/ THE FEED /

Read what ships.

Deep, recent reads ranked by depth and freshness.

Data Engineering Security Testing Frontend Microservices Clear all

01Cloudflare · architecture
Bringing post-quantum cryptography to geographically fenced key management
Cloudflare introduced a post-quantum geographically restricted key manager in closed beta to enforce data sovereignty and protect customers against harvest-now-decrypt-later attacks. The team implemented a hybrid ML-KEM-768 and X25519 cryptographic design that separates globally distributed wrapped private keys from regionally restricted root keys. This ensures that decryption keys are only accessible within authorized geographical boundaries and fails closed if validation fails.
DEPTH ■■■■■12 min read2 days ago
Security
Sign in to save and rate
02GitLab · tutorial
PHP2Shell: GitLab helps find and remediate critical PHP flaws
Critical remote code execution vulnerabilities known as PHP2Shell affect the PHP engine across multiple versions, requiring immediate runtime updates to fixed versions or patched distribution packages. The team utilized platform features like container scanning, code search, and automated agent workflows to locate PHP projects and remediate vulnerabilities. Operators must also check logs and environments for signs of compromise as framework updates and input validations cannot prevent these engine-level flaws.
DEPTH ■■■■■10 min read3 days ago
Architecture Security
Sign in to save and rate
03Meta · practice
How Meta Built Forum With AI-Native Engineering
Meta engineers built the Forum app using a human-on-the-loop AI agent workflow that automated planning, building, testing, and verification. By shifting focus from code generation to automated verification, tooling improvements, and architectural legibility, the team reached feature parity in eight weeks while catching systemic memory issues early.
DEPTH ■■■■■8 min read10 days ago
Frontend Mobile
Sign in to save and rate
04GitHub · architecture
From 2,500 requests to 24: Rebuilding star history without the stargazers
GitHub faced abuse and performance issues because tools were scraping user identities to reconstruct repository star history. The engineering team collaborated with maintainers to build a purpose-built aggregate endpoint that returns daily star counts without identities and filters by time before aggregation. This reduced request volume from thousands to a few dozen and eliminated heavy database scans.
DEPTH ■■■■■8 min read11 days ago
Microservices
Sign in to save and rate
05Cloudflare · architecture
Cloudflare deploys protections against php2shell vulnerability
Recent disclosures revealed critical remote code execution and data exposure vulnerabilities in the PHP runtime. To mitigate the threat before public disclosure, Cloudflare developed full transaction detection to combine request and response signals within the WAF. This capability enabled automatic deployment of rules protecting customers against the php2shell exploits.
DEPTH ■■■■■6 min read4 days ago
Security
Sign in to save and rate
06Cloudflare · postmortem
8 eMudhra certificates are compromised. Here's what you need to know
Private keys associated with eight eMudhra intermediate certificates were compromised, allowing potential traffic interception. Cloudflare prioritized patching critical services, released client and tunnel updates, and deployed mitigations across its products. Customers are advised to upgrade affected software, update custom trust stores, and avoid disabling verification despite error messages.
DEPTH ■■■■■4 min read5 days ago
Security
Sign in to save and rate
07Stack Overflow · practice
“Impossible to Hide Secret …”: Uncovering Security and Privacy Issues in LLM-Native IDEs
Researchers analyzed thousands of social media posts to identify security and privacy risks in LLM-native Integrated Development Environments. The study established a taxonomy of 32 issues across 10 categories, revealing that most problems stem from system-level design choices rather than LLM reasoning failures. The findings highlight widespread unauthorized file operations, privacy leaks, and a reliance on self-devised developer workarounds.
DEPTH ■■■■■3 min read2 weeks ago
Machine Learning Security
Sign in to save and rate
08Meta · migration
Shipping Media Over QUIC at Meta Scale for Instagram Live Ingest
Meta deployed the emerging Media over QUIC (MoQ) protocol for Instagram Live ingest on iOS and Android to replace their legacy RUSH protocol. By using edge translation to avoid backend rewrites and a phased rollout strategy, the team achieved metric parity with the old protocol without regressions. This deployment establishes a foundation to extend MoQ across Meta's applications for lower-latency and more resilient video streaming.
DEPTH ■■■■■8 min read13 days ago
Frontend Mobile
Sign in to save and rate
09GitHub · migration
Improving site performance by shipping more CSS
GitHub faced performance degradation on server-side rendering and initial page loads due to scaling issues with its CSS-in-JS solution. The engineering team executed a multi-year migration to CSS Modules and eliminated dynamic styling props using incremental rollouts, wrapper components, and automation tools. This resulted in significant performance gains, including 55% faster server-side rendering and the complete removal of styled-components.
DEPTH ■■■■■8 min read4 weeks ago
Frontend Performance
Sign in to save and rate
10Stack Overflow · practice
The Regression Tests Nobody Writes: Capturing How Software Actually Behaves
Standard regression tests usually only verify developer intent rather than the actual, unwritten behaviors that systems accumulate in production over time. By capturing real production traffic and network-level interactions, teams can build characterization test suites to automatically detect unintended behavioral shifts. This approach prevents accidental regressions during legacy refactoring, rewrites, and major framework upgrades.
DEPTH ■■■■■6 min read3 days ago
Testing
Sign in to save and rate
11Heroku · architecture
Front-End Web Deep Dive: Runtime Config
Front-end web applications traditionally bake environment variables into build artifacts, requiring a full rebuild to change configurations across environments. To solve this, a new approach injects runtime environment variables directly into the HTML document's head element as data attributes via a Cloud Native Buildpack. This enables zero-rebuild configuration changes while remaining compatible with browser security standards like CSP.
DEPTH ■■■■■3 min read10 days ago
Frontend
Sign in to save and rate
12Grab · architecture
Smarter personalization: How property data helps us understand user price sensitivity
Existing user personalization systems fail to systematically account for residential property values, leading to one-dimensional profiles and regional blind spots. A conceptual four-step method is proposed that combines public property data, large language models, building-level price estimation, and hierarchical clustering to classify user affluence. The approach remains unimplemented, with future viability depending on technical validation, data quality, and privacy approvals.
DEPTH ■■■■■4 min read2 weeks ago
Data Engineering Machine Learning
Sign in to save and rate
13Cloudflare · practice
Localizing compliance at scale: achieving South Korea’s ISMS certification
To achieve South Korea's ISMS certification, Cloudflare had to modify its account sign-up flow to itemize required consents and disable third-party social logins that bypassed the form. By combining IP geolocation with user country selection, the team ensured localized compliance without breaking global functionality. The resulting certification provides a localized assurance benchmark for Korean users.
DEPTH ■■■■■8 min read3 days ago
Security
Sign in to save and rate
14Stack Overflow · practice
Your next job doesn’t have a title yet: Emerging role skills Q&A with Cory Hymel of Andela
Researchers analyzed thousands of job postings to understand how artificial intelligence is changing technical skill requirements. The findings indicate that instead of creating a workforce of pure generalists, the market is developing distinct new specialized skill bundles and hybrid roles. Consequently, organizations are facing talent debt as the half-life of technical skills rapidly shrinks.
DEPTH ■■■■■15 min read11 days ago
Testing
Sign in to save and rate
15Cloudflare · architecture
Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities
Recent major vulnerabilities in Citrix NetScaler exposed public-facing authentication gateways to unauthenticated remote code execution. To prevent similar emergency patches, the team recommends placing an independent Zero Trust access layer, web application firewall, and strict origin connection controls in front of the application server. Implementing these defense-in-depth measures reduces exposure and ensures a single software flaw does not result in total system compromise.
DEPTH ■■■■■9 min read6 days ago
Security
Sign in to save and rate
16Grab · architecture
GrabMart data for faster disease outbreak detection
The organization proposes a conceptual data pipeline to analyze aggregated GrabMart transaction data for symptom-related product demand, aiming to supplement clinical surveillance for disease outbreaks. The design relies on data aggregation, statistical baseline comparisons, and privacy safeguards like differential privacy without involving individual health inference. The system remains in an early planning phase requiring rigorous validation, privacy review, and public health oversight.
DEPTH ■■■■■5 min read12 days ago
Data Engineering Machine Learning
Sign in to save and rate