Build Zero Trust rules with managed devices
Starting today, your team can use Cloudflare Access to build rules that only allow users to connect to applications from a device that your enterprise manages.
Inside Cloudflare: Preventing Account Takeovers
Throughout the day, Cloudflare has published blog posts on products created to secure our customers from credential stuffing bots, detect users with compromised credentials, and block users from proxy services. But what do we do inside Cloudflare to prevent account takeovers on our own applications?
ShopTalk Patreon
Dave and I launched a Patreon for ShopTalk Show. You get two completely priceless things for backing us:
You want margin-inline-start
David Bushell in ”Changing CSS for Good“:
When to use tablespaces in PostgreSQL
This article explains what PostgreSQL tablespaces are, when to use them and how they are different from Oracle tablespaces.
New Paper Endpoints Released in Preview
New endpoints are available to interact with Paper in the File System using the Dropbox API.
Behind the scenes of creating the official Figma kit for Tailwind UI
How the team at Tailwind Labs created a set of fully responsive components
Fuzzing sockets: Apache HTTP, Part 2: Custom Interceptors
In this second installment, I will focus on how to build our own custom ASAN interceptors in order to catch memory bugs when custom memory pools are implemented and also on how to intercept file system syscalls to detect logic errors in the target application.
Introducing new push notifications, scheduling, releases and more on GitHub Mobile
GitHub Mobile helps you get work done when you’re on the go, wherever you go. You’ve told us that you’d like more options for push notifications and viewing releases on…
GitHub Desktop now supports cherry-picking
GitHub Desktop aims to provide an intuitive way for users to complete everyday Git and GitHub workflows. One of our most requested features from the past year is cherry-picking, and…
GitHub Advanced Security: Introducing security overview beta and general availability of secret scanning for private repositories
GitHub Advanced Security helps you create secure applications with a community-driven, developer-first approach. Today, we are excited to announce two updates: Beta of the new security overview for organizations and…
Building a Magical 3D Button
Every action we take on the web starts with a button click, and yet most buttons are ho-hum and uninspired. In this tutorial, we'll build an animated 3D button with HTML and CSS that sparks joy.
Choosing A New Serverless Database Technology At An Agency (Case Study) — Smashing Magazine
Choosing to use a new technology can often bring much desired productivity, security, and efficiency to a project. It is also fraught with risk and uncertainty. How and when to adopt a new technology for client projects is at the heart of leading a great agency. In this article, Michael Rispoli explains how he evaluated the decision of whether or not to adopt a serverless database for client proje
A new Cloudflare Web Application Firewall
Today we are announcing a new Cloudflare Web Application Firewall for all Cloudflare paid zone customers.
:where() has a cool specificity trick, too.
There is a lot of hype on the :is() pseudo-selector lately, probably because now that Safari 14 has it, it's supported across all the major browsers. You've
Women’s History Month spotlight: Honoring women developers
March is Women’s History Month: a unique time to celebrate the myriad impact of women leaders, both throughout history and today. It’s also a time to reflect on the challenges…
SVG Generators — Smashing Magazine
In a new series of posts, we highlight some of the useful tools and techniques for developers and designers. Last weeks, we’ve covered CSS auditing tools, CSS generators and accessible front-end components. This time around, Iris Lješnjanin will take a look at SVG generators — for everything from shapes and backgrounds to SVG path visualizers and SVG → JSX generators.
Advancing connectivity between the Asia-Pacific region and North America
We are announcing two vital new subsea cables to connect Singapore, Indonesia, and North America. These will be the first transpacific cables through a new diverse route crossing the Java Sea and will increase overall transpacific capacity by 70 percent. We are committed to bringing more people online to a faster internet. As part of […]
Keyless SSL now supports FIPS 140-2 L3 hardware security module (HSM) offerings from all major cloud providers
Private encryption keys stored in hardware security module offerings from all major cloud providers can now be used to secure HTTPS connections at Cloudflare’s global edge.
Introducing: Advanced Certificate Manager
Today, we are excited to announce that dedicated certs are getting an upgrade… and a new name… introducing Advanced Certificate Manager! Advanced Certificate Manager is a flexible and customizable way to manage your certificates on Cloudflare.
Heartbleed Revisited
TLS key compromise is a risk for all web services. Taking lessons from Heartbleed, Cloudflare offers the latest features that make key compromise less of a risk.
Introducing Super Bot Fight Mode
Beginning immediately, any Cloudflare user with a Pro or Business site can take new action against bots. We’ve added advanced features in the dashboard and some exciting updates to analytics.
Mitigating Bot Attacks against Cloudflare
The word “bots” on the Internet is a fairly loaded one. My earliest ‘bot’ experience was on IRC, where bots were quite helpful in making sure your favorite channel didn’t get taken over by malicious users and allowed for fun games of trivia.
Announcing API Abuse Detection
Today, we are announcing early access to API Abuse Detection. This technology will identify, secure, and protect API endpoints with unsupervised learning.
Automating contract management with Dropbox and Integromat
Learn how to automate workflows like contract management with Integromat’s new Dropbox integration
How to Build a Web App with and without Rails Libraries - Shopify
Ruby on Rails is a web framework that contains many libraries you’d need to create and deploy a successful web application. We often take for granted the ability to run rails new to create a fully functional web application with tons of built-in features.
Growing UX Maturity: Knowledge Sharing And Mentorship (Part 2) — Smashing Magazine
UX practitioners can play an important role in growing the UX maturity of the organizations and products they work with. This article, the second in a three-part series, presents two additional tactics that can be helpful for those working in organizations that have started engaging in UX, but are still at the lower to middle stages of maturity: knowledge sharing and mentorship. You can use these
Page Shield: Protect User Data In-Browser
We're excited to introduce Page Shield, a client-side security product customers can use to detect attacks in end-user browsers.
Protecting Cloudflare Customers from BGP Insecurity with Route Leak Detection
Today, we're excited to announce Route Leak Detection, a new network alerting feature that tells customers when a prefix they own that is onboarded to Cloudflare is being leaked.
Completing a transit map
Build on a work-in-progress Figma Community file and help complete a transit map of the San Francisco Bay Area
GitHub India: Celebrating a community connected by code
A year ago, we were celebrating the launch of GitHub India to serve the third largest developer community on GitHub. Today, I am thrilled to welcome GitHub Satellite to India…
How GitHub Actions renders large-scale logs
Rendering logs in a web UI might seem simple: they are just lines of plain text. However, there are a lot of additional features that make them more useful to…
Introducing the GitHub Education Stream Team!
We are taking GitHub Campus TV to the next level with the help of emerging developers! How? Students from around the world are coming together to host weekly streams on…
How To Boost Media Performance On A Budget — Smashing Magazine
How do we get media performance right while staying within performance budgets? In this article, Akshay Ranganath will take a look at the recent stats and data around performance budgets, video playback performance issues and some techniques and tools to address these issues. Having a performance budget as a standalone metric might not be of much help. That’s why we must correlate performance to o
Reactivity In Vue — Smashing Magazine
Reactivity is the ability for a variable (array, string, number, object, etc) to update when its value or any other variable that it makes reference to is changed after declaration. In this article, Timi Omoyeni is going to look at reactivity in Vue, how it works, and how you can create reactive variables using newly created methods and functions.
Using Cloudflare for Data Loss Prevention
The increased use of cloud-based SaaS providers to store and access sensitive data introduces a swath of security risks as management of these resources can be unwieldy. The risk of data loss can be managed by using Cloudflare Access, API Shield, and Browser Isolation.
Protecting your APIs from abuse and data exfiltration
API Shield is growing with new functionalities: Schema Validation generally available, Managed IP List, more controls to manage certificates, and Data Loss Prevention.
Announcing Cloudflare’s Data Loss Prevention platform
Today, we’re excited to announce that your team can use Cloudflare’s network to build Zero Trust controls over the data in your enterprise - wherever it lives and however it moves.
Takes on State
React is actually a bit of an outlier with state management. While it has first-class tools like useState and Context, you're more own your own for reactive
How the PostgreSQL query optimizer works
Get insight into how the PostgreSQL optimizer works and how it speeds up queries. Find out about anti-join & from_collapse_limit.
Detecting memory leaks in Android applications
One day short of a full chain: Real world exploit chains explained
When it comes to security research, the path from bug to vulnerability to exploit can be a long one. Security researchers often end their research journey at the “Proof of…
One day short of a full chain: Part 3 – Chrome renderer RCE
In this last post of the series, I’ll exploit a use-after-free in the Chrome renderer (CVE-2020-15972), a bug that I reported in September 2020 but turned out to be a duplicate, to gain remote code execution in the sandboxed renderer process in Chrome.
Compile times, and why "the obvious" might not be so
Client Tracing: Understanding Mobile and Desktop Application Performance at Scale
A customer writes in and says the dreaded words: “My app is slow”. Here we go… Performance problems can be a real struggle to track down, especially if they aren’t easily reproducible. Looking at the customer’s logs, you see that it takes over 1.5 seconds to switch between channels on their Android client! That must…
A Deep Dive Into Eleventy Static Site Generator — Smashing Magazine
Eleventy (aka 11ty) is rising in the ranks among static site generators. This Node-based builder is attractive due to its zero-config starting point, purely static output, and ease of achieving the coveted top Lighthouse performance score of four perfect 100s. Let’s dive into what else makes it unique, and learn about some essential concepts to help you successfully get started.
Browser Isolation for teams of all sizes
Protecting endpoints from browser-born zero-day attacks and malware with remote browser isolation is now easy for teams of any size.
New device security partnerships for Cloudflare One
Cloudflare launches new integrations with CrowdStrike, SentinelOne, and VMware Carbon Black. Cloudflare for Teams customers can now restrict access to their applications based on security signals from their devices.
Announcing antivirus in Cloudflare Gateway
We’re announcing support for malware detection and prevention directly from the Cloudflare edge, giving Gateway users an additional line of defense against security threats.
Anatomy of a Targeted Ransomware Attack
Imagine your most critical systems suddenly stop operating. And then someone demands a ransom to get your systems working again. Or someone launches a DDoS against you and demands a ransom to make it stop. That’s the world of ransomware and ransom DDoS.
Maps Scroll Wheel Fix
This blog post by Steve Fenton came across my feeds the other day. I'd never heard of HERE maps before, but apparently they are embeddable somehow, like
Imagining native skip links
I love it when standards evolve from something that a bunch of developers are already doing, and making it easier and foolproof. Kitty Giraudel is onto that
Image Fragmentation Effect With CSS Masks and Custom Properties
Geoff shared this idea of a checkerboard where the tiles disappear one-by-one to reveal an image. In it, an element has a background image, then a CSS Grid
Solving the innersource discovery problem
Imagine you’re in an organization with over 2,000 repositories across several different product lines. It can be daunting task to find the right project.
JavaScript Pass By Value Function Parameters
How it works and how to work with it... and around it
Going Headless: Use Cases And What It’s Good For — Smashing Magazine
One of the drivers of the popularity of headless options is that expectations for the quality of user experience are constantly going up. We have a wealth of tools to help developers build things fast so results are expected quickly. Going headless lets your team take full control of the user experience instead of wrestling with a large tool that doesn’t do quite what you wanted. In this article,
Magic WAN & Magic Firewall: secure network connectivity as a service
Magic WAN provides secure, performant connectivity and routing for your entire corporate network, reducing cost and operational complexity.
Announcing Network On-ramp Partners for Cloudflare One
We know the promise of replacing MPLS links with a global, secure, performant and observable network is going to transform the corporate network and the industry itself.
Annual March Hackness: The Opener — What a Difference a Year Makes in the World of Phishing Attacks
Area 1 has been doing our own Phishing brackets over the past five years. We took a hiatus in 2020 (as did the NCAA), so today, we proudly introduce the 5th Annual March Hackness: The Phishing Tournament.
It's always the stacking context.
In "What the heck, z-index??," Josh Comeau makes the analogy of layer groups in design software like Photoshop or Figma to stacking contexts in CSS. If you've