TLDR WEB DEV 2024-02-27

FUTURE SOFTWARE SHOULD BE MEMORY SAFE

The White House Office of the National Cyber Director (ONCD) released a report emphasizing the need to shift cybersecurity responsibility to large tech companies and the government. The report urges the adoption of memory-safe programming languages to prevent common vulnerabilities and calls for better tools to measure software security. It uses C#, Go, Java, Python, Rust, and Swift as examples of memory-safe languages. C and C++ are considered non-memory-safe languages.

HOW QUORA INTEGRATED A SERVICE MESH IN THEIR BACKEND

A service mesh is a software layer that manages communication between services in applications. It is a configurable infrastructure layer that makes communication between microservice applications possible, structured, and observable. Quora implemented a service mesh in its backend to improve observability, reliability, and developer productivity. Since the deployment of the service mesh, Quora has successfully integrated hundreds of services, using features like canary deployments and load balancing with precise traffic controls.

HOW TO FIND THE AWS ACCOUNT ID OF ANY S3 BUCKET

A new technique can discover the AWS Account ID associated with any S3 bucket regardless of whether it is public or private. The technique leverages the fact that CloudTrail logs will record requests permitted by a VPC Endpoint policy but blocked by other policies. Whether AWS account IDs are considered sensitive information is still up in the air, but this technique could potentially be used to uncover other resource identifiers beyond AWS account IDs.

ENGINEERING IS MORE ABOUT PEOPLE THAN TECH

Software engineering prioritizes collaboration and communication over isolated technical work. Success in engineering relies heavily on teamwork, alignment, and knowledge sharing. Developing strong interpersonal skills like empathy, active listening, and communication is key to becoming a truly effective engineer.

GUIDE TO LEADING MEETINGS FOR SOFTWARE ENGINEERS

Meetings are often dreaded by engineers because they tend to be time-wasting and unproductive. However, by taking proactive steps to lead effective meetings, you can transform them into valuable experiences that advance your career. The key to effective meetings is meticulous preparation (defining goals, inviting the right people, and clarifying expectations), skillful facilitation during the meeting (stating the outcome, managing tangents, and ensuring everyone is heard), and diligent follow-up (documenting decisions and summarizing action items with deadlines).

DISILLUSIONED WITH DENO

Deno's core team has taken on the monumental task of building Deno-specific versions of common web development tools along with implementing compatibility with the massive Node/npm ecosystem. This strategy is unsustainable, as it leaves Deno perpetually behind Node and fails to incentivize developers to create Deno-native packages. Node.js is still the most viable long-term bet for backend development in JavaScript as it is adopting Deno's best features and accounting for the rise of non-JavaScript alternatives built on technologies like WebAssembly.

SKELETON UI

Skeleton is a fully featured UI Toolkit for building reactive interfaces quickly using Svelte and Tailwind CSS. It comes with customizable actions, components, and utilities.

FREE MONITOR CERTIFICATE EXPIRY VIA RSS

A free service that uses RSS to monitor TLS certificate expiry. No sign-up is required.

REDWOOD V7

Redwood is a full-stack web framework that brings together React, GraphQL, Prisma, and TypeScript with a focus on building complete apps rapidly. v7 includes a new observability tool called Redwood Studio, real-time GraphQL features, and more.

FRUGLY VS. FREEMIUM

This author explored alternative monetization strategies for their educational tool, wanting to balance accessibility with the need to generate income. Rejecting traditional models like ad-supported freemium, donations, or constant updates, they opted for "frugly pricing" – intentionally downgrading the UI's aesthetics for free users while offering a paid option to remove the unappealing elements.

THE 14 PAINS OF BUILDING YOUR OWN BILLING SYSTEM

12 LESSONS LEARNED FROM DOING THE 1BRC CHALLENGE

GENERATING SVG AVATARS FROM IDENTIFIERS

This blog post describes how to build a system that automatically generates unique SVG avatars based on an input identifier, like a hash.

ARCHITECTURE.MD

Large open-source projects should have an “ARCHITECTURE” document that provides a high-level codemap and highlights significant project aspects.

CHARTWELL

Chartwell is a font used to make charts. It is supported in most design apps, like Adobe apps and Figma.

APPLE IS KILLING PWAS ON IOS FOR EU USERS

iOS 17.4 will bring a few changes to EU users: Apple will delete user data without notice, web push will not work, and many apps will stop working unless users update.

YOUR REFERRAL LINK - https://tldr.tech/webdev?ref=2613930