True to his style, Chris rants about how the whole “in the 90’s all we had to eat was View Source bytes” debate is blown out of proportion, and reframes it under a soundly reasoned light: the end result is better now than it ever was.

Olivier explains – in excruciating detail – how JSON can be exploited to attack vulnerable Node.js systems in a myriad of cases. Worth a serious read.

Want to own Mastering Modular JavaScript?
We’re giving away FIVE digital copies for FREE on Twitter
Go on Twitter, then RT, like, & comment for a chance to win!
Ends Feb 1

“StarCraft, considered to be one of the most challenging Real-Time Strategy games and one of the longest-played esports of all time, has emerged by consensus as a “grand challenge” for AI research. Here, we introduce our StarCraft II program AlphaStar, the first Artificial Intelligence to defeat a top professional player.”

In recent years, JavaScript has grown considerably in size. Axel explores what’s still missing.

A few highlights of changes coming to yarn@2 at some point in 2019:

• Plugin system
• New API
• Better monorepo DX
• Better yarn link DX
• Migration from Flow to TypeScript — Flow is being abandoned in droves!
• EOL for Node 4 and Node 6 support

Fast and simple Node.js version manager written in Reason.

Single binary, easy installation
Built with speed in mind
Works with .nvmrc files

It’s like nvm without the extra increased startup time.

Practical guide on how to write portable Node.js code. Useful if your code needs to run on Windows, Linux, and macOS.

“This specification defines an API enabling the creation and use of strong, attested, scoped, public key-based credentials by web applications, for the purpose of strongly authenticating users.”

• Public key credentials, each scoped to a relying party, are created by and bound to authenticators as requested by the app
• The user agent mediates access to authenticators and their public key credentials in order to preserve user privacy
• Authenticators are responsible for ensuring that no operation is performed without user consent
• Authenticators provide cryptographic proof of their properties to relying parties via attestation

To learn more about the mechanics of Web Authentication and play around with it, there’s this cool demo site.

Developers don’t care about OAuth or OpenID Connect. Randall explains how learning more about these standards and specifications can lead to more secure experiences built into your apps.

Malcolm describes how his team uses visual regression testing to save time and headaches.