TLDR Web Dev

TLDR WEB DEV 2024-10-14

6 sections20 entrieslinks blockcomplete parse

Parse notes

  • Subscription/account footer truncated before parsefooter_truncated

01GENERAL

Sponsored

MANAGE IDENTITY… OR DO FUN CODING PROJECTS? 🤔

Reduce the time devs spend on identity setup and maintenance (you have better things to build). Frontegg [4] has everything you need for auth, entitlements, and security out-of-the-box.👇

frontegg.comSponsor

portal

* Tell our AI to configure identity for you → learn about Frontegg

frontegg.com

Flows

✅ Trusted by Siemens, Materialize, and Hint Health

frontegg.com

02ARTICLES & TUTORIALS

1 BUG, $50,000+ IN BOUNTIES, HOW ZENDESK INTENTIONALLY LEFT A BACKDOOR IN HUNDREDS OF FORTUNE 500 COMPANIES

A 15-year-old bug hunter discovered a vulnerability in Zendesk's email collaboration feature that allowed attackers to access customer support tickets from any company using the service. This exploit was initially dismissed by Zendesk's bug bounty program as "out of scope," but subsequent public disclosure of the vulnerability forced Zendesk to take action. The bug hunter then discovered a second, more serious exploit that could allow attackers to gain access to private Slack workspaces using Zendesk, which was fixed later.

gist.github.com11 min read

NODE.JS, PIPES, AND DISAPPEARING BYTES

Piping large amounts of JSON data from a Node.js command to another command results in truncated output. The issue stems from the asynchronous nature of Node.js's `process.stdout.write` when writing to a pipe on POSIX systems. When the pipe buffer is full, `process.stdout.write` returns false, and further writes are blocked until the pipe is read. The solution involves subscribing to the `drain` event of the `process.stdout` stream to resume writing after the pipe has been filled.

sxlijin.github.io5 min read

THE INTERACTIVE GUIDE TO RENDERING IN REACT

React re-renders a component only when its state changes, triggered by an event handler that modifies the state using useState's updater function. It handles multiple updates within an event handler by batching them, applying only the result of the last invocation. StrictMode is a development mode that forces components to re-render twice to ensure purity and resilience.

ui.dev15 min read

03OPINIONS & ADVICE

3 CAREER PRINCIPLES THAT GOT ME TO DIRECTOR AT GOOGLE

A former Google director shares three career principles that helped her achieve five promotions in ten years: Glue, Grit, and Friction. Glue refers to the less glamorous tasks that are vital for team success but might not be directly promotable. Grit is a commitment to pursuing long-term goals despite challenges and viewing failures as opportunities for learning. Friction represents the gap between reality and the ideal state. It must be overcome to show a force multiplier effect.

read.highgrowthengineer.com10 min read

WRITE DOWN THE PLAN

Writing down plans is a simple yet powerful habit that can help one's career. It forces better thinking and clarity, builds alignment amongst teams, and increases visibility.

developing.dev2 min read

LESSONS FROM PLAIN TEXT

Plain text is more complex than it seems on the surface. For example, tabs and spaces differences can cause inconsistencies during collaboration. Soft-wrapping text is better for improved readability and compatibility.

rugu.dev10 min read

04LAUNCHES & TOOLS

VSCODE WEB VISUAL EDITOR

This is a Visual Studio Code extension for visually editing HTML files in real time. It has features like element selection, zoom, and alignment.

github.comGitHub repository

CANARY

Canary is an open-source, self-hostable search engine that offers both a core server and web components for building a search bar for your application.

github.comGitHub repository

MITATA

Mitata is a benchmark tooling library for JavaScript and C++ that offers accurate timing down to picoseconds, helpful visualizations, and features like automatic garbage collection and argument handling for benchmarks.

github.comGitHub repository

05MISCELLANEOUS

$2 H100S: HOW THE GPU BUBBLE BURST

The price of H100 GPUs has plummeted from $8/hour to under $2/hour in just a year. This is due to the resales of reserved compute, the rise of open-source models for fine-tuning, and a decline in the number of companies developing new foundation models.

latent.space23 min read

HOW GENAI WILL IMPACT DATA ENGINEERING

Generative AI is a fundamental shift that will push data engineers to merge with data analysts to focus on business needs and merge with software engineers to own online systems end-to-end. Current data engineers should try to get ahead by incorporating LLMs into their workflows, exploring AI infrastructure, and staying informed about advancements in the field.

blog.dataengineer.io11 min read

DESIGNING A FAST CONCURRENT HASH TABLE

Papaya is a fast and concurrent hash table for Rust. It uses a novel approach to address the challenges of lock-free design, including using a metadata table for cache efficiency and a probabilistic approach to resizing. It also uses various memory reclamation strategies to be faster than other concurrent Rust hash tables in terms of read throughput, latency, and async support.

ibraheem.ca17 min read