Languages
Generics explained: one idea, three implementations
Generics let you write code once for many types without giving up type safety. TypeScript, Go and Rust each approach them differently.
Archive
Latest news
Every story, newest first.
Security
CSRF in the age of SameSite cookies
Browsers now block many cross-site requests by default. That helps, but it doesn't make CSRF tokens obsolete.
Open Source
Writing a README people actually read
Your README is your project's front door. Answer the first three questions every visitor has, and keep the rest a click away.
DevOps
Feature flags: separating deploy from release
Shipping code and turning on a feature don't have to happen at the same moment. Flags make releases boring — if you also clean them up.
Web
Background jobs that don't bite: idempotency, retries and timeouts
Jobs will run twice, run late and fail halfway. Designing for that from the start is what separates a reliable queue from a source of 3 a.m. pages.
Languages
Immutability and persistent data structures for everyday developers
Data that never changes is easier to reason about, share and test. Persistent data structures make immutability practical without copying everything.
Security
Content Security Policy without breaking your site
CSP is one of the most effective defenses against cross-site scripting. Rolling it out gradually is the difference between protection and a broken checkout page.
Tools
Code review etiquette for authors and reviewers
Good reviews catch bugs and spread knowledge without bruising anyone. Small habits on both sides of the pull request make the process faster and kinder.
DevOps
Zero-downtime database migrations with expand and contract
Renaming a column sounds trivial until old and new code run at the same time. The expand/contract pattern makes schema changes safe during live deploys.
Databases
Full-text search without a search cluster
Before you add a dedicated search engine, check what your database already does. Postgres and SQLite both ship capable full-text search.
Languages
How garbage collectors work, and why your app pauses
Garbage collection frees you from manual memory management, but it isn't free. A tour of the main algorithms and what they mean for latency.
Security
Secrets management for small teams
API keys in the repo, passwords in chat, one shared admin login. A practical path from secret sprawl to something you can actually audit and rotate.