Announcing the public launch of Cloudflare's bug bounty program
Today we are launching Cloudflare’s paid public bug bounty program. We believe bug bounties are a vital part of every security team’s toolbox.
“Evergreen” Does Not Mean Immediately Available
Before the advent of evergreen browsers, you would need to go to the manufacturer’s website and manually download and install the update.
The Optional Chaining Operator, “Modern” Browsers, and My Mom
Jim Nielsen's mom couldn't open a website. Jim worked on confirming the issue and documented how he got to the bottom of it:
Misidentifying talent
A decade of major cache incidents at Twitter
Cocktail party ideas
Design needs everyone: new plans for companies that design together
Introducing new plans for FigJam and Figma Enterprise
Code scanning and Ruby: turning source code into a queryable database
A deep dive into how GitHub adds support for new languages to CodeQL.
Top-100 npm package maintainers now require 2FA, and additional security-focused improvements to npm
Starting today, we are rolling out mandatory 2FA to all maintainers of top-100 npm packages by dependents.
A toy DNS resolver
A toy DNS resolver
Meet “Touch Design For Mobile Interfaces”, A New Smashing Book — Smashing Magazine
It’s shipping! Meet “Touch Design for Mobile Interfaces”, our brand-new guide with guidelines and best practices to improve usability and accessibility on mobile. 400 pages. For designers and developers working with mobile UIs. Jump to details and get the book right away.
React State Management Using Easy Peasy — Smashing Magazine
According to the documentation, Easy Peasy is an abstraction of Redux, providing a reimagined API that focuses on developer experience. It allows you to quickly and easily manage your state, whilst leveraging the strong architectural guarantees. We’ll use Easy Peasy as a state manager of choice to build a note application which would help us learn how it works.
Mesfin Mekonnen: Senior Engineer
Tell us more about working on Spotify Wrapped…
Introducing Ruler: Our Tool for Measuring Android App Size
At Spotify, we strive to make our apps available to as many people as possible. As mobile developers, that means we want everybody to be able to download our app without hiccups or constraints.
Search Journey Towards Better Experimentation Practices
At Spotify, we aim to build and improve our product in a data-informed way. To do that, teams are encouraged to generate and test hypotheses by running experiments and gathering evidence for what works and what doesn’t.
Fred Wang: Senior Backend Engineer
I’m part of the Mambas team at Spotify, which is responsible for all the animation, presentation and personalized data in the Wrapped interactive mobile app. My job is to take the raw data from the backend and enrich it, translate it and format it for different regions before it goes to the frontend mobile engineers. That includes deciding what music to play during data stories and what images and
Cloudflare Partner Program Now Supports SASE & Zero Trust Managed Services
We’ve been building out the Cloudflare Partner Network for years, working alongside businesses of all sizes and types including our world-wide system integrator partners
Dependency graph now supports GitHub Actions
The dependency graph helps developers and maintainers understand the code they depend on, and now includes GitHub Actions!
28 Days Of Inspiration (February 2022 Desktop Wallpapers Edition) — Smashing Magazine
Do you need a little inspiration boost? Well, then our new batch of desktop wallpapers is for you. Designed by artists and designers from across the globe, they come in versions with and without a calendar for February 2022 and can be downloaded for free. As a little bonus goodie, we also compiled some timeless treasures from past February editions at the end of this post for you. Enjoy!
Reasons for servers to support IPv6
Reasons for servers to support IPv6
Happy Data Privacy Day!
On this Data Privacy Day, we look back at how events in 2021 shaped the privacy world, and we look ahead to what 2022 may have in store
The CSS from-font Value Explained in 4 Demos
I found the CSS from-font value for the text-decoration-thickness property. I did a little research what I found (and learned) is interesting.
Stuff The Internet Says On Scalability For January 28th, 2022 - High Scalability -
Never fear, HighScalability is here! Think your software diagram is complex? This is a single cell modeled using X-ray, nuclear magnetic resonance (NMR), and cryo-electron microscopy datasets. Gael McGill My Stuff: * Love this Stuff? I need your support on Patreon to keep this stuff going. * Know anyone who needs to fix their cloud-obliviousness? My book teaches them all they need to know about th
What Web Frameworks Solve And How To Do Without Them (Part 1) — Smashing Magazine
In this article, Noam Rosenthal dives deep into a few technical features that are common across frameworks, and explains how some of the different frameworks implement them and what they cost, focusing on data-binding, reactivity, conditionals and lists. You will also take a look at the cost of using those frameworks.
Migrating to Cloudflare Email Routing
With Email Routing, you can effectively start receiving Emails in any of your domains for any number of custom addresses you want and forward the messages to any existing destination mailboxes
Protecting Holocaust educational websites
Cloudflare’s Project Galileo provides free protection to at-risk groups across the world including Holocaust educational and remembrance websites
Switching Unstaged Changes to a New Branch
Say you're on the wrong Git branch with unstaged changes. There are a few to go about switching unstaged changes to a new branch.
Demystifying TypeScript Discriminated Unions
TypeScript discriminated unions are types where a key or value can be used to differentiate between the keys and values of several types at once.
2021 Transparency Report
In GitHub’s latest transparency report, we’re giving you a by-the-numbers look at how we responded to requests for user info and content removal.
Thinking beyond SQL injection: OWASP tips for secure database access
When it comes to secure database access, there’s more to consider than SQL injections. OWASP Top 10 Proactive Control C3 offers guidance.
Making the web better. With blocks!
You’ve probably seen web editors based on the idea of blocks. I’m typing this in WordPress, which has a little + button that brings up a long… Read more “Making the web better. With blocks!”
One machine can go pretty far if you build things properly
Fixing the Dependency Confusion Vulnerability in 600+ Ruby Apps - Shopify
How Shopify solved the dependency confusion vulnerability in over 600 Ruby applications and created tailored large-scale migration tooling to make it easier.
Incorrect proxying of 24 hostnames on January 24, 2022
On January 24, 2022, as a result of an internal product migration, 24 hostnames (including www.cloudflare.com) that were actively proxied through the Cloudflare global network were mistakenly redirected to the wrong origin
Landscape of API Traffic
More than 50% of all traffic processed by Cloudflare is API-based, and it’s growing twice as fast as traditional web traffic. This growth calls for the development of dedicated security solutions.
Fancy CSS Borders Using Masks (Zig-Zag, Wavy, and More)
In this article, we look at modern CSS mask techniques to create three fancy CSS borders without having to use a background image.
Little Big Updates: 32 fixes and features for a better workflow
32 updates across everything from shortcuts to design features
Get ready for Campus TV Season 2: 🌱 New Beginnings
Learn new skills, build projects and meet like-minded students with the latest shows from the GitHub Education Stream Team.
An old photo of a very large BBS
Don’t Underestimate The Software Administration UX — Smashing Magazine
Administration experience is often assumed or glossed over in software because 99% users never engage with it directly. Yet this is one critical area that, when used effectively, can tie closely to a company’s business strategy and affects the bottom line. In this article reveals how something as trivial as administration in both software and As-a-service can be either a booster or bottleneck to a
How to Make a Scroll-Triggered Animation With Basic JavaScript
Scroll-triggered events are very useful. There are libraries to create them but let's look at how to do it ourselves with a small handful of JavaScript.
Component Spacing in a Design System
How do you handle component spacing in a design system? Do you add margin directly to the components, or outsource it to another component?
Practical Examples of Data Normalization in PostgreSQL
Data normalization - Learn how to apply the theory from part 1 of Michał Małecki's blog to real life with practical examples.
Secure your GitHub account with GitHub Mobile 2FA
GitHub continues to improve account security and developer experience with a new 2FA mechanism in GitHub Mobile on iOS and Android.
Designing Uber - High Scalability -
This is a guest post by Ankit Sirmorya. Ankit is working as a Machine Learning Lead/Sr. Machine Learning Engineer at Amazon and has led several machine-learning initiatives across the Amazon ecosystem. Ankit has been working on applying machine learning to solve ambiguous business problems and improve customer experience. For instance, he created a platform for experimenting with different hypothe
Netflix: A Culture of Learning - Netflix TechBlog
Martin Tingley with Wenjing Zheng, Simon Ejdemyr, Stephanie Lane, Colin McFarland, Mihir Tendulkar, and Travis Brooks Earlier posts in this series covered the why, what and how of A/B testing, all of…
What’s New In DevTools? — Smashing Magazine
What’s new in Chrome, Edge, Safari and Firefox? Patrick Brosset breaks it down with the latest features in DevTools across browsers. We hope you enjoy these updates, and that they’ll turn out useful when doing web development.
New Payment Links features to help you sell more, faster
Today, we’re adding new no-code Payment Links features to help businesses increase revenue and introducing an API to automate workflows.
Burkina Faso experiencing second major Internet disruption this year
The early hours of Sunday, January 23, 2022, started in Burkina Faso with an Internet outage or shutdown
Highlights from Git 2.35
The open source Git project just released Git 2.35. Here’s GitHub’s look at some of the most interesting features and changes introduced since last time.
Hosting my static sites with nginx
Hosting my static sites with nginx
Getting Started With CSS Cascade Layers — Smashing Magazine
We all have run into CSS collisions and sudden regressions in our codebases when new styles are written or 3rd-party styles are added. This is because of the interdependence of styles due to source order, specificity, and inheritance. Some ways to control the cascade have included methodologies like ITCSS and BEM and other newer native features. Cascade layers will be the ultimate native solution
Internet outage in Yemen amid airstrikes
The early hours of Friday, January 21, 2022, started in Yemen with a country-wide Internet outage
Release Radar
Our community has been hard at work through December shipping updates. Here’s our staff picks for open source projects with major version releases.
From Chaos To System In Design Teams — Smashing Magazine
Joining a team where there are no established design practices may feel disheartening. Does this situation resonate with you? If yes, then read on — as this article is sharing the author’s advice based on his personal experience and it will show you a way (although not easy) of facing the problem in a manner that will bring other benefits, beside order and consistency.
Node and How it Works With npm
Let's look at Node and how it plays alongside npm to install features and tooling as packages in modern front-end web development.
A Deep Look at the Command Line
The command line is a place we can type commands to be executed directly by our computer. It’s extremely fast, and ideal for a tool like npm.
Install npm in a Few Easy Steps
In this article, we'll install npm and Node, then make a little sample project to give you real hands-on experience working with the npm basics
How to Install npm Packages
Next up in this beginner’s guide to npm is likely why you’re here in the first place: installing npm packages, which uses the `npm install` command.