Plop: Low-overhead profiling for Python
What we learned at our first JS Guild Summit
Hilary Mason Speaks at Dropbox
New developer guide and branding guidelines published
8 days to DBX!
Live webinar tomorrow: Dropbox + Xamarin
Dropbox at developer events in November
Meet Securitybot: Open Sourcing Automated Security at Scale
Towards better vendor security assessments
Offensive testing to make Dropbox (and the world) a safer place
Preventing cross-site attacks using same-site cookies
How Dropbox securely stores your passwords
![Engineering — [CSP] Third Party Integrations and Privilege Separation](/covers/ec7ea08c09.webp?v=8564866)
[CSP] Third Party Integrations and Privilege Separation
![Engineering — [CSP] The Unexpected Eval](/covers/ad7421a102.webp?v=8564867)
[CSP] The Unexpected Eval
![Engineering — [CSP] On Reporting and Filtering](/covers/15dd8e5e68.webp?v=8564867)
[CSP] On Reporting and Filtering
Dropbox Bug Bounty Program: Best Practices
Avoid Keyboard Event-Related Bugs In Browser-Based Transliteration — Smashing Magazine
Transliteration is a popular way to input non-English characters using an English keyboard. The typical method of implementing this is via keyboard event capturing but there’s no uniform support from mobile browsers. In this article, Sandamal Siripathi explains a new method to eliminate such browser-related problems when developing web apps that use transliteration.
The History of the URL
January 11th, 1982, 22 computer scientists met to discuss an issue with ‘computer mail’ (now known as email).
The Slideout Footer
A fascinating new site called The Markup just launched. Tagline: Big Tech Is Watching You. We’re Watching Big Tech. Great work from Upstatement. The
Five reasons why organizations should invest in open source
Learn about the top five reasons why leading enterprise organizations are investing in open source.
Preventing performance regressions with Health Compass and Incident Tracker
Facebook’s codebase changes frequently each day as engineers develop new features and optimizations for our apps. If not handled properly, each of these changes could potentially regress performance for billions of people around the world. At each step in the development process, we apply a suite of automated regression detection tools to mitigate these risks […]
Popular posts from leaky bug-tracking systems
Introducing Alpine.js: A Tiny JavaScript Framework — Smashing Magazine
Ever built a website and reached for jQuery, Bootstrap, Vue.js or React to acheive some basic user interaction? Alpine.js is a fraction of the size of these frameworks because it involves no build steps and provides all of the tools you need to build a basic user interface. Today, Phil Smith is going to take a closer look at Alpine.js and how it can replace JQuery or larger JavaScript libraries to
Pwned Passwords Padding (ft. Lava Lamps and Workers)
Starting today, we are offering a new security advancement in the Pwned Passwords API - API clients can receive responses padded with random data.
Why I’m Excited to Join Cloudflare as its First CIO
I am delighted to share that I have joined Cloudflare as its first Chief Information Officer to help scale the company in this new phase of its business.
What React Does (and Doesn't Do)
With a name as big as React, it's bound to cause some Stream-Crossing Confusion, as I like to call it. How do you center a <div> in React? Dave Ceddia:
How We Created a Static Site That Generates Tartan Patterns in SVG
Tartan is a patterned cloth that’s typically associated with Scotland, particularly their fashionable kilts. On tartanify.com, we gathered over 5,000 tartan
Reduce WAL by increasing checkpoint distance
Adjusting checkpoints is useful when tuning a server and improves the database performance. Furthermore, it helps to reduce WAL.
Finding confidence in design decisions
We have all doubted ourselves and our decisions at some point in our careers. This activity will help guide you through your confidence-building journey.
I tried to fix it, and failed miserably
The Evolution of Kit: Automating Marketing Using Machine Learning - Shopify
I’ll talk about the engineering decision my team made to transform Kit from a rule based system to an artificially-intelligent assistant.
Why Are We Talking About CSS4? — Smashing Magazine
Around the web and within the CSS Working Group, there has been some discussion about whether we should specify a version of CSS — perhaps naming it CSS4. In this article, Rachel Andrew rounds up some of the pros and cons of doing so, and asks for your feedback on the suggestion.
Addressing the Web’s Client-Side Security Challenge
Modern web architecture relies heavily on JavaScript and enabling third-party code to make client-side network requests. These innovations are built on client-heavy frameworks such as Angular, Ember, React, and Backbone that leverage the processing power of the browser
RPKI and the RTR protocol
Today’s Internet requires stronger protection within its core routing system and as we have already said: it's high time to stop BGP route leaks and hijacks by deploying operationally-excellent RPKI!
What I Like About Craft CMS
Looking at the CMS scene today, there are upwards of 150 options to choose from — and that’s not including whatever home-grown custom alternatives people
Making Things Better: Redefining the Technical Possibilities of CSS
Robin recently lamented the common complaint that CSS is frustrating. There are misconceptions about what it is and what it does. There are debates about what
4 Ways to Animate the Color of a Text Link on Hover
Let’s create a pure CSS effect that changes the color of a text link on hover… but slide that new color in instead of simply swapping colors.
Vue.js: The Documentary
Hey how cool! A documentary about Vue! Good timing as it looks like VueConf is happening right now. (Reminder we have a site for conferences to tell you stuff
COVID-19 update: supporting our employees and community
Learn more about decisions we’ve made to protect our employees, our community, and our customers in response to COVID-19.
How Netflix uses Druid for Real-time Insights to Ensure a High-Quality Experience
Ensuring a consistently great Netflix experience while continuously pushing innovative technology updates is no easy feat. How can we be confident that updates are not harming our users? And that…
Mind those emoji if you're working at this place
When You Find A Good Idea, Look For A Better One — Smashing Magazine
Prototyping helps to formulate the main trajectory of the design by framing your mind around a continuous pursuit of better concepts. Any team that makes a prototyping integral part of their design is motivated to search for a better solution. Today, Tony Kim will introduce you to ProtoPie, a tool that will help you prototype in the best way possible to validate an idea and bring it to life.
When Bloom filters don't bloom
Last month finally I had an opportunity to use Bloom filters. I became fascinated with the promise of this data structure, but I quickly realized it had some drawbacks. This blog post is the tale of my brief love affair with Bloom filters.
Selectors Explained
Have you ever found yourself either writing a CSS selector that winds up looking confusing as heck, or seen one while reading through someone's code? That
Unfortunately, clip-path: path() is Still a No-Go
I was extremely excited when I first heard that clip-path: path() was coming to Firefox. Just imagine being able to easily code a breathing box like the one
The Elephant in the Architecture
We, and our colleagues, are often called on to perform architectural assessments for our clients. When we do this, the architects involved with these systems will talk about the performance of these systems, how resilient they are to faults, and how they are designed to evolve to easily support new capabilities. The elephant that rarely comes up, however, is how different systems contribute to bus
The Perils of Hydration
A surprisingly-common misconception can lead to big rendering issues that are difficult to debug. This deep-dive tutorial examines how React and Gatsby can be used to pre-render content, and how we can work around the constraints to build dynamic, personalized web apps.
Stop using isLoading booleans
Why using a status enum (or even better: a **state machine**) will help your app stay bug free
Project LightSpeed: Rewriting the Messenger codebase for a faster, smaller, and simpler messaging app
We are excited to begin rolling out the new version of Messenger on iOS. To make the Messenger iOS app faster, smaller, and simpler, we rebuilt the architecture and rewrote the entire codebase, which is an incredibly rare undertaking and involved engineers from across the company. Compared with the previous iOS version, this new Messenger […]
Pondering the reasons why you should work somewhere
Inspired Design Decisions With Neville Brody: Design Cannot Remain Neutral — Smashing Magazine
In this sixth instalment of Inspired Design Decisions, Andy Clarke will explore how British art director Neville Brody and in particular his work on The Face Magazine inspires his designs for the web. How do we use blend modes to add depth to our designs? How do we use vertical text for impact? How can we use clipping paths to bring in character and energy to a design? In this article, Andrew Clar
Why Cloudflare Chose AMD EPYC for Gen X Servers
Looking back at this week's posts on the design, specifications, and performance of Cloudflare’s Gen X servers using AMD CPUs. Every server can run every service. This architectural decision has helped us achieve higher efficiency across the Cloudflare network.
The growth of command line options, 1979-Present
Tony Jebara: VP of Engineering and Head of Machine Learning
Mornings start with a wake-up call from my three young children. I get them fed, dressed and ready for school. But first, I need an espresso – that’s absolutely necessary if I’m going to get anything done! I don’t really go online until I’ve dropped off the kids around 8.15am, then I hop on the subway and head downtown, checking my email and Slack messages en route.
What the Heck is Backstage Anyway?
Yesterday, we released the open source version of , our homegrown developer portal. And we learned a thing or two via the feedback we received. So, I wanted to take this opportunity to further explain what we’re trying to do with Backstage — and more importantly, what we want to give to the greater engineering community beyond Spotify.
Per Wendin: Head of Patents
I get up, have breakfast and am ready to leave the house by 7.30 am. Every day, I cycle the 12km to and from the office—it’s mostly on safe, car-free bike tracks, and I love having the time to clear my head and think freely. It doesn’t even matter what the weather’s like—I’ll cycle, rain or shine.
Spotify’s New Podcast API: From Design to Launch
This week, we launched our ! Third-party apps can now connect to Spotify and manage a user’s podcast library, search our podcast catalog, or fetch detailed information about podcast shows and episodes.
Going Beyond Black History Month
Around this time of year in the United States, African-Americans are often tasked with explaining why we spend 28 (or in the case of leap year 29) days celebrating the contributions our ancestors made to this country.
