TLDR Web Dev

TLDR WEB DEV 2024-10-18

5 sections16 entrieslinks blockcomplete parse

Parse notes

  • Subscription/account footer truncated before parsefooter_truncated

01ARTICLES & TUTORIALS

ESCAPING THE CHROME SANDBOX THROUGH DEVTOOLS

Vulnerabilities in Chromium allowed malicious Chrome extensions to execute arbitrary shell commands. By exploiting undocumented features in the chrome://policy page and a race condition in the chrome.devtools API, users were able to bypass the sandbox and execute code outside the browser's restrictions.

ading.dev25 min read

WHY DOES EVERYONE RUN ANCIENT POSTGRES VERSIONS?

While Postgres 17 offers huge improvements, most users stick with older versions due to the perceived stability of the database and the challenges of upgrading. Major version upgrades can be complex and require extensive planning, data migration, and testing, especially for large production databases. However, delaying upgrades inevitably leads to technical debt. There is now a tool available called PG Versions that can help visualize the new benefits of upgrading earlier rather than later.

neon.tech8 min read

EVAL-DRIVEN DEVELOPMENT: BUILD BETTER AI FASTER

Evals, a new testing paradigm for AI-native development, are similar to end-to-end tests. They assess the quality of AI output using automated checks, human judgment, and AI-assisted grading. Vercel's frontend-generating AI product v0 is built on eval-driven development.

vercel.com9 min read

02OPINIONS & ADVICE

EVALUATION QUIRKS, METRIC PITFALLS, AND SOME RECOMMENDATIONS

There are a few issues with system evaluation practices, like in cases where metrics with similar names yield vastly different results, implementation bugs lead to inflated scores, and incorrect predictions improve the score. Developers need to be careful when choosing metrics and understand what a metric truly measures to make sure it's implemented correctly.

juriopitz.com4 min read

UNIT TESTS AS DOCUMENTATION

Unit tests can serve as living documentation within the code itself, explaining how code behaves, staying in sync with code changes, and covering edge cases.

thecoder.cafe3 min read

INTERESTING STARTUP IDEA: BENCHMARKING CLOUD PLATFORM PRICING

Spare Cores is a startup that benchmarks cloud platform pricing, offering a free service that compares prices across providers like AWS, GCP, Azure, and Hetzner. The company was started with a €150K grant and a team of three. It uses a combination of Python, Angular, and various databases to collect and analyze data.

blog.pragmaticengineer.com13 min read

03LAUNCHES & TOOLS

TOLGEE

Tolgee is an open-source localization platform. It provides features like in-context translation, translation memory, and integration with machine translation services.

github.comGitHub repository

SAVA OS

Sava OS is a desktop interface for web browsers that allows users to manage, filter, share, and organize their online data in a familiar environment. It has features like tab management, session control, personal feed creation, and folder sharing.

savaos.comTool

04MISCELLANEOUS

NOT REMOTELY COOL: THE SCIENCE OF “ZOOM FATIGUE”

Zoom fatigue is caused by the cognitive load of online meetings, which depletes mental resources. Video calls require more effort to process nonverbal cues and the audio gaps caused by digital transmission disrupt the natural flow of conversation. The lack of physical proximity and the blurring of work and home life also make things mentally tough.

bigthink.com7 min read

USING CLOUDFLARE ON YOUR WEBSITE COULD BE BLOCKING RSS USERS

Cloudflare's security features, specifically Bot Fight Mode and AI Scrapers and Crawlers, are unintentionally blocking RSS readers from accessing websites. This happens because Cloudflare's AI-based system incorrectly identifies RSS readers as malicious bots, presenting them with human verification challenges they can't complete.

openrss.org5 min read

BRAIN DRAIN: DAVID VS GOLIATH

The demand for data to train large AI models is exceeding the availability of public data. Researchers are exploring synthetic data as an alternative, but it can introduce errors and degrade model performance. A new approach focuses on data quality over quantity, demonstrating that smaller, highly-trained models can compete with larger ones.

stackoverflow.blog10 min read