TLDR Web Dev

TLDR WEB DEV 2024-09-24

6 sections21 entrieslinks blockcomplete parse

Parse notes

  • Subscription/account footer truncated before parsefooter_truncated

01GENERAL

Sponsored

THIS AUTH KILLS BOTS

Build auth your future self will thank you for with Stytch [4]👇

stytch.comSponsor

02ARTICLES & TUTORIALS

WHEN POSTGRES INDEXING WENT WRONG

When a concurrent Postgres index creation silently failed, the app that used the database faced performance degradation, almost leading to a production outage. This failure was exacerbated by the use of partitioned tables, resulting in inconsistent index usage across different partitions. To avoid such issues, monitor concurrent index creation, validate indexes regularly, and create partition indexes consistently.

blog.bemi.io7 min read

IMPLEMENTING FEATURE FLAGGING WITH THE NEXT.JS APP ROUTER

Use environment variables to control feature visibility, validate them, and then access them within server and client components using custom functions and a feature provider. This blog post explains how to implement basic feature flagging with the Next.js App Router. It demonstrates a practical application of feature flagging by controlling the visibility of sidebar routes based on feature flags.

aurorascharff.no6 min read

OPTIMIZING FOR HIGH LATENCY ENVIRONMENTS

Chrome's User Experience Report provides Round-Trip-Time (RTT) data, which reveals the network conditions of users. Many users have slower network connections, so web applications should be able to handle high-latency environments well. Some strategies to handle these include reducing transfer size, using a CDN, upgrading to HTTP/2 and TLS 1.3, and adopting HTTP/3 (QUIC) if possible.

csswizardry.com22 min read

03OPINIONS & ADVICE

THE INTELLIGENCE AGE

Sam Altman describes a new “Intelligence Age” driven by new AI advancements. This new era promises massive improvements in various aspects of life, including healthcare, education, and even solving global problems like climate change. While AI's potential for prosperity is immense, there is still a need to navigate risks, like those related to labor markets.

ia.samaltman.com6 min read

SERIOUSLY, STOP USING RSA

RSA is a widely used public-key cryptosystem which is arguably fundamentally flawed and should be abandoned. Its security relies on carefully chosen parameters, which developers often fail to select properly, leading to vulnerabilities. These vulnerabilities stem from subtle mathematical properties that average developers are unlikely to grasp, making RSA inherently fragile and prone to attacks.

blog.trailofbits.com13 min read

MY LEARNINGS FROM 7 FAILED TECH INTERVIEWS

Zach Wilson, an ex-Airbnb staff data engineer, goes through seven tech interviews he failed over the last decade. He shares learnings from his time. For example, job hopping early in your career is great for growth, but not as great after you hit your mid-career.

blog.dataengineer.io8 min read

04LAUNCHES & TOOLS

Sponsored

[FREE APPSEC LESSON] GET TO KNOW THE SECURE SUPPLY CHAIN CONSUMPTION FRAMEWORK

Learn how to securely ingest and manage open-source software into your projects by leveraging the Secure Supply Chain Consumption Framework (S2C2F). This framework is focused on governance, continuous improvement, and scalable practices to ensure the integrity and security of your software supply chain. Claim your free video lesson

info.securityjourney.comSponsor

TS-BLANK-SPACE

ts-blank-space is a TypeScript-to-JavaScript compiler that focuses on speed by removing type annotations and replacing them with whitespace. It utilizes the original TypeScript parser and is written in pure TypeScript.

bloomberg.github.ioTool

SIDEKICK

Sidekick is a tool that simplifies the deployment applications on VPS', making the process of hosting side projects faster and more affordable by automating the setup and deployment process. It enables zero-downtime deployments and provides features like high availability, load balancing, and automatic SSL certificates.

github.comGitHub repository

MICROJS

A library of JavaScript packages with small footprints.

microjs.comTool

05MISCELLANEOUS

TUNE LLAMA3 405B ON AMD MI300X

Felafax successfully fine-tuned the LLaMA 3.1 405B model on 8 AMD MI300x GPUs using JAX, Google's Python library for high-performance numerical computing and machine learning. Its team used JAX for efficient parameter sharding and a LoRA implementation, achieving near-linear scaling and high memory efficiency.

publish.obsidian.md10 min read

NO DATA LASTS FOREVER

No data lasts forever. From ancient papyrus scrolls to modern hard drives and flash memory, every method of data storage has limitations and eventually fails. In modern times, the potential for data loss comes from hardware failures, technological obsolescence, and intentional or accidental deletion.

lilysthings.org6 min read

CLOUDFLARE'S NEW MARKETPLACE WILL LET WEBSITES CHARGE AI BOTS FOR SCRAPING

Cloudflare is launching a marketplace where website owners can sell access to their content to AI model providers. This marketplace will allow websites to charge AI bots for scraping their content. Cloudflare has also introduced AI Audit, a tool that allows website owners to monitor and block AI bots.

techcrunch.com4 min read