Best of SecurityNovember 2022

  1. 1
    Article
    Avatar of communityCommunity Picks·4y

    9 Docker Extensions Every Developer Must Try

    vclusters is a tool with which you can create virtual clusters on top of any Kubernetes cluster. The extension is readily available on the Docker desktop extensions tab and can be installed with a click. The command to list your vcluster list is, vCluster list 4.

  2. 2
    Article
    Avatar of 80lv80 LEVEL·4y

    Elon Musk Hired Renowed Hacker George Hotz To Help Fix Twitter

    Elon Musk has hired renowned iPhone hacker George "geohot" Hotz to fix Twitter's long-broken searching functionality. Hotz is known as the first person who successfully removed the SIM lock on an iPhone in 2007.

  3. 3
    Article
    Avatar of eversqlEverSQL·4y

    How I became a better CTO using these 8 resources

    Google offers 25 lessons, 30+ exercises, real case studies, and lectures from Google experts. The SaaS CTO Security Checklist provides actionable security best practices CTOs can use to harden their security. JavaScript is a bird's eye view of JavaScript, its benefits, patterns, and more.

  4. 4
    Article
    Avatar of infosecwriteupsInfoSec Write-ups·4y

    A Beginner’s Guide to Nmap

    Nmap is an open-source tool that is used to scan IP addresses and ports of a machine or on a network. Nmap can be used for the following purposes - - creating a complete network Map - detecting open ports on local and remote systems. This GitHub repo is made for all, ranging from beginners in cybersecurity to cybersecurity experts.

  5. 5
    Article
    Avatar of communityCommunity Picks·4y

    Writing API Design Standards

    API Development Standards are a focused collection of imperatives, conventions and guidance. They are intended to improve consistency, stability, generality, predictability and usability of business resource APIs. They may offer best-practice recommendations and provide a basis for quality assessment.

  6. 6
    Article
    Avatar of communityCommunity Picks·4y

    7 Reasons for Startups to Choose ASP.NET Over Node.js

    Companies like Twitter, LinkedIn, Uber, and many others use Node.js as their primary server technology or combine it with other languages.

  7. 7
    Article
    Avatar of newstackThe New Stack·4y

    Say Goodbye to Browsers and Passwords

    Authentication is no longer a simple act of providing a username and password. It’s a journey that the user takes to confirm their identity and gain secure access to their resources. The browser is a solid choice as it gives us essential security features. Hypermedia allows users to traverse authentication steps as needed.

  8. 8
    Article
    Avatar of pointerPointer·4y

    milanm/DevOps-Roadmap: DevOps Roadmap for 2022. with learning resources

    This is a step by step guide on how to become a DevOps engineer, with links to relevant learning resources. The road map will guide you if you are confused about what to learn next, rather than encouraging you to pick what is hype and trendy.

  9. 9
    Article
    Avatar of awstipAWS Tip·4y

    Day 9 | Load Balancing

    Elastic Load Balancers are servers that forward traffic to multiple servers (e.g., EC2 instances) downstream. Expose a single point of access (DNS) to your application - Seamlessly handle failures of downstream instances.

  10. 10
    Article
    Avatar of dzDZone·4y

    Secrets at the Command Line (Cheat Sheet Included)

    The first step toward securing secrets in the command line is taking inventory of what secrets might exist. Passwords, Keys, and Certificates Passwords are something you know to prove who you are. There are many approaches for securing passwords locally, and we will dig into those later in this article.

  11. 11
    Article
    Avatar of logrocketLogRocket·4y

    Build a secure mobile banking app with Flutter

    We will learn about the essential aspects of building secure mobile banking apps with Flutter and look at sample codes on how to achieve them using the Flutter framework. Using Flutter Secure Sockets Layer, was the first definition of how messages can be secured in network communication.

  12. 12
    Article
    Avatar of infosecwriteupsInfoSec Write-ups·4y

    Must See Sites From The Depths of Dark Web!

    A part of the deep web is the dark web, which exists inside layered proxy networks, so-called darknets. Of these darknets, Tor is by far the largest. Dark Web marketplaces offer to buy illegal drugs online like LSD, Cannabis, Cocaine, etc., which are easily available on dark web drug markets.

  13. 13
    Article
    Avatar of devgeniusDev Genius·4y

    Docker security: Risks and Best Practices

    The Docker daemon generates and manages your Docker objects, such as images, containers, networks, and volumes. By default, the process inside a container is run as root (id=0) To enforce the principle of least privilege, you should set a default user. Testing should be a part of every development project that considers security.

  14. 14
    Article
    Avatar of phProduct Hunt·4y

    PyXtools: Python + Hacking - Collection of hacking & python scripts

    This app is only for educational purposes, if you cause any harm to someone through this app, then we are not responsible.

  15. 15
    Article
    Avatar of hnHacker News·4y

    Accidental $70k Google Pixel Lock Screen Bypass

    The vulnerability is tracked as CVE-2022-20465 and it might affect other Android vendors as well. The bug just got fixed in the November 5, 2022 security update. It allowed an attacker with physical access to bypass the lock screen protections (fingerprint, PIN, etc.)

  16. 16
    Article
    Avatar of codegurucodeguru·4y

    Best Microsoft Certifications for Developers

    The Microsoft Certified: Azure Developer Associate certification is worth going after if you already have one of the following certifications. With both exams passed, you can now become a developer who works with finance and operations apps in Microsoft Dynamics 365 to implement and extend apps to meet the business’ requirements.

  17. 17
    Article
    Avatar of ds_centralData Science Central·4y

    Blockchain Technology Applications in the Real World

    The spending on blockchain is expected to increase to $15.9 billion by 2023, according to Statista. Technology is giving each industry a facelift from finance to supply chain and creating demand for blockchain professionals in this worldwide business overhaul.

  18. 18
    Article
    Avatar of ghblogGitHub Blog·4y

    Everything new from GitHub Universe 2022

    GitHub Copilot is an AI pair programmer that uses OpenAI Codex to suggest code and entire functions in real time. Code search has a powerful new interface that allows developers to construct queries with suggestions, offers completions, and provides the ability to slice and dice results.

  19. 19
    Article
    Avatar of communityCommunity Picks·4y

    How to check if your libraries are vulnerable?

    More than 50% of top 500 global companies use open-source software. When it comes to security, open source software may be perceived as more secure than proprietary software. To scan your applications for vulnerable libraries use free SCA tools like Mend, Snyk, SonarQube, or CodeSec by Contrast.

  20. 20
    Article
    Avatar of logrocketLogRocket·4y

    Using DockerSlim to minimize container image size

    Using DockerSlim to minimize container image size is easy to set up and use. It can make your container up to 30 times smaller, as well as more secure. It will minify any container, as long as it is Linux-based and OCI-complaint.

  21. 21
    Article
    Avatar of hackernoonHacker Noon·4y

    Secure Coding Practices Every Developer Should Know

    There are a number of methods that developers can use to keep their code and data secure. Code obfuscation is an important practice that prevents hackers from gaining access to sensitive information in an application. A successful implementation of secure coding practices will require a change of culture within the company.