
Our latest variable updates bring design and code even closer, and an unprecedented level of customizability to your designs. Product Manager Jacob Miller breaks it down and answers your questions.

Headspace uses Figma advanced features like variables to optimize their design system and unlock better collaboration with developers and growth opportunities.

Using CVE-2023-43641 as an example, I’ll explain how to develop an exploit for a memory corruption vulnerability on Linux. The exploit has to bypass several mitigations to achieve code execution.

Learn how we’re experimenting with generative AI models to extend GitHub Copilot across the developer lifecycle.
SV
Sara Verdi·December 6, 2023AI & ML 
We are beginning to upgrade people’s personal conversations on Messenger to use end-to-end encryption (E2EE) by default. Meta is publishing two technical white papers on end-to-end encryption: Our Messenger end-to-end encryption whitepaper describes the core cryptographic protocol for transmitting messages between clients. The Labyrinth encrypted storage protocol whitepaper explains our protocol f

Five-second testing is a popular method of usability research used in the industry, yet in essence, its core belief boils down to virtually a superstition. Eduard Kuric looks under the hood at how first impressions are affected by various factors and how UX researchers and product owners can ensure that the user’s first steps can get off on the right foot.

A recent decision from the Higher Regional Court of Cologne in Germany marked important progress for Cloudflare and the Internet in pushing back against misguided attempts to address online copyright infringement through the DNS system

This post wraps up the PGSQL Phriday #014 event, links the participating authors and articles, and briefly reviews the "submissions".

Customers using GitHub Enterprise Server can gain more insight and understanding into the security of their code.
DJ
David Jarzebowski, Melody Mileski·December 5, 2023Security 
Learn how researchers and security experts at GitHub, Microsoft, and Santander came together to address the challenges presented by the post-quantum cryptography world.
WC
Walker Chabbott·December 5, 2023Security 
Slack users have more power than ever to automate routine tasks and processes, saving themselves time each day. Workflow Builder, a task automation tool built into Slack, has continued to improve since its launch back in 2019. Along with various new steps and triggers, we built a new sidebar section for all available workflow steps.…

Vercel's Conformance and Code Owners bring automated static analysis and framework-defined code ownership to enterprise teams, catching performance and security issues before production while ensuring the right reviewers approve every change.

MFMartin Fowler·December 4, 2023Systems 
If you’re on the hunt for the perfect holiday gifts for the developer who has it all, look no further. We’ve curated a list of 10 must-have items (plus a few more) that strike the perfect balance between practicality and style.
LS
Lavinia Sfetcu, Chrissy Nasi·December 4, 2023Engineering 
Mounting git commits as folders with NFS

Skia is a cross-platform 2D graphics library that provides a set of drawing primitives which run on iOS, Android, macOS, Windows, Linux, and the browser. Over the past two years, Shopify Engineering has sponsored development of the @shopify/react-native-skia library that exposes Skia functionality to React Native. The React Native (RN) Skia community is one of the most vibrant and interesting in t
SEShopify Engineering·December 4, 2023Frontend 
Discussing the decisions surrounding JavaScript prototypes, the article by Juan Diego Rodriguez scrutinizes their origin, examines missteps in the design, and explores how these factors have affected the way we write JavaScript today.
JD
Juan Diego Rodriguez·December 4, 2023Frontend 
The user experience of the Frontend Cloud: Part 2 of the developer's guide to a future-proofed stack.

Cloudflare Gen 12 Compute servers are moving to 2U1N form factor to optimize the thermal design to accommodate both high-power CPUs (>350W) and GPUs effectively while maintaining performance and reliability


Git is designed to assure us that we can track a project’s files at different points in time. But it doesn’t assure us that those files are always safe along the way. For those of you who have dealt with the sinking feeling that you’ve irrevocably deleted and lost files, Sanmi has a couple of approaches that, in the right situations, may help bring them back.

TL;DR Large sets of diverse data present several challenges for clustering, but through a novel approach that combines dimensionality reduction, recursion, and supervised machine learning, we’ve been able to obtain strong results. Using part of the algorithm, we’re able to obtain a greater understanding of why these clusters exist, allowing user-researchers and data scientists to refine, improve,
GPGustavo Pereira, Sr. Data Scientist·December 1, 2023AI & ML 
If you haven’t been able to keep up with my blistering pace of one blog post per year, I don’t blame you. There’s a lot going on right now. It’s a busy time. But let’s pause and take a moment to celebrate that Elon Musk destroyed Twitter. I can’t possibly say it better than Paul Ford, so I’ll just refer you there: Every five or six minutes, someone in the social sciences publishes a PDF with a tit

Explore the July edition, featuring prompts, tips, and use cases for GitHub Copilot.
SV
Sara Verdi·November 30, 2023AI & ML 
The GitHub Security Lab examined the most popular open source software running on our home labs, with the aim of enhancing its security. Here’s what we found and what you can do to better protect your own smart home.
AM
Alvaro Munoz·November 30, 2023Security 

Could there be a better way to welcome the new month than with a collection of desktop wallpapers? We’ve got some eye-catching designs to sweeten up the last few weeks of the year and, if you’re celebrating, to get you in the holiday mood.

A collection of tips to make faster Next.js websites by maximizing work on the server and minimizing the burden on the client.

How significant are Cyber Week days on the Internet? Is it a global phenomenon? Does e-commerce interest peak on Black Friday or Cyber Monday, and are attacks increasing during this time?

We provide many tools to help you debug Cloudflare Workers; from your local environment all the way into production. In this post, we highlight some of the tools we currently offer, and do a deep dive into one specific area - breakpoint debugging - a tool we recently added into our workerd runtime
AM
Adam Murray, Brendan Coll·November 28, 2023Systems 
Slack Connect, AKA shared channels, allows communication between different Slack workspaces, via channels shared by participating organizations. Slack Connect has existed for a few years now, and the sheer volume of channels and external connections has increased significantly since the launch. The increased volume introduced scaling problems, but also highlighted that not all external connections

In this article, Sasha guides you through crucial processes and factors to achieve a consistent brand presence across platforms. She offers an overview of the entire brand identity process, explores collaboration with UI teams, and provides essential details on the assets required for the successful implementation of a digital brand.


We're excited to introduce Steve Bray as Cloudflare's new Head of Australia and New Zealand, as we continue to build and grow our customers, partners, and team in the region

Forrester has recognized Cloudflare as a leader in The Forrester Wave™: Edge Development Platforms, Q4 2023 with the top score in the current offering category
BI
Brendan Irvine Broque, Dawn·November 27, 2023Networking 

Which US states logged off on Thanksgiving Day? Is there a difference between coastal and central states? Do hackers take a Thanksgiving break? Are food delivery services gaining or losing traffic?

Participate in "PGSQL Phriday #014: PostgreSQL Events" blogging event. Post invites you to share your experiences, insights, and favorite moments

We’re living in somewhat of a CSS renaissance with new features, techniques, experiments, and ideas coming at us to an extent we haven’t seen since “CSS3”. It’s easy to feel overwhelmed when your profession seems to be advancing at breakneck speed, but Geoff Graham considers the ways “modern” CSS in 2023 has actually made CSS “easier” to write.

We're thrilled to announce that Stable Diffusion and Code Llama are now available as part of Workers AI, running in over 100 cities across Cloudflare’s global network.

Distributed systems provide a particular challenge to program. They often require us to have multiple copies of data, which need to keep synchronized. Yet we cannot rely on processing nodes working reliably, and network delays can easily lead to inconsistencies. Despite this, many organizations rely on a range of core distributed software handling data storage, messaging, system management, and co

git branches: intuition & reality

A well-designed composable system should not only consider the technical aspects but also take into account the nature of the content it handles. To help us with that, we can use a Headless Content Management system such as Storyblok.

The Dev Mode team shares how they created a home for developers in a design tool

In Part 1 of the series, Temani Afif demonstrated how creating ribbon patterns in CSS has evolved with the availability of new CSS features. In this second installment of this brief two-part series, we look at two additional ribbon variations that introduce techniques for masking a repeated background gradient in CSS.

Today we’re excited to announce that we’ve added the Mistral-7B-v0.1-instruct to Workers AI
JI
Jesse, Isaac Rehg·November 21, 2023AI & ML 
For Good First Issue is a curated list of open source projects that are also digital public goods and need the help of developers.

CSS Grid is an incredibly powerful tool for building layouts on the web, but like all powerful tools, there's a significant learning curve. In this tutorial, we'll build a mental model for how CSS Grid works and how we can use it effectively. I'll share the biggest 💡 lightbulb moments I've had in my own learning journey.
JWJosh W. Comeau·November 21, 2023Frontend 
Python plays a big part at Meta. It powers Instagram’s backend and plays an important role in our configuration systems, as well as much of our AI work. Meta even made contributions to Python 3.12, the latest version of Python. On this episode of the Meta Tech Podcast, Meta engineer Pascal Hartig (@passy) is joined by Amethyst […]

Product teams benefit from knowing their users’ needs and how they respond to product updates as they build out the roadmap of a product. This article covers Voice of Customer programs and is aimed at those who work on a product team as well as executives who are looking for how to better inform your products using insight from users.

An introduction to the underlying infrastructure of the Frontend Cloud: Part 1 of the developer's guide to a future-proofed stack for the modern frontend.

We want to ensure that all groups working to promote democracy around the world have the tools they need to stay secure online

I am happy to announce PostgreSQL family is growing again, with the addition of IBM’s z-series architecture, called “s390x” in Debian terms.

The last Git release of 2023 is here! Take a look at some of our highlights on what’s new in Git 2.43.

Incremental processing is an approach to process new or changed data in workflows. The key advantage is that it only incrementally processes data that are newly added or updated to a dataset, instead…

The initial posts are dedicated to the x86 architecture. Since then, the fleet of our working machines has expanded to include a large and growing number of ARM CPUs. This time we’ll repeat this exercise for the aarch64 architecture.


Effective collaboration between designers and developers is vital to creating good user experiences. However, bridging the handoff between design and development with the many tools and workflows available today has its pitfalls. Matthew Mattei introduces you to the Uno Platform, which offers a robust set of productivity boosters.

Administrators can now easily audit all active user sessions and associated data used by their Cloudflare One policies. This enables the best of both worlds: extremely granular controls, while maintaining an improved ability to troubleshoot and diagnose

Improve your GitHub Action’s security posture by securing your source repository, protecting your maintainers, and making it easy to report security incidents.
MM
Matthew Manning·November 16, 2023Security