Manage and control the use of dedicated egress IPs with Cloudflare Zero Trust
Administrators can now use Gateway traffic egress policies to determine which egress IPs are used when.
Get notified about the most relevant events with Advanced HTTP Alerts
Today we’re adding more flexibility to HTTP alerting, enabling customers to customize the types of activity they’re alerted on and how those alerts are organized.
How Pinterest’s design systems team measures adoption
The Gestalt team tells us how they used Figma’s REST API to create FigStats, a dashboard for visualizing component usage.
Ludum Dare 52 staff picks 🕹
We’ve got ten top games from the latest Ludum Dare game jam plus source code for you to check out. Pun intended.
Europe’s chance to be a leader in the age of AI
Below are my prepared remarks delivered at the EU Open Source Policy Summit in Brussels on Feb 3rd.
Uptick in healthcare organizations experiencing targeted DDoS attacks
Over the past few days, Cloudflare, as well as other sources, have observed healthcare organizations targeted by a pro-Russian hacktivist group claiming to be Killnet.
Cloudflare's handling of a bug in interpreting IPv4-mapped IPv6 addresses
Recently, a vulnerability was reported to our bug bounty about a bug in the way some of our code interprets IPv4 addresses mapped into IPv6 addresses.
How the GitHub Docs team uses GitHub Projects
Explore how the GitHub Docs team uses GitHub Projects for content coordination, reviews, and publishing.
Enabling branch deployments through IssueOps with GitHub Actions
What if developers want to leverage branch deployments but don’t have a full ChatOps stack integrated with their repositories? We wanted to set out to find a way for all developers to be able to take advantage of branch deployments with ease, right from their GitHub repository, and so the branch-deploy Action was born!
The Hardest Part of Writing Tests is Getting Started - Shopify
The hardest part of writing tests is setting things up. Test suites have complicated helper tools, stubs, and fixtures. Learn 4 things you can do to get started.
UX Podcasts For Designers — Smashing Magazine
Podcasts are a fantastic opportunity to get up close with the people who know their craft. In this post, we compiled podcasts that are bound to provide valuable insights into UX and new perspectives on the field. Perfect for a short coffee break or a long commute.
Comparing React Form Libraries: SurveyJS, Formik, React Hook Form, React Final Form And Unform — Smashing Magazine
In handling forms in React, you can either set up a custom solution or reach out to one of the many form libraries available. In this article, we compare some React Libraries: SurveyJS, Formik, React Hook Form, React Final Form, and Unform.
How To Host A WordPress Site On Amazon Lightsail — Smashing Magazine
Lightsail provides all the power we need to host our websites, as we are used to from AWS, but making it way easier than ever before. In this article, Leonardo Losoviz explores how to launch a WordPress site in Lightsail in a quick and easy way.
Announcing the launch of the All In for Maintainers DEI Resource Hub
The DEI Resource Hub is a vetted collection of resources, tools, and best practices designed to help open source maintainers create and maintain inclusive and diverse open source communities.
Open source’s impact on the world’s 100 million developers
We’re taking a look at how open source software has evolved on GitHub, and how the role of a maintainer and contributor has changed alongside the massive growth in open source software.
GitHub Availability Report: January 2023
In January, we experienced two incidents, one that resulted in degraded performance for Packages and Pages and another that impacted Git users.
It’s a non-transitive R class world
After Duplo modularization, we noticed that the task producing a transitive R class was taking a significant amount of time to execute. To eliminate this task altogether, and since the non-transitive R class is advertised to have up to 40% incremental build time improvement, we decided to migrate our codebase to use it. If you’re not…
Understanding App Directory Architecture In Next.js — Smashing Magazine
The new App Directory architecture has been the main character of the recent Next.js release, which keeps bringing up many questions. In this article, Atila Fassina explores the advantages and pitfalls of this new strategy and reflects on whether you should use it in production now or not.
A Multi-Year Challenge: Repairing Deep Linking & Attribution at Spotify
Deep linking and attribution are important functionalities for a growing business. Deep links seamlessly get you to the content you want in the app. Attribution helps us understand which activity (such as marketing or sharing) drives you to that content. At Spotify in 2017, these critical functionalities were in disrepair. But over the course of five years, we’ve endured ups and downs and learned
Unleashing ML Innovation at Spotify with Ray
As the field of machine learning (ML) continues to evolve and its impact on society and various aspects of our lives grows, it is becoming increasingly important for practitioners and innovators to consider a broader range of perspectives when building ML models and applications. This desire is driving the need for a more flexible and scalable ML infrastructure.
Incident Report: Spotify Outage on January 14, 2023
On January 14, between 00:15 UTC and 03:45 UTC, Spotify suffered an outage. The impact was small at first and increased over the course of an hour until most functionality (including playback) was not working. Spotify engineers were first notified of the problem at 00:40 UTC, and our incident response team was immediately assembled. Due to the nature of the incident, triage took longer than one wo
Build a GPT-3 app with Next.js and Vercel Edge Functions
Historical tutorial for a GPT-3 Twitter bio generator. For new AI apps on Vercel, use Vercel Functions with Fluid compute and streaming.
Super serves thousands of domains from a single codebase with Next.js and Vercel
CVE-2022-47929: traffic control noqueue no problem?
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands.
Transaction ID wraparound: a walk on the wild side
Have you ever seen data corruption from transaction ID wraparound? Avoid PostgreSQL performance problems - read here what causes it.
The future of design systems is complicated
In this series, we talk to industry experts about how they’re managing the the future of design systems—from tooling to automation to accessibility.
Skilling for the future: How GitHub is advancing diversity, equity, and inclusion within open source communities
In the coming months, we’re scaling, expanding, and launching new programming to further DEI within open source communities.
Asynchronous computing at Meta: Overview and learnings
We’ve made architecture changes to Meta’s event driven asynchronous computing platform that have enabled easy integration with multiple event-sources. We’re sharing our learnings from handling various workloads and how to tackle trade offs made with certain design choices in building the platform. Asynchronous computing is a paradigm where the user does not expect a workload […]
The Magic Of February (2023 Wallpapers Edition) — Smashing Magazine
Do you need a little inspiration boost? Well, then our new batch of desktop wallpapers is for you. Designed by artists and designers from across the globe, they come in versions with and without a calendar for February 2023.
How B2B Sales Help Us Understand Our Role As UX Designers Better — Smashing Magazine
Throughout a customer journey (particularly in B2B), there will be interactions that are primarily between two people rather than a human and an interface. In this article, Paul Boag explains why you cannot improve the user experience without considering the entirety of the UX journey.
Action needed for GitHub Desktop and Atom users
Update to the latest version of Desktop and previous version of Atom before February 2.
Easy SVG Customization And Animation: A Practical Guide — Smashing Magazine
Developers often feel discouraged from editing SVG markup and experimenting with SVG animations, thinking it’s a significant time investment or they need to use a complex animation library to do so. In this article, Adrian showcases his favorite tricks, which make the process streamlined and fun.
Determine durations with monotonic clocks if available
Towards a global framework for cross-border data flows and privacy protection
In our third and final blog post leading up to Data Privacy Day, we drill down into the challenges for cross-border data flows, in particular personal data transfers from the EU to the US.
Inside Geo Key Manager v2: re-imagining access control for distributed systems
Using the story of Geo Key Manager v2 as an example, let’s re-imagine access control for distributed systems using a variant of public-key cryptography, called attribute-based encryption.
Cyberattacks on Holocaust educational websites increased in 2022
Today, 78 years after the liberation of the Auschwitz death camp, we mark the International Holocaust Remembrance Day. With Cloudflare’s Project Galileo, we protect Holocaust educational websites and at risk public interest groups. Read more to see how attacks on these groups increased in 2022.
AR, VR, and a Model for 3D in HTML
Tucked down somewhere in the Safari Technology Preview 161 release notes is a seemingly innocous line about support for a new HTML element and attribute:
Bypassing OGNL sandboxes for fun and charities
Object Graph Notation Language (OGNL) is a popular, Java-based, expression language used in popular frameworks and applications, such as Apache Struts and Atlassian Confluence. Learn more about bypassing certain OGNL injection protection mechanisms including those used by Struts and Atlassian Confluence, as well as different approaches to analyzing this form of protection so you can harden similar
Watch Meta’s engineers discuss optimizing large-scale networks
Managing network solutions amidst a growing scale inherently brings challenges around performance, deployment, and operational complexities. At Meta, we’ve found that these challenges broadly fall into three themes: 1.) Data center networking: Over the past decade, on the physical front, we have seen a rise in vendor-specific hardware that comes with heterogeneous feature and […]
Performance Testing At Scale—for BFCM and Beyond - Shopify
Let’s unpack our approach to BFCM Scale Testing to explore some of what it takes to ensure that our ecommerce platform can handle the busiest weekend of the year.
How To Build Strong Customer Relationships For User Research — Smashing Magazine
In this article, Rachel walks you through various ways that product teams can utilize to build relationships with customers. She will share some tips and tricks from her experience that have helped her nurture customer relationships and build better products.
Behind the scenes of Vercel's infrastructure: Achieving optimal scalability and performance
Learn how Vercel builds, deploys, and scales serverless applications with speed and global reliability
Navigating the changing data localization landscape with Cloudflare’s Data Localization Suite
We continue to expand and improve our data localization suite to help support our customers who have to comply with data localization requirements
Setting the foundations for compliance
Laying the groundwork for developer-enabled compliance.
Tulip: Modernizing Meta’s data platform
The technical journey discusses the motivations, challenges, and technical solutions employed for warehouse schematization, especially a change to the wire serialization format employed in Meta’s data platform for data interchange related to Warehouse Analytics Logging. Here, we discuss the engineering, scaling, and nontechnical challenges of modernizing Meta’s exabyte-scale data platform by migra
Tonight's rabbit hole: time math and 32 bit longs
Reader feedback: "bad" names, !main(), and Mastodon
From Farmer to Security Engineer: How Dev Degree Helped Me Find My Dream Job - Shopify
This story looks at the opportunity Dev Degree gave me, the challenges I overcame, and the weaknesses that turned out to be strengths. If you’re thinking about a career in tech, but don’t think you have the stuff for it, this story is for you.
Creating A High-Contrast Design System With CSS Custom Properties — Smashing Magazine
Managing our colors can truly help people to access our content. In this article, Brecht de Ruyte takes a deep dive into how we can create a high-contrast system while maintaining a balance between designing something accessible and respecting the look and feel of a brand.
Better ROI For Your Digital Products: Why Continuous Research Is Key — Smashing Magazine
57% of product professionals say that product research has a positive effect on customer satisfaction. 42% agree that it affects profitability. Imagine how much more successful your product would be if you did research continuously?
How Plex 6x their impressions deploying Next.js on Vercel
Cloudflare incident on January 24, 2023
Several Cloudflare services became unavailable for 121 minutes on January 24th, 2023 due to an error releasing code that manages service tokens. The incident degraded a wide range of Cloudflare products
Armed to Boot: an enhancement to Arm's Secure Boot chain
Enhancing the Arm Secure Boot chain to improve platform security on modern systems.
Animating CSS Grid (How To + Examples)
I’m pleased to shine a light on the fact that the CSS grid-template-rows and grid-template-columns properties are now animatable in all major web browsers!
100 million developers and counting
There are now 100 million developers around the world using GitHub. Here’s what this means—and why it’s just the beginning.
Product Reviews And Ratings UX: A Designer’s Guide — Smashing Magazine
How do we design effective reviews and ratings? With a distribution chart, decimal scores, tags, recommendation score and unedited product photos.
Deploy AI-driven apps on Vercel
Deploying AI-driven apps on Vercel is easier than ever before. Here's some templates and tooling to jump-start your AI application.
Intelligent, automatic restarts for unhealthy Kafka consumers
At Cloudflare, we take steps to ensure we are resilient against failure at all levels of our infrastructure. This includes Kafka, which we use for critical workflows such as sending time-sensitive emails and alerts.
A unique constraint where NULL conflicts with everything
A cute solution for an unusual request for a unique constraint in PostgreSQL. This blog showcases range data types & exclusion constraints.
What We Learned from Building GovSlack
Slack launched GovSlack in July 2022. With GovSlack, government agencies, and those they work with, can enable their teams to seamlessly collaborate in their digital headquarters, while keeping security and compliance at the forefront. Using GovSlack includes the following benefits: Supports key government security standards, such as FedRAMP High, DoD IL4, and ITAR Runs in…