Last week I asked for some comments on how web development got more complex in my opinion and I got great feedback. It’s great to see a good discussion as the outcome, and I say “thank you” for all your support – whether financially or some kind words you sent me via email. Have a great weekend y’all!

News

• Here’s bad news. Again, a very bad Flash security vulnerability has been found, and there’s no fix on the way yet — apart from uninstalling Flash. If you can’t do that, please use click-to-play and be very careful. You might also want to tell your friends about this problem. Let’s hope Adobe will supply a fix soon.

General

• Cody Lindley’s massive efforts resulted in a great resource for folks who are new to our industry: The Front-end Handbook is an open and free book about how to get started in the web industry. It not only shares the basic technological aspects but also business and social advice.

Concepts & Design

• The founders of Teehan+Lax, now at Facebook, shared a massive set of iOS9 GUI templates which you can use for free with Photoshop or Sketch (only for mock-ups though, according to the license).

Tools

• Jack Franklin started reflecting on the state of front-end tooling after a conference attendee asked him why he uses all those tools in his stack. Interesting thoughts with some very good advice on using what we feel comfortable with.
• I often stumble across browser extensions that are very cool. However, a lot of them are Chrome-only, so as a Firefox user I often get neglected. Luckily, Firefox changed its extension ecosystem to use WebExtensions, which makes it super easy to convert a Chrome to a Firefox extension.

Security

• If you’re building an application with node.js you may want to read the node.js security checklist that helps you circumvent lot of security pitfalls.

Privacy

• A recent report explains how the NSA breaks our crypto. It even seems that they break Diffie-Hellman primes, meaning that HTTPS/VPN wouldn’t be secure anymore.

Web Performance

• Jeremy Keith is always good for a well-thought-out article on ideas that spread on the internet. This time, he criticizes Google’s new AMP project that, for a lot of people, leads to more questions than it answers.
• How to enable HTTP/2 in Apache? With Apache httpd 2.4.17, HTTP/2 is finally supported and here we have a guide on how to set it up and configure it for usage on your server. Let’s hope this version will get deployed on servers worldwide as soon as possible.
• imgix, a well-known real-time image processing service, implemented client hints now and explains how they did so in a short, informative article. Although only Chrome currently supports this, it will be a technique you should keep in mind for big performance improvements.

HTML / SVG

• Bram Stein started writing a series of articles, the so-called Web Font Anti-Patterns. Starting with overusing web fonts, inlining fonts, and using too aggressive subsettings, he will continue the series with even more useful information on web fonts.

CSS / Sass

• Making so-called “diamond grids” was always a big effort. But using Sass to calculate it, makes things a lot easier. Chen Hui Jing explains in her blog post how you can create a diamond grid with SCSS.

Work & Life

• The worst situation as a developer is when you’re constantly interrupted during your work. It massively affects productivity and code quality and should be avoided by company managers at all cost.
• Companies often struggle with the communication with their employees. To avoid conflicts, Zach Holman shares a way to let people in the company opt-in to business details. An idea to put an end to the “why do we have to build this crap?” question.
• While the article “The Elephant in the Room” is a bit biased, it shows how difficult it is to make money with apps. It takes the example of Marco Arment’s most recent move to offer his podcast app on a donation-basis and compares it to developers who need to make a living from apps and struggle to charge for updates.

Go beyond…

• We can’t look into someone else’s mind. And sometimes this bothers us. We struggle with ourselves, thinking of impostor syndrome and comparing ourselves to the cool people on social media. However, these people are often not that different from us. Nobody Knows What The Hell They Are Doing reveals that we’re all in the same boat.
• This week, Tesla pushed a new software update to its cars, enabling them to drive on autopilot. This is the first car in public that can do this and it seems to work great. I’m curious how it will work out for them and moreover what the impact on the industry will be.

And with that I’ll close for this week. If you like what I write each week, please support me with a donation or share this resource with other people. You can learn more about the costs of the project here. It’s available via E-Mail, RSS and online.

Thanks and all the best,
Anselm