TLDR Web Dev

TLDR WEB DEV 2024-11-22

6 sections18 entrieslinks blockcomplete parse

Parse notes

  • Subscription/account footer truncated before parsefooter_truncated

01GENERAL

Sponsored

Sentry's shipping a lot of new functionality. Tune in to catch up on the last 6 months of cool stuff [4], including:

sentry.ioSponsor

02ARTICLES & TUTORIALS

HANDLING COOKIES IS A MINEFIELD

HTTP cookies are inconsistently handled across browsers and programming languages due to ambiguities in the RFC specifications. These inconsistencies are from mismatches between what servers should send and what browsers must accept, leading to situations where cookies containing perfectly valid characters for browsers are rejected by server-side code. This problem results in unpredictable behavior, with some systems silently dropping cookies and others percent-encoding values or failing completely.

grayduck.mn18 min read

THE FALLACIES OF DISTRIBUTED SYSTEMS

Some fallacies about distributed systems include assumptions about network reliability, zero latency, infinite bandwidth, and network security. Good distributed systems are designed to handle network unreliability and mitigate latency and bandwidth constraints.

newsletter.francofernando.com6 min read

PROCESS SLOW NETWORK REQUESTS WITH TURBO AND ACTIVE MODEL

User experience in Rail applications can be improved by processing slow network requests asynchronously using Turbo and Active Model. This involves moving the slow operation to a background job, displaying a loading screen, and then updating the client with the response using Turbo Streams.

thoughtbot.com9 min read

03OPINIONS & ADVICE

AI IS TAKING YOUR JOB

The use of AI in job applications is increasing. Applicants use AI to generate resumes and hiring managers use AI to filter them. This creates more competition, making genuine human connections more valuable than ever.

kentcdodds.com4 min read

STAFF ENGINEER BEHAVIORS: BREAKING THE CEILING INTO STAFF ENGINEERING PT. 2

Advancing to Staff-Plus engineering roles requires engaging in behaviors like strategic decision-making, mentorship, and cross-functional collaboration with a focus on aligning technical work to business goals. Scaling impact involves not just solving problems but enabling others to succeed and influencing beyond immediate teams.

levelupsoftwareengineering.substack.com12 min read

04LAUNCHES & TOOLS

TAILWIND CSS V4.0 BETA 1

Tailwind CSS v4.0 beta 1 has a new engine with up to 5x faster full builds and 100x faster incremental builds, a unified toolchain, CSS-first configuration, and support for modern CSS features.

tailwindcss.com2 min read

REACT MINIMAL PIE CHART

React Minimal Pie Chart is a lightweight (<2kB gzipped) React library for creating customizable SVG pie and donut charts with features like animation and TypeScript support.

github.comGitHub repository

ELECTROBUN

Electrobun is a new framework for creating fast, small, cross-platform desktop applications using TypeScript. It uses Bun for execution and bundling, Zig for native bindings, and provides a streamlined workflow for development and deployment.

electrobun.devTool

05MISCELLANEOUS

LISTEN TO THE WHISPERS: WEB TIMING ATTACKS THAT ACTUALLY WORK

Web timing attacks have become more effective and have wider applicability due to advancements in minimizing noise and maximizing signal. This article introduces novel attack concepts, such as the single-packet attack, for discovering hidden vulnerabilities and misconfigurations in web applications.

portswigger.net33 min read

SELL CHROME TO END SEARCH MONOPOLY, GOOGLE TOLD

The US Department of Justice (DOJ) is demanding Google sell its Chrome browser and stop practices that maintain its search engine monopoly. The DOJ's proposed remedies include preventing Google from making its search engine the default on other devices like smartphones.

bbc.com4 min read