How HEAD works in git
How HEAD works in git
Success At Scale: Last Chance For Pre-Sale Price — Smashing Magazine
Our next book, “Success at Scale” is finally at the printer, which means we’ll be shipping books soon. It’s also your last chance to get the book at the presale price. Get your copy and save now!
Modern CSS Tooltips And Speech Bubbles (Part 2) — Smashing Magazine
In Part 1 of this series, Temani Afif explored different CSS techniques to create tooltip shapes. The main challenge was to rely on a single element and create optimized code that could easily be controlled using CSS variables to update the size, shape, and position of the tail. In this second part, you are going explore more shapes.
Cloudflare protects global democracy against threats from emerging technology during the 2024 voting season
In 2024, more than 80 national elections are slated to occur, directly impacting approximately 4.2 billion individuals. At Cloudflare, we’re ready to support a range of players in the election space
Advanced DNS Protection: mitigating sophisticated DNS DDoS attacks
We're proud to introduce the Advanced DNS Protection system, a robust defense mechanism designed to protect against the most sophisticated DNS-based DDoS attacks
Building secure websites: a guide to Cloudflare Pages and Turnstile Plugin
Learn how to use Cloudflare Pages and Turnstile to deploy your website quickly and easily while protecting it from bots, without compromising user experience. Follow our tutorial here for a seamless integration
Free network flow monitoring for all enterprise customers
Today, we’re excited to announce that a free version of Cloudflare’s network flow monitoring product, Magic Network Monitoring, is now available to all Enterprise Customers
Collect all your cookies in one jar with Page Shield Cookie Monitor
Protecting online privacy starts with knowing what cookies are used by your websites. Page Shield extends transparent monitoring to HTTP cookies, empowering security and compliance teams with an easy overview without the need for an external scanner, nor changing existing web applications
Exploring an increase in circumvention claims in our transparency data
Our full year of 2023 transparency reporting data is now available and we’re taking a deep dive into how a form change caused an abrupt increase in circumvention claims.
Hard and soft skills for developers coding in the age of AI
While AI revolutionizes software development, it still relies on developers to pilot its use. In this blog, we’ll cover the skills that developers need to have for navigating this new AI-powered coding frontier.
8 advantages of composable commerce
Faster development cycles, better personalization, increased site performance, and more. Here are the benefits composable commerce can offer.
Magic Cloud Networking simplifies security, connectivity, and management of public clouds
Introducing Magic Cloud Networking, a new set of capabilities to visualize and automate cloud networks to give our customers secure, easy, and seamless connection to public cloud environments
Linux kernel security tunables everyone should consider adopting
This post illustrates some of the Linux Kernel features, which are helping us to keep our production systems more secure. We will deep dive into how they work and why you may consider enabling them as well
Cloudflare treats SASE anxiety for VeloCloud customers
The turbulence in the SASE market is driving many customers to seek help. We’re doing our part to help VeloCloud customers who are caught in the crosshairs of shifting strategies
Eliminate VPN vulnerabilities with Cloudflare One
The Cybersecurity & Infrastructure Security Agency (CISA) recently issued an Emergency Directive due to the Ivanti Connect Secure and Policy Secure vulnerabilities. In this blog, we discuss the threat actor tactics exploiting these vulnerabilities
Simplifying how enterprises connect to Cloudflare with Express Cloudflare Network Interconnect
Express Cloudflare Network Interconnect makes it fast and easy to connect your network to Cloudflare. Customers can now order Express CNIs directly from the Cloudflare dashboard, and they will be ready to use in 3 minutes. Express CNI also simplifies setting up Magic Transit and Magic WAN
Zero Trust WARP: tunneling with a MASQUE
This blog discusses the introduction of MASQUE to Zero Trust WARP and how Cloudflare One customers will benefit from this modern protocol
Behind the feature: The multiple lives of multi-edit
Every now and again, we ship a feature that makes us wonder how we ever got along without it. That’s the story with multi-edit, which simplifies how you edit multiple objects across Figma.
What if we rotate pairs every day?
Benefits of pair programming are widely accepted but advice around pair rotation remains controversial. When and how frequently should teammates rotate pairs? And… What if we rotate pairs every day? We worked with three teams through an exercise of daily pair rotation. We developed a lightweight methodology to help teams reflect on the benefits and challenges of pairing and how to solve them. Init
How GitHub uses merge queue to ship hundreds of changes every day
Here’s how merge queue transformed the way GitHub deploys changes to production at scale, so you can do the same for your organization.
GitHub Enterprise Server 3.12 is now generally available
With this version, customers can choose how to best scale their security strategy, gain more control over deployments, and so much more.
Behind AWS S3’s Massive Scale
This is a guest article by Stanislav Kozlovski, an Apache Kafka Committer. If you would like to connect with Stanislav, you can do so on Twitter and LinkedIn. AWS S3 is a service every engineer is familiar with. It’s the service that popularized the notion of cold-storage to the world of cloud. In essence - a scalable multi-tenant storage service which provides interfaces to store and retrieve obj
Making messaging interoperability with third parties safe for users in Europe
To comply with a new EU law, the Digital Markets Act (DMA), which comes into force on March 7th, we’ve made major changes to WhatsApp and Messenger to enable interoperability with third-party messaging services. We’re sharing how we enabled third-party interoperability (interop) while maintaining end-to-end encryption (E2EE) and other privacy guarantees in our services as […]
The End Of My Gatsby Journey — Smashing Magazine
[“Gatsby headaches”](https://www.smashingmagazine.com/2023/06/gatsby-headaches-i18n-part-1/) are over. Juan Diego Rodríguez reflects on his decision to stop using Gatsby as his go-to framework. Through a detailed examination of its strengths and weaknesses, he provides valuable insights and alternative options for developers navigating their tooling choices.
Introducing feature flag management from the Vercel Toolbar
Uplevel your flags workflow with the Vercel Toolbar
Secure your unprotected assets with Security Center: quick view for CISOs
Today we are excited to introduce a new set of capabilities within the Security Center to directly address a common challenge: ensuring comprehensive deployment across your infrastructure. Gain precise insights into where and how to optimize your security posture
Securing Cloudflare with Cloudflare: a Zero Trust journey
A deep dive into how we have deployed Zero Trust at Cloudflare while maintaining user privacy
Simpler migration from Netskope and Zscaler to Cloudflare: introducing Deskope and a Descaler partner update
Today, Cloudflare is excited to expand the Descaler program to Authorized Service Delivery Partners (ASDPs) who will now have exclusive access to the Descaler toolkit. Cloudflare is also launching Deskope, a new set of tooling to also help migrate existing Netskope customers to Cloudflare One
Protecting APIs with JWT Validation
Cloudflare customers can now protect their APIs from broken authentication attacks by validating incoming JSON Web Tokens (JWTs) with API Gateway
Announcing two highly requested DLP enhancements: Optical Character Recognition (OCR) and Source Code Detections
Cloudflare One now supports Optical Character Recognition and detects source code as part of its Data Loss Prevention (DLP) service
Patterns of Legacy Displacement
When faced with the need to replace existing software systems, organizations often fall into a cycle of half-completed technology replacements. Our experiences have taught us a series of patterns that allow us to break this cycle, relying on: a deliberate recognition of the desired outcomes of displacing the legacy software, breaking this displacement in parts, incrementally delivering these parts
Sometimes the dam breaks even after plenty of warnings
Improving Shopify App’s Performance - Shopify
As an integral part of Shopify's ecosystem, our mobile app serves millions of merchants around the world every single day. It allows them to run their business from anywhere and offers vital insights about store performance, analytics, orders, and more. Given its high-engagement nature, users frequently return to it, underscoring the importance of speed and efficiency. At the beginning of 2023, we
Changing the industry with CISA’s Secure by Design principles
Security considerations should be an integral part of software’s design, not an afterthought. Explore how Cloudflare adheres to CISA’s Secure by Design principles to shift the industry
Cloudflare announces Firewall for AI
Cloudflare is one of the first providers to safeguard LLM models and users in the era of AI
Defensive AI: Cloudflare’s framework for defending against next-gen threats
From identifying phishing attempts to protect applications and APIs, Cloudflare uses AI to improve the effectiveness of its security solutions to fight against new and more sophisticated attacks
Cloudflare launches AI Assistant for Security Analytics
Introducing AI Assistant for Security Analytics. Now it is easier than ever to get powerful insights about your web security. Use the new integrated natural language query interface to explore Security Analytics
Introducing behavior-based user risk scoring in Cloudflare One
Cloudflare One is introducing user risk scoring, a new set of capabilities to detect risk based on user behavior, so that you can improve security posture across your organization
Dispelling the Generative AI fear: how Cloudflare secures inboxes against AI-enhanced phishing
Generative AI is being used by malicious actors to make phishing attacks much more convincing. Learn how Cloudflare’s email security systems are able to see past the deception using advanced machine learning models
Navigating the maze of Magecart: a cautionary tale of a Magecart impacted website
E-commerce websites were targeted by a sophisticated Magecart attack, involving a hidden JavaScript code designed to secretly steal Personally Identifiable Information (PII) and credit card details from users
Open source key areas for digital autonomy
The main questtion is: How do you bring free and open source initiatives and something as regulated as the European Union?
Keeping repository maintainer information accurate
Discover how keeping repository maintainer information accurate through CODEOWNERS files and automating maintenance with tools like cleanowners fosters efficient collaboration and sustainable software projects.
GitHub Copilot Learning Pathway: Accelerate your business with AI
Learn what GitHub Copilot can help your business achieve in this expert-guided GitHub Learning Pathway, featuring insights from tech leaders at top organizations.
Welcome to Security Week 2024
Cloudflare’s Chief Security Officer introduces 2024 Security Week by sharing insights into the past year of threats, security incidents and key priorities and concerns for global CISOs
Face cams: the missing guide
I try to avoid doing “meta” / “behind the scenes” stuff, because I usually feel like it has to be “earned”. How many YouTube channels are channels about making YouTube videos? Too many. Regardless, because I’ve had the opportunity to make my own mistakes now for a few years (I started doing the video thing in earnest in 2019), and because I’ve recently made a few leaps in quality-of-life re: shoot
How web bloat impacts users with slow devices
Modern CSS Tooltips And Speech Bubbles (Part 1) — Smashing Magazine
Tooltips are a very common pattern used in CSS for years. There are a lot of ways to approach tooltips in CSS, though some evoke headaches with all the magic numbers they require. In this article, Temani Afif presents modern techniques to create tooltips with the smallest amount of markup and the greatest amount of flexibility.
Risk-Aware Product Decisions in A/B Tests with Multiple Metrics
TL;DR We summarize the findings in our recent paper, , where we explain how Spotify’s decision-making engine works and how the results of multiple metrics in an A/B test are combined into a single product decision. Metrics can be of different types, and we consider success metrics (superiority tests), guardrail metrics (non-inferiority tests), deterioration metrics (inferiority tests), and quality
Introducing AI SDK 3.0 with Generative UI support
Stream React Components from LLMs to deliver richer user experiences
polyfill.io now available on cdnjs: reduce your supply chain risk
Polyfill.io is now available on cdnjs to reduce the risk of supply chain attacks. Replace your polyfill.io links today for a seamless experience
Zaraz launches new pricing
The new Cloudflare Zaraz pricing makes Zaraz the most affordable way to load third-party tools on your website, starting with 1 million free events per month and all features unlocked
How we engineer feedback at Figma with eng crits
A behind the scenes look at engineering crits at Figma.
Game Bytes
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on! 🕹️
Meet Kayla: A college student and open source ambassador
From learner to mentor, Kayla, an All In for Students ambassador, has become an open source leader on her campus.
Keeping secrets out of public repositories
With push protection now enabled by default, GitHub helps open source developers safeguard their secrets, and their reputations.
Today's only half of the leap year fun
Waiting For Spring (March 2024 Wallpapers Edition) — Smashing Magazine
Do you need a little inspiration boost? Well, then our new batch of desktop wallpapers is for you. Designed by artists and designers from across the globe, they come in versions with and without a calendar for March 2024. Enjoy!
The Frontend Cloud: Resiliency for global web applications
Optimize your web presence for maximum uptime, scalability, and security. Discover the power of frontend clouds for enterprise resilience.
Open sourcing Pingora: our Rust framework for building programmable network services
Pingora, our framework for building programmable and memory-safe network services, is now open source. Get started using Pingora today
Customizing and fine-tuning LLMs: What you need to know
Learn how your organization can customize its LLM-based solution through retrieval augmented generation and fine-tuning.
