What we learned from building an industry coalition
Securing the open source supply chain is critically important for developer communities and the entire software ecosystem. In recent years, the industry has seen an uptick in the adoption of…
Media at Scale: Callbacks vs pipelines - Shopify
Shopify recently launched the ability to add videos and 3d models to products as a native feature within the Admin section. Learn how we used pipelines to manage the long-term maintenance and understandability of the code.
Removing Panic From E-Commerce Shipping And Inventory Alerts — Smashing Magazine
There was a time when marketers used things like urgency, scarcity and FOMO to drive online shoppers to a sale. But scare tactics can actually hurt a brand’s relationships with customers. By their very nature, we run into similar problems with shipping and inventory alerts. That said, there are ways that web designers can keep panic and frustration from seeping into the shopper’s experience. If yo
Next.js: Server-side Rendering vs. Static Generation
How to use Static Generation, Incremental Static Generation, and Client-side Fetching with Next.js.
Sandboxing in Linux with zero lines of code
In this post we will review Linux seccomp and learn how to sandbox any (even a proprietary) application without writing a single line of code.
A little bit of plain Javascript can do a lot
Julia Evans:
How to Make a List Component with Emotion
I’ve been doing a bit of refactoring this week at Sentry and I noticed that we didn’t have a generic List component that we could use across projects and
Introducing the GitHub Availability Report
What is the Availability Report? Historically, GitHub has published post-incident reviews for major incidents that impact service availability. Whether we’re sharing new investments to infrastructure or detailing site downtimes, our…
Sponsored Post: ipdata, StackHawk, InterviewCamp.io, Educative, Triplebyte, Stream, Fauna - High Scalability -
Who's Hiring? * InterviewCamp.io has hours of system design content. They also do live system design discussions every week. They break down interview prep into fundamental building blocks. Try out their platform. * Triplebyte lets exceptional software engineers skip screening steps at hundreds of top tech companies like Apple, Dropbox, Mixpanel, and Instacart. Make your job search O(1), not O(n).
Creating Tiny Desktop Apps With Tauri And Vue.js — Smashing Magazine
Tauri is a toolchain for creating small, fast, and secure desktop apps from your existing HTML, CSS, and JavaScript. In this article, Kelvin explains how Tauri plays well with the progressive framework Vue.js by integrating both technologies in bundling an example web app called **nota** as a native application.
Building Cloudflare TV from scratch
Cloudflare TV is a 24x7 TV channel that takes you behind-the-scenes and let’s you hear directly from the builders working on your favorite Cloudflare products. This blog post covers the story of why we decided to build Cloudflare TV in-house and some of the technologies that make it possible.
CVE-2020-5902: Helping to protect against the F5 TMUI RCE vulnerability
Cloudflare has deployed a new managed rule protecting customers against a remote code execution vulnerability that has been found in F5 BIG-IP’s web-based Traffic Management User Interface (TMUI).
Displaying the Current Step with CSS Counters
Say you have five buttons. Each button is a step. If you click on the fourth button, you're on step 4 of 5, and you want to display that.
Improving Chromium's browser compatibility in 2020
This is exactly what I love to hear from any browser vendor:
Dropbox App Center in Beta
The Dropbox App Center is launched in beta. The App Center is a centralized place to find tools that enhance your Dropbox experience.
How BT, a 174-year-old company, continues to push the telecommunication industry forward
Learn how designers, product owners, content designers, and engineers all collaborate in Figma to drive innovation.
Bean Stalking: Growing Java beans into Remote Code Execution
In this post I’ll show how input validation which should be used to prevent malformed inputs to enter our applications, open up the doors to Remote Code Execution (RCE).
Introducing our 2019 Sustainability Report
As the world navigates the COVID-19 pandemic, companies are focusing not only on their business strategy, but also on their approach to key environmental and social issues. One of several areas we are focusing on now is our commitment to sustainable business practices and reporting. Today, we are taking another important step toward increased transparency […]
CSS News July 2020 — Smashing Magazine
If you are the sort of person who doesn’t like reading about things if you can’t use them now, then this article probably isn’t for you — we have many others for you to enjoy instead! However, if you like to know what is on the way and read more about the things you can play with in a beta version of a browser, read on! Today, Rachel Andrew takes a look at some of the interesting CSS features that
WordPress Contributors Seek Sponsorship for Improving Gutenberg Developer Docs
A couple of WordPress contributors are currently looking for folks to sponsor them to work on the documentation for the WordPress block editor (often referred
Building Serverless GraphQL API in Node with Express and Netlify
I’ve always wanted to build an API, but was scared away by just how complicated things looked. I’d read a lot of tutorials that start with “first, install
What open source project should I contribute to?
My silver bullet answer to this frequently posed question, and how to get started
Retrie: Haskell refactoring made easy
What’s new: We’ve open-sourced Retrie, a code refactoring tool for Haskell that makes codemodding faster, easier, and safer. Using Retrie, developers can efficiently rewrite large codebases (exceeding 1 million lines), express rewrites as equations in Haskell syntax instead of regular expressions, and avoid large classes of codemodding errors. Retrie’s features include the ability to rewrite […] R
Understanding Plugin Development In Gatsby — Smashing Magazine
Gatsby is a modern static-site generator that has revamped the way static websites are being built. It incorporates React, Node.js, and GraphQL to create stunning and blazing-fast websites. In this post, Aleem Isiaka will introduce Gatsby plugins, discuss the types of Gatsby plugins that exist, differentiate between the forms of Gatsby plugins, and, finally, create a comment plugin that can be use
Make Your Sites Fast, Accessible And Secure With Help From Google — Smashing Magazine
From June 30th to July 2nd, Google’s web platform team brought together the web community for [web.dev LIVE](https://web.dev/shows/web-dev-live-day-1), a digital event to talk about the latest development to the platform and tools ecosystem, give developers a chance to talk to each other and ask their burning questions to the team. Over the three days, the Google team shared a round of updates and
saturday comics: a weekly mailing list of programming comics
saturday comics: a weekly mailing list of programming comics
GitHub Action Hero: Casey Lee
The GitHub community is capable of incredible things and GitHub Actions is the tool. Do you want to automate your workflow, increase your productivity, and empower your developer experience? Then…
How To Test Your React Apps With The React Testing Library — Smashing Magazine
Testing gives confidence in written code. In the context of this article, ‘testing’ means ‘automated testing’. Without automated testing, it is significantly harder to ensure the quality of a web application of significant complexity. Fails caused by automated testing may lead to more bugs in production. In this article, Chidi Orji is going to show you how React developers can quickly start testin
Links on Performance II
Just had a couple of good performance links burning a hole in my pocket, so blogging them like a good little blogger.
How we launched docs.github.com
ICYMI: docs.github.com is the new place to discover all of GitHub’s product documentation! We recently completed a major overhaul of GitHub’s documentation websites. When you visit docs.github.com today, you’ll see…
Git Credential Manager Core: Building a universal authentication experience
Authentication is a critical component to your daily development. When working in open source, you need to prove that you have rights to update a branch with git push. Additionally…
GitHub Supports the Open Technology Fund
Last week, GitHub joined over 500 organizations signing a letter to the U.S. Congress seeking continued support for the Open Technology Fund (OTF) and its mission of funding open source…
A First Look at Reanimated 2 - Shopify
With Reanimated 2, the team at Software Mansion asked: “How would it look if there were no constraints when writing gestures and animations in React Native?” and started from there.
Differences Between Static Generated Sites And Server-Side Rendered Apps — Smashing Magazine
Statically generated sites or pre-rendering and server-side rendered applications are two modern ways to build front-end applications using JavaScript frameworks. These two modes, yet different, are often mixed up as the same thing and in this tutorial, Timi Omoyeni is going to show you the differences between them. You’ll learn what a server-side-rendered application is, as well as learn about fr
Opposing racism
Racism is antithetical to Stripe’s mission. We stand with the Black community against discrimination and police violence.
Making the WAF 40% faster
As with all Cloudflare security products, the WAF is designed to not sacrifice performance for security, but there is always room for improvement. This blog post provides a brief overview of the latest performance improvements that were rolled out to our customers.
How Clearstep simplifies the experience of finding care online
The team at Clearstep shares how they designed their symptom checking and care routing platform.
Launching docs.github.com
Leia este artigo em português Sabemos como a aprendizagem é importante para o seu sucesso na utilização do GitHub. Quando você estiver usando nossos produtos, esperamos que você se sinta…
Information And Information Architecture: The BIG Picture — Smashing Magazine
Information architecture is the process of categorizing and organizing information to create structure and meaning. To give this context, in this article Carrie Webster explores not only the basics of information architecture, but also the broader view of the information age, how we use information and how it impacts our world and our lives. Understanding the bigger picture enables us to get a muc
Leveraging Mobile Infrastructure with Data-Driven Decisions
TL;DR The pursuit wasn’t always easy, but “putting data first” has helped Spotify dramatically improve the infrastructure team’s decision-making process while improving company productivity. Raul Herbster describes the benefits, especially for mobile DevOps teams.
Erick Camacho: iOS Engineer
Usually when I’m commuting into the office, I have to get up at 7am and catch the subway. But these days, I can sleep a little later – I make myself a tea or coffee and check my emails and Slack messages at the kitchen table. Then I get to work and start to review code and pull requests that have come in overnight from developers in the US timezones.
How to test HTTP/3 and QUIC with Firefox Nightly
Now that Firefox Nightly supports HTTP/3 we thought we'd share some instructions to help you enable and test it yourselves.
Calculating differences between rows in SQL
Calculating differences between rows | How can one calculate the difference between the current and the previous row? | timeseries data
Automating Dropbox File Request Workflows using Tray.io
Learn to automate the collection and organization of files using Dropbox File Requests within a Tray.io workflow.
Looking back on the GitHub Security Lab Capture The Flag: CodeQL and chill
One year ago, the security research team at Semmle launched its first Capture the Flag (CTF), as part of the Hack In The Box (HITB) Amsterdam conference. We wanted to…
Tell candidates what to expect from your job interviews
Tell candidates what to expect from your job interviews
Finding Inspiration In The Simple Things (July 2020 Wallpapers Edition) — Smashing Magazine
What could be a better way to welcome July than with some colorful inspiration? Well, we might have something for you: wallpapers created with love by artists and designers from across the globe.
Smashing Podcast Episode 19 With Andy Bell: What Is CUBE CSS? — Smashing Magazine
We’re talking about CUBE CSS. What is it, and how does it differ from approaches such as BEM, SMACSS, and OOCSS? Drew McLellan talks to its creator, Andy Bell, to find out.
Catching up with Workers KV
Today, we’d like to share with you some of the stuff that has recently shipped in Workers KV: a new feature and an internal change that should significantly improve latency in some cases. Let’s dig in!
When Sass and New CSS Features Collide
Recently, CSS has added a lot of new cool features such as custom properties and new functions. While these things can make our lives a lot easier, they can
Styling Layout Wrappers In CSS
Two things that strike me often about the web are how many ways there are to go about the same thing and how many considerations go into even the most
When I follow TDD
Test-Driven Development doesn't always make sense, here's when it does for me.
All Hands on Deck
This story speaks to the process behind incident response at Slack and uses the May 12th, 2020 outage as an example. For a deeper technical review of the same outage, read Laura Nolan’s post, “A Terrible, Horrible, No-Good, Very Bad Day at Slack” Slack is a critical tool for millions of people, so it’s natural when…
A Terrible, Horrible, No-Good, Very Bad Day at Slack
This story describes the technical details of the problems that caused the Slack downtime on May 12th, 2020. To learn more about the process behind incident response for same outage, read Ryan Katkov’s post, “All Hands on Deck”. On May 12, 2020, Slack had our first significant outage in a long time. We published a summary…
Firebase Push Notifications In React — Smashing Magazine
In this tutorial, Chidi Orji will show you how to work with Firebase push notifications in the backend and frontend. We’ll set up the notifications system with an Express back-end server. Afterwards, you’ll listen for the notifications in a React front-end app. You will implement the backend first, then move on to the frontend. In that way, you can use whichever section appeals more to you. So let
Introducing the Billing customer portal
The new customer portal makes it even easier to create a great experience for your customers while minimizing engineering investment.
entr: rerun your build when files change
entr: rerun your build when files change
Introducing Regional Services
Cloudflare launches Regional Services, giving customers control over where their data is processed.
In Defense of a Fussy Website
The other day I was doom-scrolling twitter, and I saw a delightful article titled “The Case for Fussy Breakfasts.” I love food and especially breakfast, and
Quick Tips for High Contrast Mode
Sarah Higley has some CSS tricks up her sleeve for dealing with High Contrast Mode on Windows, which I learned is referred to as WHCM.