All guides, page 3 of 21

Newest first. Search or pick a topic.

482 guides, newest first

• Sentry's September 2026 Next.js Flaw Explained: Why Middleware-Only Auth FailsFrontend · A plain-English guide to the @sentry/nextjs vulnerability of 2026: how tunnelRoute let requests skip middleware on webpack builds, who is affected and how to fix it, shown on one running example of a two-language app.20 min read · Updated 28 Oct 2026
• Spreadsheet Frontend Design: Virtualised Canvas, Formula Graphs and Copy-PasteFrontend · A plain-English guide to spreadsheet frontend design: virtualised canvas rendering, a formula dependency graph with topological recalculation and cycle checks, selection ranges and clipboard formats, shown on one running example of a distributor's stock sheet.26 min read · Updated 28 Oct 2026
• Tailscale's October 2026 SSH Vulnerabilities Explained: Forwarding as RootBackend · A plain-English guide to the Tailscale SSH vulnerability fixed in 1.104.4: how forwarding reached root-only sockets, who was at risk and how to update, shown on one running example of a team's build server.21 min read · Updated 28 Oct 2026
• Take-Home Assignments: Scope, README, Tests and When to DeclineInterview prep · A plain-English guide to take-home coding assignments: scoping to the time box, what reviewers say they grade, the README, tests, red flags and when to decline, shown on one running example of a four-hour expense-summary task.25 min read · Updated 28 Oct 2026
• vLLM's October 2026 RCE Vulnerability Explained: Request-Chosen Processor CodeAI and GenAI · A plain-English guide to the vLLM remote code execution vulnerability fixed in 0.31.0: how one request field chose which processor code the server imported, why the API key and a pinned revision did not stop it, and how to check your server, shown on one running example of a document-reading service.19 min read · Updated 28 Oct 2026
• Columnar Databases Explained: Why Analytics Queries Read Less DataSystem design · A plain-English guide to columnar databases: column storage, dictionary and run-length compression, row groups with min-max statistics, vectorised execution and why single-row writes are slow, shown on one running example of a food delivery orders table.21 min read · Updated 27 Oct 2026
• File Upload API Design: Presigned URLs, Multipart and Resumable UploadsBackend · A plain-English guide to file upload API design: presigned URLs, size and type checks, S3 multipart uploads, tus resumable uploads and virus-scan hand-off, shown on one running example of a coaching app that takes lecture videos and homework PDFs.25 min read · Updated 27 Oct 2026
• How to Ask for a Referral: Getting Engineering Interviews in IndiaInterview prep · A plain-English guide to how to ask for a referral: why referrals beat job portals, how recruiters and open source fit in, how referral systems work and how to spot fee scams, shown on one running example of a final-year student's job search.20 min read · Updated 27 Oct 2026
• LLM Red Teaming: A Pre-Launch Playbook to Attack Your Own AppAI and GenAI · A plain-English guide to LLM red teaming: scoping, attack categories, safe test cases, scoring, CI regression tests and fixes, shown on one running example of an online store's support chatbot.20 min read · Updated 27 Oct 2026
• Postgres Job Queue: SKIP LOCKED, Leases, Retries and When to SwitchBackend · A plain-English guide to a Postgres job queue: claiming jobs with FOR UPDATE SKIP LOCKED, leases for crashed workers, retries and dead jobs, LISTEN/NOTIFY, indexes and vacuum, shown on one running example of an online store's receipt emails.21 min read · Updated 27 Oct 2026
• SGLang's October 2026 KV Cache Exposure Explained: Stale Memory Between UsersAI and GenAI · A plain-English guide to the SGLang KV cache exposure: how an over-long prompt read other users' memory in split prefill and decode serving, which releases fix it and how to check your setup, shown on a runnable toy page pool.20 min read · Updated 27 Oct 2026
• Software Engineer Resume: Impact Bullets, ATS Parsing and Honest TailoringInterview prep · A plain-English guide to the software engineer resume: impact bullets, structure, projects, ATS parsing and honest tailoring, shown on one running example of a vague backend bullet rewritten step by step.19 min read · Updated 27 Oct 2026
• Subscription Billing System Design: Proration, Dunning and Grace PeriodsSystem design · A plain-English guide to subscription billing system design: plans and entitlements, proration maths on upgrades and downgrades, dunning retries, grace periods, webhooks and RBI e-mandate rules, shown on one running example of a project-management app.22 min read · Updated 27 Oct 2026
• Angular 20 End of Life Explained: Upgrade to 22 Before 28 NovemberFrontend · A plain-English guide to Angular 20 end of life: what stops on 28 November 2026, why ng update goes one major at a time, and what breaks from 20 to 21 to 22, shown on one running example of an order-tracking portal.26 min read · Updated 26 Oct 2026
• Apache Tomcat's October 2026 Vulnerabilities Explained: Mixed-Up User ResponsesBackend · A plain-English guide to the Apache Tomcat vulnerabilities fixed in October 2026: how HTTP/2 and AJP responses could reach the wrong user, the JNDIRealm login flaw, and how to check and upgrade your Tomcat, shown on one running example of a Spring Boot order-tracking API.23 min read · Updated 26 Oct 2026
• Biome 2.6 Explained: What It Can Replace in Prettier, ESLint and StylelintFrontend · A plain-English guide to Biome 2.6: what it can now replace in a Prettier, ESLint and Stylelint setup, what is still preview, and how to migrate safely, shown on one running example of a React and Tailwind repo.24 min read · Updated 26 Oct 2026
• .NET 8 End of Support Explained: Upgrade to .NET 10 Before 10 November 2026Backend · A plain-English guide to .NET 8 end of support on 10 November 2026: what stops, why apps keep running, LTS vs STS and how to upgrade to .NET 10, shown on one running example of a team with twelve container APIs.24 min read · Updated 26 Oct 2026
• Electron 45 Explained (October 2026): Breaking Changes to Fix Before You UpgradeFrontend · A plain-English guide to Electron 45: the Chromium 156 upgrade, the preload, screen-sharing, tracing and safeStorage changes, and how to check each fix, shown on one running example of a shop billing app.26 min read · Updated 26 Oct 2026
• EU AI Act Article 50 Deadline Explained: Mark AI Output by 2 December 2026AI and GenAI · A plain-English guide to EU AI Act Article 50: who must mark AI output, what the 2 December 2026 deadline covers, and how C2PA signing works, shown on one running example of an image feature sold to EU customers.21 min read · Updated 26 Oct 2026
• GitHub's October 2026 Actions Outage Explained: A Retry Storm on a Shared LinkSystem design · A plain-English guide to the GitHub Actions outage of 19 October 2026: the reconnect storm, the shared network link it overloaded and the rate limit left in shadow mode, shown on a runnable simulation.22 min read · Updated 26 Oct 2026
• GitHub's November 2026 macOS 14 Runner Retirement Explained: What to Switch ToBackend · A plain-English guide to GitHub's macOS 14 runner retirement: the October brownouts, the 2 November 2026 cutoff, pinned vs latest labels and the Xcode change, shown on one running example of an iOS app's CI pipeline.23 min read · Updated 26 Oct 2026
• Long-Context Attention Explained: Quadratic Cost, KV Cache and FlashAttentionAI and GenAI · A plain-English guide to long context attention: why compute grows with length squared, how the KV cache grows, prefill vs decode and how FlashAttention speeds exact attention, shown on one running example of a document chat.21 min read · Updated 26 Oct 2026
• MCP TypeScript SDK's October 2026 Advisory Explained: One Server per ConnectionAI and GenAI · A plain-English guide to the MCP TypeScript SDK vulnerability of October 2026: why a shared server object sent one client's replies to another, why 2.3.0 throws ALREADY_CONNECTED and how to restructure, shown on one running example of a company ticket-lookup server.22 min read · Updated 26 Oct 2026
• OpenSSL 4.1 Explained: DTLS 1.3 for UDP and What Breaks on UpgradeBackend · A plain-English guide to OpenSSL 4.1 and DTLS 1.3: why TLS needs a UDP version, how the handshake survives lost packets, what GREASE does and what can break when you upgrade, shown on one running example of a video-call media server.25 min read · Updated 26 Oct 2026