Securing ecommerce: "It's complicated" (Interview)
Ilya Grigorik and his team at Shopify has been hard at work securing ecommerce checkouts from sophisticated news attacks (such as digital skimming) and he’s here to share all the technical intricacies and far-reaching implications of this work.
Join the discussion
Changelog++ members save 7 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
Retool – The low-code platform for developers to build internal tools — Some of the best teams out there trust Retool…Brex, Coinbase, Plaid, Doordash, LegalGenius, Amazon, Allbirds, Peloton, and so many more – the developers at these teams trust Retool as the platform to build their internal tools. Try it free at retool.com/changelog
Augment Code – Developer AI that uses deep understanding of your large codebase and how you build software to deliver personalized code suggestions and insights. Augment provides relevant, contextualized code right in your IDE or Slack. It transforms scattered knowledge into code or answers, eliminating time spent searching docs or interrupting teammates.
Featuring:
Ilya Grigorik – Website, GitHub, X
Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
Powering Shopify’s High-Performance, PCI DSS v4 Compliant Checkout with Sandboxing
PCI Compliance: What Is It and Everything Retailers Need to Know
PCIv4: SRI gaps and opportunities - Google Docs
Shopify/remote-dom
Something missing or broken? PRs welcome!
Battling ticket bots and untangling taxes at the frontiers of e-commerce
You can find Ilya on LinkedIn here.
You can listen to Ilya talk about Commerce Components here, a system he describes as a "modern way to approach your commerce architecture without reducing it to a (false) binary choice between microservices and monoliths."
As Ilya notes, “there are a lot of interesting implications for runtime and how we're solving it at Shopify. There is a direct bridge there to a performance conversation as well: moving untrusted scripts off the main thread, sandboxing UI extensions, and more.”
No badge winner today. Instead, user Kaizen has a question about Shopify that still needs an answer. Maybe you can help!
How to Activate Shopify Web Pixel Extension on Production Store?
See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
Shopify's vision for the future of commerce (Interview)
Today we’re joined by Ilya Grigorik to talk about Shopify’s developer preview release of Hydrogen and the preview release of Oxygen which is in early access preview with select merchants on Shopify. Hydrogen is their React framework for dynamic, contextual, and personalized e-commerce. And Oxygen is Shopify’s hosted V8 JavaScript worker runtime that leverages all of their platform with the hope of scaling millions of storefronts. We cover what developers can expect from the Hydrogen framework, Shopify’s big bet on React Server Components, the future of Shopify at scale with Hydrogen powered by Oxygen, and a world where merchants never have to think about the complexities of scaling infrastructure.
Join the discussion
Changelog++ members get a bonus 5 minutes at the end of this episode and zero ads. Join today!
Sponsors:
Fly.io – Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.
Retool – Retool is a low-code platform built specifically for developers that makes it fast and easy to build internal tools. Instead of building internal tools from scratch, the world’s best teams, from startups to Fortune 500s, are using Retool to power their internal apps. Learn more and try it for free at retool.com/changelog
Sourcegraph – Move fast, even in big codebases. Sourcegraph is universal code search for every developer and team. Easily search across all the code that matters to you and your organization: find example code, explore and read code, debug issues, and more. Head to info.sourcegraph.com/changelog and click the button “Try Sourcegraph now” to get started.
FireHydrant – The reliability platform for teams of all sizes. With FireHydrant, teams achieve reliability at scale by enabling speed and consistency from a service deployment to an unexpected outage. Try FireHydrant free for 14 days at firehydrant.io
Featuring:
Ilya Grigorik – Website, GitHub, X
Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
Ilya’s Twitter thread
Meet Hydrogen: A React Framework For Dynamic, Contextual And Personalized E-Commerce
Hydrogen > new
Shopify/hydrogen
Changelog Search > “Ilya Grigorik”
Changelog Merch
Kids Anthem
React Server Components Explained
Building Blocks of High Performance Hydrogen-powered Storefronts
The Changelog #416: Shopify’s massive storefront rewrite with Maxime Vaillancourt
JS Party #178: Running Node natively in the browser with Eric Simons from StackBlitz
Something missing or broken? PRs welcome!
The HTTP/2 Spec (Interview)
Ilya Grigorik is back again — this time we’re talking about his true passion, internet plumbing, web performance, and the HTTP/2 spec. We cover everything around HTTP/2, the spec, HTTP/1 history, SPDY, binary framing layer, the semantics of HTTP/2, pipelining, multiplexing, header compression (HPACK), server push, TLS, “time to glass”, upgrading, adoption, support, and more.
Join the discussion
Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!
Sponsors:
Codeship – If it works with Docker, it works with Codeship Jet.
Code School – Learn to program by doing with hands-on courses. Sign up for Code School at only $19/month. That’s $10 off per month!
Featuring:
Ilya Grigorik – Website, GitHub, X
Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
Ilya Grigorik (@igrigorik) on Twitter
Ilya Grigorik on GitHub
The Changelog #55: Goliath, Event Machine, and SPDY with Ilya Grigorik
The Changelog #144: GitHub Archive and Changelog Nightly with Ilya GrigorikChangelog
High Performance Browser Networking
Chapter 12. HTTP/2 - High Performance Browser Networking
HTTP/2 in one slide
Application-Layer Protocol Negotiation - Wikipedia, the free encyclopedia
Is TLS Fast Yet?
Implementations · http2/http2-spec Wiki
h2o/h2o
Nghttp2: HTTP/2 C Library - nghttp2.org
Jetty - Servlet Engine and Http Server
Website Performance Optimization Testing Course - Udacity
SPDY: An experimental protocol for a faster web - The Chromium Projects
Changelog Weekly - Issue #54
Changelog Weekly - Issue #55
Google’s Ilya Grigorik on HTTP 2.0
Something missing or broken? PRs welcome!
GitHub Archive and Changelog Nightly (Interview)
Ilya Grigorik joined the show to talk about GitHub Archive, logging and archiving GitHub’s public event data, and how he uses Google BigQuery to make querying that data accessible to everyone.
Join the discussion
Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!
Sponsors:
Codeship – If it works with Docker, it works with Codeship Jet.
Toptal – Join Toptal and work with awesome people from anywhere in the world. Freelance with companies like Airbnb, Artsy & IDEO.
Code School – Learn to program by doing with hands-on courses. Sign up for Code School at only $19/month. That’s $10 off per month!
Featuring:
Ilya Grigorik – Website, GitHub, X
Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
Ilya is a web performance engineer at Google where he works day and night making the web faster.
In this show we also announced Changelog Nightly - our new nightly email that unearths the hottest new repos on GitHub before they blow up.
GitHub Archive
Subscribe to Changelog Nightly
Subscribe to Changelog Weekly (highly curated and editorialized)
thechangelog/nightly - GitHub
Google BigQuery - Fully Managed Big Data Analytics Service — Google Cloud Platform
The Changelog #55: Goliath, Event Machine, and SPDY with Ilya Grigorik
Ilya Grigorik - igvita.com
Dremel (software) - Wikipedia, the free encyclopedia
GitHut - Programming Languages and GitHub
Email updates? · Issue #83 · igrigorik/githubarchive.org
The Chromium Projects
High Performance Browser Networking
Something missing or broken? PRs welcome!
Goliath, Event Machine, SPDY (Interview)
Wynn caught up with Ilya Grigorik, Founder and CTO of PostRank to talk about Goliath, async Ruby web development, and Google’s SPDY.
Join the discussion
Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!
Featuring:
Ilya Grigorik – Website, GitHub, X
Wynn Netherland – GitHub, X
Show Notes:
Look for Steve Klabnik at CodeConf.
Ilya Grigorik founder and CTO of PostRank.
PostRank taps into intelligence from the social web.
igvita.com is Ilya’s awesome Ruby, performance, and big data blog.
Goliath Goliath is an open source version of the non-blocking (asynchronous) Ruby web server framework powering PostRank.
Thin glues together Mongrel parser, Event Machine, and Rack.
Evidently we’ve discussed Node.js “at length” on this show.
Goliath hides much of the complexity of its asynchronous architecture from the developer
Goliath was designed for and has been benchmarked on MRI, JRuby and Rubinius
PostRank heavily employs AMQP
The PostRank APIs allow you to create applications that interact with the subscription management component of the PostRank website, as well as, create and retrieve story ratings and customized RSS feeds for your users.
The Top Posts Widget lets you showcase the most important articles on your site, encouraging viewers to click on more articles and read what matters.
A GitHub account and a blog are key differentiators for developers looking to get hired at PostRank.
Ilya says “presentation is 50% of the actual deliverable”. Great READMEs are important.
Ilya looks up to Brad Fitzpatrick of LiveJournal and Memcached fame.
Ilya’s blog tagline: “A goal is a dream with a deadline.”
Anybody still using GTD?
Ilya isn’t beholden to any one editor but loves both Vim and TextMate.
SPDY: (pronounced “SPeeDY”) An experimental protocol for a faster web. The usual HTTP GET and POST message formats remain the same; however, SPDY specifies a new framing format for encoding and transmitting the data over the wire.
If you’re using Chrome, you may be using SPDY and not even know it.
mod_spdy is an experimental proof-of-concept SPDY Apache module.
ØMQ zeromq: socket library that acts as a concurrency framework as discussed on Episode 0.3.4.
Something missing or broken? PRs welcome!
