TLDR WEB DEV 2025-01-29

WHAT'S OAUTH2 ANYWAY?

OAuth2 is a widely used authorization framework that allows users to grant third-party applications access to their data without sharing their credentials directly. This post goes over the history and security concerns addressed by OAuth2. It then dives into the different OAuth2 flows (authorization code, implicit, client credentials, resource owner credentials, and device code), outlining their functionalities, security implications, and appropriate use cases.

SVELTE 5 AND THE FUTURE OF FRAMEWORKS: A CHAT WITH RICH HARRIS

Svelte 5 is a significant rewrite of the popular web framework. This interview with the creator Rich Harris highlights his focus on building high-quality, accessible applications rather than solely prioritizing adoption numbers. Harris hopes Svelte 5 and its ecosystem will improve the overall quality of web applications.

SO, YOU WANT TO PUSH A WEB PLATFORM FEATURE?

Web devs have the ability to contribute to browser development. To do so, they should first identify manageable problems. This article outlines the process of proposing new features through various standards venues like the W3C and WHATWG. It also explains the implementation process, focusing on Chromium and WebKit, and building, testing, and collaborating with the respective communities.

DISCOVERY CODING

Discovery coding is a programming approach where developers write code to understand a problem rather than planning beforehand. While seemingly messy, discovery coding helps avoid pre-conceived solutions and allows for a deeper understanding of the system's constraints through direct interaction.

WHICH AI TO USE NOW: AN UPDATED OPINIONATED GUIDE

There are three leading paid options for AI models: Claude, Gemini, and ChatGPT, each with strengths and weaknesses regarding features like live mode, reasoning capabilities, and web access. Different models excel in specific areas, such as code execution (ChatGPT) or insightful responses (Claude). Users' choices depend on individual needs and preferences.

and 50 chat messages a month. Start here

REQUESTLY

Requestly is an open-source HTTP interceptor for browsers and mobile apps that offers features like API mocking, rule editing, and session collaboration.

FORTUNE SHEET

FortuneSheet is a JavaScript spreadsheet library that offers Excel-like features and is written in TypeScript.

RUBY NEXT PLAYGROUND

A simple playground that transforms Ruby code into Ruby Next and then compiles it in your web browser.

AN INTERVIEW WITH MOJO, MLIR, SWIFT, CLANG, AND LLVM CREATOR CHRIS LATTNER

Chris Lattner discusses his new programming language, Mojo, which is designed to greatly increase the speed of Python code. Mojo's compiler uses MLIR and LLVM, differing from traditional compilers by directly generating MLIR declaration nodes instead of a syntax tree. MLIR is a software framework for compiler development. Lattner reflects on his approach to open-sourcing projects, which was initially driven by a desire for collaboration and later prioritizing focused development before public release.

THE LITTLE BOOL OF DOOM

A Fedora Linux package rebuild failed due to a compilation error in the Chocolate Doom game engine caused by the new GCC 15 compiler's default C standard changing from GNU17 to GNU23. The error was from a custom boolean type in the engine conflicting with C23's keywords. The issue was resolved by modifying the engine's code to use the built-in `bool` type when compiling with C23.

FTC TAKES ACTION AGAINST GODADDY FOR ALLEGED LAX DATA SECURITY FOR ITS WEBSITE HOSTING SERVICES

The FTC filed a complaint against GoDaddy for inadequate data security practices since 2018. GoDaddy is required, as part of a proposed settlement, to implement an information security program similar to those in other FTC cases.

SLAP

Researchers discovered two new speculative execution attacks, SLAP and FLOP, that exploit flaws in Apple's Load Address Predictor (LAP) and Load Value Predictor (LVP), allowing unauthorized access to sensitive user data like emails, browsing history, and credit card information from Safari and Chrome.

WI-FI 7 IN 2025: WILL THIS BE THE YEAR?

While Wi-Fi 7 saw initial consumer adoption in 2024, 2025 is projected to be a year of real growth for enterprise adoption.

GGML : X2 SPEED FOR WASM BY OPTIMIZING SIMD

Code generated by DeepSeek resulted in significant speed improvements in WebAssembly code for llama.cpp.

PYTHON 1.0.0 IS OUT!

Python was released 30 years ago on January 27, 1994 - the release notes still are viewable today.

NOTES ON DEEPSEEK: GENERATIVE AI IS ALL ABOUT THE APPLICATIONS NOW

The inexpensive, open-source AI model DeepSeek R1 is lowering the cost of AI development, which may shift the focus from infrastructure spending to the creation of application-layer AI apps.