Home/2024
Archive

Year 2024

1,148 articles published in 2024.

Security — RADIUS/UDP vulnerable to improved MD5 collision attack

RADIUS/UDP vulnerable to improved MD5 collision attack

The RADIUS protocol is commonly used to control administrative access to networking gear. Despite its importance, RADIUS hasn’t changed much in decades. We discuss an attack on RADIUS as a case study for why it’s important for legacy protocols to keep up with advancements in cryptography

GMGoldbe, Miro HallerGoldbe, Miro Haller·July 9, 2024Security
Frontend — "If" CSS Gets Inline Conditionals

"If" CSS Gets Inline Conditionals

A few sirens went off a couple of weeks ago when the CSS Working Group (CSSWG) resolved to add an if() conditional to the CSS Values Module Level 5

GGGeoff GrahamGeoff Graham·July 9, 2024Frontend
Networking — Cloudflare 1.1.1.1 incident on June 27, 2024

Cloudflare 1.1.1.1 incident on June 27, 2024

On June 27, 2024, a small number of users globally may have noticed that 1.1.1.1 was unreachable or degraded. The root cause was a mix of BGP (Border Gateway Protocol) hijacking and a route leak

BMBryton, MingweiBryton, Mingwei·July 4, 2024Networking
Engineering — Technical Decision-Making in a Fragmented Space: Spotify In-Car Case Study

Technical Decision-Making in a Fragmented Space: Spotify In-Car Case Study

Car rides have become connected and interactive these days with drivers jamming to music or catching up on podcasts or audiobooks while they’re on the road. A big portion of Spotify listening happens in the car — a key reason why it’s important for Spotify to ensure users have a smooth experience in the car, striking the perfect balance between safety, simplicity, and control. Achieving such balan

MKMaheen Khalid, Senior Engineer·July 1, 2024Engineering
Engineering — Transitioning to Auto Height

Transitioning to Auto Height

I know this is something Chris has wanted forever, so it's no surprise he's already got a fantastic write-up just a day after the news broke. In fact, I first

GGGeoff GrahamGeoff Graham·June 28, 2024Engineering
Security — Proactive Measures Against Password Breaches and Cookie Hijacking

Proactive Measures Against Password Breaches and Cookie Hijacking

At Slack, we’re committed to security that goes beyond the ordinary. We continuously strive to earn and maintain user trust by safeguarding critical components integral to every user’s experience. From passwords to session cookies, and tokens to webhooks, we prioritize protecting everything essential to how users log into the platform and remain authenticated. Through proactive…

NLNathan Lehotsky·June 28, 2024Security
Security — Cloudflare incident on June 20, 2024

Cloudflare incident on June 20, 2024

A new DDoS rule resulted in an increase in error responses and latency for Cloudflare customers. Here’s how it went wrong, and what we’ve learned

LJLloyd, Julien DesgatsLloyd, Julien Desgats·June 26, 2024Security
Engineering — Poppin' In

Poppin' In

Oh, hey there! It’s been a hot minute, hasn’t it? Thought I’d pop in and say hello while we get to know the Popover API a bit.

GGGeoff GrahamGeoff Graham·June 26, 2024Engineering
AI & ML — What is good design in the age of AI?

What is good design in the age of AI?

As AI democratizes product development, design will be the differentiator. But what exactly does “good” look like, and what does it mean for our craft? Four Figma designers weigh in.

NLNoah Levin·June 26, 2024AI & ML
AI & ML — What is minimum viable data?

What is minimum viable data?

As many focus on the possibilities and limitations of AI tools and their output, Ovetta Sampson reminds us to pay attention to the power of the input.

HLHerbert Lui·June 26, 2024AI & ML
AI & ML — Config 2024 in review

Config 2024 in review

We’re launching a redesigned Figma, Figma Slides, and a new suite of AI features, along with major updates to Dev Mode and usability improvements.

DFDylan Field·June 26, 2024AI & ML
AI & ML — Welcome to The Prompt

Welcome to The Prompt

AI promises to reinvigorate the way we design and build, but how we realize that potential is still an open question.

ABAmber Bravo·June 26, 2024AI & ML
Design & UX — Stack the deck with Figma Slides

Stack the deck with Figma Slides

Say goodbye to lackluster presentations. Today, we’re announcing the open beta of Figma Slides, here to set a new standard for telling visual stories that move work forward.

MKMihika KapoorMihika Kapoor·June 26, 2024Design & UX
Design & UX — How To Make A Strong Case For Accessibility — Smashing Magazine

How To Make A Strong Case For Accessibility — Smashing Magazine

Gaining buy-in for accessibility can be challenging due to common myths and misunderstandings. For many, accessibility remains a big mystery. Here are some practical techniques for winning stakeholder support. Part of [Smart Interface Design Patterns](https://smart-interface-design-patterns.com) by yours truly.

VFVitaly FriedmanVitaly Friedman·June 26, 2024Design & UX
SRE & Ops — The key to a happy Rust/C++ relationship

The key to a happy Rust/C++ relationship

The history of Rust at Meta goes all the way back to 2016, when we first started using it for source control. Today, it has been widely embraced at Meta and is one of our primary supported server-side languages (along with C++, Python, and Hack). But that doesn’t mean there weren’t any growing pains. Aida […]

CWChris Wiltz·June 25, 2024SRE & Ops
Frontend — Quick Hit #8

Quick Hit #8

CSS Meditation #8: .work + .life { border: 10px solid #000; }

GGGeoff GrahamGeoff Graham·June 24, 2024Frontend
Frontend — Quick Hit #6

Quick Hit #6

CSS Meditation #6: The color space is always calc(rgb(0 255 0)+er) on the other side of the fence.

GGGeoff GrahamGeoff Graham·June 24, 2024Frontend
Frontend — Quick Hit #4

Quick Hit #4

CSS Meditation #4: Select, style, adjust. Select, style, adjust. Select, sty…

GGGeoff GrahamGeoff Graham·June 24, 2024Frontend
Frontend — Quick Hit #2

Quick Hit #2

CSS Meditation #2: Who gives a flying frick what constitutes a “programming” language.

GGGeoff GrahamGeoff Graham·June 24, 2024Frontend
Frontend — Quick Hit #1

Quick Hit #1

CSS Meditation #1: If the code works as expected and it fits your mental model, then it’s perfect.

GGGeoff GrahamGeoff Graham·June 24, 2024Frontend
SRE & Ops — Leveraging AI for efficient incident response

Leveraging AI for efficient incident response

We’re sharing how we streamline system reliability investigations using a new AI-assisted root cause analysis system. The system uses a combination of heuristic-based retrieval and large language model-based ranking to speed up root cause identification during investigations. Our testing has shown this new system achieves 42% accuracy in identifying root causes for investigations at their […] Read

CWChris Wiltz·June 24, 2024SRE & Ops