惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

雷峰网
雷峰网
V
Visual Studio Blog
NISL@THU
NISL@THU
S
Security Affairs
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
大猫的无限游戏
大猫的无限游戏
Microsoft Security Blog
Microsoft Security Blog
云风的 BLOG
云风的 BLOG
The Register - Security
The Register - Security
博客园_首页
月光博客
月光博客
aimingoo的专栏
aimingoo的专栏
I
InfoQ
Spread Privacy
Spread Privacy
P
Proofpoint News Feed
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
爱范儿
爱范儿
T
Tor Project blog
有赞技术团队
有赞技术团队
美团技术团队
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
Hacker News: Ask HN
Hacker News: Ask HN
Google DeepMind News
Google DeepMind News
WordPress大学
WordPress大学
Google Online Security Blog
Google Online Security Blog
Vercel News
Vercel News
Webroot Blog
Webroot Blog
S
Security @ Cisco Blogs
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Application and Cybersecurity Blog
Application and Cybersecurity Blog
D
DataBreaches.Net
J
Java Code Geeks
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
腾讯CDC
博客园 - 司徒正美
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
Security Archives - TechRepublic
Security Archives - TechRepublic
G
Google Developers Blog
The GitHub Blog
The GitHub Blog
小众软件
小众软件
www.infosecurity-magazine.com
www.infosecurity-magazine.com
N
News and Events Feed by Topic
Forbes - Security
Forbes - Security
T
Troy Hunt's Blog
C
Check Point Blog
D
Docker
Latest news
Latest news
Martin Fowler
Martin Fowler
T
Tenable Blog

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
Why Your Config Files Break After Every Upgrade (and How Plain Text Fixes It)
Alan West · 2026-04-26 · via DEV Community

Ever had that moment where you upgrade a tool, open your project, and suddenly half your configuration is unreadable? Maybe it's a binary .dat file from a build tool that changed its serialization format. Maybe it's a proprietary project file that the new version "migrated" into something your teammates on the old version can't open.

I've been dealing with this exact problem for over eight years across different stacks, and I keep arriving at the same conclusion: plain text is the most resilient data format we have, and the further you stray from it, the more pain you're signing up for.

The Root Cause: Format Coupling

The core issue isn't that tools upgrade. It's that binary and proprietary formats create tight coupling between your data and a specific version of a specific tool.

Here's what typically happens:

  1. Tool version 2.x writes config in a binary format
  2. Tool version 3.x changes the internal schema
  3. Your CI pipeline, your coworker's machine, or your Docker image is still on 2.x
  4. Everything breaks, and nobody knows why until someone diffs the tool versions

You can't git diff a binary file. You can't grep through it. You can't hand-edit it when things go sideways at 2 AM during an incident. The format itself becomes a liability.

Plain text formats — YAML, JSON, TOML, INI, even raw .conf files — don't have this problem. They're version-agnostic by nature. A text file written in 1994 is still perfectly readable today.

Step 1: Audit Your Non-Text Dependencies

Before you can fix the problem, you need to find it. Run a quick audit of your project directory to identify binary config and data files:

# Find files that git considers binary in your repo
git grep -Il '' -- ':/' | sort > /tmp/text_files.txt
git ls-files -- ':/' | sort > /tmp/all_files.txt
comm -23 /tmp/all_files.txt /tmp/text_files.txt

Enter fullscreen mode Exit fullscreen mode

This gives you a list of every file git treats as binary. Some of these are fine (images, compiled assets). But if you see config files, lock files, or data files in that list, those are your risk points.

Another quick check — look for files that have changed but produce useless diffs:

# Show files where git diff produces "Binary files differ"
git log --oneline --diff-filter=M --name-only HEAD~20..HEAD | \
  sort -u | while read f; do
    git diff HEAD~1 -- "$f" 2>/dev/null | grep -q "Binary files" && echo "$f"
  done

Enter fullscreen mode Exit fullscreen mode

Every file that shows up here is a file you can't meaningfully review in a pull request. That should worry you.

Step 2: Convert What You Can

A surprising number of tools support plain text alternatives that people just don't use because the binary format is the default.

SQLite databases used as config stores — I've seen projects use SQLite for settings when a simple JSON or TOML file would do. If you're not querying the data relationally, you don't need a database file.

import json
import sqlite3

def migrate_settings_to_json(db_path: str, json_path: str):
    """Pull key-value settings out of SQLite into a plain JSON file."""
    conn = sqlite3.connect(db_path)
    cursor = conn.execute("SELECT key, value FROM settings")
    settings = {row[0]: row[1] for row in cursor.fetchall()}
    conn.close()

    with open(json_path, "w") as f:
        json.dump(settings, f, indent=2)  # human-readable, diffable, greppable

Enter fullscreen mode Exit fullscreen mode

Protobuf or MessagePack for local config — These are great for network serialization where performance matters. They're terrible for config files that humans need to read and edit. Swap them for TOML or YAML.

IDE project files — Many IDEs generate binary or XML-heavy project files. Most modern ones also support simpler formats. VS Code's settings.json is a good example of getting this right — it's just JSON, and it diffs cleanly.

Step 3: Enforce Plain Text at the Boundary

Once you've converted what you can, prevent regression. Add a pre-commit hook that flags new binary files:

#!/usr/bin/env bash
# .git/hooks/pre-commit — warn on new binary files

binary_files=$(git diff --cached --diff-filter=A --name-only | while read f; do
    # check if file is binary using the file command
    mime=$(file --brief --mime-encoding "$f" 2>/dev/null)
    if [[ "$mime" == "binary" ]]; then
        echo "$f"
    fi
done)

if [[ -n "$binary_files" ]]; then
    echo "WARNING: New binary files detected:"
    echo "$binary_files"
    echo ""
    echo "If these are config/data files, consider using a plain text format."
    echo "To proceed anyway, use: git commit --no-verify"
    exit 1
fi

Enter fullscreen mode Exit fullscreen mode

This doesn't block images or compiled assets from people who know what they're doing, but it does force a conversation when someone adds a new binary config file.

Step 4: Structure Your Plain Text for Longevity

Plain text alone isn't enough. You need plain text that's structured well enough to survive the next decade. A few principles I've learned the hard way:

  • Pick a format with a spec. TOML has a spec. YAML has a spec. Your custom key=value format does not. When your parsing breaks, a spec gives you something to point to.
  • Avoid format features you don't need. YAML's anchors, aliases, and type coercion have caused more bugs than they've saved keystrokes. Use the simplest subset that does the job.
  • Include comments. One of the biggest advantages of plain text config is that you can explain why a setting exists, right next to the setting itself. Use that.
  • One concern per file. A single config.yaml with 400 lines covering database, auth, logging, and feature flags is going to cause merge conflicts constantly. Split it.
# database.toml — connection settings for the primary datastore
# Last reviewed: 2026-03-15

[connection]
host = "localhost"
port = 5432
name = "appdb"

# Pool size tuned after load testing in Q1.
# Going above 25 caused connection timeouts on the read replicas.
pool_size = 20
pool_timeout = 30

Enter fullscreen mode Exit fullscreen mode

That file is readable by any TOML parser in any language, by any version of any tool, and by any human with a text editor. Try saying that about a binary config blob.

Why This Matters More Than You Think

Plain text isn't just about readability. It's about operational resilience.

When something goes wrong in production, your first instinct is to look at what changed. If your config is in plain text, git log -p tells you exactly what changed, when, and who did it. If it's binary, you're guessing.

Plain text files are also trivially composable. You can cat them together, sed them in a pipeline, template them with envsubst, validate them with a JSON schema. The entire Unix philosophy was built on the assumption that data flows as text between small programs. When you fight that assumption, you're fighting decades of tooling.

And here's the longevity argument that really convinced me: I can still read every plain text file I created in college. I cannot say the same for my Word documents, my old Keynote files, or the project files from any IDE I used before 2015.

Prevention: Questions to Ask Before Adding a New Format

Before you introduce any new file format to a project, ask these three questions:

  • Can I diff it? If git diff produces gibberish, that's a code review problem waiting to happen.
  • Can I read it without the tool that created it? If the tool disappears tomorrow, can you still access your data?
  • Can I edit it with a text editor in an emergency? When the GUI is down and the CLI is broken, vim is still there.

If the answer to any of these is no, you need a very good reason to use that format. "It's the default" is not a good reason.

Plain text has survived every technology shift of the last fifty years — mainframes, PCs, the web, mobile, cloud, containers. It'll survive whatever comes next. Your binary config format probably won't. Choose accordingly.