims to shed the spotlight on. Today, Precious Ndubueze brings you a tutorial that will prove to be useful for beginner developers who want to learn about authentication in Vue. In order to be able to follow along, you’ll need

PNPrecious NdubuezePrecious Ndubueze·October 27, 2020Security