~/devreads

6 Oct 2025

Pierrick CAEN 6 min read

Photo by Mario Verduzco on Unsplash Medium Android App — Migrating from Apollo Kotlin 3 to 4: Lessons Learned In this post, I’ll share my experience migrating the Medium Android app from Apollo Kotlin version 3 to version 4, including the challenges I encountered and how I solved them to improve our GraphQL implementation. Understanding Our Apollo Cache Implementation Before…

graphqlapollo-clientandroidkotlin

Poorva Patil 9 min read

As a data engineer, I used to see metrics as just numbers on a dashboard — until I realized they’re the lens through which customers view and run their operations. In customer support, for example, agent productivity metrics aren’t just figures, they’re actionable insights that drive efficiency, shape staffing decisions, and directly impact customer satisfaction. These aren’t just charts —…

apache-sparkanalyticsbig-datadata-analysis

2 min read

We’re introducing Candle, a new submarine cable connecting countries across East Asia and Southeast Asia. We’re also announcing several updates to our subsea cables across the Asia-Pacific, including the completion of the Bifrost cable system. The Asia-Pacific (APAC) region is home to over 58% of the world’s internet users1 – many who rely on robust [...] Read More... The post…

connectivity

5 Oct 2025

4 Oct 2025

14 min read

This blog really isn't just for beating up on Apple for the way it harms users, the web, standards, and society to maintain power and profits. So here's some fun stuff I've been doing in my 11ty setup to improve page performance. Contents Page-Specific Resources via Shortcodes and the 11ty Bundler Mo Pagination, Mo Problems Build Time Impact Scroll-Position Based…

3 Oct 2025

Jacopo Bono 12 min read

Introduction Over the years, we have evolved from using simple, often rule-based algorithms to sophisticated machine learning models. These models are incredibly good at finding patterns in large datasets, but due to their complexity it is frequently challenging for a human to understand why a certain input leads to its respective output. This is especially problematic in areas where high-stakes…

researchconcept-learningcausalitydeep-learningexplainability

J Simpson 8 min read

In January 2024, the Centers for Medicare and Medicaid Services updated The CMS Interoperability and Patient Access Act. The new revision outlines requirements and specifications for what information medical providers need to provide, as well as how it should be formatted to ensure API security and data compliance. This is towards the goal of improving ...

blogplatformssecurityapi best practicesapi governance

2 min read

Imagine you are testing a web page showing the purchase receipt. When the user clicks on the "View Summary" button, a dialog pops up showing just the total amount paid cypress/e2e/receipt.cy.js 1 2 3 4 5 6 describe('Receipt', () => { it('shows the price on the receipt', () => { cy.visit('app/index.html') cy.contains('button', 'View Summary').click() }) }) How would you confirm…

2 Oct 2025

1 min read

Content Delivery Networks (CDNs) content replication is far more nuanced than most engineers realize. Let's dive deep into how CDNs actually replicate, distribute, and manage content across their global networks.

1 Oct 2025

11 min read

Key Takeways: With billions of Android app users, we’re always looking to improve the Meta app experience, and in this post, we explore the ways we’ve leveraged Android’s Baseline Profiles to significantly improve their performance. We discuss the performance challenges we’ve faced as Meta’s apps, how the needs of users have become more complex over [...] Read More... The post…

android

Kristopher Sandoval 8 min read

Most teams do at least some sort of injection attack testing. This testing, however, is typically focused on a small subset of particular vulnerabilities. SQL injection is a popular target, as is command injection. Some teams may even do log injection if they’ve been burned before. But when it comes to APIs — and especially ...

blogsecurityaccess controlapi securitycybersecurity

Markus Kohler 1 min read

Learn how to build a scalable ride-share app using PubNub, Google Maps, and modern APIs. Explore core features like real-time tracking, in-app chat, geofencing, and secure payments with tools that save time and reduce costs.

1 min read

You can define extra attributes for users in user pools. Maybe you want to store information that is not covered by the standard attributes, such as social profiles or preferred currency. But there is a catch: You can't remove or change it after you add it to the user pool. I had to remove all users and recreate the user…

30 Sept 2025

Markus Kohler 1 min read

How to build a real-time player matching system using PubNub and Epic Online Services (EOS). We’ll cover everything from queuing players, applying skill-based and latency constraints, to forming fair matches in multiplayer games. Whether you’re a game developer or just curious about how matchmaking works under the hood, this tutorial breaks it all down with real code and live examples.

9 min read

Following our keynote presentations at FSE 2025 and Eurostar 2025, we’re delving further into the development of Meta’s Automated Compliance Hardening (ACH) tool, an LLM-based tool for software testing that is automating aspects of compliance adherence at Meta, while accelerating developer and product velocity. By leveraging LLMs we’ve been able to overcome the barriers that [...] Read More... The post…

ai researchml applicationssecurity privacy

vladmihalcea 1 min read

Twelve years later! Twelve years ago today, I decided to create this blog on WordPress.com to share whatever I was finding interesting while working as a software architect. Prior to starting this blog, I didn’t have any writing experience, which you can clearly see in the first article I’ve ever published. However, practice makes perfect, and in time, I managed…

anniversaryblogging

Rob 3 min read

I use OpenIn to open links in a given browser when I click on them in other applications. This is really helpful to keep various work related stuff in different browsers or profiles and I find it very helpful. One thing that's bothered me is that links from the Jira Cloud Slack App ignore my OpenIn rules and always open…

computing

4 min read

Recently I watched a pretty good video Cypress vs Playwright side-by-side coding comparison. by Artem Bondar. While not as good as my Cypress vs Playwright course, the video is pretty solid. There is one point Artem makes in the beginning that he did not stress enough, but which determines how each tool gives you the access to the browser and…

1 min read

Our latest video generation model is more physically accurate, realistic, and controllable than prior systems. It also features synchronized dialogue and sound effects. Create with it in the new Sora app.

research

1 min read

To address the novel safety challenges posed by a state-of-the-art video model as well as a new social creation platform, we’ve built Sora 2 and the Sora app with safety at the foundation. Our approach is anchored in concrete protections.

1 min read

Sora 2 is our new state of the art video and audio generation model. Building on the foundation of Sora, this new model introduces capabilities that have been difficult for prior video models to achieve– such as more accurate physics, sharper realism, synchronized audio, enhanced steerability, and an expanded stylistic range.

publication

29 Sept 2025

1 min read

At OpenAI, we rely on our own technology to help streamline work, scale expertise, and drive outcomes. In our new series, OpenAI on OpenAI, we share lessons to help other organizations do the same.

chatgpt

17 min read

Over the past 21 years, Meta has grown exponentially from a small social network connecting a few thousand people in a handful of universities in the U.S. into several apps and novel hardware products that serve over 3.4 billion people throughout the world. Our infrastructure has evolved significantly over the years, growing from a [...] Read More... The post Meta’s…

ai researchdata center engineeringdata infrastructuredevinframl applications

1 min read

You will notice processes, tools, or practices that feel inefficient, outdated, or even wrong. Maybe the team uses Jira instead of Linear, Java instead of Go, MongoDB instead of MySQL (for a use case), or Tabs instead of Spaces. It will be tempting to point it all out immediately. Resist that urge.

1 min read

My presentation for Digital Collegium 2025 was an overview of many recent and forthcoming additions to the web platform, specifically HTML and CSS. Description Roll for sanity: Surviving the ever-expanding web feature bestiary Are you, brave front-end adventurer, feeling your sanity slipping as the Ever-Expanding Web Feature Bestiary grows with each browser update? Have you encountered strange and powerful creatures…

web developmentconference

2 min read

For when you have too many calendars Once upon a time I built a calendar and then wrote an exhaustively long talk about working with time, timezones, calendars, and everything in between. For a few unrelated reasons we ended up not shipping the calendar, but in general, as I mentioned in the post: Zach, whatever you do: just don’t ever…

28 Sept 2025

5 min read

Testers and developers often use page objects to interact with their web applications via DOM elements. Let's create a page object for our TodoMVC app: cypress/e2e/todo.ts 1 2 3 4 5 6 7 8 9 export const TodoMVC = { addTodo(title: string) { cy.get('.new-todo').type(`${title}{enter}`) }, getTodos() { return cy.get('.todo-list li') }, } All tests that add a todo item and…

26 Sept 2025

3 min read

AI is everywhere and, as network engineers, we are right in the thick of it: building the network infrastructure for AI. This year, at our largest @Scale:Networking ever, engineers from Meta, ByteDance, Google, Microsoft, Oracle, AMD, Broadcom, Cisco, and NVIDIA came together to share our latest experiences in architecting, designing, operating, and debugging our AI [...] Read More... The post…

ml applicationsnetworking traffic

Erlang Solutions Team 3 min read

Say hello to Adam Rack, our new Business Development Manager for the DACH region, and hear what drives his passion for growth and collaboration. The post Meet the Team: Adam Rack appeared first on Erlang Solutions.

meet the team

Jahnvi Thakkar 6 min read

Reviewed by: Sumit Sarabhai and Gaurav Sharma If you’ve worked with databases in Python, you know the boilerplate: open a connection, create a cursor, run queries, commit or rollback transactions, close cursors and connection. Forgetting just one cleanup step can lead to resource leaks (open connections) or even inconsistent data. That’s where context managers step […] The post Simplifying Resource…

azurepythonazure sqlclient driverpython driver for azure sql

Nurdan Almazbekov, Infrastructure Security 1 min read

Introduction Yelp heavily relies on Amazon S3 (Simple Storage Service) to store a wide variety of data, from images, logs, database backups, and more. Since data is stored on the cloud, we need to carefully manage how this data is accessed, secured, and eventually deleted—both to control costs and uphold high standards of security and compliance. One of the core…

25 Sept 2025

Postmark team 1 min read

We recently became aware of a malicious npm package called "postmark-mcp" on npm that was impersonating Postmark and stealing user emails. We want to be crystal clear: Postmark had absolutely nothing to do with this package or the malicious activity. Here's what happened: A malicious actor created a fake package on npm impersonating our name, built trust over 15 versions,…

Jeffrey Fritz 6 min read

Aspire 9.5 adds the preview 'aspire update' command, single-file AppHost, richer CLI and dashboard UX, and new integrations for AI, DevTunnels, and more. The post Announcing Aspire 9.5 appeared first on .NET Blog.

.netaspirecloud nativecontainersai

RisingStack Engineering 7 min read

You are in the process of putting together your application. While designing your authorization solution, you realize you will need to send emails to potential clients.Using a third-party service (like SendGrid or Mailgun) to cover your needs for now looks pretty attractive. After all, you don’t have any users yet, they offer free tiers, and […] The post Postfix on…

kubernetes

6 min read

Contents Lies by Any Other Name Great Artists Steal Dear Tech Reporters: Access Is Not A Beat This blog is failing on several levels. First, September 2025 is putting the “frequent” in “infrequently”, much to my chagrin. Second, my professional mission is to make a web that's better for everyone, not to tear Apple down. But just when I thought…

1 min read

Emotional outbursts are natural. I've been there too, and I've seen teams struggle because of it. We all have moments when the pressure gets too much, and emotions spill out.

1 min read

Today we're releasing a preview of ChatGPT Pulse to Pro users on mobile. Pulse is a new experience where ChatGPT proactively does research to deliver personalized updates based on your chats, feedback, and connected apps like your calendar.

product

24 Sept 2025

2 min read

Today, Meta, Vodafone, and Google released a white paper, “Video Streaming with the AV1 Video Codec in Mobile Devices,” detailing the benefits of the AV1 codec, an advanced video compression technique, to enhance the streaming video experience on mobile devices. The white paper recommends that: Vendors of core processors (SoCs) should evaluate the adoption of [...] Read More... The post…

video engineering

1 min read

When Google introduced gRPC in 2015, one of the most significant architectural decisions was building it on top of HTTP/2 rather than the widely adopted HTTP/1.1. This was just about following some trend, but a deliberate choice that fundamentally shapes how gRPC performs and behaves.

5 min read

US politics has been pretty fascist lately. The state is filling up concentration camps, engaging in mass state violence against people on the basis of racialized traits, deporting them to random countries without any respect for habeas corpus, exerting state pressure on the free press to censor speech critical of the current administration, and Trump is openly floating the idea…

23 Sept 2025

Rob 1 min read

After pulling a new version of the Docker PostgreSQL container, I started getting this warning: WARNING: database "dev" has a collation version mismatch DETAIL: The database was created using collation version 2.36, but the operating system provides version 2.41. HINT: Rebuild all objects in this database that use the default collation and run ALTER DATABASE dev REFRESH COLLATION VERSION, or…

postgresql

Veda 8 min read

The Old Way vs. The Reality of Your Customers For years, the gold standard for benchmarking web performance, particularly for Google’s Core Web Vitals (CWV), has been a mobile device baseline—specifically, a throttled connection and CPU designed to simulate a Moto G4. This approach was established with good intentions: to ensure websites are accessible to […]

seouxbazaarvoicebenchmarkingstrategycorewebvitals

Veda 11 min read

This document details how preconnect improves web performance, especially for Bazaarvoice's third-party content, by accelerating connection setups and reducing LCP. Crucially, internal testing confirmed preconnect operations are not counted as API calls, validating a "no count, low cost" model—a key insight for our developer blog.

seouxapigatewaybazaarvoicecdn

Mark Elsden 5 min read

The DEBI (Data Engineering and Business Intelligence) team recently attended the DataEngBytes 2025 conference, where the hot topic for the year was, unsurprisingly, AI agents. My favorite talk, by Geoffrey Huntley, presented a powerful and surprisingly simple idea: It’s not that hard to build an agent; it’s a few hundred lines of mainly boilerplate code running in a loop with…

4 min read

As I explained in my previous blog post on feature flags and testing, you need the flags to be the same to ensure consistent application behavior during end-to-end tests. If you want to test the specific feature, control the flag from the test. But sometimes the tests unexpectedly fail when one of the developers or QA engineers is testing something…

18 min read

Update: In several recent posts, I've attempted to address how the structure of standards bodies and their adjacent incubation venues accelerates or suppresses the potential of the web as a platform. The pace of progress matters because platforms are competitions, and actors that prevent expansions of basic capabilities risk consigning the web to the dustbin. Inside that framework, there is…

22 Sept 2025