TLDR WEB DEV 2024-09-27

developer hub here.

ELIMINATING MEMORY SAFETY VULNERABILITIES AT THE SOURCE

Google advocates for Safe Coding, a secure-by-design approach that prioritizes using memory-safe languages, to eliminate memory safety vulnerabilities at scale. By transitioning to memory-safe languages for new code, Google observed a significant decline in memory safety vulnerabilities in Android, dropping from 76% to 24% over six years. This counterintuitive result is explained by the exponential decay of vulnerabilities over time, meaning older code becomes inherently safer.

HOW I BUILT MY BLOG

This developer rebuilt their blog using Next.js's App Router, MDX for content management, Linaria for styling, Shiki for code snippets, and Sandpack for interactive code playgrounds. They share their experience, challenges, and workarounds for each technology along with demonstrative code examples.

ZERO-LATENCY SQLITE STORAGE IN EVERY DURABLE OBJECT

Cloudflare's Durable Objects offer SQLite storage which allows zero-latency database access within application code. This eliminates network communication overhead by embedding the database directly within the Durable Object. Its storage service uses local disk caching and object storage for high availability.

4 SOFTWARE DESIGN PRINCIPLES I LEARNED THE HARD WAY

This developer built a large-scale service and found certain principles reappearing throughout the implementation. It's useful to prioritize a single source of truth and minimize mutable state when building something from scratch. Developers should also make sure not to abstract things prematurely and not to overuse mocks when writing tests for their code.

YOU CAN CHOOSE TO BE SOMEONE WHO'S COMPETENT IN MANY THINGS, OR UNBELIEVABLY GOOD AT ONE THING

Generalists have a broad understanding of various tech domains. Specialists dive deeply into a specific area. Both have their merits, though generalists usually will be found in leadership positions, while specialists push technical boundaries.

DEVSTARTERPACK. Go build your startup!

POSTGRESQL 17 RELEASED

PostgreSQL 17 has huge performance improvements, including optimized memory management, faster I/O operations, and better query execution. The release also expands the developer experience with features like the SQL/JSON JSON_TABLE command, improved logical replication for high availability, and better security and operations management. It has a new collation provider for immutable sorting and streamlined upgrades for logical replication.

HAYSTACK EDITOR

Haystack Editor is a canvas UI for code understanding, editing, and lightweight debugging. It is an IDE built on top of a canvas that allows for easier navigation through a codebase.

AVATARS

Avatars is a collection of free avatar images from across the web.

OUR ANDROID APP IS FROZEN IN CARBONITE

This indie app developer has been struggling to maintain access to Google Drive on its Android app due to Google's ever-changing API policies and security requirements. This has resulted in a frustrating and costly process, forcing the company to pay for an annual audit. The situation has become untenable, so the developer is now focusing on other platforms and a B2B model where it can control its software development and avoid the complexities and costs associated with the Android ecosystem.

FEW LESSER KNOWN TRICKS, QUIRKS, AND FEATURES OF C

This article goes over lesser-known tricks, quirks, and features of the C programming language that can be confusing even for experienced developers. Examples include obscure syntax variations like digraphs and trigraphs to advanced techniques such as X-macros and compile-time assumption checking using enums. There are also discussions on features such as bit fields, flexible array members, and the infamous comma operator.

OPENAI TO REMOVE NON-PROFIT CONTROL AND GIVE SAM ALTMAN EQUITY

OpenAI is restructuring its core business into a for-profit benefit corporation, giving CEO Sam Altman equity for the first time and removing non-profit board control.

WORDPRESS.ORG BANS WP ENGINE, BLOCKS IT FROM ACCESSING ITS RESOURCES

WordPress.org has banned WP Engine from accessing its resources, including themes and plugins, due to a dispute over trademark infringement and WP Engine's alleged lack of contribution to the WordPress community.

FROM GATSBY GRIDLOCK TO ASTRO BLISS: MY PERSONAL SITE REDESIGN

This developer redesigned their personal website, migrating from Gatsby to Astro, which they found gave better performance and cleaner design.

USING CALLBACKS TO ACHIEVE BETTER COMPONENT DECOUPLING IN REACT

Using callbacks in React components allows child components to notify their parent of actions without directly manipulating the parent's state.