Issues #27 Dec 04, 2017 (27)

Why <blank> Gets You Root In case you haven’t heard the news, there is a massive security flaw which effects the latest version of macOS (High Sierra). Essentially, the bug allows anybody to log into the root account with a blank, or password of their choosing. Patrick decided to track down its root cause!

HTTP/2 PUSH vs HTTP Preload HTTP/2 PUSH lets a server push resources to the client. HTTP Preload indicates to the browser the resources it would require while loading the current page. In this post, we will discuss the key differences between PUSH and Preload, with a detailed explanation of which one to choose based on your use case.

Say No to Randos (In Your Database) It’s so easy to get a record out of table randomly with random, but turns out it has a performance issue.

Debugging React Performance with React 16 and Chrome DevTools Ben uses Chrome DevTools to demonstrate powerful new performance tracking features and how you can use them to diagnose slow rendering components.

An Introduction to Speculative Optimization in V8 Benedikt Meurer explains how V8 engine works. The process of taking the code, generating the byte code, feeding it into TurboFan engine for optimization, compiling it, then running the code in CPU.

How Stripe Designs Beautiful Websites Stripe is a payment processing company but their designs are always solid. Lee Robinson breaks down how Stripe creates these beautiful designs and give some tips and tricks to web designers and developers alike.

SVG Metaballs rendering Metaballs are organic looking squishy gooey blobs, from a mathematical perspective they are an iso-surface that can be rendered using some math equation such as: f(x,y,z) = r / ((x - x0)^2 + (y - y0)^2 + (z - z0)^2). Varun discovers another approach to generate metaballs by connecting two circles with a membrane. It’s very cool and fun to read.

Type-Safe GraphQL with OCaml (Part 1) Andreas spends sometime working on a GraphQL in Go. He experienced some pain points and switch to OCaml. His intent is to write a number of blog posts to describe his journey. You can learn about how to implement a GraphQL server too.

Demystifying Floating Point Precision Do you know that 0.2 + 0.4 = 0.6000000000000001. That’s floating point numbers precision limitation. This post aims to answer questions: 1) What level of precision do I have at a number? 2) When will I hit precision issues?

Build a Regex Engine in Less than 40 Lines of Code Regex has a bad reputation in many developer eyes. But in fact, building a simple regex engine wasn’t that hard and a way to help us to not be afraid of using regex. The engine we built supports many syntax: a, *, ?, ., ^, $.

Regex Was Taking 5 Days to Run. So I Built a Tool That Did it in 15 Minutes Vikash use Regex to normalize data. It’s super slow, so he wrote a library call FlashText in Python to solve this and explains how it works and why it is fast.

A CEO's Guide to Emacs The development of so many modern IDEs such as VSCode, Atom, JetBrain make many devs switch to them. Old editors like Vim or Emacs still have their place. This post is another guide to Emacs.

Interactive Charts with Go and MongoDB A small and fun project uses Go to parse MongoDB log files and render charts natively (without use HTML, JS, CSS technology like D3.JS). The author writes about process of finding the library does its job and wires things together. A useful way to learn Go or a fun technique to re-do in your own language.

Gophish: a powerful, open-source phishing framework that makes it easy to test your organization's exposure to phishing

Joplin - a note taking and to-do application with synchronization capabilities for Windows, macOS, Linux, Android and iOS