The Layout Maestro Course
Layout. It's one of those easy-to-learn, difficult-to-master things, like they say about playing bass. Not because it's innately difficult to, say, place two
In good company: How retailers use Figma to elevate e-commerce
Brands like Nuuly, Ruggable, and GitHub are designing multidimensional experiences that build customer trust, serve employee needs, and uphold core values.
Quicksilver v2: evolution of a globally distributed key-value store (Part 1)
This blog post is the first of a series, in which we share our journey in redesigning Quicksilver — Cloudflare’s distributed key-value store that serves over 3 billion keys per second globally. Here we discuss how we migrated from full datasets on each machine to a more scalable distributed design.
Setting Sail: Installing Cloud Native PostgreSQL (CNPG)
This post is an introduction for CNPG(Cloud Native PG) and describes how to create a single instance cluster.
Modeling CORS frameworks with CodeQL to find security vulnerabilities
Discover how to increase the coverage of your CodeQL CORS security by modeling developer headers and frameworks.
Unmasking The Magic: The Wizard Of Oz Method For UX Research — Smashing Magazine
The Wizard of Oz method is a proven UX research tool that simulates real interactions to uncover authentic user behavior. Victor Yocco unpacks the core principles of the WOZ method, explores advanced real-world applications, and highlights its unique value, including its relevance in the emerging field of agentic AI.
Beyond prompt crafting: How to be a better partner for your AI pair programmer
Ensuring quality code suggestions from Copilot goes beyond the perfect prompt. Context is key to success when working with your AI pair programmer.
How TimescaleDB helped us scale analytics and reporting
Cloudflare chose TimescaleDB to power its Digital Experience Monitoring and Zero Trust Analytics products. TimescaleDB is a PostgreSQL extension designed for real-time analytics and time series data, and it helped us reduce query latency by 5–35x and cut storage footprint by 33x.
Swiss PGDay 2025 - New experiences, Postgres and Karl!
This blog describes the experience related to Swiss PGday 2025. Dive in and checkout some captivating moments from the event.
Git security vulnerabilities announced
Today, the Git project released new versions to address seven security vulnerabilities that affect all prior versions of Git.
Droip: The Modern Website Builder WordPress Needed — Smashing Magazine
Traditional page builders have shaped how we build WordPress sites for years. Let’s take a closer look at [Droip](https://droip.com/), a modern, no-code visual builder, and explore how it redefines the experience with cleaner performance, full design freedom, and zero plugin dependency.
Introducing simple and secure egress policies by hostname in Cloudflare’s SASE platform
Cloudflare's SASE platform now offers egress policies by hostname, domain, content category, and application in open beta. This makes it easy to author simple and secure policies that control the source IP addresses that an organization's Internet traffic uses to connect to external services.
Documenting what you're willing to support (and not)
Design Guidelines For Better Notifications UX — Smashing Magazine
As always in design, timing matters, and so do timely notifications. Let’s explore how we might improve the notifications UX. More design patterns in our Smart Interface Design Patterns, a friendly video course on UX and design patterns by Vitaly — from complex data tables and nested filters to FAQs and error messages.
Augmented commerce: Machine learning at Shopify (2025) - Shopify
Discover how Shopify uses machine learning, data, and advanced tools to help merchants succeed in the ever-changing game of commerce.
How we shaped the visual identity for Config 2025
Figma’s Brand Studio designed an immersive conference that celebrated the spirit of makership at every turn.
CVE-2025-53367: An exploitable out-of-bounds write in DjVuLibre
DjVuLibre has a vulnerability that could enable an attacker to gain code execution on a Linux Desktop system when the user tries to open a crafted document.
Rolling out Santa without freezing productivity: Tips from securing Figma’s fleet
Here's how we scaled Santa, an open-source binary authorization tool, across all Figmates’ laptops to boost endpoint security while keeping workflows seamless.
Figma moves closer to its community with Latin American Spanish localization
Latin American Spanish becomes Figma’s latest language for product and support localization.
Expert Generalists
As computer systems get more sophisticated we've seen a growing trend to value deep specialists. But we've found that our most effective colleagues have a skill in spanning many specialties. We are thus starting to explicitly recognize this as a first-class skill of “Expert Generalist”. We can identify the key characteristics of people with this skill - and thus recruit and promote based on it. We
5 ways to transform your workflow using GitHub Copilot and MCP
Learn how to streamline your development workflow with five different MCP use cases.
Driving Content Delivery Efficiency Through Classifying Cache Misses
The mission of Open Connect, our dedicated content delivery network (CDN), is to deliver the best quality of experience (QoE) to our members. By localizing our Open Connect Appliances (OCAs), we…
CSS Intelligence: Speculating On The Future Of A Smarter Language — Smashing Magazine
CSS has evolved from a purely presentational language into one with growing logical powers — thanks to features like container queries, relational pseudo-classes, and the `if()` function. Is it still just for styling, or is it becoming something more? Gabriel Shoyombo explores how smart CSS has become over the years, where it is heading, the challenges it addresses, whether it is becoming too comp
From Googlebot to GPTBot: Who’s crawling your site in 2025
From May 2024 to May 2025, crawler traffic rose 18%, with GPTBot growing 305% and Googlebot 96%. This blog post explores crawling activity focused on AI and search web crawlers, and how 14% of top domains now use robots.txt rules to manage them.
