/ THE FEED /
Deep, recent reads ranked by depth and freshness.
21Cloudflare · architecture
Recent disclosures revealed critical remote code execution and data exposure vulnerabilities in the PHP runtime. To mitigate the threat before public disclosure, Cloudflare developed full transaction detection to combine request and response signals within the WAF. This capability enabled automatic deployment of rules protecting customers against the php2shell exploits.
DEPTH ■■■■■6 min read4 days ago
22GitLab · tutorial
The post explains how to use GitLab Duo Agent Platform features such as automated code reviews, CI/CD pipeline failure diagnosis, and cross-project chat. It provides setup instructions for configuration and outlines a consumption-based pricing model using credits. The features aim to automate routine developer workflows using broader project context than standard IDE assistants.
DEPTH ■■■■■4 min read6 days ago
23Martin Fowler · practice
This post discusses the evolving role of software development and code in the era of large language models. It explores how shifting from deterministic building to inferential nurturing changes processes, why high-level representations remain critical for managing context windows, and how conceptual modeling becomes more important than the mechanical act of writing instructions.
DEPTH ■■■■■7 min read2 weeks ago
24Cloudflare · architecture
Commerce.com and Cloudflare collaborated to enable WebMCP at the edge for nearly 100,000 storefronts, allowing AI agents to interact reliably with e-commerce sites using structured tools rather than fragile HTML scraping. The team implemented edge-level configuration rules using custom hostname metadata to provide individual merchants with a seamless opt-out mechanism and added support for custom MCP paths. This integration allows agents to execute shopping tasks directly within the active browser session while ensuring fallback safety and zero extra latency for opted-out stores.
DEPTH ■■■■■6 min read4 days ago
25Cloudflare · postmortem
Private keys associated with eight eMudhra intermediate certificates were compromised, allowing potential traffic interception. Cloudflare prioritized patching critical services, released client and tunnel updates, and deployed mitigations across its products. Customers are advised to upgrade affected software, update custom trust stores, and avoid disabling verification despite error messages.
DEPTH ■■■■■4 min read5 days ago
26Martin Fowler · practice
Presenters often rely on text-heavy slide decks that distract audiences and undermine storytelling. To fix this, speakers can use minimalist slides as a complementary visual channel to control the rate of information and manage cognitive load. This approach leads to more engaging presentations where visuals reinforce the spoken narrative rather than replace it.
DEPTH ■■■■■12 min read3 weeks ago
27GitHub · performance
GitHub optimized GitHub Copilot to improve cost efficiency without sacrificing task quality by evaluating changes across the entire agentic workflow. The team implemented four targeted adjustments including selective output compression, removing unused line-number formatting, shortening prompts via meta-prompting with behavioral tests, and delivering background work completions directly. These modifications reduced token usage and model inference costs globally without causing task-success regressions.
DEPTH ■■■■■9 min read7 weeks ago
28Cloudflare · architecture
Cloudflare integrated its secure web gateway and data loss prevention services with its edge computing platform to allow customers to run custom code inline during policy evaluation. The team introduced a new Forward action for traffic transformation and Custom Functions for dynamic rule evaluation without requiring external proxy infrastructure. This enables complex security logic, real-time alerting, and dynamic header injection with zero network hop overhead.
DEPTH ■■■■■13 min read10 days ago
29Martin Fowler · practice
Presenters often struggle with the visual design of slides and default to cluttered or uniform corporate templates. To build a better presentation foundation, the author recommends sticking to a restricted color palette, limiting the number of fonts, and using minimal layouts without unnecessary floodmarks like page numbers or logos. This approach results in a cohesive visual identity that provides greater flexibility during slide construction.
DEPTH ■■■■■11 min read11 days ago
30Cloudflare · practice
To achieve South Korea's ISMS certification, Cloudflare had to modify its account sign-up flow to itemize required consents and disable third-party social logins that bypassed the form. By combining IP geolocation with user country selection, the team ensured localized compliance without breaking global functionality. The resulting certification provides a localized assurance benchmark for Korean users.
DEPTH ■■■■■8 min read3 days ago
31Cloudflare · architecture
Recent major vulnerabilities in Citrix NetScaler exposed public-facing authentication gateways to unauthenticated remote code execution. To prevent similar emergency patches, the team recommends placing an independent Zero Trust access layer, web application firewall, and strict origin connection controls in front of the application server. Implementing these defense-in-depth measures reduces exposure and ensures a single software flaw does not result in total system compromise.
DEPTH ■■■■■9 min read6 days ago
32Martin Fowler · practice
The engineering post introduces the concept of a sensible default as an alternative to best practices in software development. Sensible defaults serve as reliable starting points for tasks in the absence of hard constraints, while still allowing teams to adapt and override them when context requires. Organizations like Thoughtworks utilize playbooks of these defaults to guide initial work while encouraging regular reflection and adjustment.
DEPTH ■■■■■2 min read3 weeks ago
33Martin Fowler · practice
This post discusses observations on coding agents, focusing on their persistence, the role of training material in hacking behavior, and the need for greater safety measures and liability. It examines experiments with unlimited tokens and explores regulatory and educational perspectives on agentic AI.
DEPTH ■■■■■4 min read3 weeks ago
