MoreRSS

site iconBetter Dev LinkModify

Collects links around the web that aims to help you learn something new.
Please copy the RSS to your reader, or quickly subscribe to:

Inoreader Feedly Follow Feedbin Local Reader

Rss preview of Blog of Better Dev Link

Issues #282 Nov 16, 2025

2025-11-16 20:19:00

Better Dev Link - Resource around the web on becoming a better programmer

Hi all,

Sometime when my though wandering the world, I just wonder how amazing TCP was design. The world all connect together because of it. Sometime you disconnect your VPN, then re-connect, and your SSH connection just resume. How amazing resilient it is. Today we discover that by learning about TCP protocol.

If you enjoy BetterDev, please spread the word by sharing it with your friends. And if you’d like to support my work, buying me a coffee would be much appreciated.

  • Build automation tools for AI agents. Earn passive income and win your share of $1M in prizes

    Developers earned $563K in September alone building automation tools on Apify. Now there’s $1M more in prizes through January 31. Build web scrapers, API wrappers, MCP servers for AI agents. Earn up to $2K per tool based on monthly active users, compete for $30K/$20K/$10K grand prizes, plus $2K weekly spotlight prizes. Ongoing marketplace revenue continues after the challenge ends.

  • The Internet is Cool. Thank you, TCP

    The internet is incredible. It’s nearly impossible to keep people away from. But it can also be unreliable: packets drop, links congest, bits mangle, and data corrupts. Oh, it’s dangerous out there! (I’m writing this in Kramer’s tone)

  • Building a Simple Search Engine That Actually Works

    Sometimes you just want something that: Works with your existing database, Doesn’t require external services, Is easy to understand and debug. That’s what the OP built. A search engine that uses your existing database, respects your current architecture, and gives you full control over how it works.

  • Faster Index I/O with NVMe SSDs

    Marginalia is an experimental search engine. The Marginalia Search index has been partially rewritten to perform much better, using new data structures designed to make better use of modern hardware. This post will cover the new design, and will also touch upon some of the unexpected and unintuitive performance characteristics of NVMe SSDs when it comes to read sizes.

  • Myths Programmers Believe about CPU Caches

    As a computer engineer who has spent half a decade working with caches at Intel and Sun, I’ve learnt a thing or two about cache-coherency. This was one of the hardest concepts to learn back in college – but once you’ve truly understood it, it gives you a great appreciation for system design principles.

  • Building blobd: single-machine object store with sub-millisecond reads and 15 GB/s uploads

    I decided to experiment with writing an object store from scratch as a fun learning exercise, and to see how much I could get out of NVMe disks I had on my bare metal machines. Specifically, I wanted to really optimize for random reads and small objects — serving user content where the lower the latency, the better. This would not focus on other features; S3 is bottomless, distributed, and managed for example.

  • Postgres Internals Hiding in Plain Sight

    Postgres has an awesome amount of data collected in its own internal tables. Postgres hackers know all about this - but software developers and folks working with day to day Postgres tasks often miss out the good stuff. Today I want to walk through some of the most important Postgres internal data catalog details. What they are, what is in them, and how they might help you understand more about what is happening inside your database.

  • Listen to Database Changes through the Postgres WAL

    This could be a cheap way to have a Kafka-like consumer out of the box by consuming your Postgres WAL log. WAL log is like a stream of change happen to your database (update/create/delete) and you can decode them to JSON to see the change and act on them

  • The Inner Workings of JavaScript Source Maps

    A deep dive into how JavaScript source maps work under the hood, with examples showing how all the pieces fit together.

  • Importing vs fetching JSON

    Beside the usualy way of await fetch to load JSON API, we now can also use import directly. We had this in NodeJS with build tool already but now it’s natively available in the browser too. Lets see when we should use what.

  • Why NaN !== NaN in JavaScript (and the IEEE 754 story behind it)

Code to read

  • pgFirstAid

    Easy-to-deploy, open source PostgreSQL function that provides a prioritized list of actions to improve database stability and performance.

  • top_secret

    Filter sensitive information from free text before sending it to external services or APIs, such as chatbots and LLMs.

  • pg_easy_replicate

    Easily setup logical replication and switchover to new database with minimal downtime

  • justgage

    a handy JavaScript plugin for generating and animating nice & clean dashboard gauges. It is based on Raphaël library for vector drawing

  • navcat

    javascript navigation mesh construction and querying library for 3D floor-based navigation

  • stormy

    Minimal neofetch-like weather CLI. Just fun code to read.

  • portal

    Public Open Relay To Access Localhost

  • nano-vllm

    A lightweight vLLM implementation built from scratch.

  • zensical

    A modern static site generator by the creators of Material for MkDocs

Tools

  • chandra

    OCR model that handles complex tables, forms, handwriting with full layout.

  • perspective

    Perspective is an interactive analytics and data visualization component, which is especially well-suited for large and/or streaming datasets. Use it to create user-configurable reports, dashboards, notebooks and applications, then deploy stand-alone in the browser, or in concert with Python and/or Jupyterlab.

  • pg_statviz

    A minimalist extension and utility pair for time series analysis and visualization of PostgreSQL internal statistics.

  • check_postgres

    Nagios check_postgres plugin for checking status of PostgreSQL databases. You probably cannot use this as it’s because it’s for Nagios but the script can adopt to any monitoring system.

  • sloggo

    Minimal RFC 5424 syslog collector and viewer based on DuckDB. Runs as a single, resource-friendly process

  • slim-select

    Advanced select dropdown without any dependencies

  • caswaf

    HTTP & OAuth Gateway and Web Application Firewall (WAF) based on ModSecurity

  • stylus

    Lightweight status page for home infrastructure

Issues #281 Oct 20, 2025

2025-10-20 20:19:00

Better Dev Link - Resource around the web on becoming a better programmer

Hi all,

It’s already autumn and we will continue to get more issue moving forward. Hope everyone have a great haloween ahead. I also shared a story about someone almost got hack by being trick into running code for an interview. Remind so stay safe these day, never run untrusted code on your machine.

If you enjoy BetterDev, please spread the word by sharing it with your friends. And if you’d like to support my work, buying me a coffee would be much appreciated.

  • Build your next on HubSpot with the flexibility of an all-new Developer Platform

    The HubSpot Developer Platform gives you the tools to build, extend, and scale with confidence. Create AI-ready apps, integrations, and workflows faster with a unified platform designed to grow alongside your business.

  • How to create an OS from scratch

    May sound overwhelm but it’s very approachable with step by step building from previous foundation. Eg to write the initial boot loader you just need: loop: jmp loop

    times 510-($-$$) db 0 dw 0xaa55

    A very detail setup so you can prepare emulator to start learning these.

  • Caching

    Every time you use a computer, caches work to ensure your experience is fast. Everything a computer does from executing an instruction on the CPU, to requesting your X.com feed, to loading this very webpage, relies heavily on caching. You are about to enjoy a guided, interactive tour of caching: the most elegant, powerful, and pervasive innovation in computing.

  • Big O

    A visual introduction to big O notation.

  • Consistent hashing

    This post is an introduction to consistent hashing, an algorithm for designing a hash table such that only a small portion of keys has to be recomputed when the table’s size changes.

  • Understanding PostgreSQL Tablespaces

    By default all of the Postgres data stay in the same directory, under the same path and therefore the same volume. This limit our scale, many cloud provider has a max volume size, and they all share same IO. What can we do to put the database at different location instead?

  • How I Almost Got Hacked By A 'Job Interview

    Be careful out there with sophisicated phishing attempt nowadays. Bottom line is never ever run untrusted code directly on your machine.

  • Find where a specific object was allocated in JavaScript with DevTools

    Maybe you’re debugging a network request, but the stack trace has been laundered away by a batching mechanism. Maybe you have an enormous React codebase with kilometers of prop drilling, and you can’t be bothered to hit Go To References all morning. In any case, sometimes you just wish you could see where that specific object in the debugger was created.

  • WireGuard topologies for self-hosting at home

  • How to stop Linux threads cleanly

    Once you get into the business of starting threads, you’re probably also in the business of stopping them. However the former is much easier than the latter. With “stopping” I mean stopping the thread while giving it a chance to run some cleanup operations before fully terminating. Or in other words, we want to terminate a thread while ensuring that memory is freed, locks are released, logs are flushed, and so on

  • pqr.sql: Generate QR Codes with Pure SQL in PostgreSQL

Code to read

  • rack-attack

    Rack middleware for blocking & throttling

  • sift

    A lightweight terminal UI for displaying Go tests

  • oto

    ♪ A low-level library to play sound on multiple platforms ♪

Tools

  • pgsync

    keeps PostgreSQL/MySQL/MariaDB as your source of truth and publishes denormalized documents to Elasticsearch/OpenSearch—continuously and transactionally.

  • pgcalendar

    A PostgreSQL extension that provides infinite calendar functionality for recurring schedules with exceptions

  • relay

    Fast & free browser trusted HTTPS certificates

  • builder

    Visual Development for React, Vue, Svelte, Qwik, and more

Issues #280 Sep 08, 2025

2025-09-08 20:19:00

Better Dev Link - Resource around the web on becoming a better programmer

Hi all,

We came back with other issue. I had got a new job with lot of duties last few month but things are cooling down so we’re going back :).

My friend, Joel Dare has also start writing a news letter, you may consider to subscribe there. He’s also creator of neat which as its name, a very neat css framework.

If you enjoy BetterDev, please spread the word by sharing it with your friends. And if you’d like to support my work, buying me a coffee would be much appreciated.

  • Transform Your Career: Build, Learn, and Network at AWS re:Invent 2025 | Las Vegas.

    Transform your skills at AWS re:Invent 2025. Over five dynamic days, you’ll dive into technical training, explore the latest technologies, and build valuable peer connections.Take home practical solutions that deliver instant value to your work and advance your career.

    Join us in Las Vegas from December 1-5 to:

    ● Access insider knowledge through interactive labs, technical sessions, and workshop

    ● Accelerate your learning through direct mentorship from AWS experts

    ● Build your network and connect with peers who share your technical interests through AWS Community Programs at the Developer Pavilion

    ● Experience live music, amazing food, and more at re:Play, the ultimate tech celebration

    ● Attend in person and receive a 50% discount voucher for any AWS Certification exam

    ● Team up and save - Get one free pass for every 10 passes purchased*

    Our 2025 event catalog is now available! From experimenting with new solutions to interactive workshops and hands-on training, we’ve got something for everyone at AWS re:Invent.

  • Inside the Apollo "8-Ball" FDAI (Flight Director / Attitude Indicator)"

    The Apollo “8-Ball” FDAI (Flight Director/Attitude Indicator) was a crucial instrument in Apollo spacecraft, used to display the vehicle’s orientation. The article details its complex internal workings, which include a multi-axis rotating ball mechanism driven by three motors and a servo loop. The specific unit examined was later modified for use in a Space Shuttle simulator, with changes made to its components and markings.

  • Branch prediction: Why CPUs can’t wait?

    There are some latency numbers that every programmer should know, according to Jeff Dean, and one of them is branch misprediction, which costs around 5ns in 2012, and the latency remains roughly the same as the time of writing this post. So what is branch prediction, what happens when it’s mispredicted, and why is it costly?

  • How to Slow Down a Program? And Why it Can Be Useful.

    Making programs slower can be useful to find race conditions, to simulate speedups, and to assess how accurate profilers are. To detect race conditions, we may want to use an approach similar to fuzzing. Instead of exploring a program’s implementation by varying its input, we can explore different instruction interleavings, thread or event schedules, by slowing down program parts to change timings. This approach allows us to identify concurrency bugs and is used by CHESS, WAFFLE, and NACD.

  • UUIDv7 Comes to PostgreSQL 18

    UIDv7 is a highly important and long-awaited feature that addresses a major pain point for developers who use UUIDs as primary keys in databases. Unlike older versions like UUIDv4, which are randomly generated and lead to poor performance and index bloat in B-tree indexes, UUIDv7 incorporates a Unix Epoch timestamp. This makes it time-ordered, ensuring that new UUIDs are inserted sequentially, which significantly improves performance for write-heavy workloads. The article emphasizes that this quiet but impactful addition “brings the best of both worlds” by providing global uniqueness while also being sortable and performance-friendly.

  • Three Algorithms for YSH Syntax Highlighting

    I always like syntax highling algorithm. It’s something we take for granted and didn’t ask how it can be done. Andy walked us through how he do it for his own shell language.

  • Rendering Crispy Text On The GPU

    The webpage describes a new method for GPU text rendering that uses vector data of glyphs instead of pre-baked textures, addressing issues like poor quality with certain fonts and large texture sizes. The approach involves loading raw Bézier curves, sending them to the GPU, and rasterizing them at runtime with a temporal accumulation technique for high-quality anti-aliasing. This method also allows for customized subpixel anti-aliasing to eliminate color fringing on different monitor layouts.

  • CRDT: Text Buffer

    Collaboratively editing strings of text is a common desire in peer-to-peer applications. For example, a note-taking app might represent each document as a single collaboratively-edited string of text.

    The algorithm presented here is one way to do this. It comes from a family of algorithms called CRDTs, which I will not describe here. It’s similar to the approaches taken by popular collaborative text editing libraries such as Yjs and Automerge. Other articles have already been written about these similar approaches (see the references section below), but this article also has a nice interactive visualization of what goes on under the hood.

  • P-Hacking in Startups

    Speed kills rigor. In startups, the pressure to ship fast pushes teams to report anything that looks like an improvement. That’s how p-hacking happens. This piece breaks down three common cases—and how to avoid them

  • How Compiler Explorer Works in 2025

    explains how Compiler Explorer works, a popular online tool for compiling code and viewing assembly output. The site handles millions of compilations annually, using Google’s nsjail tool for security to isolate compilation processes. To manage a massive 4 terabyte collection of over 4,700 compiler versions and reduce latency, it uses squashfs images mounted over NFS. The article concludes by discussing the site’s future plans, including the addition of an AI explanation tool and user accounts.

  • strace tips for better debugging

    Have you ever scratch your head and see why your program seems hang? with very low CPU utilization? When you do strace it just show a bunch of FUTEX. In this short article we just learn some useful options and flags of strace to debug these easiser

  • Git Notes: git's coolest, most unloved­ feature

    the short of it is: they’re cool for appending notes from automated systems (like ticket or build systems) but not really for having interactive conversations with other developers (at least not yet)

Code to read

  • miniDiffusion

    A reimplementation of Stable Diffusion 3.5 in pure PyTorch. The Hacker News thread also had a lot of userful and great comment.

  • bake

    a Makefile formatter and linter. It only took 50 years!

  • naturally

    Natural (“version number”) sorting with support for: name, legal doc numbering,

  • filterql

    A tiny query language for filtering structured data

Tools

  • peaks.js

    JavaScript UI component for interacting with audio waveforms

  • manim

    Animation engine for explanatory math videos

  • LinkLiar

    Link-Layer MAC spoofing GUI for macOS

  • hurl

    run and test HTTP requests with plain text.

  • pgactive

    Active-active Replication Extension for PostgreSQL (pgactive)

  • pgrwl

    Cloud-Native PostgreSQL WAL receiver. Stream, compress, encrypt, upload, retain and monitor your WAL archive.

  • s3mini

    Tiny S3 client. Edge computing ready. No-dep. In Typescript. Works with @cloudflare @minio @Backblaze @digitalocean @garagehq

  • gonzo

    A powerful, real-time log analysis terminal UI inspired by k9s. Analyze log streams with beautiful charts, AI-powered insights, and advanced filtering - all from your terminal

Issues #279 Jun 08, 2025

2025-06-08 20:19:00

Better Dev Link - Resource around the web on becoming a better programmer

Hi all,

I recently becomes a heavy LLM user in coding, It helps me write a lot of helper and tedious script which will take me days or even weeks now I can do in 110 of time. It is great when you know how to do something but dont’ want to sit down and write it. Especially on UI. So I plan to share more about LLM/AI to help all of us.

On other note, Mozilla is shutting down Pocket on July 8, 2025. In spirit of self-hosted, I had switch to linkding. I wrote this simple script to import Pocket archive to linkding. The script was written by Gemini btw.

If you enjoy BetterDev, please spread the word by sharing it with your friends. And if you’d like to support my work, buying me a coffee would be much appreciated.

  • Your data, built your way. Twilio Segment. For data you can depend on.

    Customer Data You Can Depend On
    We know you run your business on data, so you better be able to depend on it.


    Twilio Segment was purpose-built so that you don’t have to worry about your data. Forget the data chaos, dissolve the silos between teams and tools, and bring your data together with ease.


    So that you can spend more time innovating and less time integrating.


    Talk to sales and get a guided tour of Twilio Segment tailored to your business.

  • What is Entropy?

    People say many things about entropy: entropy increases with time, entropy is disorder, entropy increases with energy, entropy determines the arrow of time, etc.. But I have no idea what entropy is, and from what I find, neither do most other people. This is the introduction I wish I had when first told about entropy, so hopefully you find it helpful. My goal is that by the end of this long post we will have a rigorous and intuitive understanding of those statements, and in particular, why the universe looks different when moving forward through time versus when traveling backward through time.

  • How DCI Movie Delivery and Encryption works

    The Cinema Industry is using its own standards for creating and distributing movies in a secure way. The DCI (Digital Cinema Initiatives) specification defines everything from file formats and encryption to the projection systems itself.

    The specification itself is publicly available but relies on various IEEE (Institute of Electrical and Electronics Engineers) and SMPTE (Society of Motion Picture and Television Engineers) standards, which have to be purchased.

  • OpenAI: Scaling PostgreSQL to the Next Level

    At scale of OpenAI, I imagine they might shard PostgreSQL. But they utilize an unsharded architecture with one writer and multiple readers, demonstrating that PostgreSQL can scale gracefully under massive read loads.

  • Talking To Your Mailserver Is Not as Hard as You Think!

    Email is very well distributed where you cannot get lock down by a provider. As long asyou own domain, you can move email anywhere. In email world, generally SMTP is for sending email and IMAP is for receiving mail. In this article, we focus on IMAPv4.

  • An illustrated guide to Amazon VPCs

    In this section, I talk about why VPCs were invented and how they work. This is critical to understand because almost everything you do in AWS will happen inside of VPC. If you don’t understand VPCs, it will be difficult to understand any of the other networking concepts.

  • Writing your own CUPS printer driver in 100 lines of Python

    Printing on unix-like operating systems like Linux or macOS is usually done through the CUPS daemon. CUPS is responsible for handling printer configuration, scheduling print jobs and actually talking to the printer over the wire. In this article we discuss a printer system for ticket using FGL. And they implement a CUPS driver to take the rastered pixel data and ouput FGL.

  • Understanding logical replication in Postgres

    A deeper look at how PostgreSQL logical replication works, from WAL internals and logical decoding to streaming protocols and replica lag. If you’ve ever wondered what’s happening under the hood, this post connects the dots.

  • Field Notes From Shipping Real Code With Claude

    Think of this post as your field guide to a new way of building software. By the time you finish reading, you’ll understand not just the how but the why behind AI-assisted development that actually works.

  • How Reladiff Works

    diffing dataset is very useful in data engineering. incremental syncing, detect drift etc. how can we create a tool that could efficiently diff large SQL datasets across different databases and servers. This article build such as a tool with: Divide, Hash, And Conquer

  • Building an AI Server on a Budget

    Instead of renting the GPU we can pay up-front cost to build a server with GPU. This post can serve as a simple foundation into this process with sourcing parts and assbler thing together.

  • Too Many Open Files

    Every backend dev will hit file limit at some point and we run something like ulimit -n 65000 to fix it. But how we debug it, how we find out how many file it openning? and what is these file descriptor.

  • X-Ray Defence: Hidden Resource, Sudden Lifeline

  • Taking out the Trash: Garbage Collection of Object Storage at Massive Scale

  • A Trip Down Memory Lane: How We Resolved a Memory Leak When pprof Failed Us

    Warpstream control plane is written in Go, which has excellent built-in support for debugging application memory issues with pprof. We’ve used pprof hundreds of times in the past to debug performance issues, and usually memory leaks are particularly easy to spot. But in this case, this isn’t something that pprof could help with.

  • Crafting Effective Prompts for Agentic AI Systems: Patterns and Practices

    Curated collection of system prompts for top AI tools. Perfect for AI agent builders and prompt engineers. Incuding: ChatGPT, Claude, Perplexity, Manus, Claude-Code, Loveable, v0, Grok, same new, windsurf, notion, and MetaAI.

  • The Book of Secret Knowledge

    A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Code to read

  • Your data, built your way. Twilio Segment. For data you can depend on.

    Customer Data You Can Depend On
    We know you run your business on data, so you better be able to depend on it.


    Twilio Segment was purpose-built so that you don’t have to worry about your data. Forget the data chaos, dissolve the silos between teams and tools, and bring your data together with ease.


    So that you can spend more time innovating and less time integrating.


    Talk to sales and get a guided tour of Twilio Segment tailored to your business.

  • fast-mcp

    Use Ruby DSL to let AI Model call function inside your Ruby app

  • rails-mcp-server

    A Ruby implementation of a Model Context Protocol (MCP) server for Rails projects. This server allows LLMs (Large Language Models) to interact with Rails projects

  • mcp-go

    A Go implementation of the Model Context Protocol (MCP), enabling seamless integration between LLM applications and external data sources and tools.

  • chafa-go

    Go bindings for the Chafa terminal graphics library. Render high quality images on the terminal without CGO or external dependencies.

  • typed-ffmpeg

    offers a modern, Pythonic interface to FFmpeg, providing extensive support for complex filters with detailed typing and documentation.

  • mini-photo-editor

    Online webgl photo editor with effects, filters and cropping

Tools

  • beachpatrol

    Browser’s End-user Automation CLI Hub. Potentialize All Tasks Regarding Online Life.

  • glowui

    442 open source icons in 2 styles, made for interfaces. MIT license

  • Why upgrade PostgreSQL?

    Build by the fame depesz, it tells you what you got between 2 PG version.

  • PostgreSQL Conf: Parameters Documentation

    A simple list of all PostgreSQL parameter.

  • AirAP

    airplay to an ios device, use your iphone as an airplay receiver

  • markitdown

    Python tool for converting files and office documents to Markdown.

  • contextgem

    Effortless LLM extraction from documents

  • Turn docstrings into LLM-functions

  • postgres-mcp

    Postgres MCP Pro is an open source Model Context Protocol (MCP) server built to support you and your AI agents throughout the entire development process—from initial coding, through testing and deployment, and to production tuning and maintenance.

  • pg_auto_failover

    Postgres extension and service for automated failover and high-availability

  • revive

    🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint

  • pg_exporter

    Advanced PostgreSQL & Pgbouncer Metrics Exporter for Prometheus

Issues #278 Mar 31, 2025

2025-03-31 20:19:00

Better Dev Link - Resource around the web on becoming a better programmer

Hi all,

So this week, Github CodeQL leaked their token; the token was only publicly exposed for about 2 seconds, but that’s enough. Then, we had Malware found on npm infecting local packages with a reverse shell. And an atop heap issue. The world truly fell apart last week, no joke. That’s why it’s helpful to be paranoid whenever we run any piece of software on our CI, on our dependencies—always vet them yourself.

If you enjoy BetterDev, please spread the word by sharing it with your friends. And if you’d like to support my work, buying me a coffee would be much appreciated.

Code to read

  • hann

    A fast approximate nearest neighbor search library for Go

  • Physix

    A simple Physics engine in GoLang

  • shezem-rs

    A Rust implementation of a fast audio fingerprinting system inspired by Shazam, for audio recognition and identification. It focuses on speed, efficiency and simplicity

  • pgledger

    A ledger implementation in PostgreSQL

Tools

  • gaia

    A tool by AMD to run LLM Agents on Ryzen AI PCs in Minutes

  • stable-virtual-camera

    Generative View Synthesis with Diffusion Models

  • star-vector

    a foundation model for SVG generation that transforms vectorization into a code generation task. Using a vision-language modeling architecture, StarVector processes both visual and textual inputs to produce high-quality SVG code with remarkable precision.

  • gopass

    The slightly more awesome standard unix password manager for teams

  • lakekeeper

    an Apache-Licensed, secure, fast and easy to use Apache Iceberg REST Catalog written in Rust. Apache Iceberg is a project that allow us to run SQL query on a set of file(CSV, Parquet, JSON) directly from storage such as S3.

  • goavatar

    This package provides a simple way to generate unique, symmetric identicons based on an input string (e.g., an email address or username). It uses an MD5 hash to create a deterministic pattern and color scheme, then mirrors the design for a visually appealing avatar.

Issues #277 Mar 25, 2025

2025-03-25 20:19:00

Better Dev Link - Resource around the web on becoming a better programmer

Hi all,

Last week, NextJS has a new security vulnerability, CVE-2025-29927 that allow by pass middleware auth checking by setting a header to trick it into thinking this is an internal request and skip the auth middleware check. If you’re hosted on Vercel there is no action to take, but if you run the vercel server in your infra, you should update.

Another one for k8s, if you’re running ingress-nginx, you should update this patch. The attack require the ability to have a pod already running inside K8S network, such as sharing namespace with other users, or exposing admission controller webhook to internet. So if your cluster is dedicated to you, and not doing stuff like host network or expose admission controller service, you can buy sometime for the upgrade.

If you enjoy BetterDev, please spread the word by sharing it with your friends. And if you’d like to support my work, buying me a coffee would be much appreciated.

  • When You Deleted /lib on Linux While Still Connected via SSH

    A classic tale of Linux horror. You’re SSH’d into a machine, you make one wrong move, and suddenly your system is broken. This post walks through how to recover from this self-inflicted nightmare.

  • Think About SQL MERGE in Terms of a RIGHT JOIN

    RIGHT JOIN is an esoteric feature in the SQL language, and hardly ever seen in the real world, because almost every RIGHT JOIN can just be expressed as an equivalent LEFT JOIN. There is, however, one place in the SQL language where RIGHT JOIN is surprisingly ubiquitous and today we learn about it.

  • Zero-Knowledge Proofs

    An approachable introduction to the magic of zero-knowledge proofs—how they let you prove something without revealing the details. Perfect for anyone curious about cryptography without diving into hardcore math.

  • Understanding Solar Energy

    This one’s a bit outside the usual programming realm, but trust me—it’s fascinating. A deep dive into how solar panels actually work, the engineering behind them, and why understanding electricity at this level is surprisingly useful.

  • A Synchronization Engine for Everyone

    Syncing data is one of those things that sounds easy until you try to build it. This post walks through a synchronization engine design that’s both simple and powerful.

  • Leaking Passwords (and more!) on macOS

    A deep dive into how macOS can unintentionally leak sensitive data like passwords, thanks to clipboard behavior and debugging tools. A must-read for anyone who cares about security.

  • A Deep Dive into the Inline Background Overlap Problem

    Ever tried putting text over an image and ended up with weird background overlaps? This post explains why that happens and how to fix it. If you do anything with CSS, you’ll want to bookmark this one.

  • BPF: Or How I Stopped Worrying and Loved the Kernel

    BPF is like a superpower for peeking into Linux. Whether you care about performance monitoring, security, or just love cool system hacks, this is a fantastic read.

  • A History of Null Pointer Dereferences on macOS

    A nostalgic yet technical look at how null pointer dereferences have plagued macOS over the years. Great for those who love debugging deep OS issues.

  • Improving Recommendation Systems & Search in the Age of LLMs

    AI-powered recommendations are everywhere, but how do they really work? This post explores how LLMs are changing search and recommendation engines for the better.

  • Ruby Ractors and Lock-Free Data Structures

    If you’re a Rubyist curious about parallelism, this is for you. A practical look at Ruby’s Ractors and how they enable truly parallel execution without locks.

Code to read

  • retroboy

    A Game Boy emulator written in Rust.

  • rhino

    A Rack web server written in Ruby from scratch.

  • konva

    an HTML5 Canvas JavaScript framework that extends the 2d context by enabling canvas interactivity for desktop and mobile applications.

  • landrun

    Need to run untrusted code safely? This sandboxing tool might be your new best friend.

  • Physix-go

    A physics engine in Go that makes simulating motion, collisions, and forces as simple as possible.

  • fastplotlib

    A blazing-fast plotting library for massive datasets, using modern GPU rendering to keep things smooth.

  • zimdjson

    Parsing gigabytes of JSON per second. Zig port of simdjson with fundamental features.

Tools

  • playwright-mcp

    A Model Context Protocol (MCP) server that provides browser automation capabilities using Playwright. This server enables LLMs to interact with web pages through structured accessibility snapshots, bypassing the need for screenshots or visually-tuned models.

  • debugbar

    Powerful devtools for Ruby on Rails. Inspired by the Laravel Debugbar.

  • xata agent

    an open source agent that monitors your database, finds root causes of issues, and suggests fixes and improvements. It’s like having a new SRE hire in your team, one with extensive experience in Postgres.

  • pgFormatter

    Free Online version of pgFormatter a PostgreSQL SQL syntax beautifier (no line limit here up to 100000 characters). This SQL formatter/beautifier supports keywords from SQL-92, SQL-99, SQL-2003, SQL-2008, SQL-2011 and PostgreSQL specifics keywords. May

  • atlas

    A database schema management tool that works like Terraform—diff, apply, and keep your schema in check.

  • typespec

    Define your API once in a simple tsp file, then generate OpenAPI, gRPC, client code, and docs automatically.

  • ferronweb

    A fast, memory-safe web server powered by Rust. Similar to Caddy or Nginx but written in Rust.