Best of Security2023

  1. 1
    Article
    Avatar of amplicationAmplication·3y

    The Complete Microservices Guide

    Microservices have emerged as a popular architectural approach for designing and building software systems for several compelling reasons and advantages. It is a design approach that involves dividing applications into multiple distinct and independent services called "microservices" Microservices are naturally distributed services as each service is isolated from the others and runs in its own instance.

  2. 2
    Article
    Avatar of dzDZone·3y

    The Future of Web Development

    The Future of Web Development: Predictions and Possibilities Discover the future of web development. Explore AI, PWAs, VR, and more. Get insights on possibilities and the role of web developers.

  3. 3
    Article
    Avatar of medium_jsMedium·3y

    Doing much better than your .env file

    Tony: I argue again for why we should reduce the practice of storing all environment variables in a.env file and move to a more sophisticated approach for managing them in local development. He says this article is intended for software development teams and not security and devops teams that already have this figured out.

  4. 4
    Article
    Avatar of devtoDEV·2y

    Explaining SSH to my Uber Driver

    SSH is a secure, secret tunnel that allows developers to connect to another computer over the internet and perform various tasks. It is commonly used for deploying code and updating server configurations. SSH's encryption and authorization protocols make it more secure than older communication protocols. By using public-key authentication, SSH protects user information from hackers.

  5. 5
    Article
    Avatar of bytebytegoByteByteGo·3y

    Password, Session, Cookie, Token, JWT, SSO, OAuth - Authentication Explained - Part 1

    Password, Session, Cookie, Token, JWT, SSO, OAuth - Authentication Explained - Part 1. We discuss the problems each method solves and how to choose the right authentication method for our needs. The diagram below shows where these methods apply in a typical website architecture and their meanings.

  6. 6
    Article
    Avatar of developertechDeveloper Tech·3y

    GitHub opens Copilot Chat to all developers

    Copilot Chat was launched for ‘Business’ users in July. The AI assistant is capable of assisting developers in their preferred natural language and promises to reduce repetitive tasks. The tool empowers developers to learn and build in the language that feels most natural.

  7. 7
    Article
    Avatar of bytebytegoByteByteGo·3y

    EP68: Top architectural styles

    New Relic APM 360 goes beyond incident response and unlocks daily performance, security, and development insights for all engineers in one unified view. Firewall explained to Kids… and Adults A firewall is a network security system that controls and filters network traffic, acting as a watchman between a private network and the public Internet.

  8. 8
    Article
    Avatar of freecodecampfreeCodeCamp·3y

    How to Get a Github Student Developer Pack

    GitHub Student Developer Pack provides students with access to a variety of top-notch developer tools. The pack is made up of a selection of benefits generously provided by GitHub's partners and collaborators. As a student, you will get access to six free months of 60+ courses covering in-demand topics.

  9. 9
    Article
    Avatar of asayerasayer·3y

    Best Practices for Security in Next.js

    Explore common security vulnerabilities in web applications and learn best practices for securing Next.js applications, including keeping dependencies up-to-date, input validation, authentication and authorization, data encryption, implementing security headers, and using TypeScript for type safety.

  10. 10
    Article
    Avatar of snykSnyk·3y

    Modern VS Code extension development: The basics

    Microsoft Visual Studio (VS) Code is currently the most popular source code editor. It can be used as a fully-fledged integrated development environment (IDE) All you need to do is add the right set of extensions from the Visual Studio Code Marketplace. Snyk Security is defined as a linter and programming language extension.

  11. 11
    Video
    Avatar of fireshipFireship·2y

    10 weird algorithms

    Explore 10 weird algorithms that are used to solve interesting real-world problems in science, gaming, machine learning, and digital security.

  12. 12
    Article
    Avatar of hnHacker News·2y

    Stop using JSON Web tokens for user sessions

    Using JSON Web tokens (JWTs) for user sessions without an effectively implemented logout mechanism can lead to security vulnerabilities. An XSS vulnerability can allow an attacker to access and exploit the JWT, gaining unauthorized access to the application.

  13. 13
    Article
    Avatar of amplicationAmplication·3y

    Why We Chose Node.js Over Deno?

    Node.js was the de-facto standard for writing server-side JavaScript apps in the 2010s. Ryan Dahl introduced Deno in 2018 in his controversial JSConf EU talk titled "10 Things I Regret About Node.JS" This article gives an overview of the platforms, history, performance, security, and all other critical features.

  14. 14
    Article
    Avatar of medium_jsMedium·3y

    Best Practices for Building Large-Scale Node.js Applications

    Best practices for building and scaling large-scale Node.js applications, including code organization, performance optimization, scalability, and security.

  15. 15
    Article
    Avatar of ghblogGitHub Blog·3y

    GitHub Copilot now has a better AI model and new capabilities

    GitHub Copilot has upgraded its AI model, resulting in better code suggestions and reduced serving time. It also introduced a new security vulnerability filter to identify insecure coding patterns. Developers can now experience faster coding with more accurate suggestions.

  16. 16
    Article
    Avatar of infosecwriteupsInfoSec Write-ups·3y

    API Security for Developers

    This post provides a high-level checklist for developers to securely develop APIs, covering all OWASP Top 10 API security issues. It emphasizes the importance of secure APIs and the risks they pose. The checklist includes recommendations for broken object-level authorization, broken authentication, excessive data exposure, lack of resources and rate limiting, broken function level authorization, mass assignment, security misconfiguration, injection, improper assets management, and insufficient logging and monitoring.

  17. 17
    Article
    Avatar of bytebytegoByteByteGo·3y

    EP84: Top 12 Tips for API Security

    The article provides top 12 tips for API security, explains the mobile app release process, and discusses the difference between Git and Github.

  18. 18
    Article
    Avatar of dzDZone·3y

    What Is Good Database Design?

    DZone: Good database design is essential to ensure data accuracy, consistency, and integrity. The design must address the storing and retrieving of data quickly and easily while handling large volumes of data in a stable way. Data security is a critical consideration in modern database design, given the rising prevalence of fraud and data breaches.

  19. 19
    Article
    Avatar of semaphoreSemaphore·3y

    Microservices Best Practices

    Microservices architecture involves designing and developing loosely-coupled services. Best practices include adopting the Single Responsibility Principle, building teams with clear responsibilities, using the right tools and frameworks, keeping asynchronous communication between microservices, adopting the DevSecOps model, using separate data stores for each microservice, deploying each microservice separately, orchestrating microservices using platforms like Kubernetes, and using an effective monitoring system.

  20. 20
    Article
    Avatar of snykSnyk·3y

    Node.js vs. Deno vs. Bun: JavaScript runtime comparison

    Node.js vs. Bun is the latest upstart, offering blistering speed and significantly outperforming its rivals. Deno aims to improve its security via fine-grained access controls. Bun is still in beta and has some gaps to fill out to be fully production-ready.

  21. 21
    Article
    Avatar of cloudnativenowCloud Native Now·3y

    Top 9 Microservices Design Patterns

    Microservices design patterns are gaining immense popularity due to their myriad benefits. They offer flexibility, scalability and the ability to independently develop and deploy parts of an application. They are the blueprints that guide the design of microservices architecture, especially for cloud-native applications.

  22. 22
    Article
    Avatar of thevergeThe Verge·3y

    How hackers took over Linus Tech Tips

    The Verge YouTube channel Linus Tech Tips and two other YouTube channels have been restored after a major hack allowed a bad actor to do things like livestream crypto scam videos, change channel names, and even delete videos. In a new video, owner Linus Sebastian explains that the breach bypassed things like password and two-factor protections.

  23. 23
    Article
    Avatar of amplicationAmplication·3y

    Serving Frontends in Microservices Architecture

    The microservices architecture has emerged as a dominant paradigm in the software development landscape. The frontend - which serves as the user's gateway to the application - is equally crucial. This article aims to explore the challenges and solutions associated with serving frontends in a microservices environment.

  24. 24
    Article
    Avatar of tilThis is Learning·3y

    Backend development is more than writing endpoints for frontend

    Backend development is a crucial part of web development that involves creating and maintaining the logic, functionality and data of a website or an application. Backend developers are responsible for writing backend code that communicates with the frontend, the server and the database. They also ensure that the backend code is secure, scalable, reliable and efficient.

  25. 25
    Article
    Avatar of systemweaknessSystem Weakness·3y

    API 101: Securing the REST APIs

    An API is a set of definitions and protocols for building and integrating application software. It's a way for an organization to share resources and information while maintaining security, control, and authentication. Security is a concern across all the constraints the REST API has to consider during the design and implementation phases.