Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Lynx is a new cross-platform technology from TikTok that allows devs to create native UIs for mobile and web from a single codebase. It is currently used in various TikTok apps, from lightweight panels to complex e-commerce storefronts, and is now being open-sourced.
TanStack Form v1 is a stable, production-ready form library with support for React, Vue, Angular, Solid, and Lit. It has extreme type safety, schema validation (Zod, Valibot, ArkType), and asynchronous validation with built-in debouncing.
Malibu is a native ESM middleware for Node.js that helps protect web apps from CSRF attacks. It's designed to work with frameworks like Express, Tinyhttp, and Polka, and it depends on either Cookie Parser or Session middleware. The middleware allows devs to acquire CSRF tokens and provides options for configuration, including middleware type, cookie settings, and token location.
The US is unique in having a tier above Big Tech. Across the UK, India, and the Netherlands, the highest compensation is Big Tech, but in the US, hedge funds, quant firms, and top scaleups can pay more. However, these positions are usually reserved for workers already in Big Tech, and switching can be difficult. It's a lot harder now to get into top-tier companies in today's tough job market.
Apple has announced the M3 Ultra chip, its highest-performing chip ever. Designed for heavily threaded and bandwidth-intensive applications, the M3 Ultra has a 32-core CPU, an 80-core GPU, a doubled Neural Engine, and support for up to 512GB of unified memory. It also incorporates Thunderbolt 5 connectivity, with more than double the bandwidth per port for faster data transfer.
While Signals in React offer efficiency and direct UI updates, React's component-based, coarse-grained reactivity model makes it difficult to implement them effectively. There are practical problems like handling data rawness, conditionals, and loops, as well as conceptual issues with React's fundamental re-rendering approach.
Expo is positioning itself as a foundational framework and infrastructure provider for an ecosystem of companies developing AI-assisted app creation tools.
The new MacBook Air, available in 13-inch and 15-inch models, is powered by the M4 chip with Apple Intelligence, has a lightweight design, a Liquid Retina display, up to 18 hours of battery life, and comes in new colors like Sky Blue.
According to the Federal Reserve Bank of St. Louis, there are about 2% fewer software developer job postings compared to the worst days of COVID in May 2020.
Sponsored
If QA is a bottleneck on your software engineering team and you're releasing slowly because of it, you need to check out QA Wolf.
SkyPilot uses SQLite for state management, but had issues with high concurrent writes when scaling its Managed Jobs feature, leading to database lock errors. After investigating SQLite's internals, it found that lock acquisition is prone to starvation due to the lack of FIFO guarantees and that WAL mode doesn't fully solve concurrent write problems. Avoiding SQLite for high write concurrency is the best option, but WAL mode and a high lock timeout can be used if you must use SQLite for such situations.
GitHub Copilot secret scanning uses AI to detect generic passwords in codebases. The development team faced challenges with unconventional file types and the need for resource-efficient scaling, leading to improvements in offline evaluation, prompt engineering, and workload-aware request management. Mirror testing was necessary for high precision and a low false positives rate.
While prefetching is supposed to improve website performance by loading resources in advance, it can sometimes worsen loading speed by competing with critical content for bandwidth. Despite being assigned the lowest priority, prefetch requests may initiate too early, delaying the loading of important elements like the Largest Contentful Paint (LCP). To prevent this, you can inject prefetch hints via JavaScript after the initial page load to make sure essential content loads first.
LLM subscriptions like ChatGPT Plus and Claude Pro are cheaper than using their API equivalents. The potential AI usage one could get from these $20 subscriptions can potentially exceed $1300 per month for Claude and $14,661 for ChatGPT if fully used. Even with lower usage, the subscription still provides a cost-effective alternative to direct API access.
The downfall of Skype was due to a lack of focus, prioritization of features over quality, and a failure to capitalize on opportunities like the COVID-19 pandemic. Plus, Microsoft's focus on Teams made Skype redundant and obsolete.
Before sending out code for a review, devs should do a self-review and break down large changes into smaller pull requests. The code reviewer should provide specific, actionable feedback. Repetitive tasks like formatting should be handled by linters and AI agents.
Nut is an open-source project that combines debugging technology with AI to automate bug fixing during app dev. It uses recording capabilities to provide AI with the context needed to effectively debug code generated through prompting, making creating apps without having to manually write code easier.
Style Observer is an observer library that lets you observe CSS changes and run JS.
The fastDOOM port of DOOM (a video game) runs much faster on a restored IBM PS/1. fastDOOM's speed improvements are from various optimizations, such as code cleanup, strategic inlining, and renderer choices.
This post discusses a hypothetical scenario where a malicious package, a "Swindle" in the "Sham" language ecosystem, is introduced into a software supply chain. In this case, an engineer might unknowingly merge a malicious update through automated dependency management, leading to potential security breaches. It then goes over how to discover the compromise and deal with it properly.
The founder of Michigan TypeScript successfully ran Doom within TypeScript's type system by creating a WebAssembly runtime in TypeScript types, processing 177 terabytes of type definitions, and essentially turning the type checker into a virtual machine.
DeepSeek, China's advanced AI reasoning model, has become a popular tool for AI-powered fortune-telling.
Website interactions can be built with lots of little HTML pages linked together with CSS view transitions instead of complex JavaScript.
While all engineering managers should be familiar with their team's codebase, whether they should actively write code depends on the individual manager, team, and organization.
SQLite on the server is often misunderstood and is more effective for hyper-scale applications than micro-scale setups. Traditional sharded databases are complex, inflexible, and can suffer from data inconsistencies. SQLite-per-partition solutions like Cloudflare Durable Objects and Turso offer dynamic scaling, global distribution, and ACID transactions, which allow for a more efficient and manageable hyper-scale architecture.
The interning design pattern involves replacing repeated data with integer IDs to drastically reduce memory usage. Through various optimizations including interning strings and arbitrary types, schema tuning like sorting sets and using enums, and custom serialization with Serde, this developer achieved a 2,000x reduction in data size of a time series database. The final result was a lightweight, append-only in-memory database.
Inertia.js with Ruby on Rails can be used to build single-page applications without a separate API. Inertia.js acts as a client-side routing library, connecting Rails with front-end frameworks like React, Vue, or Svelte, allowing devs to replace traditional Rails views with JavaScript components. This article goes over how to build a sample web app with Inertia and Ruby on Rails, covering pages, layouts, data sharing, forms, and authentication within the Inertia framework.
A deep understanding of core languages like CSS and JavaScript is necessary for frontend dev mastery. Native CSS knowledge often provides simpler and more efficient solutions than complex JavaScript.
Evals are AI system evaluations, used for benchmarking language models, performance testing, red teaming, and optimizing prompts, but they don't guarantee software performance. There are some issues with evals, such as the difficulty of creating thorough and realistic test data, the limitations of automated scoring methods, and the focus on evaluating base models rather than complete systems. Also, evals often aggregate results, which fails to account for the unpredictable "long tail" of possible problem inputs.
This developer is disillusioned with academia due to its suffocating environment that stifles creativity and meaningful work. They plan to transition to part-time work, making money through consulting, contracting, and crowdfunding.
Sponsored
Develop real-world applications that protect sensitive business information, ensuring that users have only authorized access.
Torii is a Rust authentication framework that gives devs control over user data. It has features like passwordless login, social OAuth, and passkeys via a plugin system, allowing data storage flexibility.
Justd is a set of React components built on top of Adobe's React Aria Components that includes TailwindCSS for styling out of the box.
Agents.json is a spec built upon OpenAPI that standardizes contracts for API and agent interactions. It introduces flows and links to describe API call sequences and action stitching, letting LLMs use APIs properly.
Apple's software quality is declining, with new features being prioritized over current performance. An overheating iPad Air 11" M2 is used as an example, as it lags using Apple's own Notes and Freeform apps.
An over-reliance on AI tools for coding is hurting the critical thinking and foundational knowledge of young devs. While AI allows junior coders to produce code quickly, they often lack a fundamental understanding of why it works. This leads to problems when complex issues arise in the future, requiring devs to troubleshoot and understand the underlying code when AI isn't able to.
Vibe coding is an AI-assisted approach where you describe software ideas in plain language and AI generates the code. This means anyone can create small pieces of software, allowing them to test ideas and create custom personal apps fast.
Godot Engine 4.4 brings a host of quality-of-life improvements, new features like Jolt Physics integration and embedded game windows, and optimizations across general platforms, scripting, and systems.
This dev's website kept crashing when accessing S3, which led him to discover that Chrome returns a 206 response even when the server returns a 403 for a range request, a behavior the Chrome developers consider a feature rather than a bug.
GPT-4.5 offers modest improvements in factual accuracy and instruction following but falls short in reasoning compared to OpenAI's own o1 and o3.
You can use the temporary `/tmp` directory for temporary files and downloads, and you can also configure screenshots to copy to the clipboard instead of saving to disk.
Sponsored
On March 27, seasoned engineering and product leaders will take the (virtual) stage at Swarmia Circle, a half-day event [4] centered on the 3 pillars of engineering effectiveness: business outcomes, developer productivity, and developer experience.
Chrome's new built-in AI APIs can be used to correct typos in user input. This article experiments with both the general-purpose Prompt API and the Rewriter API, providing code snippets and examples of their performance on deliberately misspelled text. The Prompt API produced cleaner, but slightly altered results, while the Rewriter API stayed closer to the original phrasing but sometimes failed to correct all errors.
A memory-safe JSON parser can be made in C using struct methods for a more ergonomic API. The parser represents JSON values using a `json_value` struct with unions for different data types and includes functions for freeing memory and printing the parsed structure. The parsing process combines lexing and parsing into a single pass, handling atoms (numbers, null, true, false), strings, arrays, and objects with helper functions for whitespace skipping and error handling.
By default, browsers allow cross-site write requests but restrict cross-site reads, a behavior governed by the Same-Origin Policy. CORS is a mechanism to selectively allow cross-origin requests, while CSRF protection uses tokens to verify the legitimacy of requests. CSRF protection is especially important for simple POST requests allowed cross-site.
Including an "Other" enum value can create too much ambiguity as new enum values are added later. Returning new values contradicts the meaning of "Other" as "not mentioned elsewhere." Instead, document the enum as open-ended, letting each application define its own "Other" category for unrecognized values.
Video game speedrunners use reverse engineering, static/dynamic analysis, and custom tooling to discover and exploit game glitches, which is similar to techniques used by cybersecurity professionals. Their skills translate directly to valuable security roles and should be used more often for testing security in software in general.