It’s Friday again, and I found some interesting articles for you to read over the upcoming weekend. In projects, developer, manager and product leaders still try to put pressure on the people who work on a task. Somehow they feel relieved, more secure if they do that. On the other hand, the people experiencing the pressure of urgency are struggling massively with it.
The fallacy here is that while the ones spreading the pressure feel better, the people experiencing it usually do a worse job than without the pressure. It leads to more bugs, unstructured work and, in the end, all people involved will suffer from the result. So instead, a team, which includes everyone from a developer to a manager, should focus on the purpose of the work. Give it a try, y’all, and now, enjoy your weekend!
Further Reading on SmashingMag:
- P Vs. NP: The Assumption That Runs The Internet1
- Why Passphrases Are More User-Friendly Than Passwords2
- The Current State Of Authentication: We Have A Password Problem3
- Obfuscating Blacklisted Words In WordPress With ROT134
- Imagining your future projects is holding you back5. Jessica Abel talks about the problem of idea debt, about thinking too much and making too little.
- Textlint6 lets you lint document text content using rules you specify. This is cool to check for grammar or formatting problems in Markdown files.
- GitHub now offers templates for issues and pull requests7. Oh, and they enabled file uploads8 as well.
- A bug in
glibchas been disclosed11. As it’s a very bad and easy to exploit bug, you should patch every server (and clients) as soon as possible.
- Never say “We’ll just use defaults, for now. That password will do, for now.” in the context of security. It’ll be forgotten, and this is the most dangerous threat12 to your data, giving attackers the possibility to do anything with very little effort. Do you have a VoIP phone with a default password? A WiFi router? Change it to something secure. And please tell your friends and family as well. This is important.
- This week, Apple started a new discussion about privacy, encryption and built-in backdoors on their devices. They received an order to build a custom iOS built, signed by Apple, that lacks several security measurements so that the FBI could hack into phone data relatively easily. In an open letter13 Apple shared why they declined to do so. Luckily, a lot of companies seem to agree with Apple, and I hope we can find a good way to protect our privacy, and with that, our personal security. Because, as we all know, even if such a backdoor is kept secure, no one could assure that this piece of software won’t get stolen and abused by someone who shouldn’t have access to it.
Web Performance Link
- Rachel Andrew wrote a great guide on how you should start to make a plan for the transition of web projects to HTTP/214. As the switch should be well planned, it’s a great idea to establish a process to migrate seamlessly and, for now, generate assets and pipelines for both, HTTP/1.1 and HTTP/2, so that a switch is easy.
- The still relatively new ESLint has been released in version 2.016. It breaks at some point with v1.x but now comes with an auto configuration feature and also introduces code path analysis17.
CSS / Sass Link
- Rémi Parmentier shares a clever way to build flexible, responsive containers without media queries19 which makes the technique a good option for email newsletters.
- This huge Codepen gives you an interactive playground for Flexbox20 properties and values so you can try out what you need for your use case.
- To be honest, despite the usual
currentColoruse case for inheriting the current color into an SVG element, there are not a lot of ressources that explain how you can use this value. But this example shows you how to use
currentColorfor colored elements with pseudo-element arrows in it21 in a clever way.
- Michael Scharnagl shares how you can use the new custom properties (also known as CSS variables) to build a theme switcher for your project22.
Work & Life Link
- Trying to create a sense of urgency almost always backfires. So why not foster a sense of purpose25 instead, which is much better for our brains and our health?
- As a founder of a company, your most important skill should be hiring people26. Moritz Plassnig from Codeship tells us why it’s so important to build a great team if you want to succeed with your product.
Going beyond… Link
- Last week, I wrote that most of the time the software we write is not critical to people. But what happens if it is? For example, if you sell a smart thermostat and due to a bug in its software the heating is disabled entirely with no option to fix it yourself? This happened to Nest users27, showing the problems of ‘smart’ devices that control critical things in our lives.
And with that, I’ll close for this week. If you like what I write each week, please support me with a donation28 or share this resource with other people. You can learn more about the costs of the project here29. It’s available via E-Mail, RSS and online.
Thanks and all the best,
- 1 https://www.smashingmagazine.com/2015/11/p-vs-np-assumption-that-runs-internet/
- 2 https://www.smashingmagazine.com/2015/12/passphrases-more-user-friendly-passwords/
- 3 https://www.smashingmagazine.com/2016/06/the-current-state-of-authentication-we-have-a-password-problem/
- 4 https://www.smashingmagazine.com/2014/12/encrypting-blacklisted-words-in-wordpress-with-rot13/
- 5 http://jessicaabel.com/2016/01/27/idea-debt/
- 6 https://textlint.github.io/
- 7 https://github.com/blog/2111-issue-and-pull-request-templates
- 8 https://help.github.com/articles/adding-a-file-to-a-repository/
- 9 https://github.com/blog/2111-issue-and-pull-request-templates
- 10 https://github.com/blog/2111-issue-and-pull-request-templates
- 11 http://arstechnica.com/security/2016/02/extremely-severe-bug-leaves-dizzying-number-of-apps-and-devices-vulnerable/
- 12 https://paul.reviews/pwnphone-default-passwords-allow-covert-surveillance/
- 13 https://www.apple.com/customer-letter/
- 14 https://www.smashingmagazine.com/2016/02/getting-ready-for-http2/
- 15 http://www.jstips.co/en/detect-document-ready-in-pure-js/
- 16 http://eslint.org/blog/2016/02/eslint-v2.0.0-released
- 17 http://eslint.org/docs/developer-guide/code-path-analysis.html
- 18 https://jeremenichelli.github.io/hunt/
- 19 https://medium.freecodecamp.com/the-fab-four-technique-to-create-responsive-emails-without-media-queries-baf11fdfa848
- 20 http://codepen.io/enxaneta/full/adLPwv/
- 21 http://kushagragour.in/blog/2016/01/backgroundcolor-in-currentcolor/
- 22 https://justmarkup.com/log/2016/02/theme-switcher-using-css-custom-properties/
- 23 https://medium.freecodecamp.com/the-fab-four-technique-to-create-responsive-emails-without-media-queries-baf11fdfa848
- 24 https://medium.freecodecamp.com/the-fab-four-technique-to-create-responsive-emails-without-media-queries-baf11fdfa848#.glnp0tyg9
- 25 https://medium.com/@kimber_lockhart/don-t-create-a-sense-of-urgency-foster-a-sense-of-purpose-724e309ecdb0
- 26 https://medium.com/@moritzplassnig/hiring-the-single-most-important-skill-as-a-founder-1028ccc5fc79
- 27 http://www.nytimes.com/2016/01/14/fashion/nest-thermostat-glitch-battery-dies-software-freeze.html
- 28 https://wdrl.info/donate
- 29 https://wdrl.info/costs/