TLDR Web Dev

TLDR WEB DEV 2024-11-12

5 sections15 entrieslinks blockcomplete parse

Parse notes

  • Subscription/account footer truncated before parsefooter_truncated

01ARTICLES & TUTORIALS

ALL THE DATA CAN BE YOURS

This post goes over various methods for discovering and utilizing undocumented APIs to reverse-engineer web apps. These techniques range from searching GitHub for public code and analyzing fetch requests and robots.txt files to leveraging Google's cached errors and guessing API endpoints based on patterns.

jero.zone5 min read

OPTIMIZING A WEBGPU MATMUL KERNEL FOR 1TFLOP+ PERFORMANCE

This article discusses the optimization of a WebGPU matrix multiplication kernel that achieved over 1 TFLOPS performance. It explores each stage of the kernel optimization, starting with a naive implementation and progressing through increasing thread count, 2D workgroups, kernel tiling, and loop unrolling. Through these optimizations, the kernel achieved a performance improvement approaching the theoretical peak of the Apple M2 Pro chip.

zanussbaum.substack.com15 min read

02OPINIONS & ADVICE

HOW TO SHIP PROJECTS AT TECH COMPANIES

Shipping projects in big tech companies requires a unique skillset that goes beyond just writing code. The most important aspect of shipping is gaining the trust and approval of company leadership, which means understanding their expectations, communicating well, and proactively addressing potential problems.

seangoedecke.com11 min read

SECURITY IS A USELESS CONTROLS PROBLEM

Many security controls are useless because they lack clear, understandable explanations. These controls often arise from compliance requirements or security "best practices" that don't consider their actual value.

securityis.substack.com9 min read

ARE AI ASSISTANTS MAKING US WORSE PROGRAMMERS?

While AI can help with repetitive tasks and code generation, over-reliance can lead to a deterioration of fundamental skills. AI assistants are most beneficial for handling implementation details and tedious aspects of coding so that devs can focus on problem-solving, design, and strategic thinking.

rafaelquintanilha.com11 min read

03LAUNCHES & TOOLS

STDILB

stdlib is a standard library for JavaScript and Node.js that focuses on numerical and scientific computation with a fully decomposable architecture.

github.comGitHub repository

SKELETON

Skeleton is an adaptive design system for Tailwind that provides opinionated solutions for themes, colors, typography, and more. It offers both Tailwind-based and framework-specific components.

next.skeleton.devTool

WEBLLM CHAT

WebLLM Chat is an open-source, private AI chat interface that runs large language models natively in browsers using WebGPU, ensuring privacy and offline accessibility.

github.comGitHub repository

04MISCELLANEOUS

INSIDE THE $20 MILLION BUSINESS OF GUTTING FAILED BAY AREA TECH COMPANIES

Better Source is a $20 million business that specializes in liquidating office furniture from failed Bay Area tech companies. The company has witnessed the rise and fall of numerous tech giants. Its business has boomed in recent years because of the shift to remote work and the changing demands for office spaces.

sfgate.com10 min read

THE DEATH AND LIFE OF PREDICTION MARKETS AT GOOGLE

Google has experimented with two internal prediction markets, Prophit and Gleangen. Prophit, launched in 2005, was initially popular but ultimately failed to launch publicly due to legal challenges and a shifting regulatory landscape. Gleangen, launched in 2020, has been much more successful internally, with a larger user base and more consistent use, but faces ongoing challenges in proving its value to Google management.

asteriskmag.com23 min read

REVERSE ENGINEERING: FINDING EXPLOITS IN VIDEO GAMES

You can reverse engineer game data by extracting and decrypting files and scripts to find exploits in video games. You can also analyze network traffic using tools like AssetsTools.NET, Fiddler, and Wireshark. By analyzing the game's authentication flow, packet structures, and opcodes, you can identify vulnerabilities and test for potential exploits.

shalzuth.com7 min read