Techreport blog

Engineering Insights & Guides

The best problem-solving writing in software engineering — databases, performance, security, frontend and distributed systems, in one feed.

11,842 articles
AI & ML — Conversation: LLMs and Building Abstractions

Conversation: LLMs and Building Abstractions

Unmesh and Martin exchanged some emails about building abstractions while working with an LLM. They talk about the influence of Brooks's framing of essential and accidental complexity, and how this carries over to thinking of programming as both growing and applying abstractions. An LLM is useful in both modes of working, but has to be used differently. We can't reduce growing abstractions to a st

UJUnmesh Joshi and Martin Fowler·August 26, 2025AI & ML
Performance — Enabling Kotlin incremental compilation on Buck2

Enabling Kotlin incremental compilation on Buck2

The Kotlin incremental compiler has been a true gem for developers chasing faster compilation since its introduction in build tools. Now, we’re excited to bring its benefits to Buck2 – Meta’s build system – to unlock even more speed and efficiency for Kotlin developers. Unlike a traditional compiler that recompiles an entire module every time, […]

PHPhil Hornshaw·August 26, 2025Performance
Frontend — Optimizing PWAs For Different Display Modes — Smashing Magazine

Optimizing PWAs For Different Display Modes — Smashing Magazine

Progressive Web Apps (PWAs) are a great way to make apps built for the web feel native, but in moving away from a browser environment, we can introduce usability issues. This article covers how we can modify our app depending on what display mode is applied to mitigate these issues.

DCDeclan ChidlowDeclan Chidlow·August 26, 2025Frontend
Security — Unmasking the Unseen: Your Guide to Taming Shadow AI with Cloudflare One

Unmasking the Unseen: Your Guide to Taming Shadow AI with Cloudflare One

The digital landscape of corporate environments has always been a battleground between efficiency and security. For years, this played out in the form of "Shadow IT" — employees using unsanctioned laptops or cloud services to get their jobs done faster. Security teams became masters at hunting these rogue systems, setting up firewalls and policies to bring order to the chaos. But the new frontier

NJNoelle, Joey SteinbergerNoelle, Joey Steinberger·August 25, 2025Security
Security — Safeguarding VS Code against prompt injections

Safeguarding VS Code against prompt injections

When a chat conversation is poisoned by indirect prompt injection, it can result in the exposure of GitHub tokens, confidential files, or even the execution of arbitrary code without the user’s explicit consent. In this blog post, we’ll explain which VS Code features may reduce these risks.

MSMichael StepankinMichael Stepankin·August 25, 2025Security
Performance — MoQ: Refactoring the Internet's real-time media stack

MoQ: Refactoring the Internet's real-time media stack

For years, developers have been stitching together multiple protocols for real-time media, trading latency for scale and simplicity. Media over QUIC (MoQ) is a new IETF standard that resolves this conflict, creating a single foundation for sub-second, interactive streaming at a global scale.

MEMike English, RenanMike English, Renan·August 22, 2025Performance
Frontend — 3D Layered Text: Interactivity and Dynamicism

3D Layered Text: Interactivity and Dynamicism

In this third and final chapter, we’re stepping into interactivity by adding JavaScript, starting with a simple :hover effect, and ending with a fully responsive bulging text that follows your mouse in real time.

ASAmit SheenAmit Sheen·August 22, 2025Frontend
Frontend — The science of loudness

The science of loudness

My watch has a “Noise” app: it shows d B , for decibels. Your browser does not support the video tag. My amp has a volume knob, which also shows decibels, although.. negative ones, this time. Your browser does not support the video tag. And finally, my video editing software has a ton of meters — which are all in decibel or decibel-adjacent units. Your browser does not support the video tag. How d

AWAmos WengerAmos Wenger·August 22, 2025Frontend
Security — How a volunteer-run wildfire site in Portugal stayed online during DDoS attacks

How a volunteer-run wildfire site in Portugal stayed online during DDoS attacks

Fogos.pt, a volunteer-run wildfire tracker in Portugal, grew from a side project into a critical national resource used by citizens, media, and government. During 2025 fire season it was hit by DDoS attacks, but stayed online thanks to Cloudflare’s protections under Project Galileo.How a volunteer-run wildfire site in Portugal stayed online during DDoS attacks

JTJoao TomeJoao Tome·August 21, 2025Security
AI & ML — How we built AI face cropping for Images

How we built AI face cropping for Images

AI face cropping for Images automatically crops around faces in an image. Here’s how we built this feature on Workers AI to scale for general availability.

DDDeanna, Diretnan DomnanDeanna, Diretnan Domnan·August 20, 2025AI & ML
Engineering — 3D Layered Text: Motion and Variations

3D Layered Text: Motion and Variations

In this chapter, we will explore ways to animate the effect, add transitions, and play with different variations. We will look at how motion can enhance depth, and how subtle tweaks can create a whole new vibe.

ASAmit SheenAmit Sheen·August 20, 2025Engineering