A Byte of Coding Issue 380

A Byte of Coding Issue 380

A Byte of Coding

Hey-yo,

Last issue before the weekend, have a good one!

Made possible through generous sponsorship by:

Published: 3 April 2024

Tags: web, security

Brian Kardell dives into the trusted types proposal, which would ride “atop Content Security Policy (CSP) and allows website maintainers to say ‘require trusted-types’“.

Some highlights:

  • would make web apis that require a string safer, since they would now require a sanitized string type

  • built-in sanitization of html

  • challenges in getting it rolled out with good defaults, since many of the affected apis are currently in use

Published: 1 April 2024

Tags: asic, hardware, philosophy

Dan Gisselquist goes in-depth on adding features to an asic design that he initially estimated would take 80 hours, but ended up taking 270+ hours.

Some highlights:

  • magic numbers suck

  • long list of best practices when designing software for asics

  • technical debt should always be addressed for anything that you’re not scrapping

Published: 27 October 2023

Tags: sponsored, auth, web

WorkOS has published a guide on how to best integrate single sign-on (SSO) in your app.

Some highlights:

  • common requirement for enterprise customers

  • ​describes the general request flow for a user logging in with SSO

  • summarizes how to build SSO from scratch and how to use existing providers

Published: 22 March 2024

Tags: philosophy, projects

Alex Kladov shares insights on a list of things that are relevant to every software project.

Some highlights:

  • “they are irrelevant while the project is small, they are a productivity multiplier when the project is large, they are much harder to introduce down the line. “

  • covers readmes, developer docs, users’ website, internal website, process docs, style, git, automated checks, build & ci, testing, benchmarking, and releases

  • has a bullet point summary at the end

With rising costs for Amazon S3 storage and potentially devastating business consequences from data loss, you need a holistic approach to cutting unnecessary spending and guarding against risks. Lawrence Miller, a consultant to multinational corporations who holds numerous networking certifications, has authored a concise volume that lays out the path to success in managing backup and compliance for S3 data lakes.

Thanks for your Support!

Big thanks to all of the Patreon supports and company sponsors. If you want to support the newsletter you can checkout the Patreon page. It's not necessary, but it lets me know that I'm doing a good job and that you're finding value in the content.