All guides, page 18 of 20

Newest first. Search or pick a topic.

476 guides, newest first

• UML for LLD Interviews: Class and Sequence DiagramsSystem design · A plain-English guide to the UML class diagram for LLD interviews: the symbols, the six relationships, one sequence diagram and the Java they become, shown on one running example of a turf booking app.24 min read · Updated 20 Oct 2026
• LLD: Design a Vending Machine with the State PatternSystem design · A plain-English guide to vending machine LLD: the states, the state pattern in Java, change making, refunds and power-cut recovery, on one running example of a Bengaluru snack machine fleet.20 min read · Updated 20 Oct 2026
• Linux's October 2026 Vghost Bug Explained: Who Is Exposed and What to PatchBackend · A plain-English guide to the Vghost Linux vhost vulnerability (CVE-2026-74580): who is exposed, which kernels fix it and how to check and lock down hosts, shown on one running example of a hosting team's VM hosts and build servers.18 min read · Updated 20 Oct 2026
• Design Video Conferencing Like Zoom: SFU vs MCU and WebRTCSystem design · A plain-English guide to video conferencing system design, from WebRTC call setup to SFUs, MCUs, scaling and encryption, built on one running telehealth example.23 min read · Updated 20 Oct 2026
• Visual Search System Design: Search by Photo in a Fashion AppAI and GenAI · A plain-English guide to visual search system design: photo to garment crop to vectors to results, shown on one running example of a fashion app.28 min read · Updated 20 Oct 2026
• Next.js October 2026 Security Update Explained: Two RCEs and What to UpgradeFrontend · A plain-English guide to the Next.js October 2026 security update: two remote code execution bugs, a Server Actions denial of service and what to upgrade, shown on one running example of a tiffin service's two apps.21 min read · Updated 20 Oct 2026
• Next.js Partial Prefetching Explained: How ensureStatic Keeps Routes StaticFrontend · A plain-English guide to Next.js Partial Prefetching and ensureStatic in Next.js 16.4: the three loading stages, the new deferring functions and which settings fail the build, shown on one running example of an online spice shop.20 min read · Updated 19 Oct 2026
• Oblivious HTTP Explained: How Relays and Gateways Hide Your IPBackend · A plain-English guide to Oblivious HTTP (RFC 9458): what the relay and the gateway each see, how HPKE seals a request, and why two separate operators are needed, shown on one running example of a symptom-checker app.13 min read · Updated 19 Oct 2026
• Passkeys vs TOTP Explained: Phishing Resistance, Attestation and RecoveryBackend · A plain-English guide to passkeys vs TOTP after the October 2026 "passkeys are a trap" debate: origin binding, relayed codes, synced and device-bound passkeys, attestation and recovery, shown on one running example of a Pune payroll app.19 min read · Updated 19 Oct 2026
• PgBouncer's October 2026 Authentication Bypass Explained: Upgrade to 1.26.1Backend · A plain-English guide to the PgBouncer authentication bypass and two denial-of-service bugs fixed in version 1.26.1: how pooling and SCRAM logins work, how to check exposure and how to patch, shown on one running example of a food ordering app's database pooler.18 min read · Updated 19 Oct 2026
• AWS Lambda Web Functions Explained: One Environment, Many Concurrent RequestsBackend · A plain-English guide to AWS Lambda Web Functions: how one environment serves many HTTP requests at once and what that changes for state, cold starts, billing and rollouts, shown on one running example of an office lunch-ordering API.13 min read · Updated 19 Oct 2026
• Curl's October 2026 HTTP/2 Use-After-Free Explained: Upgrade to 8.23.0Backend · A plain-English guide to the curl HTTP/2 use-after-free (CVE-2026-92392): how a stream reset leaves a stale pointer, who is exposed through libcurl and how to patch, shown on one running example of a desktop billing app.18 min read · Updated 19 Oct 2026
• GitHub's November 2026 App Token Cutoff Explained: Treat Tokens as OpaqueBackend · A plain-English guide to the GitHub App installation token format change: stateful vs stateless tokens, why tokens must stay opaque and what to fix before 30 November 2026, shown on one running example of a pull-request review bot.13 min read · Updated 19 Oct 2026
• Loom Auth Bypass Explained (CVE-2026-103956): Fail-Closed Login and SSRF FixesBackend · A plain-English guide to CVE-2026-103956 and two Loom SSRF bugs: fail-open vs fail-closed login, outbound URL guards and what operators must do. Everything is shown on one running example of a Kochi houseboat-booking team.21 min read · Updated 19 Oct 2026
• OpenSSH's October 2026 Side-Channel Fix Explained: What Admins Should DoBackend · A plain-English guide to the SSH compression side channel fixed in OpenSSH 10.6: how a shared compressor leaks secrets through packet sizes and what admins should change, shown on one running example of a developer's Redis tunnel through an SSH jump box.13 min read · Updated 19 Oct 2026
• PostgreSQL 14 End of Life Explained: How to Upgrade Before 12 November 2026Backend · A plain-English guide to PostgreSQL 14 end of life: what stops on 12 November 2026, the risks of staying, the three upgrade paths and how to pick a target version, shown on one running example of a medicine delivery app.19 min read · Updated 19 Oct 2026
• PostgreSQL JDBC's October 2026 CVEs Explained: Fail-Open Auth and Padding LeaksBackend · A plain-English guide to the PostgreSQL JDBC vulnerability fixed in pgjdbc 42.7.14: a login rule that failed open, padding that leaked old bytes and what to do, shown on one running example of a GST invoicing app.17 min read · Updated 19 Oct 2026
• Python 3.10 End of Life Explained: Upgrade Before the 31 October Lambda DeadlineBackend · A plain-English guide to Python 3.10 end of life: what stopped on 1 October 2026, when AWS Lambda and PyTorch drop 3.10 and how to upgrade to 3.14 safely, shown on one running example of a school-fees platform.20 min read · Updated 19 Oct 2026
• Linux's October 2026 PwnEscape Bug Explained: How a Checksum Hint Leaks MemoryBackend · A plain-English guide to the PwnEscape KVM escape (CVE-2026-99999): how a guest VM's checksum hint corrupted a host IPv4 header, who is exposed and how to patch, shown on one running example of a KVM sandbox host.12 min read · Updated 19 Oct 2026
• OpenBSD's October 2026 Big Fish Bug Explained: When a 16-Bit Counter WrapsBackend · A plain-English guide to the OpenBSD Big Fish bug: how a 16-bit shared memory counter wrapped, why that leads to use-after-free and how to patch, shown on one running example of a hosting team's firewalls and build servers.18 min read · Updated 19 Oct 2026
• RPKI Route Origin Validation Explained: How ROAs Flag Wrong-Origin RoutesBackend · A plain-English guide to RPKI route origin validation: what a ROA and maxLength say, how routers mark routes Valid, Invalid or NotFound and what ROV still misses, shown on one running example of a payment gateway in Pune.20 min read · Updated 19 Oct 2026
• vLLM Preload Explained: Restart LLM Servers in Seconds with a Weight CacheAI and GenAI · A plain-English guide to vLLM preload: how a per-GPU weight-cache daemon lets a restarting engine reuse weights already in GPU memory, and where it stops helping, shown on one running example of a voice-support team's GPU servers.19 min read · Updated 19 Oct 2026
• The End of Leap Seconds Explained: What Continuous UTC Means for Your CodeBackend · A plain-English guide to the end of leap seconds: what CGPM Resolution 5 changes from 20 May 2027, why leap seconds broke software, how stepping and smearing work and what to check, shown on one running example of a payments settlement service.18 min read · Updated 19 Oct 2026
• GitHub's November 2026 SSH RSA Brownout Explained: Fix Clients, Keep RSA KeysBackend · A plain-English guide to the GitHub SSH RSA deprecation: why SHA-1 ssh-rsa signatures and an old key exchange are going, how to test and fix clients and how to move to Ed25519, shown on one running example of a payments team's build server.22 min read · Updated 19 Oct 2026