Stuff Lucca says about tech - December 2k21

Hey folks, here’s what made the day month in Lucca’s tech watch this December.

Architecture

• 6 API lessons learned over the last 15 years (Jeremy Daly)

• Should you abstract the database ? : An article describing the tradeoffs about database abstraction (Vladimir Khorikov)

• Scaling the Practice of Architecture, Conversationally : Because software architecture is not a top-down decision, it’s everyone’s business. (Andrew Harmel-Law)

• Repository pattern burnout : A Repository pattern debate (tweet from David Fowler)

C# / .NET / EF Core

• Top C# Developer News of 2021 : A .NET /C# 2021 news retrospective (Andrea Angella)

• Asynchronous code best practices : A guide to avoid asynchronous code issues (David Fowler)

• Plan for EF Core 7.0 : Entity Framework Biweekly Update (tweet from Arthur Vickers)
  • JSON columns
  • Bulk updates
  • Lifecycle hooks
  • Table-per-concrete-type (TPC) mapping
  • Stored procs
  • Value objects
  • Raw SQL queries for unmapped types
  • T4 templates
  • Trimming
  • Open telemetry for ADO.NET providers

• System.CommandLine 2.0 Beta 2 : New release providing improved APIs, offering a lightweight injection approach, making it easier for you to customize help, improving tab completion, working on documentation, and making big performance improvements. (Jon Sequeira)

• Rate limiting APIs coming in .NET 7 (tweet from David Fowler):
  • Time based Limits
  • Concurrency based Limits
  • Technical design proposal about it (Brennan Conroy)

Accessibility

• WCAG 3 will use a new color contrast method called APCA (Advanced Perceptual Contrast Algorithm) (tweet from Dan Hollick)

• (FR) Accessibility : compliance vs. reality : An article about accessibility compliance rate (Sébastien Delorme & Johan Ramon)

Security

• Kraken hacked fingerprint authentication with a $5 method (KrakenFx)

• Google Project Zero Researchers Explain Pegasus Zero-Click iMessage Exploit (Christopher Baugh)
  • you can also find a technical description article about it (Project Zero)
• RCE 0-day exploit found in log4j (Free Wortley, Chris Thompson & Forrest Allison)
  • Datadog published about its detection and remediation (Zack Allen & Christophe Tafani-Dereeper)

Miscellanous

• First major version of rxjsdebugging is out : The first rxjs debugger for Visual Studio Code

• Paste Special feature in Visual Studio : And underrated feature to create classes with JSON or XML sources

• Improving GitHub code search : How it can help every developer search, discover, navigate, and understand code quickly and intuitively (Pavel Avgustinov)

• A trial paywall A/B test challenge : Will you guess which variant could increase your trial conversion by 23% (ethically) ?

• A technical overview on how to build stunning 3D scenes with React Three Fiber (Varun Vachhar)

• Why invent PowerShell, why not just use ksh or bash ? A Powershell inventor interview

• Slime molds vs. hierarchy : A presentation about organization size impacts

• Big list of naughty strings : A github repository of evolving list of strings which have a high probability of causing issues when used as user-input data. (Max Woolf)

• Log4J, because it’s better to laugh than to cry.

• Last but not least, the best software engineering pro-tip from @chrisalbon for christmas holidays

  • Do not, I repeat, do not deploy this week. That is how you end up debugging a critical issue from your parent’s wifi in your old bedroom while your house hates you for abandoning them with your racist uncle.