The Daily Index — Wednesday, January 8, 2025

ARTICLES & TUTORIALS

TLDR Web Dev

HOW CLOUDFLARE MITIGATES THOUSANDS OF DDOS ATTACKS EVERY HOUR

Cloudflare mitigates an average of 2,200 DDoS attacks per hour. It measures attack size using metrics like bits per second (BPS), requests per second (RPS), and packets per second (PPS), analyzing attack vectors, targets, and payload signatures to identify and fingerprint attacks. Cloudflare has multiple protection strategies, like rate limiting, caching, CDNs, reducing attack surface, continuous monitoring, and machine learning.

blog.quastor.org · 7 min

TLDR Web Dev

AUTOMATED ACCESSIBILITY TESTING AT SLACK

Slack implemented automated accessibility testing using Axe, integrating it with their Playwright E2E framework to identify WCAG violations. They had initial challenges integrating Axe directly into their React Testing Library, but were able to successfully implement a system where accessibility checks run alongside existing tests, reporting critical violations. The full process includes a custom Playwright fixture to simplify test creation and uses an environment flag to control test execution on-demand, scheduled, and with CI.

slack.engineering · 13 min

TLDR Web Dev

MISTAKES ENGINEERS MAKE IN LARGE ESTABLISHED CODEBASES

Working in large, established codebases is challenging, requiring skills not learned in smaller projects or open source contributions. The most important skill is maintaining consistency by following existing code patterns and avoiding isolated, "clean" implementations. Understanding the codebase's production usage, particularly high-traffic areas, is also really important, as is careful testing and monitoring due to the impossibility of exhaustive testing.

seangoedecke.com · 8 min

TLDR Web Dev

17 TIPS FROM A SENIOR REACT DEVELOPER

A senior React developer at Palantir shares 17 tips for React, advising new engineers to build projects, read a lot of code, and be careful of mindlessly following online advice. He also shares practical development techniques to optimize bundle size, keep components simple, and keep code maintainable when working in teams.

frontendjoy.com · 8 min

TLDR Web Dev

MAGIC/TRAGIC EMAIL LINKS: DON'T MAKE THEM THE ONLY OPTION

The increasing use of "magic links" (email login links) as the sole authentication method is annoying. While they offer improved security over passwords, they present significant usability issues for users with multiple devices.

recyclebin.zip · 3 min

TLDR Web Dev

NODE.JS NOW SUPPORTS TYPESCRIPT BY DEFAULT

Node.js version 23 will natively support TypeScript, allowing users to run `.ts` files without extra configuration. Node does this by stripping type information using swc before execution. However, type checking must be done separately using `tsc`.

totaltypescript.com · 5 min

TLDR Web Dev

APPLE AND THE AI DIVIDE

There's a growing divide between companies enthusiastically integrating AI into their products and a public increasingly wary of AI's ethical implications and potential misuse. Apple's rushed adoption of AI features is an example of this disconnect.

anderegg.ca · 5 min

TLDR Web Dev

HOW AIRBNB BUILT A KEY-VALUE STORE FOR PETABYTES OF DATA

Airbnb's derived data infrastructure evolved from HFileService, a read-only batch processing system, to Nebula, which combined batch and real-time data but suffered from inefficiencies and complexity. To overcome these challenges, Airbnb developed Mussel, a scalable, low-latency key-value store using technologies like Apache Helix, Kafka, and HRegion to handle real-time and batch data seamlessly. Mussel now supports over 130TB of data with high availability and sub-8ms read latency.

blog.bytebytego.com · 8 min

TLDR Web Dev

LAID OFF FOR THE FIRST TIME IN MY CAREER, AND TWICE IN ONE YEAR

This developer was laid off twice within a year, first during paternity leave and then shortly before Christmas. Both experiences, though initially shocking and emotionally challenging, led to new job searches. The developer goes over their job hunting strategies, including how they networked, sent out targeted applications, and refined their resume.

dillonshook.com · 10 min

TLDR Web Dev

MICROSOFT IS USING BING TO TRICK PEOPLE INTO THINKING THEY'RE ON GOOGLE

Microsoft is using a Bing search interface mimicking Google's homepage to subtly encourage users to stick with Bing and Edge instead of switching to Google and Chrome.

theverge.com · 3 min

TLDR Web Dev

THE IMPORTANCE OF INVESTING IN SOFT SKILLS IN THE AGE OF AI

As AI continues to improve, developers can future-proof themselves by focusing on core soft skills like communication, adaptability, and collaboration, which AI cannot replicate.

css-tricks.com · 4 min

TLDR Web Dev

HOW CAN I MOST EFFECTIVELY PUSH BACK AGAINST MANAGEMENT ALWAYS TRYING TO PUT MORE AND MORE ON MY PLATE? (REDDIT THREAD)

A mid-level software engineer at a FAANG company seeks advice on how to effectively push back against management's constant addition of unplanned, high-priority tasks that disrupt their workflow - responses recommend managing expectations for these tasks with their manager or, in the worst case, switching teams/companies.

links.tldrnewsletter.com