Best of SecurityMay 2023

  1. 1
    Article
    Avatar of medium_jsMedium·3y

    Doing much better than your .env file

    Tony: I argue again for why we should reduce the practice of storing all environment variables in a.env file and move to a more sophisticated approach for managing them in local development. He says this article is intended for software development teams and not security and devops teams that already have this figured out.

  2. 2
    Article
    Avatar of freecodecampfreeCodeCamp·3y

    Can you find the bug? JavaScript security vulnerabilities course

    The freeCodeCamp.org YouTube channel has published a course that will help you learn common JavaScript security vulnerabilities and how to prevent them. The course centers around 10 examples, each illustrating a different type of vulnerability in web applications. The examples encompass a variety of languages and technologies, including JavaScript, MongoDB, and Docker.

  3. 3
    Article
    Avatar of devtoDEV·3y

    Hackers Tools: Must-Have Tools for Every Ethical Hacker

    Ethical hacking is a crucial practice in ensuring the security of computer systems and networks. Having the right tools at your disposal is essential for effective, ethical hacking.

  4. 4
    Article
    Avatar of bytebytegoByteByteGo·3y

    Key Steps in the Database Selection Process

    Alex Xu: We'll go through key steps in the database selection process. We'll assess our project needs, explore database options, test performance, and consider long-term effects. By the end, we'll make a well-informed choice for our project's success.

  5. 5
    Article
    Avatar of amplicationAmplication·3y

    What is Open-source Software: Everything you wanted to know

    Open-source software has revolutionized the way we develop, share, and customize applications. It is code distributed under a license that allows the users to access the software's source code and modify and build new features upon the existing software to meet the user requirements. This article will discuss the open-sourceSoftware model, history, and advantages.

  6. 6
    Article
    Avatar of infosecwriteupsInfoSec Write-ups·3y

    Easy CSRF bypass

    Cross-Site Request Forgery is an attack that forces an end user to execute unwanted actions on a web application in which he/she is currently authenticated. There should be no protection in place to track users’ requests or any kind of protection like asking secret questions for an update.

  7. 7
    Article
    Avatar of medium_jsMedium·3y

    🔮 The Future of Web 3.0 Development: Thirdweb SDK

    Thirdweb SDK is a collection of SDKs that enable web developers to integrate web 3.0 technologies into their applications with ease. Thirdweb SDK supports JavaScript, React, React Native, Python, Go, Unity and C#. It also covers various platforms such as native, mobile, console, browser and VR2.

  8. 8
    Article
    Avatar of communityCommunity Picks·3y

    Stay Alert: The Rising Threat of Malicious Extensions in Microsoft’s VSCode Marketplace

    The rising threat of malicious extensions in Microsoft's VSCode Marketplace is a concerning trend that requires cybersecurity awareness and action. Recent discoveries of harmful extensions highlight the risks of user-supported repositories and the need for precautionary measures in safe coding practices.

  9. 9
    Article
    Avatar of javacodegeeksJava Code Geeks·3y

    Software Deployment Best Practices

    Software deployment refers to the process of releasing and installing software applications into a target environment. It involves a series of activities and steps to ensure that the software is successfully deployed and made available for use. In 2023, software deployment best practices continue to evolve as technology advances and organizations strive for more efficient and reliable deployment processes.

  10. 10
    Article
    Avatar of lnLaravel News·3y

    Laravel Security Middleware

    Laravel Security Middleware has been used in our applications for quite a while for various usages, from Authentication, to Authorization and beyond. In this tutorial, I will walk through how you can leverage the power of middleware in your Laravel application to help increase the security of your applications.

  11. 11
    Article
    Avatar of phplibPHP LibHunt·3y

    Awesome PHP Weekly - Issue 365, May 18, 2023

    The Awesome PHP Weekly is a weekly overview of the most popular PHP news, articles and libraries. Follow us on Twitter @phpLibHunt and @LibHunt for the latest news and articles you saw on the site. Use the Daily Discussion to help you understand today's featured news stories.

  12. 12
    Article
    Avatar of smashingSmashing Magazine·3y

    The Safest Way To Hide Your API Keys When Using React — Smashing Magazine

    The Safest Way To Hide your API Keys When Using React is the Safest way to hide your API keys when using React. Use a back-end proxy server to access the API from the front-end server. Back-end Proxy Server can be an excellent way to protect your API key.

  13. 13
    Article
    Avatar of newstackThe New Stack·3y

    4 Ways to Enhance Your Dockerfiles

    Ten years ago, Docker released its first version of what democratized container technology. Docker is still the most used software package technology, with Maven and NPM listed as second and third.

  14. 14
    Article
    Avatar of medium_jsMedium·3y

    Guide to managing environment variables with Infisical + Node.js

    This guide explains how to use Infisical, an open-source secret management platform, to manage environment variables in a Node.js project. It covers setting up a project in Infisical, creating an Infisical Token, creating a Node application, and provides tips for optimal usage.

  15. 15
    Article
    Avatar of medium_jsMedium·3y

    Adopting the Best Practices in Angular Development in 2023

    Adopting the Best Practices in Angular Development in 2023 is a blog post by Rahima Khanam. The goal of this blog is to list down the best practices that Angular Developers should follow to secure a high level of acceptance and success for their applications.

  16. 16
    Article
    Avatar of minersThe Miners·3y

    LocalStorage and Cookies under the hoodies Explaining why they're not concurrent

    LocalStorage and Cookies under the hoodies are examples of things we use without knowing what is happening behind the scenes. The Web Storage API provides mechanisms by which browsers can store key/value pairs, in a much more intuitive fashion than using cookies. The main purpose is being an alternative to Cookies.