Home/2023
Archive

Year 2023

1,342 articles published in 2023.

Security — GitHub’s revamped VIP Bug Bounty Program

GitHub’s revamped VIP Bug Bounty Program

GitHub’s VIP Bug Bounty Program has been updated to include a clear and accessible criteria for receiving an invitation to the program and more. Learn more about the program and how you can become a Hacktocat, and join our community of researchers who are contributing to GitHub’s security with fun perks and access to staff and beta features!

JGJeff GuerraJeff Guerra·June 12, 2023Security
Networking — Examining HTTP/3 usage one year on

Examining HTTP/3 usage one year on

With the HTTP/3 RFC celebrating its 1st birthday, we examined HTTP version usage trends between May 2022 - May 2023. We found that HTTP/3 usage by browsers continued to grow, but that search engine and social media bots continued to effectively ignore the latest version of the web’s core protocol

DBDavid Belson, LucasDavid Belson, Lucas·June 6, 2023Networking
Frontend — Animated Pride Flags

Animated Pride Flags

Happy Pride month! In this tutorial, I'll share a handful of my favourite animation tricks. You'll learn how to build an animated wavy pride flag using CSS keyframes and linear gradients. We'll also see how to make it dynamic using React. 🏳️‍🌈

JWJosh W. Comeau·June 6, 2023Frontend
Performance — Reduce latency and increase cache hits with Regional Tiered Cache

Reduce latency and increase cache hits with Regional Tiered Cache

Regional Tiered Cache provides an additional layer of caching for Enterprise customers who have a global traffic footprint and want to serve content faster by avoiding network latency when there is a cache miss in a lower-tier, resulting in an upper-tier fetch in a data center located far away

AAAlex, Andrew HauckAlex, Andrew Hauck·June 1, 2023Performance
Frontend — Advanced Form Control Styling With Selectmenu And Anchoring API — Smashing Magazine

Advanced Form Control Styling With Selectmenu And Anchoring API — Smashing Magazine

Thanks to the Open UI working community group, there’s a new element on the horizon, , that will make styling this type of form control a whole lot better. You’re going to walk through an early implementation of this new experimental element by creating a pattern that you would never have thought possible with CSS alone — a radial selection menu.

BDBrecht De RuyteBrecht De Ruyte·June 1, 2023Frontend
Performance — Experimenting at Scale, the Spotify Home Way

Experimenting at Scale, the Spotify Home Way

In the fast-paced world of streaming, personalization plays a vital role in enhancing user experiences. At Spotify, our Home serves as a personalized surface where users retrieve familiar content and discover new content tailored to their preferences. We are constantly trying to optimize the Home experience to provide more value to our users; however, doing so can be tricky.

NGNik Goyle, Product Manager·June 1, 2023Performance
AI & ML — Experimenting with Machine Learning to Target In-App Messaging

Experimenting with Machine Learning to Target In-App Messaging

At Spotify, we use messaging to communicate with our listeners all over the world. Our Messaging team powers and creates delightful foreground and background communications across the Spotify experience, experimenting with and tailoring the perfect journey for each user across our platform. Today we are able to send messages through WhatsApp, SMS, email, push notifications, contextual in-line form

EDEuan Dowers, Senior ML Engineer·June 1, 2023AI & ML
SRE & Ops — Analyzing Volatile Memory on a Google Kubernetes Engine Node

Analyzing Volatile Memory on a Google Kubernetes Engine Node

TL:DR At Spotify, we run containerized workloads in production across our entire organization in five regions where our main production workloads are in Google Kubernetes Engine (GKE) on Google Cloud Platform (GCP). If we detect suspicious behavior in our workloads, we need to be able to quickly analyze it and determine if something malicious has happened. Today we leverage commercial solutions to

MHMarcus Hallberg, Security Engineer·June 1, 2023SRE & Ops
Frontend — How Oxy uses hooks for maximum extensibility

How Oxy uses hooks for maximum extensibility

Let's take a look from the perspective of an Oxy application developer, and then we can discuss the implementation of the framework and some of the interesting design decisions we made

WFWbartlett, FisherWbartlett, Fisher·May 26, 2023Frontend
Performance — Unbounded memory usage by TCP for receive buffers, and how we fixed it

Unbounded memory usage by TCP for receive buffers, and how we fixed it

We are constantly monitoring and optimizing the performance and resource utilization of our systems. Recently, we noticed that some of our TCP sessions were allocating more memory than expected. This blog post describes in detail the root cause of the problem and shows the test results of a solution

MFMike FreemonMike Freemon·May 25, 2023Performance
Security — Rooting with root cause: finding a variant of a Project Zero bug

Rooting with root cause: finding a variant of a Project Zero bug

In this blog, I’ll look at CVE-2022-46395, a variant of CVE-2022-36449 (Project Zero issue 2327), and use it to gain arbitrary kernel code execution and root privileges from the untrusted app domain on an Android phone that uses the Arm Mali GPU. I’ll also explain how root cause analysis of CVE-2022-36449 led to the discovery of CVE-2022-46395.

MYMan Yue MoMan Yue Mo·May 25, 2023Security
Performance — The Impact Of Agile Methodologies On Code Quality — Smashing Magazine

The Impact Of Agile Methodologies On Code Quality — Smashing Magazine

Say goodbye to traditional workflows and embrace Agile to unlock the power of high-quality code. Discover how Agile methodologies promote simplicity, modularization, readability, and continuous improvement, resulting in faster turnaround times, more responsive development processes, and ultimately, the creation of high-quality software that meets customer needs.

SOSarah Oke OkoloSarah Oke Okolo·May 25, 2023Performance
Design & UX — Dependency Composition

Dependency Composition

Based on frustrations with conventional framework-based dependency injection, I have adopted a composition strategy that utilizes partial application to inject context into modules. When combined with test-driven development as the design process and a focus on functions over classes, modules can be kept clear, clean, and mostly free of unintended coupling.

DSDaniel Somerfield·May 23, 2023Design & UX
Networking — Bombyx is being licensed for product development

Bombyx is being licensed for product development

When we first conceived of our aerial fiber deployment solution, Bombyx (the Latin name for a silk moth), we imagined a robot weaving strands of fiber-optic cables over powerlines, helping human workers quickly connect communities even in very rural or remote locations. Now, after years of successful research, Bombyx is taking the next steps in […]

CWChris Wiltz·May 22, 2023Networking