Tutorials covering programming languages, type systems, architecture, tooling, and the patterns used to build software that lasts. Each chapter is standalone, built around real examples and verified facts.
Container system call tracing is complicated by two facts that are easy to overlook. First, minimal container images—the ones most likely to be deployed in production—often exclude strace and other debugging tools precisely because they increase the attack surface . Second, strace relies on the ptrace system call, which requires the CAP_SYS_PTRACE capability that Docker…
The App Router’s file conventions separate three concerns that the Pages Router merged into a single component: the persistent shell (layout.tsx), the route-specific content (page.tsx), and the pending state while that content resolves (loading.tsx). The separation is what makes navigation fast. When a user moves from /blog to /blog/hello, the layout does not re-render because…
Writing FFI bindings by hand is tedious and error-prone. The signatures must match the C ABI exactly, the types must map correctly, and a single mistake produces undefined behavior that may not surface until runtime. bindgen and cbindgen automate the two directions of this translation: bindgen reads a C header and generates Rust extern declarations,…
Row-level security (RLS) and data masking are two distinct controls that are frequently mentioned together because they both restrict what a user can see. They operate at different granularities, however, and they solve different problems. RLS filters which rows a query returns—a user in one department sees only that department’s records, while a user in…
Writing tests in TypeScript is not the same as writing them in JavaScript. The type system changes what you can assert, how you mock dependencies, and what happens when the test fails. A test that compiles is not necessarily a test that runs. A mock that satisfies the compiler may not satisfy the runtime. Jest…
Vue’s compiler macros—defineProps, defineEmits, defineModel, defineOptions—are functions that look like runtime imports but are eliminated at compile time and replaced with the equivalent runtime code. The macro system is not closed. The vue-macros project demonstrates that custom macros can be created and shipped as unplugin transformations, and unplugin-vue is the underlying tool that makes a…
The previous chapter introduced Progressive Web Apps and the service worker that makes them possible. This chapter goes deeper into the service worker itself: what it is, how it intercepts requests, how Angular’s implementation differs from a hand-written one, and how to debug it when the cache is serving stale content or the update mechanism…
The Dart AOT snapshot is not a traditional executable. It is a serialized representation of the Dart VM heap graph, written to disk by the AOT compiler and mapped into memory at startup by the precompiled runtime. The format is deliberately low-level and optimized for fast startup: it is essentially a list of objects to…
Distroless images exist to reduce attack surface: they contain the application binary and its runtime dependencies, and nothing else. No shell, no package manager, no curl, no strace. When a distroless container crashes or misbehaves, the standard debugging reflex—docker exec -it <container> /bin/sh—fails because there is no shell to execute . The ephemeral container pattern…
Streaming SSR and progressive hydration are two sides of the same performance strategy. Streaming SSR changes when the server sends HTML: instead of waiting for the entire tree to render and sending one large response, the server sends the shell immediately and streams the slower regions as their data resolves . Progressive hydration changes when…