Git turns 20: A Q&A with Linus Torvalds
To celebrate two decades of Git, we sat down with Linus Torvalds—the creator of Git and Linux—to discuss how it forever changed software development.
Protectd: Evolving Vercel’s always-on denial-of-service mitigations
Protectd is our new real-time security engine that blocks DDoS attacks faster than ever—built to detect, learn from, and stop threats before they reach your app. Now powering sub-second protection across all regions by default.
Welcome to Developer Week 2025
We’re kicking off Cloudflare’s 2025 Developer Week — our innovation week dedicated to announcements for developers.
Meta Llama 4 now available on Workers AI
Llama 4 Scout 17B Instruct is now available on Workers AI: use this multimodal, Mixture of Experts AI model on Cloudflare's serverless AI platform to build next-gen AI applications. Build products that can understand images & text, accept large context, with high performance on model quality and inference latency.
Cloudflare’s commitment to CISA Secure-By-Design pledge: delivering new kernels, faster
Cloudflare’s commitment to the CISA pledge reflects our dedication to transparency and accountability to our customers. This blog post outlines how we deliver newly patched kernels across our infrastructure in order to keep Cloudflare secure.
A New "Web" Readiness Report
HTML 5 Readiness was a site that showed through a rainbow of colors the browser support for several web features. What about a new version?
Designing for security and usability: Figma's modern endpoint strategy
At Figma, security doesn’t have to slow you down. We’ve designed our corporate endpoint security with UX in mind, making it seamless and self-serve.
Social Media Engagement in Early 2025
Comparing engagement on two dozen recent social media posts
Vibe coding with GitHub Copilot: Agent mode and MCP support rolling out to all VS Code users
In celebration of MSFT’s 50th anniversary, we’re rolling out Agent Mode with MCP support to all VS Code users. We are also announcing the new GitHub Copilot Pro+ plan w/ premium requests, the general availability of models from Anthropic, Google, and OpenAI, next edit suggestions for code completions & the Copilot code review agent.
How To Build A Business Case To Promote Accessibility In Your B2B Products — Smashing Magazine
When passion for accessibility meets business indifference, what bridges the gap? Gloria Diaz Alonso shares how she turned frustration into strategy — by learning to speak the language of business.
Improve your media pipelines with the Images binding for Cloudflare Workers
Media-rich applications require image and video pipelines that integrate seamlessly with the rest of your technology stack. Here’s how the Images binding enables you to build more flexible, programmatic workflows.
Using pgvector for timeseries data
pgvector is a popular PostgreSQL extension for semantic search, facilitating discussions on AI and related topics.
Localhost dangers: CORS and DNS rebinding
What is CORS and how can a CORS misconfiguration lead to security issues? In this blog post, we’ll describe some common CORS issues as well as how you can find and fix them.
How PAIGE grew revenue by 22% with Shopify, Next.js, and Vercel
A steam locomotive from 1993 broke my yarn test
Yarn tests fail consistently at the 27-second mark. The usual suspects are swiftly eliminated to no avail. A deep dive is taken to comb through traces, only to be derailed into an unexpected crash investigation.
SMIL on?
Well, it turns out that SVG's built-in animation features were never deprecated as planned. Sure, CSS and JavaScript are more than capable of carrying the load, but it's good to know that SMIL is not dead in the water as previously thought, and is actually well-supported.
Why design is for everyone
Design isn’t just a discipline or skillset—it’s a way of working.
Meta Open Source: 2024 by the numbers
Open source has played an essential role in the tech industry and beyond. Whether in the AI/ML, web, or mobile space, our open source community grew and evolved while connecting people worldwide. At Meta Open Source, 2024 was a year of growth and transformation. Our open source initiatives addressed the evolving needs and challenges of […]
Building A Drupal To Storyblok Migration Tool: An Engineering Perspective — Smashing Magazine
In this article, Edoardo Dusi shares the engineering and architectural choices made by the team at Storyblok and how real-world migration challenges were addressed using modern PHP practices.
“You get Instant Purge, and you get Instant Purge!” — all purge methods now available to all customers
Following up on having the fastest purge in the industry, we have now increased Instant Purge quotas across all Cloudflare plans.
Crafting Strong DX With Astro Components and TypeScript
One thing we can do to help teams code consistently is provide type-checking so that all of the configurable options for a specific component are available while coding. Bryan demonstrates how he does this with TypeScript when working with Astro components.
GitHub found 39M secret leaks in 2024. Here’s what we’re doing to help
Every minute, GitHub blocks several secrets with push protection—but secret leaks still remain one of the most common causes of security incidents. Learn how GitHub is making it easier to protect yourself from exposed secrets, including today’s launches of standalone Secret Protection, org-wide scanning, and better access for teams of all sizes.
A Behind-the-Scenes Look at How We Release the Spotify App (Part 1)
Developing and releasing mobile apps at scale is a big challenge. With each weekly release of our mobile app for iOS and Android, hundreds of changes go out to more than 675 million users all over the world and on all kinds of mobile devices. A lot can go wrong, so discovering and mitigating potential and confirmed issues is critical to ensuring a smooth listening experience. Every feature could i
Celebrating Five Years of Backstage: From Open Source Project to Enterprise Business
Did you know that we sell Spotify’s developer productivity tools and support to other companies, from online retailers and fashion brands to banks and automobile manufacturers? How did Spotify get into the business of selling enterprise developer software? And how does serving the open source community — not to mention paying corporate customers — improve our own internal software practices? Tyson
Worlds Collide: Keyframe Collision Detection Using Style Queries
Interactive CSS animations with elements ricocheting off each other seem more plausible in 2025. While it’s unnecessary to implement Pong in CSS, the increasing flexibility and power of CSS reinforce Lee's suspicion that one day it will be a lifestyle choice whether to achieve any given effect with scripting or CSS.
GitHub for Beginners: How to get LLMs to do what you want
Learn how to write effective prompts and troubleshoot results in this installment of our GitHub for Beginners series.
Mobile GraphQL at Meta in 2025
Mobile GraphQL is a framework used at Meta for fetching data in mobile applications using GraphQL, a strongly-typed, declarative query language. At Meta it handles data fetching for apps like Facebook and Instagram. Sabrina, a software engineer on Meta’s Mobile GraphQL Platform Team, joins Pascal Hartig on the Meta Tech podcast to discuss the evolution […]
Blossoms, Flowers, And The Magic Of Spring (April 2025 Wallpapers Edition) — Smashing Magazine
The beginning of the new month is the perfect opportunity to give your desktop a makeover. If you’re looking for some beautiful and unique wallpapers to cater for a bit of inspiration this April, well, this post has got you covered.
Impromptu disaster recovery
Background im-promp-tu ( im-ˈpräm(p)-(ˌ)tü ) made, done, or formed on or as if on the spur of the moment: improvised composed or uttered without previous preparation: extemporaneous Merriam-Webster On March 18th, 2025, I thought I would look into self-hosted project management solutions — something kanban-y, but.. better? This one does not spark joy. After discovering that Teamhood was awesome (an
How To Argue Against AI-First Research — Smashing Magazine
Companies have been turning their attention to “synthetic,” AI-driven user testing. However, as convenient as it might seem, it’s dangerous, expensive, and usually diminishes user value. Let’s take a closer look at why exactly it is problematic and how we can argue against it to make a case for UX research with real users. Part of [Smart Interface Design Patterns](https://smart-interface-design-pa
Three chapters at Cloudflare: Programmer to CTO to Board of Directors
Today, after more than 13 years at the company, I am joining Cloudflare’s board of directors and retiring from my full-time position as CTO.
Random
💡Loading a random post
Semantic Search in PostgreSQL: An Overview
PostgreSQL enhances search capabilities with extensions like pgvector, enabling advanced semantic search. Find out more in this blog posting.
5 GitHub Actions every maintainer needs to know
With these actions, you can keep your open source projects organized, minimize repetitive and manual tasks, and focus more on writing code.
How engineers can use one-on-ones with their manager to accelerate career growth
Go beyond status updates and use these meetings to surface challenges, solve problems, and drive impact.
Adaptive Video Streaming With Dash.js In React — Smashing Magazine
HTML `` is the de facto element we turn to for embedding video content, but it comes with constraints. For example, it downloads the video file linearly over HTTP, which leads to performance hiccups, especially for large videos consumed on slower connections. But with adaptive bitrate streaming, we can split the video into multiple segments at different bitrates and resolutions.
Using AI to create dynamic, risk-based Radar rules
Last month, we improved our AI tooling to give you even more flexibility when combating fraud. Now, Radar’s new rules combine our machine learning models with the issuer’s CVC and postal code response in real time.
Project Jengo for Sable — final winners!
With Cloudflare’s victory against patent trolls Sable IP and Sable Networks in the books, it’s time to close out the case’s Project Jengo competition.
Everything you need to know about Figma for Government
With our FedRAMP Moderate status officially approved, the public sector can use Figma to brainstorm, design, and build better digital experiences for U.S. citizens.
Problems with the heap
How Stripe is using AI to create personalized checkout experiences
The Optimized Checkout Suite uses AI to personalize the checkout experience—dynamically adjusting everything from payment method ordering to fraud interventions in order to maximize conversion and boost revenue.
Cloudflare incident on March 21, 2025
On March 21, 2025, multiple Cloudflare services, including R2 object storage experienced an elevated rate of error responses. Here’s what caused the incident, the impact, and how we are making sure it doesn’t happen again.
Build and deploy Remote Model Context Protocol (MCP) servers to Cloudflare
You can now build and deploy remote MCP servers to Cloudflare, and we handle the hard parts of building remote MCP servers for you. Unlike local MCP servers you may have previously used, remote MCP servers are Internet-accessible. People simply sign in and grant permissions to MCP clients using familiar authorization flows.
Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH
OPKSSH (OpenPubkey SSH) is now open-sourced as part of the OpenPubkey project. This enables users and organizations to configure SSH to work with single sign-on technologies like OpenID Connect, removing the need to manually manage & configure SSH keys without adding a trusted party other than your IdP.
My First Experience Speaking at PGDay Paris 2025
Find out more about my first visit to PGDay Paris 2025 in this blog post, what I experienced and what lessons I learnt.
Making the move to UI3: A guide to Figma’s next chapter
On April 30, we’ll be fully transitioning to UI3, our redesigned interface that puts your work center stage. Here’s what you need to know about the change, along with tips for a smooth transition.
Mastering GitHub Copilot: When to use AI agent mode
Discover the differences between agent mode and Copilot Edits with GitHub Copilot—and when to use them in your workflows.
You might want to stop running atop
Security Week 2025: in review
Security Week 2025 has officially come to a close. Our updates for the week included a deep dive on our AI offering, a unified navigation experience, and an introduction to our AI Agent Cloudy. Read about the latest updates from the team and discover how Cloudflare is helping build a better Internet.
New URLPattern API brings improved pattern matching to Node.js and Cloudflare Workers
Today we're announcing our latest contribution to Node.js, now available in v23.8.0: URLPattern. We've added our implementation to Ada URL, bringing this standard pattern-matching API to Node.js to improve how developers match patterns and routes across all JavaScript environments.
What to do when you receive a vulnerability report: A step-by-step guide for maintainers
A step-by-step guide for open source maintainers on how to handle vulnerability reports confidently from the start.
Prepping for post-quantum: a beginner’s guide to lattice cryptography
This post is a beginner's guide to lattices, the math at the heart of the transition to post-quantum (PQ) cryptography. It explains how to do lattice-based encryption and authentication from scratch.
Detecting sensitive data and misconfigurations in AWS and GCP with Cloudflare One
Using Cloudflare’s CASB, integrate, scan, and detect sensitive data and misconfigurations in your cloud storage accounts.
RDP without the risk: Cloudflare's browser-based solution for secure third-party access
Cloudflare now provides clientless, browser-based support for the Remote Desktop Protocol (RDP). It natively enables secure, remote Windows server access without VPNs or RDP clients, to support third-party access and BYOD security.
Enhance data protection in Microsoft Outlook with Cloudflare One’s new DLP Assist
Customers can now easily safeguard sensitive data in Microsoft Outlook with our new DLP Assist feature.
Revisiting CSS border-image
I’ve used border-image regularly. Yet, it remains one of the most underused CSS tools, and I can’t, for the life of me, figure out why. Is it possible that people steer clear of border-image because its syntax is awkward and unintuitive? Perhaps it’s because most explanations don’t solve the type of creative implementation problems that most people need to solve. Most likely, it’s both.
Previewing Content Changes In Your Work With document.designMode — Smashing Magazine
You probably already know that you can use developer tools in your browser to make on-the-spot changes to a webpage — simply click the node in the Inspector and make your edits. But have you tried `document.designMode`? Victor Ayomipo explains how it can be used to preview content changes and demonstrates several use cases where it comes in handy for everything from basic content editing to improv
AI SDK 4.2
AI SDK 4.2 introduces MCP clients, reasoning, image generation with language models, message parts, sources, and more
Cloudflare named a leader in Web Application Firewall Solutions in 2025 Forrester report
Forrester Research has recognized Cloudflare as a Leader in its The Forrester Wave™: Web Application Firewall Solutions, Q1 2025 report.
Introducing Cloudy, Cloudflare’s AI agent for simplifying complex configurations
Cloudflare’s first AI agent, Cloudy, helps make complicated configurations easy to understand for Cloudflare administrators.
