TLDR WEB DEV 2024-07-22

Register for the live builder.io session on July 24

TECHNICAL DETAILS: FALCON CONTENT UPDATE FOR WINDOWS HOSTS

On July 19, CrowdStrike released a sensor configuration update to Windows systems that triggered a logic error resulting in system crashes and blue screens. The issue was caused by an updated Channel File 291 (a config file) that controls how Falcon evaluates named pipe execution. CrowdStrike has corrected the error and updated the file, but billions of systems are still affected.

HOW NOT TO USE BOX SHADOWS

Box shadows in CSS can be used to create a variety of effects beyond simple drop shadows, such as layered shadows, rounded corners, and 3D-like effects. They can be combined and animated to create complex visuals, such as bouncing balls and simulated 3D objects. This article goes over how to and how not to use box shadows. Using box shadows for such advanced effects can be performance-intensive, especially when blurring or transparency is involved.

WHY IS SPAWNING A NEW PROCESS IN NODE SO SLOW?

Node's spawn function can be slow due to its blocking nature. Using the Node cluster module or worker threads can improve spawn performance, but may have drawbacks like isolated processes or added overhead. Moving spawn calls to child processes and using abstract sockets or process.send for communication can help performance in this case.

DON'T OVERPLAN, DO PROTOTYPE

Overplanning in software projects can lead to overcomplication, overengineering, and wasted time. Prototyping is better because it helps identify unknown challenges and bottlenecks. It's better to build a minimum viable product (MVP) and iterate based on real-world feedback than to strive for perfection on paper.

LET'S BLAME THE DEV WHO PRESSED "DEPLOY"

This author disagrees with blaming software engineers for the CrowdStrike outage, instead placing responsibility on CEOs, customers, government regulations, middle management, and the board of directors. These parties prioritized profits over quality and failed to give the software engineers the respect and resources they needed to do their jobs properly.

HAVE YOU GONE FROM BEING A TECH LEAD TO A SENIOR AGAIN? (REDDIT THREAD)

Reddit users share their positive experiences transitioning from tech lead back to senior engineer roles. The transition improved work-life balance and a renewed focus on technical skills for many.

Schedule a demo to learn more.

RR PROJECT

rr is a C/C++ debugging tool for Linux that records program executions and allows for deterministic replay, replacing gdb. It also enhances gdb with efficient reverse-execution for easier debugging.

NEXTRA

Nextra is a simple, powerful, and flexible site generation framework. It uses Next.js and Markdown.

FAKEMAIL

Fakemail is a fake SMTP server for software integration testing.

DATA FOR A.I. TRAINING IS DISAPPEARING FAST, STUDY SHOWS

A recent study by the Data Provenance Initiative found a significant decrease in the availability of web data for training AI models. This is due to many websites restricting data usage through methods like the Robots Exclusion Protocol or changing their terms of service. This data scarcity will be tough for AI companies who rely on large datasets to train and improve their models.

RUNNING UNTRUSTED JAVASCRIPT CODE

Running untrusted JavaScript code within an application can open up a world of customization but also exposes the platform to security risks. There are various methods to mitigate these risks, including time-boxing execution with Web Workers, disallowing global objects, and using isolated virtual machines. Developers can also opt for server-side options like Docker or WebAssembly.

INTEL VS. SAMSUNG VS. TSMC

Leading foundries Intel, Samsung, and TSMC are differentiating themselves with unique approaches to 3D chip design and packaging. Intel focuses on developing "sockets" for chiplets, Samsung is creating mini-consortia of chiplet providers, and TSMC offers a variety of packaging options and a new design language called 3Dblox. These foundries are also working on new technologies like custom HBM, backside power delivery, and glass substrates to address challenges in performance, power delivery, and signal integrity.

WHY BLOOMBERG TERMINALS CAN'T BE DISRUPTED

Bloomberg terminals have not been disrupted due to their extensive high-quality datasets, a user experience loved by users, strong network effects, and role as the infrastructure of global finance.

DELUGE OF FAKE MAC APP STORE REVIEWS

There are a large number of fake reviews on the Mac App Store for cheap top paid apps, all of which were posted around the same time period, that may have been purchased by a single developer to camouflage their own app's fake reviews.

GARAGE

An open-source distributed object storage service tailored for self-hosting.

ARO

A C compiler written in Zig.