Engineering Dropbox Transfer: Making simple even simpler
JQuery to React: How we rewrote the HelloSign Editor
How Dropbox Replay keeps everyone in sync
The Great CoffeeScript to Typescript Migration of 2017
The software engineering lifecycle: How we built the new Dropbox Plus
Keeping sync fast with automated performance regression detection
The growing pains of database architecture
How the Figma infrastructure team reduced potential instability by scaling to multiple databases
Timeboxed Iterations
Continuous Flow
Slack
What’s new with GitHub Sponsors
GitHub Sponsors is now generally available for organizations. Also, new tooling for bulk sponsorships and an update on how we’re ensuring sustainability for GitHub Sponsors.
Tracing Notifications
Notifications are a key aspect of the Slack user experience. Users rely on timely notifications of mentions and DMs to keep on top of important information. Poor notification completeness erodes the trust of all Slack users. Notifications flow through almost all the systems in our infrastructure. As illustrated in Figure 1 below, a notification request…
mTLS client certificate revocation vulnerability with TLS Session Resumption
This blog post outlines the root cause analysis and solution for a bug found in Cloudflare’s mTLS implementation
Introducing Rollbacks for Workers Deployments
Deployment rollbacks provide users the ability to quickly visualize and deploy past versions of their Workers, providing even more confidence in the deployment pipeline
Level up monitoring and reporting for your enterprise
A high-quality audit log is an essential tool for enterprises to ensure compliance, maintain security, investigate issues, and promote accountability.
Calling all open source maintainers
We are building a private space for maintainers to connect with peers, preview features, and learn from each other!
Beyond Algorithms: Skills Of Designers That AI Can’t Replicate — Smashing Magazine
This article highlights non-technical skills like curiosity, observation, empathy, advocacy, visual communication, and collaboration that designers routinely use in their process to make a difference through design. AI can be used to augment designers’ workflow instead of replacing people.
Fleet Management at Spotify (Part 1): Spotify’s Shift to a Fleet-First Mindset
This is part 1 in our series on Fleet Management at Spotify and how we manage our software at scale. See also and .
Humans + Machines: A Look Behind the Playlists Powered by Spotify’s Algotorial Technology
TL;DR Since 2017, Spotify has been working to create a better listening experience for our users by creating algorithmically personalized playlists powered by the expertise of our curators. The outcome of these efforts has resulted in the technology we call “Algotorial.”
Large-Scale Generation of ML Podcast Previews at Spotify with Google Dataflow
As of March 8, 2023, Spotify has started serving short previews for music, podcasts, and audiobooks on the home feed. (You can see the announcement at Stream On , starting at 19:15.) This is a huge lift for in-app content discovery — a move away from making listening decisions based on static content, such as cover art, to using the audio content itself as a teaser. It has been an effort across ma
Upgrading one of the oldest components in Cloudflare’s software stack
Engineers at Cloudflare have improved the release procedure of our largest edge proxy server. The improved process allows us to significantly decrease the amount of memory used during the version upgrade. As a result, we can deploy code faster and more reliably
CodeQL zero to hero part 1: The fundamentals of static analysis for vulnerability research
Learn more about static analysis and how to use it for security research! In this blog post series, we will take a closer look at static analysis concepts, present GitHub’s static analysis tool CodeQL, and teach you how to leverage static analysis for security research by writing custom CodeQL queries.
Building a custom site for zine feedback
Building a custom site for zine feedback
Administrivia: HTML generation and my general clowniness
How Migrating from Vanilla Redux to Redux Toolkit Improved State Management in Shopify POS - Shopify
A look at Shopify’s experience improving state management in the Shopify POS app by migrating from a Vanilla Redux codebase to Redux Toolkit one.
Swing Into April (2023 Wallpapers Edition) — Smashing Magazine
With April just around the corner, we have a new collection of desktop and mobile wallpapers waiting for you to celebrate the beginning of the new month. Designed by creatives from all across the globe, the wallpapers come in versions with and without a calendar. Enjoy!
Managing major traffic spikes during ticket drops with Vercel
Helping protect personal information in the cloud, all across the world
Helping protect personal information in the cloud, all across the world
From IP packets to HTTP: the many faces of our Oxy framework
We have recently introduced Oxy, our Rust-based framework for proxies powering many Cloudflare services and products. Today, we will explain why and how it spans various layers of the OSI model, by handling directly raw IP packets, TCP connections and UDP payloads
Improvements to CodeQL’s data flow library for C++
These changes will improve the experience for custom query authors and enable better precision in some of our standard queries. Learn how to enable them for your custom queries.
A Comprehensive Checklist For Running Design Workshops — Smashing Magazine
Workshops are all about people: they involve people, are conducted by people, and aim to close the gaps in people’s communication. Slava Shestopalov shares a checklist with everything you need to keep in mind when running a workshop.
Replacing Google Optimize with the Vercel Edge Network
Historical guide for replacing Google Optimize with Vercel Edge Config and request-time routing, with current guidance for Routing Middleware and Vercel Functions.
Killnet and AnonymousSudan DDoS attack Australian university websites, and threaten more attacks — here’s what to do about it
Over the past 24 hours, Cloudflare has observed HTTP DDoS attacks targeting university websites in Australia. Universities were the first of several groups publicly targeted by the pro-Russian hacker group Killnet and their affiliate AnonymousSudan, as revealed in a recent Telegram post
What Being a Staff Developer Means at Shopify - Shopify
A staff developer is an individual contributor who can have the same scope of impact and seniority as an engineering manager.
Fine-Grained Access Handling And Data Management With Row-Level Security — Smashing Magazine
Dealing with sensitive data is an important topic for any app. In this article, you will find out how to handle sensitive or confidential information in your apps and what Row-Level Security means.
Cloudflare’s commitment to the 2023 Summit for Democracy
Cloudflare is proud to participate in and contribute commitments to the 2023 Summit Summit for Democracy because we believe that everyone should have access to an Internet that is faster,
Little Big Outtakes
The quick pivots and aha moments we made on the way to launching 30+ Little Big Updates
Introducing self-service SBOMs
Developers and compliance teams get a new SBOM generation tool for cloud repositories.
GitHub Galaxy 2023: Empower developer teams with a new developer experience
Learn how GitHub’s one, integrated platform–powered by AI and secure at every step—helps developer teams be more productive, collaborative, and efficient.
Announcing the GitHub Actions extension for VS Code
Today, we’re excited to announce the release of the public beta of the official GitHub Actions VS Code extension, which provides support for authoring and editing workflows and helps you manage workflow runs without leaving your IDE.
Custom fonts without compromise using Next.js and `next/font`
`next/font` automatically self-hosts your custom fonts, preventing layout shift and significantly reducing needed code.
Streaming from serverless Node.js and Edge Runtime on Vercel
Learn how Vercel enables streaming for serverless Node.js and Edge runtimes. HTTP streaming enables the server to incrementally send response data in smaller chunks to the client while generating the complete response.
Introducing our first Authorized Service Delivery Partners for Cloudflare One
Since launch, Authorized Services Delivery Partner track is having a notable impact and now we are thrilled to announce the first partners who have achieved the designation
The Best Handoff Is No Handoff — Smashing Magazine
Design handoffs are inefficient and painful. They cause frustration, friction and a lot of back and forth. Can we avoid them altogether? Of course we can! Let’s see how to do just that.
Use the language of your choice with Pages Functions via WebAssembly
Today Pages is excited to offer support for WebAssembly when writing a Pages Function
Supporting Passkeys in Shop's Authentication Flows - Shopify
Passkeys are a new login credential based on public-key cryptography that replace the need for username and password sign-ins.
Node.js compatibility for Cloudflare Workers – starting with Async Context Tracking, EventEmitter, Buffer, assert, and util
Over the coming months, Cloudflare Workers will start to roll out built-in compatibility with Node.js core APIs as part of an effort to support increased compatibility across JavaScript runtimes
Out now! Auto-renew TLS certificates with DCV Delegation
Cloudflare will now allow customers that are managing DNS externally to auto-renew certificates through DCV Delegation
How our design team level set on career leveling
Design Manager Sara Culver takes us through evolving the team's product design and writing career levels.
We updated our RSA SSH host key
At approximately 05:00 UTC on March 24, out of an abundance of caution, we replaced our RSA SSH host key used to secure Git operations for GitHub.com.
Build a secure code mindset with the GitHub Secure Code Game
Writing secure code is as much of an art as writing functional code, and it is the only way to write quality code. Learn how our Secure Code Game can provide you with hands-on training to spot and fix security issues in your code so that you can build a secure code mindset.
Overcoming The Challenges Of Content Creation For Informational Websites — Smashing Magazine
Content matters! Unfortunately, when it comes to informational websites, content quality is often poor. There is no magic answer to fix that. However, there are practical techniques you can use to improve the copy on your websites and ensure your users find the content they are looking for.
How to build zero-CLS A/B tests with Next.js and Vercel Edge Config
Historical guide to zero-CLS A/B testing with Next.js and Edge Config, updated with current Vercel guidance for Routing Middleware and Vercel Functions.
GitHub Copilot X: The AI-powered developer experience
GitHub Copilot is evolving to bring chat and voice interfaces, support pull requests, answer questions on docs, and adopt OpenAI’s GPT-4 for a more personalized developer experience.
Deploy Remix without limits on Vercel
Historical announcement for Remix on Vercel with streaming SSR and multi-runtime support, updated with current Vercel Functions guidance.
Technology Lifecycle
This blog post discusses the strategies that Slack uses to manage the lifecycle (development, support, and eventual retirement) of infrastructure projects, through the lens of the migration through three successive internal “platform” offerings. Our challenges Circa 2020, our Cloud Engineering team (now evolved into multiple teams responsible for narrower aspects) was responsible for managing our…
Smashing Podcast Episode 58 With Debbie Levitt: What Is CX Design? — Smashing Magazine
In this episode of the Smashing Podcast, we ask what is Customer Experience design, and how does it differ from User Experience design? Vitaly Friedman talks to expert Debbie Levitt to find out.
Everything you might have missed during Security Week 2023
Learn how Cloudflare made it easier to shift from protecting applications, to protecting employees, and making sure they are protected everywhere during Security Week 2023
The quantum state of a TCP port
If I navigate to https://blog.cloudflare.com/, my browser will connect to a remote TCP address from the local IP address assigned to my machine, and a randomly chosen local TCP port. What happens if I then decide to head to another site?
