> Markdown version of [/magazine/411-dev-digest-110-xy-marks-the-spotty-security](https://www.wearedevelopers.com/magazine/411-dev-digest-110-xy-marks-the-spotty-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Dev Digest 110 - XY marks the spotty security

**By:** [Chris Heilmann](https://www.wearedevelopers.com/@chris-heilmann)

**Published:** April 8, 2024

This time we give you a collection of links about the XZ backdoor, solve the last CODE100 puzzle, announce the next round of it, let you play with colours and explain why Lava lamps are great to keep the web secure.

## News and Articles

The big piece of news last week was the **wild security issue that could have taken down thousands of servers**. We created list of [articles and tools around the XZ backdoor](https://gist.github.com/codepo8/a8eceb1468a7310f94b37d0edef589d2?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) that we will keep updating. We also have a Coffee with Developers special in the making - so look out for that one.

In other security news [Google might add Encryption Keys to Chrome](https://www.pcmag.com/news/google-to-fight-cookie-hijacking-with-encryption-keys-for-chrome-browser?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) to prevent Cookie hijacking and [will destroy browsing data collected in Incognito mode](https://www.theverge.com/2024/4/1/24117929/google-incognito-browsing-data-delete-class-action-settlement?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw). You probably didn't know that incognito mode collects data, as well as Facebook's Project "Ghostbusters" [secretly looking at Snapchat, Amazon, and YouTube user data](https://mashable.com/article/facebook-snapchat-data-project-ghostbusters-mark-zuckerberg?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw). Then again, we don't need evil corporate sniffing when developers download [AI hallucinated software packages with malware](https://www.lasso.security/blog/ai-package-hallucinations?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) nilly-willy.

Other news is that [Bun 1.1 is out and is available on Windows](https://bun.sh/blog/bun-v1.1?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) and did you know that it's [partial prerendering is powerful](https://aralroca.com/blog/partial-prerendering?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw)? Other JavaScript news is that there is a [proposal to add Signals](https://github.com/proposal-signals/proposal-signals?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw). If you still wonder about Promises, Lydia Hallie has a [great visualisation of Promise Execution](https://www.lydiahallie.com/blog/promise-execution?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) that might clear things up.

## Code and Tools

![buntstattbraun](https://wearedevelopers.imgix.net/public/magazine/articles/411/images/6605470da05937fb11fca989_buntstattbraun.gif)

## CODE100 puzzle: #BuntStattBraun

Did you manage to solve the puzzle? We [wrote up an explanation](https://puzzles.code100.dev/puzzles/bunt-statt-braun?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) how to approach this and here's a [codepen](https://codepen.io/codepo8/pen/MWRmjzr?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) showing how the hearts were created in the first place.

- Atlassian [released a Flexible and fast drag and drop](https://atlassian.design/components/pragmatic-drag-and-drop/about?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) solution
- [Mismerge](https://github.com/BearToCode/mismerge?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) is a merge editor for the Web
- [Marker.io](https://marker.io/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw)- send feedback and bug reports without leaving your website.

## Join our hackathon

![Join us now and shape the future of retail at the hackathon on the 4th and 5th of June in Vienna](https://wearedevelopers.imgix.net/public/magazine/articles/411/images/6613877a107e5d9dfbad92a3_240325-rewe-at-hackathon-sm-horizontal-static.jpeg?w=720&fit=max&dpr=2&auto=format)

[Rethink Retail](https://live.wearedevelopers.com/rewe-rethink-retail?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw), Austria's first REWE retail hackathon in cooperation with WeAreDevelopers, is coming to Vienna. 15 development teams, 2 days and the unique opportunity to shape the future of retail. That is RETHINK RETAIL. Join our coding challenge and create innovative ideas and developments.

**Score amazing prizes at Rethink Retail:**

- **1st prize:** €5k, half of it in cash and half of it in REWE Group vouchers
- **2nd and 3rd prize:** €3k and €1k, half of it in cash and half of it in vouchers
- **Sustainability Prize:** €1k cash
- **Tickets for the WeAreDevelopers World Congress 2024 in Berlin**

[Join us for a groundbreaking event where tech meets retail excellence](https://live.wearedevelopers.com/rewe-rethink-retail?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw)

## Work and Jobs

![](https://wearedevelopers.imgix.net/public/magazine/articles/411/images/0fd5884c-c90f-4cf5-ac92-3ebdf90f9a7d_1584x1166.jpeg?w=720&fit=max&dpr=2&auto=format)

‍

There can't be any doubt that the internet has changed education and work forever. So there is a question if [university professors need to rethink lesson plans](https://www.theverge.com/22684730/students-file-folder-directory-structure-education-gen-z?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) for a generation that grew up with web search. We also need to ask what the difference is when[learning to code with and without AI](https://austinhenley.com/blog/learningwithai.html?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) and whether or not [AI produces lazy humans](https://bigthink.com/the-present/why-great-ai-produces-lazy-humans/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw). Maybe it is time focus on being more human and [develop essential soft skills](https://hybridhacker.email/p/essential-soft-skills-for-engineers-and-managers?r=2bjtip&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw). Last but not least, what is [the state of engineering productivity](https://refactoring.fm/p/the-state-of-engineering-productivity?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) and does it need improving?

## Procrastination Corner / Wonderful Weird Web

- [The Wi-Fi only works when it's raining](https://predr.ag/blog/wifi-only-works-when-its-raining/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) is an interesting problem to have…
- Cloudflare [protects the internet with lava lamps](https://grantpiperwriting.medium.com/how-a-wall-of-lava-lamps-is-protecting-the-internet-c7b773b251ee?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) (and here's one [in CSS](https://codepen.io/maxi83c/pen/ExoMGGv?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw)).
- Let's play with colours: the [AI Color Combination Generato](https://colors.muz.li/ai-color-combination-generator/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw)r generates colour themes from a prompt, [Colormatch](https://colormatch.pages.dev/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) asks you to pick a colour against the clock and [Guess My RGB](https://susam.net/myrgb.html?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) asks you to do the same with sliders.

## **CODE100 is coming to the UK!**

![](https://wearedevelopers.imgix.net/public/magazine/articles/411/images/6613877a6b9eb367f449e817_code100-unknown.jpeg?w=720&fit=max&dpr=2&auto=format)

The next edition of **CODE100** will be in Manchester on the **22nd of May** as part of [DTX Manchester](https://www.dtxevents.io/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw)! We are looking for [participants](https://www.wearedevelopers.com/events/code100?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw#ticket-1) and [challengers](https://www.wearedevelopers.com/events/code100-challenger?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw).

Head on over to the official [CODE100 web site](https://code100.dev/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_3JfHcYiVEDk8m2OV9Yf9XjbIydxPAyoFi1jqMxK37jXFUZL4gBTZbw5QetjEoraVo5BDw) to learn all about it.



## Related Articles

- [Dev Digest 105 - Security First](https://www.wearedevelopers.com/magazine/393-dev-digest-105-security-first)
- [Dev Digest 109 -Egg-citing things…](https://www.wearedevelopers.com/magazine/408-dev-digest-109-egg-citing-things)
- [Dev Digest 111 - npm i -g issues](https://www.wearedevelopers.com/magazine/415-dev-digest-111-npm-i-g-issues)
- [Dev Digest 123 - Easy as A, B, C1](https://www.wearedevelopers.com/magazine/459-dev-digest-123-easy-as-a-b-c1)

## Related Videos

- [WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe](https://www.wearedevelopers.com/videos/2132-wearedevelopers-live-code100-at-wearedevelopers-europe)
- [WeAreDevelopers LIVE - Back to CODE100](https://www.wearedevelopers.com/videos/1909-wearedevelopers-live-back-to-code100)
- [WeAreDevelopers LIVE - Dapr / Pixels and Generative Art / Open Source and Communities / and more](https://www.wearedevelopers.com/videos/1720-wearedevelopers-live-dapr-pixels-and-generative-art-open-source-and-communities-and-more)
- [FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko](https://www.wearedevelopers.com/videos/1912-fifa-hack-midjourney-does-ultrasounds-and-trampoline-traffic-lights-nicole-jeschko-and-werner-jeschko)

## Related Jobs

- [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/679408-remote-senior-full-stack-engineer) at **Edge Impulse**
- [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/645320-remote-senior-full-stack-engineer) at **Edge Impulse**
- [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/646086-remote-senior-full-stack-engineer) at **Edge Impulse**
- [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/683045-remote-senior-full-stack-engineer) at **Edge Impulse**
- [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/639235-remote-senior-full-stack-engineer) at **Edge Impulse**
- [Software Engineer Frontend (all genders welcome) in the field of Water Line Integrity Solutions](https://www.wearedevelopers.com/jobs/ext/127888-software-engineer-frontend-all-genders-welcome-in-the-field-of-water-line-integrity-solutions) at **Rosenxt Group**