Skip to content
360SOFTY
HomeInsights

Insights

Ideas for building
better software.

Engineering perspectives on architecture, product development, AI, and the everyday decisions behind useful software.

From the engineering desk

Browse practical articles or follow the latest technology updates.

Subscribe via RSS →

Curated links from external sources — not 360Softy original articles.

ExternalSoftware Engineering
DEV Community

Is SSH Password Auth Really Off on Your Server? Hardening sshd_config and Proving It From the Outside

Tuần này, một security advisory của Alpine Linux về lỗi bypass password authentication trong OpenSSH-server lên top Hacker News. Thread đó có hàng trăm comment, và câu hỏi lặp lại nhiều nhất không phải về chi tiết lỗ hổng. Mọi người hỏi nhau: "Server của mình có đang bật password auth không?". Phần lớn trả lời "chắc là tắt rồi, mình sửa sshd_config từ lâu". Mình từng nghĩ y như vậy, cho đến khi audit lại vài con VPS và thấy 3/7 con vẫn nhận password. Lý do là một file drop-in do cloud-init tạo r

sshsecuritylinux
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Run Vercel Cron more than once a day on the Hobby plan

Originally published on RunLater. On Vercel's Hobby plan a cron job can run at most once a day. A schedule like */15 * * * * fails the deploy with: Hobby accounts are limited to daily cron jobs. Vercel's docs also say Hobby timing is not precise: the job runs at some point within the hour you set. The usual fix is to keep your cron logic in a normal API route and have an outside scheduler call that route over HTTP. Any scheduler that can send an authenticated request works. The route side is th

vercelnextjswebdev
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

npm packages, types, and the quick-fix install

JSLab feature notes: one docs page, explained. Today: npm packages. A scratchpad without packages is a calculator. Here's how JSLab, a JavaScript & TypeScript scratchpad for macOS, handles them. ⌘I (or Tools → NPM Packages…, or the activity bar) opens the package sheet. Search the registry as you type and click Add, or type name@version and press Return: exact versions and ranges both work. import { nanoid } from "nanoid"; nanoid(); // Auto Log shows a fresh id on every run Packages install int

showdevnpmjavascript
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Perché du e il Finder mostrano dimensioni diverse per la stessa cartella

Esegui du -sh su una cartella e confrontalo con la dimensione del Finder: i due valori spesso non coincidono, a volte di diversi gigabyte. Nessuno dei due sbaglia. Rispondono a domande diverse: quanto sono lunghi i file e quanto spazio occupano sul disco. Quando il disco è pieno conta solo la seconda, e calcolarla bene richiede più che sommare st_size. Le regole qui sotto sono quelle seguite dalla schermata Disk dell'app desktop osFoundry. Il suo scanner è una breve funzione Rust su std::fs, e l

macosrustpython
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Product #45 · WeChat Red Packets (2014): How a 9-Person Team Coded a Thousand-Year Tradition and Completed a Decade of Bank-Card Onboarding in One Night

In the history of consumer tech, no cold-start growth campaign was ever executed more cleanly than WeChat Red Packets (微信红包) during the 2014 Lunar New Year. At the end of 2013, Alipay was the undisputed king of Chinese digital payments, backed by a decade of e-commerce escrow infrastructure. WeChat Pay was only months old, and 95% of WeChat's chat users saw no reason to type a 19-digit bank card number into a messaging app. Then a 9-person internal team built a lightweight HTML5 mini-app in two

opensourcetoolsproductivity
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Go Tenant Password Reset Email: Template Evidence and Retention in 2026

A property manager needs a password reset email whose required fields help a tenant recover access while leaving an auditable record of the instruction. Start with one application-owned recovery template and a separate audit record. The bill contains message transport, retained content, event storage, and investigation work; for the content term alone, keeping 2 identical full bodies consumes twice the body storage of keeping 1, before compression or storage overhead. That arithmetic is a design

gosecurityemail
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

CSS Pixels vs Device Pixels: Why "It Looks Fine on My Monitor" Is a Bug Report

Most layout bugs are not bugs. They're mismatches between the viewport we designed on and the viewport someone else is using. Here's the thing that trips people up: a phone can report a 412 CSS-pixel-wide screen while being physically half the size of your laptop, and a 4K monitor at 200% scaling gives you exactly the same usable width as a 1080p one. Resolution and viewport are not the same number, and treating them as one is where "it works on my machine" comes from. Number What it really m

cssuxr
DEV CommunityRead original

Let’s start with a conversation

Tell us what you’re working on.

An idea, a challenge, or a system that needs to work better. We’ll help you understand the next step.

Discuss your project

Prefer email? [email protected]