Best of SecurityApril 2023

  1. 1
    Article
    Avatar of bytebytegoByteByteGo·3y

    Password, Session, Cookie, Token, JWT, SSO, OAuth - Authentication Explained - Part 1

    Password, Session, Cookie, Token, JWT, SSO, OAuth - Authentication Explained - Part 1. We discuss the problems each method solves and how to choose the right authentication method for our needs. The diagram below shows where these methods apply in a typical website architecture and their meanings.

  2. 2
    Article
    Avatar of medium_jsMedium·3y

    Best Practices for Building Large-Scale Node.js Applications

    Best practices for building and scaling large-scale Node.js applications, including code organization, performance optimization, scalability, and security.

  3. 3
    Article
    Avatar of theregisterThe Register·3y

    Microsoft is rewriting core Windows libraries in Rust

    Microsoft is rewriting core Windows libraries in Rust programming language. The more memory-safe code is already reaching developers. Microsoft showed interest in Rust several years ago as a way to address memory safety bugs. The Rust renovation of Windows began in 2020 with DWriteCore, the Windows App SDK implementation of Windows' DWrite engine.

  4. 4
    Article
    Avatar of dzDZone·3y

    Design Patterns for Microservices

    Design Patterns for Microservices: Ambassador, Anti-Corruption Layer, and Backends for Frontends. Design patterns provide a proven solution to common problems in software architecture. They help to establish best practices and guidelines for designing and implementing microservices. Join the DZone community and get the full member experience.

  5. 5
    Article
    Avatar of redislabsRedis·3y

    Microservice Architecture Key Concepts

    Microservice architecture allows for independent, autonomous software development teams to manage, test, and deploy uncoupled services. It enables scalability, faster updates, and flexible release cycles. Microservices communicate via APIs and messages, and security should be a top priority.

  6. 6
    Article
    Avatar of systemweaknessSystem Weakness·3y

    Web Fundamentals | JWT Attacks

    Learn about JWTs, the impact of JWT attacks, and accepting arbitrary signatures.

  7. 7
    Article
    Avatar of tcTechCrunch·3y

    Proton announces Proton Pass, a password manager

    Proton announces Proton Pass, a password manager. Proton is the company behind Proton Mail, Proton VPN and Proton Drive. Proton has recently reached an important milestone as there are 100 million registered users across all of the company's products.

  8. 8
    Article
    Avatar of honeypotHoneypot·3y

    Deno vs. Node: No One is Ready for the Move

    The arrival of Deno in 2018 created a big hype, and developers can now access a more secure framework with modern features. Deno is a new JavaScript framework that seeks to address Node’s design shortcomings and provide a modern development environment. In this article, we look at a head-to-head comparison between Node.

  9. 9
    Article
    Avatar of systemweaknessSystem Weakness·3y

    Why is Nginx called a “reverse” proxy?

    Learn about reverse proxies and why Nginx is called a reverse proxy. Discover the benefits of using Nginx as a reverse proxy.

  10. 10
    Article
    Avatar of phProduct Hunt·3y

    Phase - Encryption for app developers

    Phase - Encryption for app developers. The best of Product Hunt, everyday Popular products in...

  11. 11
    Article
    Avatar of itnextITNEXT·3y

    Cybersecurity in Go

    Cybersecurity in Go. Secure Your Application with 10 Golang Snippets. These functions are helpful whether you are developing a secure client-server app, an encrypted file system or a web app with SSL/TLS. Utilizing these functions can kickstart your project and guarantee that your systems are reliable and safe.

  12. 12
    Article
    Avatar of medium_jsMedium·3y

    Implementing Access Control in React Apps: A Complete Guide

    Learn about access control lists (ACLs) and how they are implemented in React apps. Understand their purpose and how they work.

  13. 13
    Article
    Avatar of itnextITNEXT·3y

    Secure Your Flutter Project: The Right Way to Set Environment Variables with Compile-Time Variables

    Secure Your Flutter Project: The Right Way to Set Environment Variables with Compile-Time Variables. The right way to set environment variables is using the command Dart define. The command offers a way of passing a single environment variable at compile time.

  14. 14
    Article
    Avatar of tdsTowards Data Science·3y

    Rust: The Next Big Thing in Data Science

    Rust offers exceptional performance and persistent security features, making it a practical choice for data science. It provides C-like speed, type safety, memory safety, true and safe parallelism, and a rich ecosystem. Rust has been adopted by tech giants like Google and Microsoft for its security and efficiency. The language has a thriving open-source community, and it is ranked highly in popularity and performance.

  15. 15
    Article
    Avatar of semaphoreSemaphore·3y

    Docker Logging: 7 Best Practices

    Docker Logging is an essential aspect of operating containers in a production environment. It provides the capability to track and troubleshoot your applications. To make logging work well in Docker containers, you need to log the app, the host computer, and the Docker service.

  16. 16
    Article
    Avatar of thevergeThe Verge·3y

    Google Authenticator finally, mercifully adds account syncing for two-factor codes

    Google Authenticator adds account syncing for two-factor codes to your Google account. If you set up a new phone and log in to your account, Authenticator will be ready to go without requiring its own setup process. This also means if you lose your phone or it’s stolen, getting back into your accounts from another device will be less of a nerve-racking.

  17. 17
    Article
    Avatar of freecodecampfreeCodeCamp·3y

    How to Protect Your PWA – Web App Security Best Practices

    Progressive Web App is a type of web application that uses the latest web tech to deliver a user experience similar to that of a native mobile app. As with any application, PWAs can be vulnerable to security threats, which can compromise user data and damage the reputation. Use HTTPS and SSL/TLS to secure your PWA.

  18. 18
    Article
    Avatar of grafanaGrafana Labs·3y

    Grafana 9.5 release: All the new features you need to know

    Grafana 9.5 release introduces new features, including major Alerting updates, improved security with service accounts, enhanced dashboards, and more.

  19. 19
    Article
    Avatar of infosecwriteupsInfoSec Write-ups·3y

    Introduction to OSINT

    Introduction to OSINT is a piece of information that is…. The most widely used OSINT tools will be the subject of discussion. OSINT takes advantage of different resources and is not just confined to online data. Google Dorking is the first tool for a search, and more advanced operators can be found.

  20. 20
    Article
    Avatar of baeldungBaeldung·3y

    Functional vs. Non-Functional Testing

    In this article, we'll explore the basics of testing. We’ll also explore some of the differences between functional and non-functional testing. In functional testing, we ensure that the functionality of the software meets the business requirements. Non-functional tests are as important as functional tests since they help us understand how the system behaves under certain circumstances.