Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Complex problems, particularly in offensive security such as N-day vulnerability analysis, can be solved by reframing them as document ranking problems and using LLMs for listwise document ranking.
Chicory is a pure Java, easy-to-integrate, secure JVM-native WebAssembly runtime that allows applications to use plugins within a sandboxed environment.
A slow-loading website can hurt user experience, reduce search engine rankings, and decrease conversions.
Former developers talk about what they're up to now, from working as electricians to retiring.
Grab uses a data lake to store and analyze data from its various services. The company carefully selects data storage formats based on data throughput, using different strategies for high and low throughput scenarios. For high-throughput data, it uses Apache Avro with Merge on Read for faster write speeds. For low-throughput data, it uses Parquet with Copy on Write for faster read speeds.
Lyft uses Kubernetes Custom Resource Definitions (CRDs) called "facets" to manage and deploy microservices, which are composed of smaller Kubernetes components. To simplify infrastructure changes, it developed FacetController, which manages the lifecycle of these facets by creating or updating individual facet resources instead of all associated Kubernetes objects. FacetController automates infrastructure updates, making sure changes like Kubernetes upgrades and autoscaling adjustments are rolled out safely and efficiently across all services.
Extreme Server Side Rendering (XSSR) is a technique where the server continuously streams HTML updates to the client, creating dynamic web pages without JavaScript. This post demonstrates how to use XSSR with a Flappy Bird clone, where the game logic runs entirely on the server, updating the client-side display with constantly streamed CSS. While XSSR has acceptable performance and bandwidth usage, it suffers from latency issues due to server round trips for every user interaction.
Blogging is still valuable despite AI's ability to provide instant answers. For you as a writer, blogging solidifies your knowledge, helps others, offers a dopamine hit, and builds a valuable writing portfolio.
This developer's web dev mindset has helped him navigate life challenges, such as recovering from an abusive relationship. Skills used in web dev, such as understanding complex systems and manipulating language, can be applied to personal growth and self-defense. He compares toxic people to blackhat hackers and verbal abuse to cross-site scripting attacks.
Google and Meta have great perks like high pay, great work-life balance, access to various resources, and talented colleagues. Despite these benefits, the author Andrew left to pursue entrepreneurship, driven by a desire to build something of his own and avoid the stagnation and "corporate theatre" he felt in big tech.
Sponsored
Learn how to validate market demand for your next SaaS idea before investing resources blindly. In this guide, [11] we'll show you how to capture intent and keep interested parties engaged as you build towards your launch.
Anthropic has announced Claude 3.7 Sonnet, an AI model with integrated reasoning capabilities that provides both quick responses and deeper, step-by-step thinking. Alongside the model, they introduced Claude Code, a command line tool for agentic coding. Claude 3.7 Sonnet offers fine-grained control over its thinking time through the API.
Upfetch is a lightweight, type-safe fetch client builder that improves the native fetch API with features like standard schema validation, automatic response parsing, and flexible configuration. It allows setting defaults for requests, simplifying query parameters and body handling, and providing lifecycle hooks for request control. It also has error handling, authentication, and customization options for response parsing, error handling, and parameter/body serialization.
$1.4 billion was stolen from Bybit in a hack orchestrated by North Korea's Lazarus Group. Attackers manipulated the "operation" parameter in a Safe smart contract transaction to enable something called delegatecall, granting them control over Bybit's wallet through malicious contracts. The compromised transaction bypassed standard security checks by replacing the legitimate one in the signing interface, which then allowed unauthorized fund transfers.
An AI tool developed by Google solved a complex problem about superbug antibiotic resistance in just two days, a process that took microbiologists a decade. A professor and his team at Imperial College London used the AI tool to replicate their findings. It also offered four additional hypotheses, one of which the team hadn't considered and is now investigating.
The landing page shown in this article, despite its simple appearance, contains over 14,000 lines of code and has elements like a "Chaos Toolbar" with animated SVG icons, particle effects using polar coordinates, and a sprite of custom 3D shapes.
The underscore in `target="_blank"` is a legacy convention from pre-HTML5 framesets where it was used to signal to the browser to open a link in a new window or tab without being treated as a frame name.
Apple plans to invest over $500 billion in the U.S. over the next four years, which includes opening a new manufacturing facility in Houston and expanding its Advanced Manufacturing Fund.
This is a series of discussions held between Robert Martin and John Ousterhout from September 2024 to February 2025 about their philosophies on software engineering.
Sponsored
Manual testing on personal devices is TOO SLOW AND TOO LIMITED. It forces teams to CUT RELEASES A WEEK EARLY just to test before submitting them to app stores. And without broad device coverage, issues slip through.
✅ QA cycles reduced to just 15 minutes
Notion implemented WebAssembly SQLite in its web app. This resulted in a 20% reduction in page navigation latency. To achieve this, its team used Web Workers to offload database operations to background threads and a SharedWorker with the Web Locks API to fix data integrity issues. They also addressed issues of slow disk reads by implementing a "race" between disk cache and network requests.
Clickhouse is increasingly used for analytics by PostgreSQL users, and this often requires data replication between the two. PeerDB is an open-source CDC (Change Data Capture) solution that can be used to make data replication easy. This article goes over how to deploy PeerDB, create test data, and set up initial replication and schema evolution.
Svelte 5 introduces deep reactivity using proxies and implicit component lifecycle state, which has better performance at the expense of more complexity. However, these changes create unexpected issues, such as proxies breaking IndexedDB storage and component state disappearing in closures.
Instead of seeking permission ("yes") from your boss for initiatives within your role's scope, tell them about your plan and offer them a chance to object ("no"). This means stating your intention to complete a project by a specific deadline and keeping your boss informed along the way. Usually, your boss will say yes or give some comments for improvement.
While Tailwind allows devs to ship faster with predefined styles and no custom CSS, it also is harder to maintain and scale in larger projects. Thoughtfully named styles and a well-designed CSS architecture might be better in the long run for complex projects.
Despite the rise of newer tech like Next.js, Ruby on Rails is still valuable due to its simplicity, stability, and focus on web fundamentals. It abstracts away technical complexities, allowing devs to concentrate on key details of the product. Rails is great for projects where speed and lower maintenance are the priority.
mdq is a command-line tool that allows users to query and extract specific parts of a Markdown document. It has a simple filter syntax mirroring Markdown structure for selecting elements like sections, lists, links, and tables.
Directus is a real-time API and app dashboard for managing SQL database content. It has support for most popular SQL databases and layers a fast Node.js API layer on top of any SQL database.
Artifacts is a sandbox MMORPG for devs where players use programming languages to control their characters via an API. The game has a player-driven economy and activities like monster fighting, resource gathering, crafting, and quests. Players can automate their characters' actions using HTTP endpoints and control up to five characters at the same time.
OpenAI researchers found that even the most advanced AI models struggle to solve most coding problems. They tested frontier models like GPT-4o and Claude 3.5 Sonnet on software engineering tasks from Upwork. While the AI models were fast, they often failed to grasp the context and scope of bugs, creating incorrect or incomplete solutions.
During a major Facebook outage in 2014, known internally as "Call the Cops", this developer found that "war rooms" were pointless for deep investigations. He struggled to diagnose the root cause of the outage while confined to a poorly ventilated room with limited resources. He needed to escape that environment and use his usual setup to effectively investigate. The root cause was eventually traced to a bug in the fbagent process that caused it to kill all processes on the machine when the fork failed due to running out of memory.
CSS now supports individual transform properties (translate, rotate, and scale), which are all additive. This means they combine with the transform property in a set order—translate first, then rotate, scale, and finally any transformations listed in transform.
Blogging about your learning process, like by creating tutorials, is great both for solidifying your own understanding and for helping others who are searching for similar information.
Beatcode is like Leetcode, but you can compete against other devs and practice together.
A curated collection of animated React component libraries and design systems.
React released the captureOwnerStack API in Canary and experimental channels, which lets you retrieve the current Owner Stack during development as a string, which can be useful for better custom error overlays by providing detailed component ownership information.
This developer ran a Pong game across 240 browser tabs by using favicons as pixels. Inspired by a favicon-based Flappy Bird, they used AppleScript to create a grid of tabs and solved challenges like favicon update throttling with web workers and tab synchronization using broadcast channels. Careful measurements were needed to align the canvas with the tab bar, which allowed the Pong game to smoothly transition between the main canvas and the tab bar.
LLMs speed up the process of making beautiful, interactive website backgrounds using React and Tailwind CSS. Some examples are shown using gridlines, dotted patterns, and animated stars, all generated using a few LLM prompts. It also helps that many LLMs are tuned to produce React and Tailwind CSS code.
Bundling dependencies can help with compatibility, reducing bloat, and making distribution simpler. However, it can hide dependency issues, prevent updates, and remove the deduplication benefits that npm provides. Generally, bundling makes sense for developer tools, but should be avoided for libraries unless absolutely necessary.
There's a tension between writing elegant, reusable code and building quick, pragmatic solutions for users. Flamework, a pseudo-framework from Flickr, is an example of prioritizing speed and scale over code beauty, where "doing the dumbest possible thing that will work" can be great for product iteration. Reusability is more necessary for libraries and frameworks than applications.
Append-only programming is where code is appended to a single file, and existing code is never edited. It's not practical for the real world, but it can help enforce better coding practices, like small functions, thinking about what code to write before committing it, and writing more readable code.
The new granular caching system in Next.js with the "use cache" directive at the file, component, and function levels makes Next.js more pleasant to use. It's an improvement on the developer experience and the end user's experience.
React Native 0.78 has been released, with React 19 integration and various improvements. The main updates include native support for Android XML drawables, streamlined React Compiler enablement, and easier React Native integration in iOS through RCTReactNativeFactory. The release also introduces an opt-in for JavaScript logs in Metro and prepares for smaller, faster, and more frequent releases in 2025.
React Bits is a library of animated React components. It has over 60 components, including animations and backgrounds, available in JavaScript or TypeScript with CSS or Tailwind CSS styling.
JetKVM is an open-source KVM over IP solution for managing computers remotely. It has low-latency, high-FPS video and smooth keyboard/mouse interaction. The software is written in Go and TypeScript, customizable via SSH, and allows optional remote access.
According to data from Indeed, software developer job postings have declined a lot, reaching levels similar to those seen during the mid-2020 pandemic period, and are down 35% since January 2020. While the US accounting change Section 174 may have a small impact, the trend is global. Potential reasons for the drop include increased productivity through GenAI tools, a correction after the over-hiring boom during the pandemic, and smaller, more efficient teams.
People with the last name Null have issues with online forms and databases. Many systems interpret "Null" as an invalid entry or a potential security threat, leading to errors and blocked processes.