Software engineering blog by Soumitra Saha, a senior software developer from Siliguri, West Bengal, India. Articles on web, mobile (React Native, Flutter), and backend (TypeScript, Rust) development, architecture, and design.https://soumitrasaha.com/en-uscontact@soumitrasaha.com (Soumitra Saha)contact@soumitrasaha.com (Soumitra Saha)https://soumitrasaha.com/my-reads/openai-gpt-6-astra/https://soumitrasaha.com/my-reads/openai-gpt-6-astra/OpenAI's GPT-6 Astra launch is worth reading for its computer-use gains, alignment evaluations, and a cybersecurity jump that changes what defenders must do.Sat, 05 Sep 2026 18:30:00 GMTOpenAIGPTFrontier ModelsAgentshttps://soumitrasaha.com/blogs/why-i-like-static-first-websites-in-2026/https://soumitrasaha.com/blogs/why-i-like-static-first-websites-in-2026/I explain why I keep choosing static-first for blogs, docs, and portfolios, what it costs, and when I pay for a server instead.Fri, 04 Sep 2026 18:30:00 GMTAstroStatic SitesPerformanceSEOhttps://soumitrasaha.com/my-reads/meta-zgateway-zippydb-proxy/https://soumitrasaha.com/my-reads/meta-zgateway-zippydb-proxy/Why Meta put a stateless proxy in front of its most-used key-value store, and how that one tier absorbed connection storms, hot keys, and noisy neighbors.Fri, 04 Sep 2026 18:30:00 GMTMetaCachingDatabasesDistributed Systemshttps://soumitrasaha.com/blogs/junior-to-senior-developer-roadmap/https://soumitrasaha.com/blogs/junior-to-senior-developer-roadmap/The skills that move engineers from junior to senior aren't just technical. Here's what engineering culture research actually shows about leveling up.Tue, 01 Sep 2026 18:30:00 GMTCareer DevelopmentSoftware EngineeringCode ReviewTechnical LeadershipMentoringhttps://soumitrasaha.com/blogs/learn-fullstack-development-again/https://soumitrasaha.com/blogs/learn-fullstack-development-again/I lay out the learning path I'd follow from scratch: the specific order, what to spend time on, what to skip, and where AI tools actually fit in.Sat, 29 Aug 2026 18:30:00 GMTFull-Stack DevelopmentJavaScriptTypeScriptReactLearning Pathhttps://soumitrasaha.com/my-reads/github-august-17-outage/https://soumitrasaha.com/my-reads/github-august-17-outage/GitHub's 7-hour-47-minute outage on August 17 had no bad deploy to blame — it was a capacity failure, the second such incident in two weeks, and GitHub's CTO explains what comes next.Thu, 27 Aug 2026 18:30:00 GMTGitHubPostmortemIncident ReviewReliabilityhttps://soumitrasaha.com/blogs/how-hackers-attack-web-apps/https://soumitrasaha.com/blogs/how-hackers-attack-web-apps/I walk through XSS, CSRF, and SQL injection from the attacker's side — the mechanics, the targets, and the code patterns that signal an exploitable application.Wed, 26 Aug 2026 18:30:00 GMTWeb SecurityXSSCSRFSQL InjectionAttack Patternshttps://soumitrasaha.com/my-reads/eve-online-python-3-migration/https://soumitrasaha.com/my-reads/eve-online-python-3-migration/EVE Online begins migrating its 23-year-old Python 2 codebase to Python 3 using a dual-compatibility stage that keeps Tranquility running while automated syntax fixes clear the way for the harder semantic review.Wed, 26 Aug 2026 18:30:00 GMTFenris CreationsPythonMigrationRuntimehttps://soumitrasaha.com/my-reads/meta-metaroce-rdma-ai-ethernet/https://soumitrasaha.com/my-reads/meta-metaroce-rdma-ai-ethernet/Meta's MetaRoCE abandons the lossless-fabric assumption and rebuilds RDMA transport from scratch for Ethernet, pushing all intelligence to the NIC so the fabric can stay simple at million-GPU scale.Tue, 25 Aug 2026 18:30:00 GMTMetaNetworkingRDMAAI Infrastructurehttps://soumitrasaha.com/blogs/jwt-authentication-misconceptions/https://soumitrasaha.com/blogs/jwt-authentication-misconceptions/I break down five JWT misconceptions — localStorage risk, short expiry, revocation, algorithm confusion attacks, and the statelessness myth — and show when session tokens win.Sun, 23 Aug 2026 18:30:00 GMTJWTAuthenticationSecurityNode.jsWeb Securityhttps://soumitrasaha.com/my-reads/tailscale-sqlite-wal-reset-bug/https://soumitrasaha.com/my-reads/tailscale-sqlite-wal-reset-bug/Tailscale's six-month forensic hunt for a rare SQLite checkpoint race that corrupted 19 production databases and had hidden in the engine for 16 years.Sun, 23 Aug 2026 18:30:00 GMTTailscaleSQLiteDebuggingStoragehttps://soumitrasaha.com/blogs/postgresql-vs-mongodb/https://soumitrasaha.com/blogs/postgresql-vs-mongodb/I compare PostgreSQL and MongoDB across data model, schema flexibility, transactions, query power, and scaling — so you can choose based on your actual situation, not the hype.Wed, 19 Aug 2026 18:30:00 GMTPostgreSQLMongoDBDatabase DesignBackendSQLhttps://soumitrasaha.com/my-reads/atproto-for-distributed-systems-engineers/https://soumitrasaha.com/my-reads/atproto-for-distributed-systems-engineers/The AT Protocol decentralizes a social network by turning a standard stream-processing backend inside out — making each internal service a public API that anyone can run — rather than relying on federation or blockchain consensus.Tue, 18 Aug 2026 18:30:00 GMTBlueskyDistributed SystemsNetworkingAlgorithmshttps://soumitrasaha.com/blogs/monolith-vs-microservices/https://soumitrasaha.com/blogs/monolith-vs-microservices/I argue that starting with microservices is a mistake for most teams, explain why the modular monolith is the smarter default, and show when distributed services genuinely earn their cost.Sun, 16 Aug 2026 18:30:00 GMTArchitectureMicroservicesSystem DesignBackendEngineeringhttps://soumitrasaha.com/my-reads/huggingface-state-of-open-models-summer-2026/https://soumitrasaha.com/my-reads/huggingface-state-of-open-models-summer-2026/A strong open-model ecosystem read about adoption, derivatives, small models, agent users, and why Qwen has become so important.Sat, 15 Aug 2026 18:30:00 GMTHugging FaceOpen ModelsAI EcosystemQwenhttps://soumitrasaha.com/my-reads/sqlite-cves-or-llm-slop/https://soumitrasaha.com/my-reads/sqlite-cves-or-llm-slop/jFrog verified six 'critical' SQLite CVEs and found fabricated functions, impossible line numbers, and PoCs that crash nothing — with red flags you can check.Fri, 14 Aug 2026 18:30:00 GMTjFrogSQLiteSecuritySupply Chainhttps://soumitrasaha.com/blogs/rest-api-mistakes/https://soumitrasaha.com/blogs/rest-api-mistakes/I walk through ten REST API mistakes that keep showing up in real codebases — wrong methods, missing pagination, no idempotency, leaking errors — and show the concrete fix for each.Thu, 13 Aug 2026 18:30:00 GMTREST APINode.jsBackendHTTPAPI Designhttps://soumitrasaha.com/my-reads/zai-glm-5-3-frontier-coding/https://soumitrasaha.com/my-reads/zai-glm-5-3-frontier-coding/GLM-5.3 is useful to track because Z.ai is competing directly in coding, agentic engineering, and efficient open-weight models.Thu, 13 Aug 2026 18:30:00 GMTZ.aiGLMChinese AI LabsCoding Modelshttps://soumitrasaha.com/my-reads/openai-gpt-5-6-builders-guide/https://soumitrasaha.com/my-reads/openai-gpt-5-6-builders-guide/A practical read on model selection, reasoning controls, multi-agent orchestration, and cost-aware AI product design.Wed, 12 Aug 2026 18:30:00 GMTOpenAIGPTAgentsModel Routinghttps://soumitrasaha.com/blogs/developer-tools-worth-knowing/https://soumitrasaha.com/blogs/developer-tools-worth-knowing/I walk through 10 CLI and desktop tools — from ripgrep and fzf to lazygit and Bruno — each with a concrete use case for the problems they actually solve.Sun, 09 Aug 2026 18:30:00 GMTCLIDeveloper ToolsAPI TestingTerminalGithttps://soumitrasaha.com/my-reads/cloudflare-ai-gateway-workers-ai-control-plane/https://soumitrasaha.com/my-reads/cloudflare-ai-gateway-workers-ai-control-plane/A useful Cloudflare read about treating AI calls as traffic that needs routing, logs, billing, retries, and control from the start.Fri, 07 Aug 2026 18:30:00 GMTCloudflareAI GatewayObservabilityModel Routinghttps://soumitrasaha.com/blogs/vscode-extensions-worth-installing/https://soumitrasaha.com/blogs/vscode-extensions-worth-installing/A verified list of 10 VS Code extensions — from ESLint and GitLens to Error Lens and REST Client — with their actual use cases and what each one covers that VS Code's defaults don't.Thu, 06 Aug 2026 18:30:00 GMTVS CodeDeveloper ToolsProductivityWorkflowhttps://soumitrasaha.com/my-reads/cloudflare-kitesurf-agent-browser/https://soumitrasaha.com/my-reads/cloudflare-kitesurf-agent-browser/Kitesurf is interesting because it asks what a browser should look like when the primary user is an agent, not a human.Thu, 06 Aug 2026 18:30:00 GMTCloudflareBrowserAgentsWebhttps://soumitrasaha.com/my-reads/cloudflare-agent-development-lifecycle/https://soumitrasaha.com/my-reads/cloudflare-agent-development-lifecycle/A sharp Cloudflare article about why agent-driven software needs APIs, previews, observability, and lifecycle design beyond the normal SDLC.Tue, 04 Aug 2026 18:30:00 GMTCloudflareAgentsSDLCDevOpshttps://soumitrasaha.com/blogs/github-repositories-developers/https://soumitrasaha.com/blogs/github-repositories-developers/I walk through 10 GitHub repositories worth bookmarking — from interactive learning roadmaps to local AI tools — each with a specific reason to use it and how.Mon, 03 Aug 2026 18:30:00 GMTGitHubDeveloper ToolsLearning ResourcesOpen SourceAI Toolshttps://soumitrasaha.com/my-reads/qwen-3-8-max-coding-cowork/https://soumitrasaha.com/my-reads/qwen-3-8-max-coding-cowork/Qwen's newer releases are worth following because the ecosystem around Qwen models is becoming a default base for many open-model builders.Sun, 02 Aug 2026 18:30:00 GMTQwenChinese AI LabsCoding ModelsOpen Modelshttps://soumitrasaha.com/my-reads/github-case-folding-memory-speed/https://soumitrasaha.com/my-reads/github-case-folding-memory-speed/How GitHub's code search team removed an early-exit branch from a hot loop and gained a 15× throughput improvement — because the branch, not the work, was the bottleneck.Fri, 31 Jul 2026 18:30:00 GMTGitHubPerformanceAlgorithmsDeveloper Toolshttps://soumitrasaha.com/blogs/rust-vs-go-backend/https://soumitrasaha.com/blogs/rust-vs-go-backend/A practical comparison of Rust and Go for backend developers — covering performance, concurrency models, learning curve, and job market so you can choose the right one.Thu, 30 Jul 2026 18:30:00 GMTRustGoBackendSystems Programminghttps://soumitrasaha.com/my-reads/zig-creator-bun-rust-response/https://soumitrasaha.com/my-reads/zig-creator-bun-rust-response/The Zig creator's candid response to Bun's Rust rewrite, arguing that engineering discipline and values — not language features — decide software quality.Wed, 29 Jul 2026 18:30:00 GMTZigRustBunMemory Safetyhttps://soumitrasaha.com/blogs/rust-most-loved-language/https://soumitrasaha.com/blogs/rust-most-loved-language/I look at the Stack Overflow survey streak, what the admiration score actually measures, why practitioners cite correctness over performance, and where Rust is already running in production.Mon, 27 Jul 2026 18:30:00 GMTRustProgramming LanguagesDeveloper SurveyMemory SafetySystems Programminghttps://soumitrasaha.com/my-reads/bun-rewriting-in-rust/https://soumitrasaha.com/my-reads/bun-rewriting-in-rust/Bun's maintainer explains how he used Claude to port 535,000 lines of Zig to Rust in 11 days, and why compiler-enforced memory safety beat a style guide.Mon, 27 Jul 2026 18:30:00 GMTBunRustZigRuntimehttps://soumitrasaha.com/blogs/htmx-do-we-need-react/https://soumitrasaha.com/blogs/htmx-do-we-need-react/I explain what HTMX does differently, show how hx-get and hx-swap work, and give an honest account of where it outperforms React and where it doesn't.Fri, 24 Jul 2026 18:30:00 GMTHTMXReactFrontend DevelopmentJavaScriptWeb Developmenthttps://soumitrasaha.com/my-reads/rust-to-zig-rewrite/https://soumitrasaha.com/my-reads/rust-to-zig-rewrite/Richard Feldman reports on 487 days of rewriting the Roc compiler from 300K lines of Rust into Zig, with real build timings, actual memory-safety outcomes, and a frank accounting of what each language provides.Thu, 23 Jul 2026 18:30:00 GMTZigRustRuntimeMemory Safetyhttps://soumitrasaha.com/blogs/bun-vs-nodejs/https://soumitrasaha.com/blogs/bun-vs-nodejs/I look at Bun's verified speed claims, Node.js compatibility as of early 2026, where it genuinely saves time, and which gaps still block a clean switch.Mon, 20 Jul 2026 18:30:00 GMTBunNode.jsJavaScriptBackendRuntimehttps://soumitrasaha.com/my-reads/typescript-7-native-compiler/https://soumitrasaha.com/my-reads/typescript-7-native-compiler/TypeScript 7.0 ships the native Go port as the official npm release, delivering 8x–12x faster builds, parallel type-checking, a rebuilt watch mode, and a VS Code extension — with no programmatic API until 7.1.Mon, 20 Jul 2026 18:30:00 GMTMicrosoftTypeScriptDeveloper ToolsPerformancehttps://soumitrasaha.com/blogs/vite-vs-webpack/https://soumitrasaha.com/blogs/vite-vs-webpack/I explain why webpack's bundle-first approach gets slow at scale and how Vite's native ESM model changes the dev server experience for most projects.Fri, 17 Jul 2026 18:30:00 GMTBuild ToolsViteWebpackJavaScriptPerformancehttps://soumitrasaha.com/blogs/react-vite-rebuild-faster/https://soumitrasaha.com/blogs/react-vite-rebuild-faster/I compare Vite's native ESM dev server to the bundle-first approach of webpack, explain the real performance difference, and walk through migrating from CRA step by step.Tue, 14 Jul 2026 18:30:00 GMTReactViteFrontend DevelopmentBuild ToolsPerformancehttps://soumitrasaha.com/my-reads/cloudflare-meerkat-distributed-consensus/https://soumitrasaha.com/my-reads/cloudflare-meerkat-distributed-consensus/Cloudflare is building Meerkat, a consensus service powered by the QuePaxa algorithm, to provide linearizable reads and writes across 330+ global data centers without the availability holes that leader-based protocols create.Mon, 13 Jul 2026 18:30:00 GMTCloudflareDistributed SystemsInfrastructureNetworkingDatabaseshttps://soumitrasaha.com/blogs/shadcn-ui-why-developers-love-it/https://soumitrasaha.com/blogs/shadcn-ui-why-developers-love-it/I explain what shadcn/ui's copy-paste model actually means, how Radix UI handles accessibility under the hood, and what changes when you own your UI code.Fri, 10 Jul 2026 18:30:00 GMTReactUI ComponentsTailwind CSSRadix UIhttps://soumitrasaha.com/my-reads/postgres-workflow-state-colocation/https://soumitrasaha.com/my-reads/postgres-workflow-state-colocation/DBOS argues that running workflow state and application data in the same Postgres database collapses the idempotency and atomicity problems that separate workflow engines introduce, by reducing distributed coordination to a local transaction.Thu, 09 Jul 2026 18:30:00 GMTDBOSPostgresDistributed SystemsDatabaseshttps://soumitrasaha.com/blogs/nextjs-vs-react/https://soumitrasaha.com/blogs/nextjs-vs-react/I explain how React and Next.js relate, what the framework adds on top of the library, and give you a concrete guide for which to start with based on what you're actually building.Tue, 07 Jul 2026 18:30:00 GMTReactNext.jsFrontend DevelopmentJavaScripthttps://soumitrasaha.com/my-reads/meta-ai-storage-blueprint/https://soumitrasaha.com/my-reads/meta-ai-storage-blueprint/How Meta rebuilt its exabyte-scale BLOB storage layer from first principles — scrapping a multi-layer metadata chain and adding a tiered caching architecture — to eliminate GPU stalls and compress multi-hour ingestion cycles.Mon, 06 Jul 2026 18:30:00 GMTMetaStorageAI InfrastructureSystem Designhttps://soumitrasaha.com/blogs/nextjs-15-changes-upgrade/https://soumitrasaha.com/blogs/nextjs-15-changes-upgrade/I walk through the two breaking changes in Next.js 15 — async request APIs and the new caching defaults — explain the React 19 requirement, and help you decide if it's time to upgrade.Sat, 04 Jul 2026 18:30:00 GMTNext.jsReactFrontend DevelopmentApp RouterReact 19https://soumitrasaha.com/blogs/react-19-guide/https://soumitrasaha.com/blogs/react-19-guide/I cover the meaningful changes in React 19 — Actions, useActionState, the use() hook, React Compiler, document metadata, ref as prop, and how to upgrade.Wed, 01 Jul 2026 18:30:00 GMTReactJavaScriptFrontend DevelopmentReact 19Hookshttps://soumitrasaha.com/my-reads/meta-av1-real-time-communication/https://soumitrasaha.com/my-reads/meta-av1-real-time-communication/How Meta solved the encoding complexity, device eligibility, rate control, and error resilience problems that separate AV1 on-demand streaming from AV1 video calls — and why the RTC constraints make this a substantially harder problem.Sun, 28 Jun 2026 18:30:00 GMTMetaVideoAV1Performancehttps://soumitrasaha.com/blogs/typescript-taking-over/https://soumitrasaha.com/blogs/typescript-taking-over/I walk through the adoption data, the practical day-to-day wins, the native compiler story, and the honest cases where plain JavaScript still makes more sense.Sat, 27 Jun 2026 18:30:00 GMTTypeScriptJavaScriptStatic TypingDeveloper Toolshttps://soumitrasaha.com/my-reads/ubuntu-tla-plus-sqlite-bug/https://soumitrasaha.com/my-reads/ubuntu-tla-plus-sqlite-bug/Canonical's dqlite team used TLA+ to model a 16-year-old data race in SQLite's WAL checkpoint code — finding a corruption path in 20 model states, proving dqlite immune because its stop-the-world checkpoint prevents the race, and confirming SQLite's one-line salt-check fix is sufficient.Sat, 27 Jun 2026 18:30:00 GMTUbuntuSQLiteFormal MethodsDatabaseshttps://soumitrasaha.com/my-reads/google-gemini-nano-frozen-mtp/https://soumitrasaha.com/my-reads/google-gemini-nano-frozen-mtp/A useful on-device AI read about accelerating frozen production models with multi-token prediction instead of training a separate drafter.Fri, 26 Jun 2026 18:30:00 GMTGoogleOn-device AIGemini NanoInferencehttps://soumitrasaha.com/blogs/is-javascript-dying/https://soumitrasaha.com/blogs/is-javascript-dying/I look at State of JS 2024, Stack Overflow data, and GitHub Octoverse to explain why JavaScript isn't dying — but it is changing in ways worth understanding.Wed, 24 Jun 2026 18:30:00 GMTJavaScriptTypeScriptWeb DevelopmentState of JSOpinionhttps://soumitrasaha.com/blogs/python-overtook-javascript-github/https://soumitrasaha.com/blogs/python-overtook-javascript-github/Python topped GitHub's language rankings in 2024, ending JavaScript's decade-long run. I dig into the data, the causes, and what it actually means for JS developers.Sun, 21 Jun 2026 18:30:00 GMTPythonJavaScriptDeveloper TrendsAIOpen Sourcehttps://soumitrasaha.com/blogs/run-llm-locally-laptop/https://soumitrasaha.com/blogs/run-llm-locally-laptop/I walk through running open-weight language models on a laptop using Ollama, explain what GGUF quantization is, and show you which model sizes actually fit in consumer RAM.Thu, 18 Jun 2026 18:30:00 GMTAILLMOllamaLocal DevelopmentPrivacyhttps://soumitrasaha.com/my-reads/microsoft-pg-durable-execution/https://soumitrasaha.com/my-reads/microsoft-pg-durable-execution/pg_durable is a PostgreSQL extension that checkpoints SQL workflow state between steps so that long-running, multi-step jobs survive crashes, restarts, and partial failures without external orchestrators or bespoke retry logic.Thu, 18 Jun 2026 18:30:00 GMTMicrosoftPostgresDistributed SystemsDatabaseshttps://soumitrasaha.com/my-reads/beyond-fork-exec-process-creation/https://soumitrasaha.com/my-reads/beyond-fork-exec-process-creation/Linux kernel developers discuss proposals to replace the fork()+exec() process creation model with a cleaner API built on the pidfd abstraction and a kernel-native posix_spawn().Mon, 15 Jun 2026 18:30:00 GMTLWNLinuxKernelPerformancehttps://soumitrasaha.com/my-reads/anthropic-claude-fable-mythos/https://soumitrasaha.com/my-reads/anthropic-claude-fable-mythos/Anthropic's Claude Fable 5 and Mythos 5 share identical weights but are separated by inference-time safety classifiers, a deployment architecture that decouples capability from access control and lets governance properties evolve without model retraining.Sun, 14 Jun 2026 18:30:00 GMTAnthropicReasoningAgentsOpen Modelshttps://soumitrasaha.com/blogs/rag-explained-simply/https://soumitrasaha.com/blogs/rag-explained-simply/I explain how Retrieval-Augmented Generation works from embeddings to the retrieval step, then show a minimal TypeScript pipeline that chunks, stores, and retrieves your own documents before calling the LLM.Sat, 13 Jun 2026 18:30:00 GMTAIRAGEmbeddingsNode.jsTypeScripthttps://soumitrasaha.com/blogs/first-ai-app-react-node-openai/https://soumitrasaha.com/blogs/first-ai-app-react-node-openai/I walk through building a streaming chat app end to end — Express proxies the OpenAI API key server-side, pipes SSE chunks back, and a React UI reads and renders each token as it arrives.Tue, 09 Jun 2026 18:30:00 GMTAINode.jsReactOpenAITypeScripthttps://soumitrasaha.com/blogs/chatgpt-prompts-for-developers/https://soumitrasaha.com/blogs/chatgpt-prompts-for-developers/I walk through 10 tested prompt templates for debugging, code review, testing, and documentation, and explain the structure behind why each one actually works.Thu, 04 Jun 2026 18:30:00 GMTAI ToolsProductivityPrompt EngineeringDeveloper Workflowhttps://soumitrasaha.com/blogs/ai-built-app-what-happens/https://soumitrasaha.com/blogs/ai-built-app-what-happens/I look at documented public experiments — gpt-engineer, smol-dev, and real developer workflows — to show where AI-generated apps shine, where they fall apart, and what the job shift means in practice.Sun, 31 May 2026 18:30:00 GMTAI ToolsSoftware DevelopmentDeveloper ProductivityEngineeringLessons Learnedhttps://soumitrasaha.com/my-reads/google-research-io-2026/https://soumitrasaha.com/my-reads/google-research-io-2026/A catch-up read on Google's research direction across Gemini for Science, computational discovery, Earth AI, and useful applied AI systems.Fri, 29 May 2026 18:30:00 GMTGoogle ResearchGeminiScienceAIhttps://soumitrasaha.com/my-reads/anthropic-claude-opus-4-8-agent-reliability/https://soumitrasaha.com/my-reads/anthropic-claude-opus-4-8-agent-reliability/Anthropic's Opus 4.8 release is worth reading for its focus on judgment, honesty, tool use, and long-running agent work.Thu, 28 May 2026 18:30:00 GMTAnthropicClaudeAgentsCodinghttps://soumitrasaha.com/blogs/cursor-vs-github-copilot/https://soumitrasaha.com/blogs/cursor-vs-github-copilot/Here's what actually separates these two AI coding tools — context depth, agent capabilities, and pricing — so you can pick based on your workflow, not marketing claims.Tue, 26 May 2026 18:30:00 GMTAI ToolsDeveloper ToolsProductivityWorkflowhttps://soumitrasaha.com/my-reads/tanstack-npm-supply-chain-postmortem/https://soumitrasaha.com/my-reads/tanstack-npm-supply-chain-postmortem/How an attacker chained pull_request_target abuse, GitHub Actions cache poisoning, and in-memory OIDC token extraction to publish 84 malicious npm packages in six minutes.Mon, 25 May 2026 18:30:00 GMTTanStackSupply ChainSecurityPostmortemhttps://soumitrasaha.com/blogs/ai-replace-software-developers/https://soumitrasaha.com/blogs/ai-replace-software-developers/I look at what the research says about AI and developer productivity, where certain roles are genuinely at risk, and what is actually worth preparing for.Thu, 21 May 2026 18:30:00 GMTAIDeveloper CareerSoftware DevelopmentAutomationhttps://soumitrasaha.com/my-reads/openai-low-latency-voice-ai/https://soumitrasaha.com/my-reads/openai-low-latency-voice-ai/How OpenAI rearchitected their WebRTC stack to run at 900 million weekly active users on Kubernetes, by splitting packet routing from protocol termination and encoding session ownership into the ICE username fragment.Tue, 19 May 2026 18:30:00 GMTOpenAIInferenceAudioNetworkinghttps://soumitrasaha.com/blogs/2026-developer-roadmap/https://soumitrasaha.com/blogs/2026-developer-roadmap/I map out four skills worth real investment in 2026 — AI tooling depth, Rust fundamentals, end-to-end type safety, and system design — with honest reasons behind each choice.Fri, 15 May 2026 18:30:00 GMTDeveloper RoadmapAI ToolsRustSystem DesignTypeScripthttps://soumitrasaha.com/my-reads/quic-death-spiral-fix/https://soumitrasaha.com/my-reads/quic-death-spiral-fix/How Cloudflare traced a CUBIC death spiral in quiche — where the congestion window locked at its two-packet minimum after loss — to an incorrect port of a 2017 Linux kernel idle-period adjustment.Thu, 14 May 2026 18:30:00 GMTCloudflareQUICLinuxNetworkinghttps://soumitrasaha.com/blogs/fullstack-development-lessons/https://soumitrasaha.com/blogs/fullstack-development-lessons/Six honest lessons from 2025 — TypeScript as the new floor, the Vite tooling win, AI's productivity ceiling, and where meta-framework complexity actually lives.Sun, 10 May 2026 18:30:00 GMTFull-Stack DevelopmentTypeScriptReactDeveloper ToolsLessons Learnedhttps://soumitrasaha.com/my-reads/baidu-ernie-5-1-efficient-multimodal-scaling/https://soumitrasaha.com/my-reads/baidu-ernie-5-1-efficient-multimodal-scaling/ERNIE 5.1 is worth tracking because Baidu is talking about model compression, elastic pre-training, agentic post-training, and cost-performance.Fri, 08 May 2026 18:30:00 GMTBaiduERNIEChinese AI LabsMultimodalhttps://soumitrasaha.com/blogs/developer-workflow-automation/https://soumitrasaha.com/blogs/developer-workflow-automation/I walk through setting up npm/bun scripts, Husky pre-commit hooks, and lint-staged so your project checks code quality on every commit without slowing down the process.Mon, 04 May 2026 18:30:00 GMTDeveloper ToolsGitAutomationNode.jsWorkflowhttps://soumitrasaha.com/my-reads/ghostty-leaving-github/https://soumitrasaha.com/my-reads/ghostty-leaving-github/Mitchell Hashimoto, GitHub user #1299 since 2008 and creator of Ghostty, announced the terminal emulator project will migrate off GitHub after months of near-daily outages blocking PR review and CI.Sat, 02 May 2026 18:30:00 GMTDeveloper ToolsDeveloper ExperienceInfrastructureReliabilityhttps://soumitrasaha.com/my-reads/bugs-rust-wont-catch/https://soumitrasaha.com/my-reads/bugs-rust-wont-catch/A 2026 audit of uutils found 44 CVEs in production Rust code missed entirely by the borrow checker, Clippy, and cargo-audit, revealing where Rust's safety boundary actually falls.Fri, 01 May 2026 18:30:00 GMTCorrodeRustSecurityMemory Safetyhttps://soumitrasaha.com/my-reads/google-gemini-embedding-2-multimodal-rag/https://soumitrasaha.com/my-reads/google-gemini-embedding-2-multimodal-rag/A Google Developers post about one embedding model for text, images, video, audio, and documents, which is very relevant for agentic RAG.Thu, 30 Apr 2026 18:30:00 GMTGoogleGeminiEmbeddingsRAGhttps://soumitrasaha.com/blogs/logging-monitoring-observability/https://soumitrasaha.com/blogs/logging-monitoring-observability/I walk through the three observability signals — structured logs, metrics, and distributed traces — and show how to set up Pino in Node.js.Wed, 29 Apr 2026 18:30:00 GMTNode.jsObservabilityLoggingMonitoringBackendhttps://soumitrasaha.com/my-reads/github-availability-update/https://soumitrasaha.com/my-reads/github-availability-update/GitHub's CTO describes two April 2026 incidents — a merge queue squash regression affecting 658 repositories and an Elasticsearch overload — as symptoms of an architecture that hasn't yet caught up with the 30x scale demanded by agentic development workflows.Wed, 29 Apr 2026 18:30:00 GMTGitHubPostmortemReliabilityIncident Reviewhttps://soumitrasaha.com/my-reads/anthropic-claude-code-april-postmortem/https://soumitrasaha.com/my-reads/anthropic-claude-code-april-postmortem/Three product-layer changes to Claude Code shipped across six weeks and produced what looked like a broad model regression — but the model API was never touched.Mon, 27 Apr 2026 18:30:00 GMTAnthropicPostmortemReliabilityCodinghttps://soumitrasaha.com/my-reads/deepseek-v4-preview-1m-context-open-model-race/https://soumitrasaha.com/my-reads/deepseek-v4-preview-1m-context-open-model-race/DeepSeek's V4 Preview is another signal that Chinese AI labs are competing hard on context length, active parameters, and cost.Fri, 24 Apr 2026 18:30:00 GMTDeepSeekChinese AI LabsOpen ModelsLong Contexthttps://soumitrasaha.com/blogs/notification-system-design/https://soumitrasaha.com/blogs/notification-system-design/I walk through the architecture behind a multi-channel notification system — fan-out, templates, delivery guarantees, and user preferences — and show where the non-obvious decisions sit.Thu, 23 Apr 2026 18:30:00 GMTSystem DesignArchitectureBackendQueuesNotificationshttps://soumitrasaha.com/my-reads/cloudflare-internal-ai-engineering-stack/https://soumitrasaha.com/my-reads/cloudflare-internal-ai-engineering-stack/This is a strong read on how a large engineering org actually uses AI coding tools, standards, review, and platform primitives together.Tue, 21 Apr 2026 18:30:00 GMTCloudflareAI EngineeringDeveloper ToolsPlatformhttps://soumitrasaha.com/blogs/url-shortener-system-design/https://soumitrasaha.com/blogs/url-shortener-system-design/I walk through designing a URL shortener from requirements to caching, covering ID generation, the 301-vs-302 redirect decision, and scaling the read path.Sat, 18 Apr 2026 18:30:00 GMTSystem DesignArchitectureCachingDatabaseURL Shortenerhttps://soumitrasaha.com/my-reads/cloudflare-browser-run-for-agents/https://soumitrasaha.com/my-reads/cloudflare-browser-run-for-agents/Browser Run is useful because real agents need browser control, live view, session replay, CDP access, and human handoff when the web gets messy.Fri, 17 Apr 2026 18:30:00 GMTCloudflareBrowser RunAgentsAutomationhttps://soumitrasaha.com/blogs/load-balancers-caches-cdns/https://soumitrasaha.com/blogs/load-balancers-caches-cdns/I break down what load balancers, application caches, and CDNs each do, how L4 vs L7 routing differs, why sticky sessions are a trap, and when to use Redis vs a CDN.Mon, 13 Apr 2026 18:30:00 GMTSystem DesignLoad BalancerCachingCDNArchitecturehttps://soumitrasaha.com/blogs/system-design-scaling-basics/https://soumitrasaha.com/blogs/system-design-scaling-basics/I walk through the real arc from a single-server app to a distributed system, showing where each stage breaks and what each layer of the architecture actually fixes.Wed, 08 Apr 2026 18:30:00 GMTSystem DesignScalabilityLoad BalancerCachingArchitecturehttps://soumitrasaha.com/blogs/react-native-performance/https://soumitrasaha.com/blogs/react-native-performance/I walk through FlatList vs ScrollView for long lists, useCallback and React.memo for list items, InteractionManager for deferring heavy work after animations, the Hermes engine, and how to profile with React Native DevTools.Thu, 02 Apr 2026 18:30:00 GMTReact NativePerformanceMobile DevelopmentTypeScriptHermeshttps://soumitrasaha.com/blogs/react-native-push-notifications/https://soumitrasaha.com/blogs/react-native-push-notifications/I trace the full path a push notification takes from server to screen — APNs, FCM, the Expo push service — and show how to handle permissions, tokens, and messages in three different app states.Sat, 28 Mar 2026 18:30:00 GMTReact NativePush NotificationsExpoMobile DevelopmentTypeScripthttps://soumitrasaha.com/blogs/react-native-deep-links/https://soumitrasaha.com/blogs/react-native-deep-links/I explain the two React Native deep linking approaches — custom URL schemes and HTTPS universal links — and show how to wire both into React Navigation.Mon, 23 Mar 2026 18:30:00 GMTReact NativeDeep LinkingMobile DevelopmentExpoTypeScripthttps://soumitrasaha.com/my-reads/cloudflare-workers-ai-kimi-k2-5/https://soumitrasaha.com/my-reads/cloudflare-workers-ai-kimi-k2-5/Cloudflare's large-model Workers AI post is useful because it connects model choice, inference cost, and agent infrastructure in one practical story.Fri, 20 Mar 2026 18:30:00 GMTCloudflareWorkers AIKimiAgentshttps://soumitrasaha.com/my-reads/python-3-15-jit-back-on-track/https://soumitrasaha.com/my-reads/python-3-15-jit-back-on-track/CPython core developer Ken Jin documents how the JIT went from producing no speedups in 3.13 to 11-12% faster on macOS AArch64 in 3.15, through trace recording, reference-count elimination, and deliberate community design.Thu, 19 Mar 2026 18:30:00 GMTPythonPerformanceCompilersRuntimehttps://soumitrasaha.com/blogs/react-native-authentication-flows/https://soumitrasaha.com/blogs/react-native-authentication-flows/I cover token storage security in React Native, the access and refresh token pattern, navigation-based auth guards, biometric auth as a device gate, and OAuth with Expo's WebBrowser.Wed, 18 Mar 2026 18:30:00 GMTReact NativeAuthenticationExpoSecurityMobilehttps://soumitrasaha.com/blogs/react-native-forms-validation/https://soumitrasaha.com/blogs/react-native-forms-validation/I cover TextInput's controlled input model, keyboard types, react-hook-form's Controller pattern, and Zod schema validation in React Native — plus the accessibility props that replace HTML label elements.Fri, 13 Mar 2026 18:30:00 GMTReact Nativereact-hook-formZodForm ValidationMobile Developmenthttps://soumitrasaha.com/blogs/react-native-state-management/https://soumitrasaha.com/blogs/react-native-state-management/I cover the four state layers in a React Native app — local state, Context, Zustand, and AsyncStorage — and show what's different from managing state in web React.Sun, 08 Mar 2026 18:30:00 GMTReact NativeState ManagementZustandAsyncStorageMobilehttps://soumitrasaha.com/my-reads/meta-jemalloc-commitment/https://soumitrasaha.com/my-reads/meta-jemalloc-commitment/Meta publicly acknowledges that short-term engineering decisions drifted jemalloc away from its core principles, details the technical debt that accumulated, and commits to a concrete roadmap covering hugepage allocation, AArch64 support, and memory efficiency improvements.Thu, 05 Mar 2026 18:30:00 GMTMetaAllocatorPerformanceInfrastructurehttps://soumitrasaha.com/blogs/react-native-navigation/https://soumitrasaha.com/blogs/react-native-navigation/I walk through React Navigation setup in React Native — Stack, Tab, and Drawer navigators, typed params, a deep links primer, and when Expo Router makes more sense.Tue, 03 Mar 2026 18:30:00 GMTReact NativeReact NavigationMobile DevelopmentTypeScriptExpohttps://soumitrasaha.com/blogs/react-native-for-react-developers/https://soumitrasaha.com/blogs/react-native-for-react-developers/I map out what transfers from React to React Native — JSX, hooks, props — and what changes — native views, StyleSheet, the flexbox defaults — so you can build your first mobile screen with confidence.Fri, 27 Feb 2026 18:30:00 GMTReact NativeReactMobile DevelopmentExpoTypeScripthttps://soumitrasaha.com/my-reads/webassembly-first-class-web-language/https://soumitrasaha.com/my-reads/webassembly-first-class-web-language/The WebAssembly Component Model proposes native browser API binding through WIT interfaces, eliminating the JavaScript glue layer responsible for a measured 45% overhead on DOM-heavy workloads.Fri, 27 Feb 2026 18:30:00 GMTMozillaWebAssemblyJavaScriptRuntimehttps://soumitrasaha.com/my-reads/ladybird-adopts-rust/https://soumitrasaha.com/my-reads/ladybird-adopts-rust/Ladybird's decision to port LibJS to Rust using AI-assisted translation produced 25,000 lines of correct, intentionally non-idiomatic Rust in two weeks with zero test regressions across 65,000 tests.Thu, 26 Feb 2026 18:30:00 GMTLadybirdRustMemory SafetyBrowserhttps://soumitrasaha.com/my-reads/cloudflare-february-2026-outage/https://soumitrasaha.com/my-reads/cloudflare-february-2026-outage/A 6-hour BYOIP outage caused by an API parameter parsed as an empty string instead of a presence flag, which led an automated cleanup task to treat every customer BGP prefix as pending deletion.Tue, 24 Feb 2026 18:30:00 GMTCloudflarePostmortemReliabilityIncident Reviewhttps://soumitrasaha.com/blogs/debugging-production-performance/https://soumitrasaha.com/blogs/debugging-production-performance/I walk through how to debug a slow API endpoint using RUM data, Node.js CPU profiles, flamegraphs, and database slow query logs — a step-by-step process for finding what's actually slow.Fri, 20 Feb 2026 18:30:00 GMTNode.jsPerformanceBackendDebuggingProfilinghttps://soumitrasaha.com/blogs/nextjs-performance-images-fonts-caching/https://soumitrasaha.com/blogs/nextjs-performance-images-fonts-caching/I show which next/image props actually change what the browser downloads, how next/font eliminates layout shift by default, and how caching strategy directly controls your page's TTFB.Sun, 15 Feb 2026 18:30:00 GMTNext.jsPerformanceReactWeb PerformanceFrontend Developmenthttps://soumitrasaha.com/my-reads/minimax-m2-5-cheap-long-running-agent-work/https://soumitrasaha.com/my-reads/minimax-m2-5-cheap-long-running-agent-work/MiniMax M2.5 is interesting because it pushes the cost side of agentic coding and productivity work very aggressively.Fri, 13 Feb 2026 18:30:00 GMTMiniMaxChinese AI LabsAgentsCosthttps://soumitrasaha.com/blogs/react-code-splitting-lazy-loading/https://soumitrasaha.com/blogs/react-code-splitting-lazy-loading/I explain how dynamic import() tells your bundler to split code, show how React.lazy and Suspense work together, and cover the patterns that actually improve initial load time.Tue, 10 Feb 2026 18:30:00 GMTReactPerformanceJavaScriptFrontend DevelopmentVitehttps://soumitrasaha.com/my-reads/anthropic-c-compiler-agent-teams/https://soumitrasaha.com/my-reads/anthropic-c-compiler-agent-teams/Anthropic researcher Nicholas Carlini tasks 16 parallel Claude agents with writing a Rust-based C compiler from scratch, and documents what it actually takes to run autonomous agents without human oversight.Mon, 09 Feb 2026 18:30:00 GMTAnthropicAgentsCodingCompilershttps://soumitrasaha.com/blogs/react-performance-slow-components/https://soumitrasaha.com/blogs/react-performance-slow-components/I walk through the React DevTools Profiler to find slow components, explain React.memo, useCallback, and useMemo, and show when to skip memoisation entirely.Thu, 05 Feb 2026 18:30:00 GMTReactPerformanceJavaScriptFrontend DevelopmentHookshttps://soumitrasaha.com/my-reads/meta-rust-whatsapp-security/https://soumitrasaha.com/my-reads/meta-rust-whatsapp-security/WhatsApp rewrote its media handling library from C++ to Rust and shipped it to billions of devices, treating memory safety as a first-class security control rather than a nice-to-have.Sun, 01 Feb 2026 18:30:00 GMTMetaRustSecurityMemory Safetyhttps://soumitrasaha.com/blogs/manage-secrets-environment-variables/https://soumitrasaha.com/blogs/manage-secrets-environment-variables/I walk through how to keep secrets out of git, wire them securely into CI/CD pipelines, and know when a dedicated secrets manager is worth the complexity.Fri, 30 Jan 2026 18:30:00 GMTSecurityDevOpsNode.jsCI/CDEnvironment Variableshttps://soumitrasaha.com/my-reads/openai-postgres-800-million-users/https://soumitrasaha.com/my-reads/openai-postgres-800-million-users/How OpenAI serves millions of Postgres queries per second for ChatGPT on one primary and nearly 50 read replicas, and the discipline that keeps it standing.Thu, 29 Jan 2026 18:30:00 GMTOpenAIPostgresScalingDatabaseshttps://soumitrasaha.com/blogs/rate-limiting-cors-secure-headers/https://soumitrasaha.com/blogs/rate-limiting-cors-secure-headers/I walk through rate limiting, CORS, and Helmet security headers for Express — covering fixed windows, preflight handling, and the 13 headers Helmet sets by default.Sun, 25 Jan 2026 18:30:00 GMTExpressNode.jsSecurityAPIBackendhttps://soumitrasaha.com/blogs/prevent-xss-csrf-sql-injection/https://soumitrasaha.com/blogs/prevent-xss-csrf-sql-injection/I walk through the concrete defenses for XSS, CSRF, and SQL injection — output encoding, CSP, SameSite cookies, CSRF tokens, and parameterized queries — with working TypeScript code examples.Tue, 20 Jan 2026 18:30:00 GMTWeb SecurityXSSCSRFSQL InjectionNode.jshttps://soumitrasaha.com/my-reads/openai-codex-agent-loop-deep-dive/https://soumitrasaha.com/my-reads/openai-codex-agent-loop-deep-dive/This OpenAI post is a useful technical read because it explains the agent loop, context construction, model calls, and tool orchestration behind Codex.Fri, 16 Jan 2026 18:30:00 GMTOpenAICodexAgentsDeveloper Toolshttps://soumitrasaha.com/blogs/web-security-basics/https://soumitrasaha.com/blogs/web-security-basics/I walk through the security mindset that underpins every defence — the OWASP Top 10 reframed for developers, threat model thinking, defence in depth, and secure defaults.Thu, 15 Jan 2026 18:30:00 GMTWeb SecurityOWASPFull-StackSecurity FundamentalsDefence in Depthhttps://soumitrasaha.com/my-reads/databases-in-2025-year-in-review/https://soumitrasaha.com/my-reads/databases-in-2025-year-in-review/Andy Pavlo's annual retrospective on the database industry: PostgreSQL acquisitions totalling over a billion dollars, MCP replacing vector indexes as the year's checkbox feature, and a file format war that finally put pressure on Parquet.Sun, 11 Jan 2026 18:30:00 GMTDatabasesPostgresSQLiteSystem Designhttps://soumitrasaha.com/blogs/cypress-e2e-testing/https://soumitrasaha.com/blogs/cypress-e2e-testing/I cover Cypress E2E setup, the core commands, data-cy selectors, cy.intercept for network stubbing, CI integration, and when E2E tests are worth writing.Fri, 09 Jan 2026 18:30:00 GMTTestingCypressJavaScriptEnd-to-End TestingCI/CDhttps://soumitrasaha.com/blogs/supertest-api-testing/https://soumitrasaha.com/blogs/supertest-api-testing/I explain how Supertest sends HTTP requests to an Express app in tests, covering endpoint organization, auth header mocking, and database test strategies.Fri, 26 Dec 2025 18:30:00 GMTNode.jsExpressSupertestAPI TestingTypeScripthttps://soumitrasaha.com/blogs/better-tests-with-vitest/https://soumitrasaha.com/blogs/better-tests-with-vitest/I walk through Vitest setup, the AAA pattern, vi.fn() mocks, module mocking, snapshot testing, and coverage — with the common mistakes that make tests brittle.Sun, 21 Dec 2025 18:30:00 GMTTestingVitestJavaScriptTypeScriptUnit Testinghttps://soumitrasaha.com/my-reads/segment-goodbye-microservices/https://soumitrasaha.com/my-reads/segment-goodbye-microservices/Twilio Segment collapsed 140+ destination microservices into a single monolith after the architecture that once solved head-of-line blocking became an operational weight three engineers couldn't keep running.Thu, 18 Dec 2025 18:30:00 GMTTwilio SegmentMicroservicesMonolithsSystem DesignInfrastructurehttps://soumitrasaha.com/blogs/testing-javascript-apps/https://soumitrasaha.com/blogs/testing-javascript-apps/I walk through the testing pyramid, explain what unit, integration, and E2E tests each verify, and share the tradeoff that decides which layer a test belongs in.Tue, 16 Dec 2025 18:30:00 GMTTestingJavaScriptUnit TestsIntegration TestsTest Doubleshttps://soumitrasaha.com/my-reads/netflix-av1-30-percent-streaming/https://soumitrasaha.com/my-reads/netflix-av1-30-percent-streaming/Netflix reached 30% of all streaming on AV1 through a decade of codec co-development, hardware certification, and ecosystem coordination — and the real lesson is that superior compression alone doesn't ship; device ecosystems do.Mon, 15 Dec 2025 18:30:00 GMTNetflixVideoAV1Codecshttps://soumitrasaha.com/my-reads/rust-in-linux-kernel-mainstream/https://soumitrasaha.com/my-reads/rust-in-linux-kernel-mainstream/At the 2025 Maintainers Summit, Linux kernel developers reached consensus that Rust support is now permanent and the experimental label will be removed.Sun, 14 Dec 2025 18:30:00 GMTLWNRustLinuxKernelhttps://soumitrasaha.com/blogs/type-safe-api-design/https://soumitrasaha.com/blogs/type-safe-api-design/I walk through how to share Zod schemas between frontend and backend, why runtime validation at API boundaries matters, and when OpenAPI codegen is the better fit.Wed, 10 Dec 2025 18:30:00 GMTTypeScriptAPI DesignZodRuntime ValidationJavaScripthttps://soumitrasaha.com/my-reads/cloudflare-december-2025-outage/https://soumitrasaha.com/my-reads/cloudflare-december-2025-outage/A 25-minute outage affecting 28% of Cloudflare's HTTP traffic traced to a nil dereference in a Lua killswitch, exposed when two individually tested changes intersected at a code path no one had ever hit before.Tue, 09 Dec 2025 18:30:00 GMTCloudflarePostmortemReliabilityIncident Reviewhttps://soumitrasaha.com/blogs/trpc-end-to-end-type-safety/https://soumitrasaha.com/blogs/trpc-end-to-end-type-safety/I explain how tRPC enforces API type safety without code generation, show how routers and procedures work, and cover when to use it over REST or GraphQL.Fri, 05 Dec 2025 18:30:00 GMTTypeScripttRPCAPIType SafetyNode.jshttps://soumitrasaha.com/my-reads/google-gemini-3-api-updates-for-agents/https://soumitrasaha.com/my-reads/google-gemini-3-api-updates-for-agents/A useful Google Developers read on thinking control, media resolution, thought signatures, and structured output with grounding.Fri, 05 Dec 2025 18:30:00 GMTGoogleGeminiAPIAgentshttps://soumitrasaha.com/blogs/graphql-api-nodejs/https://soumitrasaha.com/blogs/graphql-api-nodejs/Schema-first design with Apollo Server — type definitions, resolver arguments, the context object, mutations, subscriptions, and DataLoader to prevent the N+1 problem.Sun, 30 Nov 2025 18:30:00 GMTGraphQLNode.jsAPI DesignBackendTypeScripthttps://soumitrasaha.com/my-reads/openai-new-tools-for-building-agents/https://soumitrasaha.com/my-reads/openai-new-tools-for-building-agents/This OpenAI article is useful as a baseline for Responses API, built-in tools, tracing, evaluations, and how agent platforms are getting structured.Fri, 28 Nov 2025 18:30:00 GMTOpenAIAgentsResponses APIEvaluationhttps://soumitrasaha.com/blogs/graphql-vs-rest/https://soumitrasaha.com/blogs/graphql-vs-rest/A practical comparison of GraphQL and REST — covering over-fetching, the schema type system, the N+1 problem, HTTP caching, and a situation-based recommendation for each.Tue, 25 Nov 2025 18:30:00 GMTGraphQLREST APIAPI DesignBackendWeb Developmenthttps://soumitrasaha.com/my-reads/cloudflare-november-2025-outage/https://soumitrasaha.com/my-reads/cloudflare-november-2025-outage/Cloudflare's postmortem of its worst outage since 2019: a database permissions change doubled a bot-management feature file and panicked the core proxy.Tue, 25 Nov 2025 18:30:00 GMTCloudflarePostmortemReliabilityDatabaseshttps://soumitrasaha.com/my-reads/anthropic-advanced-tool-use/https://soumitrasaha.com/my-reads/anthropic-advanced-tool-use/Anthropic's advanced tool use features stop tool definitions and raw results from flooding an agent's context: on-demand search, code orchestration, examples.Mon, 24 Nov 2025 18:30:00 GMTAnthropicAgentsTool UseDeveloper Toolshttps://soumitrasaha.com/my-reads/openai-gpt-oss-open-weight-models/https://soumitrasaha.com/my-reads/openai-gpt-oss-open-weight-models/OpenAI's gpt-oss release is worth tracking because it puts strong reasoning models into open-weight deployment paths with an Apache 2.0 license.Fri, 21 Nov 2025 18:30:00 GMTOpenAIOpen WeightsReasoningLocal AIhttps://soumitrasaha.com/my-reads/google-gemini-3-frontier-model/https://soumitrasaha.com/my-reads/google-gemini-3-frontier-model/Google's Gemini 3 launch shows where frontier modeling went next: reasoning depth, agentic coding, multimodal scores, and a same-day rollout across Search.Thu, 20 Nov 2025 18:30:00 GMTGoogleGeminiFrontier ModelsMultimodalhttps://soumitrasaha.com/blogs/bullmq-redis-reliable-jobs/https://soumitrasaha.com/blogs/bullmq-redis-reliable-jobs/I walk through BullMQ's Queue, Worker, and QueueEvents APIs, show how retries and backoff work, and cover the dead-letter queue pattern for failed jobs.Wed, 19 Nov 2025 18:30:00 GMTNode.jsRedisBullMQBackground JobsTypeScripthttps://soumitrasaha.com/blogs/background-jobs-message-queues/https://soumitrasaha.com/blogs/background-jobs-message-queues/I explain why background jobs exist, how the producer/consumer pattern works, and what queue semantics and delivery guarantees mean for a Node.js backend.Fri, 14 Nov 2025 18:30:00 GMTNode.jsBackendArchitectureAsyncQueueshttps://soumitrasaha.com/my-reads/artificial-analysis-model-price-provider-comparison/https://soumitrasaha.com/my-reads/artificial-analysis-model-price-provider-comparison/Artificial Analysis is useful because it compares models across quality, speed, latency, price, context, and provider behavior instead of only one leaderboard score.Fri, 14 Nov 2025 18:30:00 GMTModel ComparisonsArtificial AnalysisAI ModelsBenchmarkshttps://soumitrasaha.com/blogs/api-caching-strategies/https://soumitrasaha.com/blogs/api-caching-strategies/I walk through four application cache patterns, HTTP Cache-Control and ETags, and CDN caching — explaining when each approach genuinely helps and when it makes things worse.Sun, 09 Nov 2025 18:30:00 GMTCachingAPI PerformanceBackendHTTPNode.jshttps://soumitrasaha.com/my-reads/meta-video-invisible-watermarking/https://soumitrasaha.com/my-reads/meta-video-invisible-watermarking/How Meta built a scalable invisible watermarking system for video content provenance — and why CPUs ended up outperforming GPUs once the actual bottleneck was found.Sun, 09 Nov 2025 18:30:00 GMTMetaVideoSecurityAI Infrastructurehttps://soumitrasaha.com/my-reads/arena-text-leaderboard-human-preference-signal/https://soumitrasaha.com/my-reads/arena-text-leaderboard-human-preference-signal/Arena is worth checking because blind human votes catch qualities that static benchmarks often miss, especially open-ended writing and reasoning.Fri, 07 Nov 2025 18:30:00 GMTModel ComparisonsArenaAI ModelsEvaluationhttps://soumitrasaha.com/blogs/redis-fundamentals/https://soumitrasaha.com/blogs/redis-fundamentals/I walk through Redis data structures, TTL, the four main use cases, and RDB vs AOF persistence to give you the mental model before caching strategies.Tue, 04 Nov 2025 18:30:00 GMTRedisBackendDatabasesNode.jsCachinghttps://soumitrasaha.com/my-reads/swebench-aider-coding-model-leaderboards/https://soumitrasaha.com/my-reads/swebench-aider-coding-model-leaderboards/SWE-bench and Aider are both useful for coding model comparison because they test patching, editing, and multi-language problem solving in different ways.Fri, 31 Oct 2025 18:30:00 GMTModel ComparisonsCodingSWE-benchAiderhttps://soumitrasaha.com/blogs/ssl-https-domains-deployment/https://soumitrasaha.com/blogs/ssl-https-domains-deployment/I explain the TLS handshake and certificate chain, then show the Certbot workflow and nginx config to get HTTPS running on a real domain.Wed, 29 Oct 2025 18:30:00 GMTHTTPSTLSNginxDevOpsNetworkinghttps://soumitrasaha.com/my-reads/meta-disaggregated-scheduled-fabric/https://soumitrasaha.com/my-reads/meta-disaggregated-scheduled-fabric/Meta's Disaggregated Scheduled Fabric (DSF) splits the traditional switch chassis into two hardware tiers coordinated in software, eliminating elephant flow and entropy problems by scheduling traffic as cells rather than routing it as flows.Sun, 26 Oct 2025 18:30:00 GMTMetaNetworkingData CentersAI Infrastructurehttps://soumitrasaha.com/blogs/nginx-reverse-proxy/https://soumitrasaha.com/blogs/nginx-reverse-proxy/I explain what a reverse proxy is, walk through the core nginx blocks, and show how to add load balancing, gzip, and rate limiting to a production config.Thu, 23 Oct 2025 18:30:00 GMTNginxDevOpsBackendNode.jsNetworkinghttps://soumitrasaha.com/my-reads/meta-llm-inference-parallelism/https://soumitrasaha.com/my-reads/meta-llm-inference-parallelism/How Meta runs Llama 3 and Llama 4 in production by attacking three separate bottlenecks — model size, sequence length, and expert count — with three independent parallelism strategies, and why all three hit the same wall: inter-GPU communication.Thu, 23 Oct 2025 18:30:00 GMTMetaInferenceAI InfrastructureScalinghttps://soumitrasaha.com/my-reads/meta-10x-backbone-ai/https://soumitrasaha.com/my-reads/meta-10x-backbone-ai/Meta scaled its Express Backbone network 10x using pre-built metro ring infrastructure, a combination of IP platform scale-up and scale-out techniques, and ZR optical integration that cuts power per terabit by 80–90%.Tue, 21 Oct 2025 18:30:00 GMTMetaNetworkingData CentersAI Infrastructurehttps://soumitrasaha.com/my-reads/meta-sapling-monorepo-branching/https://soumitrasaha.com/my-reads/meta-sapling-monorepo-branching/Meta introduces directory branching in Sapling — a technique that gives monorepo teams proper branch semantics scoped to a directory, while keeping the repo's commit graph strictly linear.Mon, 20 Oct 2025 18:30:00 GMTMetaDeveloper ToolsMonorepoDeveloper Experiencehttps://soumitrasaha.com/blogs/deploy-nodejs-api-aws/https://soumitrasaha.com/blogs/deploy-nodejs-api-aws/I walk through launching an EC2 instance, setting up PM2 as a process manager, and configuring nginx as a reverse proxy for a Node.js API.Sat, 18 Oct 2025 18:30:00 GMTNode.jsAWSEC2DevOpsDeploymenthttps://soumitrasaha.com/blogs/aws-services-developers-need/https://soumitrasaha.com/blogs/aws-services-developers-need/I walk through the seven AWS services a full-stack developer reaches for on almost every project — EC2, Lambda, S3, RDS, CloudFront, IAM, and VPC — and explain when to use each one.Mon, 13 Oct 2025 18:30:00 GMTAWSCloudBackendDevOpsInfrastructurehttps://soumitrasaha.com/my-reads/meta-openzl-format-aware-compression/https://soumitrasaha.com/my-reads/meta-openzl-format-aware-compression/Meta's OpenZL achieves format-specific compression ratios and speeds without the maintenance cost of bespoke compressors, by making data structure an explicit input and decoding everything with one universal binary.Wed, 08 Oct 2025 18:30:00 GMTMetaStoragePerformanceData Infrastructurehttps://soumitrasaha.com/blogs/github-actions-nodejs-pipeline/https://soumitrasaha.com/blogs/github-actions-nodejs-pipeline/I walk through building a GitHub Actions pipeline for a Node.js app — triggers, install steps, npm ci, caching node_modules, and environment secrets.Tue, 07 Oct 2025 18:30:00 GMTGitHub ActionsCI/CDNode.jsDevOpshttps://soumitrasaha.com/my-reads/meta-infrastructure-evolution-ai/https://soumitrasaha.com/my-reads/meta-infrastructure-evolution-ai/A 21-year arc from LAMP-stack Facebook to gigawatt AI clusters, tracing the specific moments when AI workloads broke every assumption that had scaled web infrastructure for two decades.Sun, 05 Oct 2025 18:30:00 GMTMetaInfrastructureAI InfrastructureSystem Designhttps://soumitrasaha.com/blogs/cicd-git-push-to-production/https://soumitrasaha.com/blogs/cicd-git-push-to-production/I walk through how a CI/CD pipeline works — from git push through build, test, and deploy stages — and explain the real distinction between continuous integration, delivery, and deployment.Thu, 02 Oct 2025 18:30:00 GMTCI/CDDevOpsGitDeploymentAutomationhttps://soumitrasaha.com/my-reads/meta-ai-networking-recap-2025/https://soumitrasaha.com/my-reads/meta-ai-networking-recap-2025/A recap of @Scale: Networking 2025, where engineers from Meta, Google, Microsoft, and others reported how AI workloads have fractured into a portfolio of network requirements that no single fabric design can satisfy.Wed, 01 Oct 2025 18:30:00 GMTMetaNetworkingAI InfrastructureData Centershttps://soumitrasaha.com/my-reads/meta-av1-mobile-streaming/https://soumitrasaha.com/my-reads/meta-av1-mobile-streaming/A joint white paper from Meta, Google, and Vodafone makes the case to SoC manufacturers that AV1 hardware adoption is the missing link between a technically mature codec and a network that actually benefits from it.Tue, 30 Sep 2025 18:30:00 GMTMetaVideoAV1Mobilehttps://soumitrasaha.com/blogs/kubernetes-configmaps-secrets/https://soumitrasaha.com/blogs/kubernetes-configmaps-secrets/I walk through ConfigMaps and Secrets in Kubernetes — how they differ, why base64 isn't encryption, and the two ways to expose them to containers.Fri, 26 Sep 2025 18:30:00 GMTKubernetesDevOpsConfigurationSecuritykubectlhttps://soumitrasaha.com/blogs/kubernetes-pods-deployments-services/https://soumitrasaha.com/blogs/kubernetes-pods-deployments-services/I explain the three Kubernetes building blocks every developer needs — Pods, Deployments, and Services — and show how they fit together as a practical mental model.Sun, 21 Sep 2025 18:30:00 GMTKubernetesDockerDevOpsContainer Orchestrationkubectlhttps://soumitrasaha.com/blogs/containerize-full-stack-application/https://soumitrasaha.com/blogs/containerize-full-stack-application/I show how one Docker Compose file connects a frontend, API, and database — covering service names as hostnames, per-service env vars, and dev versus prod override files.Mon, 15 Sep 2025 18:30:00 GMTDockerDocker ComposeFull-StackDevOpsContainershttps://soumitrasaha.com/blogs/docker-compose-local-development/https://soumitrasaha.com/blogs/docker-compose-local-development/I walk through building a local app-and-database stack with Docker Compose, covering the compose.yaml structure, healthchecks, volume mounts for hot-reload, and named volumes for persistence.Wed, 10 Sep 2025 18:30:00 GMTDockerDocker ComposeLocal DevelopmentDevOpshttps://soumitrasaha.com/blogs/clean-dockerfile-nodejs/https://soumitrasaha.com/blogs/clean-dockerfile-nodejs/I show how Docker layer caching, the COPY package.json trick, multi-stage builds, and a non-root user turn a messy Dockerfile into a lean, production-safe image.Fri, 05 Sep 2025 18:30:00 GMTDockerNode.jsDevOpsBackendContainerizationhttps://soumitrasaha.com/blogs/docker-image-to-container/https://soumitrasaha.com/blogs/docker-image-to-container/I break down the image vs container mental model, walk through docker pull and the docker run flags you'll use daily, cover volumes and port mapping, and show you how to manage containers with ps, logs, stop, and rm.Sun, 31 Aug 2025 18:30:00 GMTDockerContainersDevOpsCLIBackendhttps://soumitrasaha.com/blogs/go-error-handling-project-structure/https://soumitrasaha.com/blogs/go-error-handling-project-structure/I walk through Go's error-as-value pattern — errors.New, fmt.Errorf with %w, errors.Is, custom error types — and show how cmd/, internal/, and pkg/ structure a real Go project.Sun, 24 Aug 2025 18:30:00 GMTGoError HandlingJavaScriptBackendProject Structurehttps://soumitrasaha.com/blogs/go-rest-api-gin/https://soumitrasaha.com/blogs/go-rest-api-gin/Walk through building a working REST API in Go with Gin — routes, groups, middleware, JSON binding, and consistent error responses.Tue, 19 Aug 2025 18:30:00 GMTGoREST APIGinBackendWeb Developmenthttps://soumitrasaha.com/my-reads/meta-federation-platform-compliance/https://soumitrasaha.com/my-reads/meta-federation-platform-compliance/Meta's Federation Platform breaks privacy and security compliance obligations into typed workstreams and distributes over 100,000 tasks per year through monthly Privacy Waves batches, saving hundreds of thousands of engineering hours while keeping developer sentiment measurably high.Sun, 17 Aug 2025 18:30:00 GMTMetaPrivacyDistributed SystemsSecurityhttps://soumitrasaha.com/blogs/goroutines-and-channels/https://soumitrasaha.com/blogs/goroutines-and-channels/I explain Go's goroutine model, show how channels handle synchronization, and cover buffered channels, the select statement, and WaitGroup with code and JS comparisons.Thu, 14 Aug 2025 18:30:00 GMTGoConcurrencyGoroutinesChannelsJavaScripthttps://soumitrasaha.com/my-reads/node-22-18-typescript-by-default/https://soumitrasaha.com/my-reads/node-22-18-typescript-by-default/Node.js 22.18.0 makes type stripping the default for TypeScript files, removing the experimental flag and requiring no extra tooling to run .ts files directly.Mon, 11 Aug 2025 18:30:00 GMTNode.jsTypeScriptJavaScriptRuntimehttps://soumitrasaha.com/blogs/go-for-javascript-developers/https://soumitrasaha.com/blogs/go-for-javascript-developers/I walk through Go's type system, variables, packages, the three-command toolchain, and multiple return values — with honest comparisons for developers who know Node.js.Sun, 10 Aug 2025 18:30:00 GMTGoJavaScriptStatic TypingConcurrencyBackendhttps://soumitrasaha.com/blogs/rust-modules-packages-crates/https://soumitrasaha.com/blogs/rust-modules-packages-crates/I break down Rust's module system — the package vs crate distinction, mod, pub, use, path visibility, and how to publish your first crate on crates.io.Sun, 03 Aug 2025 18:30:00 GMTRustModule SystemCargoSystems Programminghttps://soumitrasaha.com/blogs/rust-first-cli-application/https://soumitrasaha.com/blogs/rust-first-cli-application/I walk through std::env::args, clap's derive API, splitting logic across main.rs and lib.rs, reading files, and using the ? operator in main to build a working word-counter CLI.Tue, 29 Jul 2025 18:30:00 GMTRustCLICargoSystems Programminghttps://soumitrasaha.com/my-reads/meta-ai-hardware-reliability/https://soumitrasaha.com/my-reads/meta-ai-hardware-reliability/When hardware failures caused over 66% of Llama 3 training interruptions at Meta, the response was a detection-and-mitigation stack spanning silicon design, cluster-level diagnostics, and changes to training algorithms.Sun, 27 Jul 2025 18:30:00 GMTMetaHardwareReliabilityAI Infrastructurehttps://soumitrasaha.com/blogs/rust-collections-vectors-strings-hashmaps/https://soumitrasaha.com/blogs/rust-collections-vectors-strings-hashmaps/I walk through Vec<T>, the String vs &str distinction, and HashMap<K,V> with the entry API — covering the ownership pitfalls TypeScript developers hit first.Thu, 24 Jul 2025 18:30:00 GMTRustCollectionsTypeScriptSystems Programminghttps://soumitrasaha.com/blogs/rust-error-handling-result-option/https://soumitrasaha.com/blogs/rust-error-handling-result-option/I walk through Rust's Result<T,E> and Option<T> types, the ? operator, pattern matching on error variants, and custom error types with the thiserror crate.Sat, 19 Jul 2025 18:30:00 GMTRustError HandlingSystems ProgrammingTypeScripthttps://soumitrasaha.com/blogs/rust-generics-and-traits/https://soumitrasaha.com/blogs/rust-generics-and-traits/I walk through Rust generics and traits — generic functions, structs, enums, trait definitions, bounds, where clauses, and the standard library traits you will use in every Rust program.Mon, 14 Jul 2025 18:30:00 GMTRustGenericsTraitsTypeScriptSystems Programminghttps://soumitrasaha.com/blogs/cargo-and-rust-project-structure/https://soumitrasaha.com/blogs/cargo-and-rust-project-structure/I walk through Cargo.toml's key sections, how Rust's module system works with mod, use, and pub, how workspaces compare to monorepos, and the cargo commands you'll run every day — from a TypeScript developer's perspective.Wed, 09 Jul 2025 18:30:00 GMTRustCargoProject StructureTypeScriptSystems Programminghttps://soumitrasaha.com/my-reads/meta-rust-mobile-transition/https://soumitrasaha.com/my-reads/meta-rust-mobile-transition/Meta's engineers are rewriting a decades-old C messaging library shared across Messenger, Facebook, Instagram, and AR/VR platforms in Rust, without prior Rust expertise on the team.Mon, 07 Jul 2025 18:30:00 GMTMetaRustMobileMemory Safetyhttps://soumitrasaha.com/blogs/rust-pattern-matching/https://soumitrasaha.com/blogs/rust-pattern-matching/I break down Rust's match expression — exhaustiveness, destructuring, guards, and if let — and compare each to the TypeScript patterns they replace.Fri, 04 Jul 2025 18:30:00 GMTRustTypeScriptPattern MatchingSystems ProgrammingLearninghttps://soumitrasaha.com/blogs/rust-control-flow-structs-enums/https://soumitrasaha.com/blogs/rust-control-flow-structs-enums/I walk through Rust's if/else expressions, three loop types, classic and tuple structs, data-carrying enums, and impl blocks — with comparisons to TypeScript interfaces and discriminated unions.Sun, 29 Jun 2025 18:30:00 GMTRustTypeScriptSystems ProgrammingLearninghttps://soumitrasaha.com/my-reads/google-gemini-cli-open-agent/https://soumitrasaha.com/my-reads/google-gemini-cli-open-agent/Google's open-source terminal agent brings Gemini 2.5 Pro into a shell process with MCP extensibility, a 1M token context window, and 1,000 free daily requests.Sun, 29 Jun 2025 18:30:00 GMTGoogleAgentsDeveloper ToolsCodinghttps://soumitrasaha.com/blogs/rust-variables-data-types-functions/https://soumitrasaha.com/blogs/rust-variables-data-types-functions/I walk through Rust's immutable-by-default variables, shadowing, scalar and compound types, and the expression rule that defines how functions return values.Tue, 24 Jun 2025 18:30:00 GMTRustTypeScriptType SystemSystems Programminghttps://soumitrasaha.com/blogs/rust-ownership-and-borrowing/https://soumitrasaha.com/blogs/rust-ownership-and-borrowing/I break down Rust's ownership model — how single ownership, move semantics, and borrows (&T and &mut T) prevent memory bugs that other languages catch too late.Thu, 19 Jun 2025 18:30:00 GMTRustMemory SafetySystems ProgrammingTypeScripthttps://soumitrasaha.com/blogs/rust-setup-cargo-vscode/https://soumitrasaha.com/blogs/rust-setup-cargo-vscode/I walk through installing Rust with rustup, what Cargo does, the key fields in Cargo.toml, and wiring up rust-analyzer in VS Code so you can write Rust without fighting the toolchain.Sun, 15 Jun 2025 18:30:00 GMTRustCargoVS CodeDeveloper ToolsGetting Startedhttps://soumitrasaha.com/blogs/learning-rust-as-a-typescript-developer/https://soumitrasaha.com/blogs/learning-rust-as-a-typescript-developer/Why I started learning Rust after years with TypeScript, what the ownership model actually means, and what to expect from this 12-part series.Wed, 11 Jun 2025 18:30:00 GMTRustTypeScriptSystems ProgrammingLearninghttps://soumitrasaha.com/blogs/database-migrations-without-breaking-production/https://soumitrasaha.com/blogs/database-migrations-without-breaking-production/The expand/contract pattern lets you rename or drop columns safely — I walk through the three phases with Prisma Migrate and raw SQL examples.Wed, 04 Jun 2025 18:30:00 GMTDatabase MigrationsPostgreSQLBackendZero Downtime DeploymentPrismahttps://soumitrasaha.com/blogs/prisma-type-safe-database-layer/https://soumitrasaha.com/blogs/prisma-type-safe-database-layer/I walk through Prisma's schema file, generated client, CRUD operations, and relations, with a focus on how it integrates with TypeScript to give you compile-time safety on every database query.Fri, 30 May 2025 18:30:00 GMTPrismaTypeScriptDatabasesPostgreSQLBackendhttps://soumitrasaha.com/my-reads/meta-instagram-thousand-models/https://soumitrasaha.com/my-reads/meta-instagram-thousand-models/How Instagram built a model registry, launch tooling, and a stability metric to operationalize over 1000 ML models without losing track of what each one does or when one breaks.Sun, 25 May 2025 18:30:00 GMTMetaRecommendationsScalingMachine Learninghttps://soumitrasaha.com/blogs/transactions-acid-explained/https://soumitrasaha.com/blogs/transactions-acid-explained/I walk through what a PostgreSQL transaction actually guarantees, break down each ACID property with a plain analogy, and explain isolation levels and the pitfalls that trip up most teams.Sat, 24 May 2025 18:30:00 GMTPostgreSQLDatabaseSQLBackendTransactionshttps://soumitrasaha.com/my-reads/meta-hhvm-genai-optimizations/https://soumitrasaha.com/my-reads/meta-hhvm-genai-optimizations/How Meta's Web Foundation team created a dedicated HHVM web tenant for GenAI traffic — with a higher request timeout, enlarged thread pool, JIT pre-warming, and shadow traffic — to achieve a 30% latency improvement over the shared tier.Thu, 22 May 2025 18:30:00 GMTMetaRuntimePerformanceAI Infrastructurehttps://soumitrasaha.com/blogs/database-indexing-slow-queries/https://soumitrasaha.com/blogs/database-indexing-slow-queries/I walk through how PostgreSQL B-tree indexes work, how to read EXPLAIN ANALYZE to confirm what the planner actually does, and the indexing mistakes that cancel out the gains.Mon, 19 May 2025 18:30:00 GMTPostgreSQLDatabasePerformanceSQLBackendhttps://soumitrasaha.com/my-reads/meta-pyrefly-python-type-checker/https://soumitrasaha.com/my-reads/meta-pyrefly-python-type-checker/Meta open-sources Pyrefly, a Python type checker built in Rust that grew out of Instagram's internal tooling and is designed around an incremental model fast enough for real-time IDE feedback at monorepo scale.Mon, 19 May 2025 18:30:00 GMTMetaPythonRustDeveloper Toolshttps://soumitrasaha.com/blogs/sql-joins-explained/https://soumitrasaha.com/blogs/sql-joins-explained/I explain each PostgreSQL join type with working examples, show exactly what rows each one returns, and cover the NULL pitfalls most developers hit first.Wed, 14 May 2025 18:30:00 GMTPostgreSQLSQLDatabaseBackendhttps://soumitrasaha.com/blogs/postgresql-for-developers/https://soumitrasaha.com/blogs/postgresql-for-developers/I walk through PostgreSQL tables, data types, primary and foreign keys, one-to-many and many-to-many relationships, and basic CRUD for JavaScript developers building their first schema.Fri, 09 May 2025 18:30:00 GMTPostgreSQLDatabasesSQLBackendJavaScripthttps://soumitrasaha.com/my-reads/meta-python-typing-free-threading/https://soumitrasaha.com/my-reads/meta-python-typing-free-threading/Meta and Quansight simultaneously improved type annotation coverage in Python's scientific stack and unlocked free-threaded Python 3.13 in the libraries that matter most — two bets on different decades of Python performance.Thu, 08 May 2025 18:30:00 GMTMetaPythonStatic TypingThreadshttps://soumitrasaha.com/blogs/jwt-authentication-nodejs/https://soumitrasaha.com/blogs/jwt-authentication-nodejs/I walk through JWT structure, signing tokens with jsonwebtoken, writing a verify middleware for Express, the refresh token pattern, and where to store tokens safely.Fri, 02 May 2025 18:30:00 GMTNode.jsAuthenticationJWTExpressSecurityhttps://soumitrasaha.com/my-reads/anthropic-claude-code-best-practices/https://soumitrasaha.com/my-reads/anthropic-claude-code-best-practices/Anthropic's playbook for agentic coding with Claude Code: tune CLAUDE.md, give the agent verifiable targets, run parallel sessions that check each other.Mon, 28 Apr 2025 18:30:00 GMTAnthropicClaude CodeAgentsCodinghttps://soumitrasaha.com/blogs/authentication-vs-authorization/https://soumitrasaha.com/blogs/authentication-vs-authorization/I break down authentication and authorization — who you are vs what you can do — covering sessions, JWTs, RBAC, and why OAuth 2.0 naming confuses everyone.Sun, 27 Apr 2025 18:30:00 GMTAuthenticationAuthorizationWeb SecurityJWTHTTPhttps://soumitrasaha.com/blogs/nodejs-centralized-error-handling/https://soumitrasaha.com/blogs/nodejs-centralized-error-handling/I explain how Express routes errors to a centralized handler, the difference between operational and programmer errors, and what changed in Express 5.Mon, 21 Apr 2025 18:30:00 GMTNode.jsExpressError HandlingBackendJavaScripthttps://soumitrasaha.com/blogs/express-middleware-guide/https://soumitrasaha.com/blogs/express-middleware-guide/I explain how Express middleware works — the req/res/next signature, execution order, built-in and third-party options, and real patterns for auth and logging.Wed, 16 Apr 2025 18:30:00 GMTExpressNode.jsJavaScriptBackendMiddlewarehttps://soumitrasaha.com/blogs/production-express-project-structure/https://soumitrasaha.com/blogs/production-express-project-structure/I walk through the Express folder layout that scales — separating routes, controllers, services, and middleware into layers with one job each.Fri, 11 Apr 2025 18:30:00 GMTExpressNode.jsBackendJavaScriptAPIhttps://soumitrasaha.com/my-reads/meta-llama-4-herd/https://soumitrasaha.com/my-reads/meta-llama-4-herd/Meta's Llama 4 herd uses mixture-of-experts architecture and native multimodality to deliver GPT-4o-competitive performance at 17 billion active parameters, with Scout achieving an industry-leading 10-million-token context window through a new attention architecture called iRoPE.Thu, 10 Apr 2025 18:30:00 GMTMetaOpen ModelsMultimodalLong Contexthttps://soumitrasaha.com/blogs/rest-api-nodejs-express/https://soumitrasaha.com/blogs/rest-api-nodejs-express/Set up an Express 5 server, define routes for each HTTP method, wire the middleware your API needs, and test everything without writing a frontend.Sat, 05 Apr 2025 18:30:00 GMTNode.jsExpressREST APIBackendJavaScripthttps://soumitrasaha.com/blogs/nodejs-event-loop/https://soumitrasaha.com/blogs/nodejs-event-loop/I walk through libuv's six phases and show exactly when process.nextTick(), setImmediate(), and promise callbacks run in the Node.js event loop.Mon, 31 Mar 2025 18:30:00 GMTNode.jsJavaScriptEvent LoopAsyncBackendhttps://soumitrasaha.com/blogs/nodejs-runtime-fundamentals/https://soumitrasaha.com/blogs/nodejs-runtime-fundamentals/I break down how Node.js works under the hood — V8's JIT compilation, libuv's async I/O, and when to choose CommonJS over ESM.Wed, 26 Mar 2025 18:30:00 GMTNode.jsJavaScriptBackendRuntimehttps://soumitrasaha.com/my-reads/python-3-14-tail-call-interpreter/https://soumitrasaha.com/my-reads/python-3-14-tail-call-interpreter/Nelson Elhage's benchmark investigation into CPython's new tail-call interpreter uncovers an LLVM 19 regression that made the old baseline 10% slower, shrinking the real speedup from 10-15% to 1-5%.Sun, 23 Mar 2025 18:30:00 GMTPythonPerformanceCompilersRuntimehttps://soumitrasaha.com/blogs/nextjs-route-handlers-api-design/https://soumitrasaha.com/blogs/nextjs-route-handlers-api-design/I walk through how route.ts works, when to choose it over Server Actions, and the API design patterns that hold up as a Next.js app grows.Wed, 19 Mar 2025 18:30:00 GMTNext.jsAPI DesignTypeScriptReactJavaScripthttps://soumitrasaha.com/my-reads/typescript-10x-native-port/https://soumitrasaha.com/my-reads/typescript-10x-native-port/Microsoft announces a native Go port of the TypeScript compiler that cuts build times by 10x, halves memory usage, and delivers an 8x faster editor load — with TypeScript 7.0 as the shipping target.Sun, 16 Mar 2025 18:30:00 GMTMicrosoftTypeScriptPerformanceDeveloper Toolshttps://soumitrasaha.com/blogs/nextjs-authentication-architecture/https://soumitrasaha.com/blogs/nextjs-authentication-architecture/I walk through the session-based architecture for Next.js 15 authentication — setting up Auth.js, choosing between stateless and database sessions, and protecting routes with middleware.Fri, 14 Mar 2025 18:30:00 GMTNext.jsAuthenticationReactJavaScriptWeb Securityhttps://soumitrasaha.com/blogs/nextjs-seo-friendly-pages/https://soumitrasaha.com/blogs/nextjs-seo-friendly-pages/I cover static and dynamic metadata in the App Router, how to generate OG images, and why JSON-LD needs a native script tag rather than next/script.Sat, 08 Mar 2025 18:30:00 GMTNext.jsSEOReactFrontend DevelopmentWeb Fundamentalshttps://soumitrasaha.com/blogs/nextjs-data-fetching-caching/https://soumitrasaha.com/blogs/nextjs-data-fetching-caching/I explain the three Next.js cache layers and show which tool — fetch options, React.cache, unstable_cache, revalidatePath, or revalidateTag — fits each situation.Mon, 03 Mar 2025 18:30:00 GMTNext.jsReactCachingServer ComponentsData Fetchinghttps://soumitrasaha.com/my-reads/anthropic-claude-3-7-claude-code/https://soumitrasaha.com/my-reads/anthropic-claude-3-7-claude-code/Anthropic's first hybrid reasoning model makes thinking a runtime parameter you tune per call, not a separate product tier — and ships a command-line coding agent in the same announcement.Thu, 27 Feb 2025 18:30:00 GMTAnthropicAgentsCodingReasoninghttps://soumitrasaha.com/blogs/nextjs-server-vs-client-components/https://soumitrasaha.com/blogs/nextjs-server-vs-client-components/I walk through how the 'use client' directive marks a module boundary — not a rendering flag — and give you a practical mental model for composing Server and Client Components in Next.js.Wed, 26 Feb 2025 18:30:00 GMTNext.jsReactServer ComponentsJavaScripthttps://soumitrasaha.com/blogs/nextjs-app-router-getting-started/https://soumitrasaha.com/blogs/nextjs-app-router-getting-started/I explain how the App Router works in Next.js — file conventions, nested layouts, Server vs Client Components, and what changed from the Pages Router.Fri, 21 Feb 2025 18:30:00 GMTNext.jsReactFrontend DevelopmentApp Routerhttps://soumitrasaha.com/blogs/react-forms-validation-ux/https://soumitrasaha.com/blogs/react-forms-validation-ux/A practical guide to controlled inputs, validation patterns, and using react-hook-form with Zod or Yup — covering error timing, server-side failures, and the submit state that most forms forget.Fri, 14 Feb 2025 18:30:00 GMTReactFormsValidationJavaScriptFrontend Developmenthttps://soumitrasaha.com/blogs/react-state-management-context-redux-zustand/https://soumitrasaha.com/blogs/react-state-management-context-redux-zustand/A decision guide comparing useState, Context, Redux Toolkit, and Zustand — covering re-render trade-offs, when each tool fits, and the one Context surprise that trips up most developers.Sun, 09 Feb 2025 18:30:00 GMTReactState ManagementReduxZustandJavaScripthttps://soumitrasaha.com/blogs/reusable-react-components/https://soumitrasaha.com/blogs/reusable-react-components/The design principles that make a React component truly reusable: prop interfaces, the children pattern, controlled APIs, and warning signs of over-engineering.Tue, 04 Feb 2025 18:30:00 GMTReactComponentsFrontend DevelopmentJavaScripthttps://soumitrasaha.com/blogs/useeffect-explained/https://soumitrasaha.com/blogs/useeffect-explained/A deep-dive into useEffect — the correct mental model, the cleanup contract, stale closures, and when to reach for something else entirely.Wed, 29 Jan 2025 18:30:00 GMTReactHooksuseEffectJavaScripthttps://soumitrasaha.com/my-reads/deepseek-r1-open-reasoning/https://soumitrasaha.com/my-reads/deepseek-r1-open-reasoning/DeepSeek-R1 proves that chain-of-thought reasoning can emerge from pure reinforcement learning without any supervised fine-tuning as a prerequisite, then packages that result into an open-weight, MIT-licensed model family anyone can run or distill.Sun, 26 Jan 2025 18:30:00 GMTDeepSeekOpen ModelsReasoningOpen Weightshttps://soumitrasaha.com/blogs/react-hooks-practical-examples/https://soumitrasaha.com/blogs/react-hooks-practical-examples/A practical walkthrough of useState, useEffect, useCallback, useMemo, useRef, and useContext — with the gotchas that cause real bugs and when each hook genuinely pays off.Fri, 24 Jan 2025 18:30:00 GMTReactHooksJavaScriptFrontend Developmenthttps://soumitrasaha.com/my-reads/bun-1-2-npm-compatibility/https://soumitrasaha.com/my-reads/bun-1-2-npm-compatibility/Bun 1.2 shifts Node.js compatibility from reactive bug-fixing to running the official test suite, while adding native S3, Postgres, and a text-based lockfile.Fri, 24 Jan 2025 18:30:00 GMTBunJavaScriptRuntimeDeveloper Experiencehttps://soumitrasaha.com/blogs/react-fundamentals/https://soumitrasaha.com/blogs/react-fundamentals/I explain the three mental models behind React — UI as a function of state, one-way data flow, and state colocation — through components, props, and useState.Sun, 19 Jan 2025 18:30:00 GMTReactJavaScriptFrontend Developmenthttps://soumitrasaha.com/my-reads/shopify-react-native-five-years/https://soumitrasaha.com/my-reads/shopify-react-native-five-years/What Shopify learned after migrating all their mobile apps to React Native over five years — including where the framework genuinely wins, where it still falls short, and why 100% React Native should be an anti-goal.Thu, 16 Jan 2025 18:30:00 GMTShopifyMobileJavaScriptPerformancehttps://soumitrasaha.com/blogs/git-branching-workflow/https://soumitrasaha.com/blogs/git-branching-workflow/Small teams don't need Gitflow's overhead. I explain branch naming, commit discipline, rebase vs merge, and why long-lived branches—not Git—cause merge pain.Sun, 12 Jan 2025 18:30:00 GMTGitVersion ControlTeam Workflowhttps://soumitrasaha.com/blogs/git-basics/https://soumitrasaha.com/blogs/git-basics/I explain the four places your code lives in Git — working tree, staging area, repository, remote — and the daily commands that finally make sense once you see the map.Mon, 06 Jan 2025 18:30:00 GMTGitVersion ControlDeveloper Toolshttps://soumitrasaha.com/blogs/typescript-utility-types/https://soumitrasaha.com/blogs/typescript-utility-types/I tour the TypeScript utility types worth using daily — Partial, Pick, Omit, Record, ReturnType and friends — with the real shapes they replace and where they stop helping.Sun, 22 Dec 2024 18:30:00 GMTTypeScriptStatic TypingWeb Fundamentalshttps://soumitrasaha.com/my-reads/meta-glean-code-indexing/https://soumitrasaha.com/my-reads/meta-glean-code-indexing/Meta open-sources Glean, a schema-first code indexing system that treats code intelligence as a queryable knowledge graph rather than a fixed-output pipeline.Sun, 22 Dec 2024 18:30:00 GMTMetaDeveloper ToolsMonorepoDeveloper Experiencehttps://soumitrasaha.com/my-reads/meta-threads-ios-performance/https://soumitrasaha.com/my-reads/meta-threads-ios-performance/How the Threads iOS team built a custom metrics framework — %FIRE, TTNC, and cPSR — to measure what users actually feel, and used deliberate latency injection to quantify exactly how much slowness users will tolerate.Sat, 21 Dec 2024 18:30:00 GMTMetaMobileiOSPerformancehttps://soumitrasaha.com/my-reads/meta-java-to-kotlin-scale/https://soumitrasaha.com/my-reads/meta-java-to-kotlin-scale/How Meta built the Kotlinator — a six-phase automated pipeline around a headless J2K — to translate tens of millions of lines of Java to Kotlin without blocking their Android engineers or requiring them to click a button 100,000 times.Thu, 19 Dec 2024 18:30:00 GMTMetaKotlinJavaAndroidhttps://soumitrasaha.com/blogs/typescript-generics/https://soumitrasaha.com/blogs/typescript-generics/I explain TypeScript generics as functions for types — from the duplication they replace to constraints, defaults, inference, and why they vanish at runtime.Tue, 17 Dec 2024 18:30:00 GMTTypeScriptGenericsStatic TypingWeb Fundamentalshttps://soumitrasaha.com/blogs/typescript-interfaces-vs-types/https://soumitrasaha.com/blogs/typescript-interfaces-vs-types/I compare TypeScript interfaces and type aliases on the differences that actually matter — naming, merging, and error messages — and give a simple decision rule.Thu, 12 Dec 2024 18:30:00 GMTTypeScriptStatic TypingWeb Fundamentalshttps://soumitrasaha.com/my-reads/meta-typed-python-survey/https://soumitrasaha.com/my-reads/meta-typed-python-survey/Meta, JetBrains, and Microsoft surveyed 1,083 developers about Python typing adoption and found that the tools work well enough to drive 88% adoption, yet the type system still breaks down at exactly the dynamic patterns Python is most known for.Thu, 12 Dec 2024 18:30:00 GMTMetaPythonStatic TypingDeveloper Toolshttps://soumitrasaha.com/my-reads/meta-video-delivery-system/https://soumitrasaha.com/my-reads/meta-video-delivery-system/How Meta unified Watch and Reels into a single video stack, and the five delivery principles governing how billions of people receive video content on Facebook.Wed, 11 Dec 2024 18:30:00 GMTMetaVideoCodecsScalinghttps://soumitrasaha.com/blogs/typescript-for-javascript-developers/https://soumitrasaha.com/blogs/typescript-for-javascript-developers/I explain the contract mindset behind TypeScript's checks, the annotations worth learning first, and how to migrate a JavaScript file one rename at a time.Fri, 06 Dec 2024 18:30:00 GMTTypeScriptJavaScriptStatic TypingWeb Fundamentalshttps://soumitrasaha.com/my-reads/meta-andromeda-ads-retrieval/https://soumitrasaha.com/my-reads/meta-andromeda-ads-retrieval/How Meta rebuilt its ads retrieval stage on the NVIDIA Grace Hopper Superchip with hierarchical indexing and a 10,000x capacity increase to serve Advantage+ automation at scale.Wed, 04 Dec 2024 18:30:00 GMTMetaAdsRecommendationsMachine Learninghttps://soumitrasaha.com/blogs/javascript-array-methods/https://soumitrasaha.com/blogs/javascript-array-methods/I explain the array methods worth knowing by the three questions they answer — transform, select, reduce — plus the mutate-in-place fault line that bites everyone.Sat, 30 Nov 2024 18:30:00 GMTJavaScriptWeb FundamentalsArraysFunctional Programminghttps://soumitrasaha.com/my-reads/anthropic-model-context-protocol/https://soumitrasaha.com/my-reads/anthropic-model-context-protocol/Anthropic's MCP launch post shows why AI apps stay blind to your data — every integration was custom — and how one open protocol replaces them all.Wed, 27 Nov 2024 18:30:00 GMTAnthropicAgentsProtocolsDeveloper Toolshttps://soumitrasaha.com/blogs/promises-async-await-event-loop/https://soumitrasaha.com/blogs/promises-async-await-event-loop/I explain the browser's event loop, the difference between tasks and microtasks, and how promises and async/await schedule their work on those queues.Tue, 26 Nov 2024 18:30:00 GMTJavaScriptWeb FundamentalsPromisesAsyncEvent Loophttps://soumitrasaha.com/my-reads/meta-sequence-learning-ads/https://soumitrasaha.com/my-reads/meta-sequence-learning-ads/How Meta replaced hand-engineered sparse feature aggregations in its DLRM-based ads system with event-based sequence learning, recovering the temporal signal that aggregation was quietly destroying.Sun, 24 Nov 2024 18:30:00 GMTMetaAdsRecommendationsMachine Learninghttps://soumitrasaha.com/blogs/closures-in-javascript/https://soumitrasaha.com/blogs/closures-in-javascript/I explain what a JavaScript closure really captures, why returned functions still reach outer variables, and the loop bug and memory cost that catch people out.Thu, 21 Nov 2024 18:30:00 GMTJavaScriptWeb FundamentalsClosuresScopehttps://soumitrasaha.com/my-reads/meta-cryptographic-monitoring-at-scale/https://soumitrasaha.com/my-reads/meta-cryptographic-monitoring-at-scale/Meta built a cryptographic monitoring system on top of FBCrypto that tracks every key and algorithm in use across the fleet without sampling, using buffered aggregation to make zero-loss logging viable at production scale.Sun, 17 Nov 2024 18:30:00 GMTMetaSecurityCryptographyPrivacyhttps://soumitrasaha.com/blogs/javascript-execution-contexts/https://soumitrasaha.com/blogs/javascript-execution-contexts/I explain what a JavaScript execution context holds, its two phases, the scope chain and the call stack, and why hoisting falls straight out of the model.Fri, 15 Nov 2024 18:30:00 GMTJavaScriptWeb FundamentalsScopeHoistinghttps://soumitrasaha.com/my-reads/netflix-distributed-counter-abstraction/https://soumitrasaha.com/my-reads/netflix-distributed-counter-abstraction/Netflix built a counting service on top of their TimeSeries Abstraction that handles 75K requests per second globally by replacing real-time aggregation with an immutable-window event log and a continuous background rollup pipeline.Tue, 12 Nov 2024 18:30:00 GMTNetflixDistributed SystemsDatabasesScalinghttps://soumitrasaha.com/blogs/responsive-design-without-fighting-css/https://soumitrasaha.com/blogs/responsive-design-without-fighting-css/I explain how to build responsive layouts with intrinsic sizing, fluid spacing, and container queries instead of a growing pile of breakpoints.Tue, 05 Nov 2024 18:30:00 GMTCSSResponsive DesignLayoutWeb Fundamentalshttps://soumitrasaha.com/my-reads/gitpod-leaving-kubernetes/https://soumitrasaha.com/my-reads/gitpod-leaving-kubernetes/After six years running cloud development environments on Kubernetes at internet scale, Gitpod concluded the platform is fundamentally mismatched for system workloads like dev environments.Mon, 04 Nov 2024 18:30:00 GMTGitpodInfrastructureDeveloper ToolsSystem DesignLinuxhttps://soumitrasaha.com/blogs/css-flexbox-vs-grid/https://soumitrasaha.com/blogs/css-flexbox-vs-grid/I explain the core difference between CSS Flexbox and Grid, show when each one is the better choice, and cover how to use both in the same layout.Tue, 29 Oct 2024 18:30:00 GMTCSSFlexboxCSS GridLayoutWeb Fundamentalshttps://soumitrasaha.com/my-reads/meta-ipls-whatsapp-contact-privacy/https://soumitrasaha.com/my-reads/meta-ipls-whatsapp-contact-privacy/Meta built Identity Proof Linked Storage (IPLS) to let WhatsApp users back up and restore their contacts without ever exposing them to the server.Sun, 27 Oct 2024 18:30:00 GMTMetaPrivacySecurityCryptographyhttps://soumitrasaha.com/blogs/html-semantic-elements-every-developer-should-know/https://soumitrasaha.com/blogs/html-semantic-elements-every-developer-should-know/I cover the HTML semantic elements that replace generic divs, explain when to use each one, and show how they improve accessibility and page structure.Wed, 23 Oct 2024 18:30:00 GMTHTMLSemantic HTMLAccessibilityWeb Fundamentalshttps://soumitrasaha.com/blogs/how-the-web-works/https://soumitrasaha.com/blogs/how-the-web-works/I walk through every step between typing a URL and seeing a page, from DNS lookups and TCP handshakes to HTML parsing and the first paint.Thu, 17 Oct 2024 18:30:00 GMTWeb FundamentalsHTTPDNSNetworkingBrowserhttps://soumitrasaha.com/my-reads/meta-rl-data-center-cooling/https://soumitrasaha.com/my-reads/meta-rl-data-center-cooling/Meta uses offline, simulator-in-the-loop reinforcement learning to control supply airflow setpoints in data centers, achieving a 20% reduction in fan energy and 4% reduction in water use without ever exploring inside a live facility.Sun, 15 Sep 2024 18:30:00 GMTMetaData CentersMachine LearningInfrastructurehttps://soumitrasaha.com/my-reads/netflix-noisy-neighbor-ebpf/https://soumitrasaha.com/my-reads/netflix-noisy-neighbor-ebpf/How Netflix used eBPF hooks into the Linux scheduler to build continuous, sub-microsecond-overhead run queue latency monitoring that attributes CPU starvation to specific containers in their Titus multi-tenant platform.Wed, 11 Sep 2024 18:30:00 GMTNetflixeBPFLinuxPerformancehttps://soumitrasaha.com/my-reads/meta-mtia-hardware-software-codesign/https://soumitrasaha.com/my-reads/meta-mtia-hardware-software-codesign/How Meta built its second-generation AI accelerator by treating PyTorch's operator set and memory access patterns as hardware requirements, not as post-silicon adaptation problems.Mon, 26 Aug 2024 18:30:00 GMTMetaHardwareAcceleratorsAI Infrastructurehttps://soumitrasaha.com/my-reads/meta-llama-3-training-infrastructure/https://soumitrasaha.com/my-reads/meta-llama-3-training-infrastructure/Meta's short roundup of the four AI Infra @ Scale 2024 talks behind Llama 3 — open source vision, data, training clusters, and inference at scale.Sun, 25 Aug 2024 18:30:00 GMTMetaAI InfrastructureMachine LearningInferencehttps://soumitrasaha.com/my-reads/meta-animating-ai-generated-images/https://soumitrasaha.com/my-reads/meta-animating-ai-generated-images/How Meta combined guidance distillation, step distillation, and regional traffic routing to cut a video diffusion model from 96 U-Net passes to 8 — then fixed the latency that model optimization alone couldn't.Sun, 18 Aug 2024 18:30:00 GMTMetaVideoAI InfrastructureScalinghttps://soumitrasaha.com/my-reads/ebpf-verifier-bug-cve-2023-2163/https://soumitrasaha.com/my-reads/ebpf-verifier-bug-cve-2023-2163/Google's account of discovering and patching a CVSS 10.0 flaw in the Linux eBPF verifier where incorrect propagation of 32-bit register bounds to their 64-bit counterparts let a crafted program convince the kernel it was performing safe memory accesses when it was not.Fri, 09 Aug 2024 18:30:00 GMTGoogleeBPFLinuxSecurityhttps://soumitrasaha.com/my-reads/meta-roce-ai-training-network/https://soumitrasaha.com/my-reads/meta-roce-ai-training-network/Meta's SIGCOMM 2024 paper shows how RoCEv2 over Ethernet became the backbone for training Llama-scale models across tens of thousands of GPUs — and why routing, not hardware, was the hard problem.Wed, 07 Aug 2024 18:30:00 GMTMetaNetworkingRDMAAI Infrastructurehttps://soumitrasaha.com/my-reads/tigerbeetle-rediscovering-transaction-processing/https://soumitrasaha.com/my-reads/tigerbeetle-rediscovering-transaction-processing/How TigerBeetle discovered that row locks held across network round-trips are a fundamental throughput ceiling no amount of hardware can fix.Sun, 28 Jul 2024 18:30:00 GMTTigerBeetleDatabasesAlgorithmsSystem Designhttps://soumitrasaha.com/my-reads/crowdstrike-outage-technical-details/https://soumitrasaha.com/my-reads/crowdstrike-outage-technical-details/CrowdStrike's own account of the July 2024 content update that blue-screened Windows hosts, explaining channel files, named pipes, and why it wasn't an attack.Sun, 21 Jul 2024 18:30:00 GMTCrowdStrikePostmortemReliabilityWindowshttps://soumitrasaha.com/my-reads/nvidia-open-gpu-kernel-modules/https://soumitrasaha.com/my-reads/nvidia-open-gpu-kernel-modules/With R560 and CUDA Toolkit 12.6, NVIDIA made the open-source GPU kernel modules the default for Turing and newer architectures, completing a two-year transition that started with R515 in 2022.Wed, 17 Jul 2024 18:30:00 GMTNVIDIALinuxKernelInfrastructurehttps://soumitrasaha.com/my-reads/meta-tail-utilization-ads-inference/https://soumitrasaha.com/my-reads/meta-tail-utilization-ads-inference/How Meta's ads inference team cut timeout error rates by two-thirds and squeezed 35% more throughput from the same hardware by fixing how load is measured, balanced, and predicted in a multi-tenant inference fleet.Sun, 14 Jul 2024 18:30:00 GMTMetaInferencePerformanceAdshttps://soumitrasaha.com/my-reads/meta-rust-cpp-interop/https://soumitrasaha.com/my-reads/meta-rust-cpp-interop/Meta's Rust adoption at scale depends on the cxx crate, which replaces unsafe FFI with typed interop boundaries that let both languages grow alongside each other without sacrificing safety guarantees.Thu, 27 Jun 2024 18:30:00 GMTMetaRustC++Memory Safetyhttps://soumitrasaha.com/my-reads/cloudflare-incident-june-2024-postmortem/https://soumitrasaha.com/my-reads/cloudflare-incident-june-2024-postmortem/A careful postmortem of how one new DDoS rule, two interacting bugs, and a Lua tail-call loop burned CPU across Cloudflare's network for 114 minutes.Wed, 26 Jun 2024 18:30:00 GMTCloudflarePostmortemReliabilityIncident Reviewhttps://soumitrasaha.com/my-reads/meta-pvf-silent-data-corruption/https://soumitrasaha.com/my-reads/meta-pvf-silent-data-corruption/Meta's Parameter Vulnerability Factor gives hardware designers a principled way to decide which neural network layers actually need fault protection, rather than protecting all parameters equally and paying the area and performance cost everywhere.Sun, 23 Jun 2024 18:30:00 GMTMetaHardwareReliabilityAI Infrastructurehttps://soumitrasaha.com/my-reads/meta-mlow-audio-codec/https://soumitrasaha.com/my-reads/meta-mlow-audio-codec/How Meta built a new audio codec from scratch that delivers twice the perceptual quality of Opus at 6 kbps, while keeping computational complexity 10% lower — targeting the billions of calls on low-end devices that existing codecs leave behind.Tue, 18 Jun 2024 18:30:00 GMTMetaAudioCodecsPerformancehttps://soumitrasaha.com/my-reads/meta-ai-capacity-maintenance/https://soumitrasaha.com/my-reads/meta-ai-capacity-maintenance/How Meta patches thousands of GPU training hosts without pausing time-critical jobs — maintenance trains, gradual rollouts, and the OpsPlanner orchestrator.Mon, 17 Jun 2024 18:30:00 GMTMetaAI InfrastructureCapacity PlanningOperationshttps://soumitrasaha.com/my-reads/meta-llm-training-infrastructure/https://soumitrasaha.com/my-reads/meta-llm-training-infrastructure/A plain-English tour of Meta's LLM training infrastructure — failure modes, checkpointing, and twin 24k-GPU clusters on both RoCE and InfiniBand.Sun, 16 Jun 2024 18:30:00 GMTMetaAI InfrastructureMachine LearningScalinghttps://soumitrasaha.com/my-reads/meta-bento-serverless-notebooks/https://soumitrasaha.com/my-reads/meta-bento-serverless-notebooks/How Meta's Bento team used Pyodide and WebAssembly to run Python notebooks entirely in the browser, eliminating compute provisioning for lightweight workloads without changing the notebook interface.Thu, 13 Jun 2024 18:30:00 GMTMetaInfrastructureDeveloper ToolsMicroserviceshttps://soumitrasaha.com/my-reads/meta-composable-data-management/https://soumitrasaha.com/my-reads/meta-composable-data-management/How Meta dismantled a decade of siloed data systems by extracting Velox as a shared execution engine, aligning with Apache Arrow, and opening the path to hardware-accelerated analytics.Sun, 26 May 2024 18:30:00 GMTMetaData InfrastructureStorageSystem Designhttps://soumitrasaha.com/my-reads/figma-typescript-journey/https://soumitrasaha.com/my-reads/figma-typescript-journey/How Figma built a Skew-to-TypeScript transpiler and ran a three-phase migration to retire their custom language without disrupting developer workflows.Tue, 07 May 2024 18:30:00 GMTFigmaTypeScriptMigrationDeveloper Toolshttps://soumitrasaha.com/my-reads/bun-1-1-windows-support/https://soumitrasaha.com/my-reads/bun-1-1-windows-support/Bun 1.1 ships Windows support alongside 1,700 commits of Node.js compatibility fixes, a cross-platform shell, and a thousand bug fixes.Thu, 11 Apr 2024 18:30:00 GMTBunJavaScriptRuntimePerformancehttps://soumitrasaha.com/my-reads/sqlite-why-bytecode/https://soumitrasaha.com/my-reads/sqlite-why-bytecode/SQLite's original author explains why it compiles SQL into bytecode instead of walking a tree of objects, and where each approach honestly wins.Tue, 02 Apr 2024 18:30:00 GMTSQLiteDatabasesCompilersPerformancehttps://soumitrasaha.com/my-reads/meta-logarithm-logging-engine/https://soumitrasaha.com/my-reads/meta-logarithm-logging-engine/How Meta built Logarithm — a hosted, serverless, multitenant logging engine — to index 100+ GB/s of AI training logs in real time and power cross-layer debugging across systems and model telemetry.Sun, 24 Mar 2024 18:30:00 GMTMetaObservabilityLoggingAI Infrastructurehttps://soumitrasaha.com/my-reads/figma-databases-team-scale/https://soumitrasaha.com/my-reads/figma-databases-team-scale/How Figma sharded its Postgres stack in place with DBProxy, hash routing, and Postgres views instead of migrating to a distributed SQL engine.Fri, 15 Mar 2024 18:30:00 GMTFigmaPostgresScalingDatabaseshttps://soumitrasaha.com/my-reads/dropbox-sync-engine-rust-rewrite/https://soumitrasaha.com/my-reads/dropbox-sync-engine-rust-rewrite/A practical account of why Dropbox rewrote its desktop sync engine in Rust, with a rewrite checklist and hard-won lessons about data models and testing.Mon, 26 Feb 2024 18:30:00 GMTDropboxRustMigrationStoragehttps://soumitrasaha.com/my-reads/google-gemini-1-5-long-context/https://soumitrasaha.com/my-reads/google-gemini-1-5-long-context/Google's Gemini 1.5 announcement explains how mixture-of-experts efficiency and a million-token context window changed what models can process in one go.Sun, 18 Feb 2024 18:30:00 GMTGoogleGeminiLong ContextMultimodalhttps://soumitrasaha.com/my-reads/python-3-13-jit-explained/https://soumitrasaha.com/my-reads/python-3-13-jit-explained/A CPython core developer walks through the copy-and-patch JIT added to Python 3.13, explaining what stencils and holes are at the machine-code level and why a 2-9% initial gain is the right starting point.Sun, 21 Jan 2024 18:30:00 GMTPythonPerformanceCompilersRuntimehttps://soumitrasaha.com/my-reads/maestro-rust-kernel/https://soumitrasaha.com/my-reads/maestro-rust-kernel/A solo developer scrapped 18 months of C kernel work to restart in Rust, and has since built a bootable monolithic OS with a package manager, running bash and a working subset of GNU coreutils.Sun, 07 Jan 2024 18:30:00 GMTRustKernelLinuxMemory Safety