Email Details

WordPress lawsuit ⚖️, SamAltman’s Intelligence Age💡, don’t use RSA 🔒

Automattic recently wrote an article and gave a speech publicly disparaging WP Engine - WP Engine has responded with a public “cease and desist”. 

TLDR

Together With

 TLDR Web Dev 2024-09-24

This auth kills bots (Sponsor)

Build auth your future self will thank you for with Stytch👇

✅ Trusted by Zapier, Replit, Clearbit, Cisco, Groq

Discover the joys of Stytch 😍

🧑‍💻

Articles & Tutorials

When Postgres Indexing Went Wrong (7 minute read)

When a concurrent Postgres index creation silently failed, the app that used the database faced performance degradation, almost leading to a production outage. This failure was exacerbated by the use of partitioned tables, resulting in inconsistent index usage across different partitions. To avoid such issues, monitor concurrent index creation, validate indexes regularly, and create partition indexes consistently.
Implementing Feature Flagging with the Next.js App Router (6 minute read)

Use environment variables to control feature visibility, validate them, and then access them within server and client components using custom functions and a feature provider. This blog post explains how to implement basic feature flagging with the Next.js App Router. It demonstrates a practical application of feature flagging by controlling the visibility of sidebar routes based on feature flags.
Optimizing for High Latency Environments (22 minute read)

Chrome's User Experience Report provides Round-Trip-Time (RTT) data, which reveals the network conditions of users. Many users have slower network connections, so web applications should be able to handle high-latency environments well. Some strategies to handle these include reducing transfer size, using a CDN, upgrading to HTTP/2 and TLS 1.3, and adopting HTTP/3 (QUIC) if possible.
🧠

Opinions & Advice

The Intelligence Age (6 minute read)

Sam Altman describes a new “Intelligence Age” driven by new AI advancements. This new era promises massive improvements in various aspects of life, including healthcare, education, and even solving global problems like climate change. While AI's potential for prosperity is immense, there is still a need to navigate risks, like those related to labor markets.
Seriously, stop using RSA (13 minute read)

RSA is a widely used public-key cryptosystem which is arguably fundamentally flawed and should be abandoned. Its security relies on carefully chosen parameters, which developers often fail to select properly, leading to vulnerabilities. These vulnerabilities stem from subtle mathematical properties that average developers are unlikely to grasp, making RSA inherently fragile and prone to attacks.
My learnings from 7 failed tech interviews (8 minute read)

Zach Wilson, an ex-Airbnb staff data engineer, goes through seven tech interviews he failed over the last decade. He shares learnings from his time. For example, job hopping early in your career is great for growth, but not as great after you hit your mid-career.
🚀

Launches & Tools

[Free AppSec Lesson] Get to Know the Secure Supply Chain Consumption Framework (Sponsor)

Learn how to securely ingest and manage open-source software into your projects by leveraging the Secure Supply Chain Consumption Framework (S2C2F). This framework is focused on governance, continuous improvement, and scalable practices to ensure the integrity and security of your software supply chain. Claim your free video lesson or get a free taster on Youtube
ts-blank-space (Website)

ts-blank-space is a TypeScript-to-JavaScript compiler that focuses on speed by removing type annotations and replacing them with whitespace. It utilizes the original TypeScript parser and is written in pure TypeScript.
Sidekick (GitHub Repo)

Sidekick is a tool that simplifies the deployment applications on VPS', making the process of hosting side projects faster and more affordable by automating the setup and deployment process. It enables zero-downtime deployments and provides features like high availability, load balancing, and automatic SSL certificates.
MicroJS (Website)

A library of JavaScript packages with small footprints.
🎁

Miscellaneous

Tune Llama3 405B on AMD MI300x (10 minute read)

Felafax successfully fine-tuned the LLaMA 3.1 405B model on 8 AMD MI300x GPUs using JAX, Google's Python library for high-performance numerical computing and machine learning. Its team used JAX for efficient parameter sharding and a LoRA implementation, achieving near-linear scaling and high memory efficiency.
No Data Lasts Forever (6 minute read)

No data lasts forever. From ancient papyrus scrolls to modern hard drives and flash memory, every method of data storage has limitations and eventually fails. In modern times, the potential for data loss comes from hardware failures, technological obsolescence, and intentional or accidental deletion.
Cloudflare's new marketplace will let websites charge AI bots for scraping (4 minute read)

Cloudflare is launching a marketplace where website owners can sell access to their content to AI model providers. This marketplace will allow websites to charge AI bots for scraping their content. Cloudflare has also introduced AI Audit, a tool that allows website owners to monitor and block AI bots.

Quick Links

WP Engine responds to WordPress (1 minute read)

Automattic recently wrote an article and gave a speech publicly disparaging WP Engine - WP Engine has responded with a public “cease and desist”.
From Node.js to Deno: How It All Began (9 minute video)

This special feature explores Deno, a new JavaScript runtime created by the minds behind Node.js, examining its origins, differences from Node.js, and the lessons learned in its development.
Using TypeScript and RAG to Enhance User Queries from a Text Dataset (15 minute read)

This article explains how to implement Retrieval Augmented Generation (RAG) in TypeScript and React to create a chatbot that can answer questions about content from a large text dataset by retrieving relevant information from a vector database and providing it to an LLM.
Using callbacks to achieve better component decoupling in React (3 minute read)

Using callbacks in React to achieve better component decoupling involves shifting control of state updates from child components to parent components.
next-saas-stripe-starter (GitHub Repo)

This is a full-featured, pre-configured starter project for building SaaS applications using Next.js, Prisma, Neon, Auth.js, Resend, React Email, Shadcn/ui, and Stripe.

Love TLDR? Tell your friends and get rewards!

Share your referral link below with friends to get free TLDR swag!
Track your referrals here.

Want to advertise in TLDR? 📰

If your company is interested in reaching an audience of web developers and engineering decision makers, you may want to advertise with us.

If you have any comments or feedback, just respond to this email!

Thanks for reading,
Priyam Mohanty, Jenny Xu & Ceora Ford


If you don't want to receive future editions of TLDR Web Dev, please unsubscribe from TLDR Web Dev or manage all of your TLDR newsletter subscriptions.

© 2024 Email Dashboard. All rights reserved.