Best of SecuritySeptember 2023

  1. 1
    Article
    Avatar of amplicationAmplication·3y

    The Complete Microservices Guide

    Microservices have emerged as a popular architectural approach for designing and building software systems for several compelling reasons and advantages. It is a design approach that involves dividing applications into multiple distinct and independent services called "microservices" Microservices are naturally distributed services as each service is isolated from the others and runs in its own instance.

  2. 2
    Article
    Avatar of developertechDeveloper Tech·3y

    GitHub opens Copilot Chat to all developers

    Copilot Chat was launched for ‘Business’ users in July. The AI assistant is capable of assisting developers in their preferred natural language and promises to reduce repetitive tasks. The tool empowers developers to learn and build in the language that feels most natural.

  3. 3
    Article
    Avatar of snykSnyk·3y

    Modern VS Code extension development: The basics

    Microsoft Visual Studio (VS) Code is currently the most popular source code editor. It can be used as a fully-fledged integrated development environment (IDE) All you need to do is add the right set of extensions from the Visual Studio Code Marketplace. Snyk Security is defined as a linter and programming language extension.

  4. 4
    Article
    Avatar of dzDZone·3y

    What Is Good Database Design?

    DZone: Good database design is essential to ensure data accuracy, consistency, and integrity. The design must address the storing and retrieving of data quickly and easily while handling large volumes of data in a stable way. Data security is a critical consideration in modern database design, given the rising prevalence of fraud and data breaches.

  5. 5
    Article
    Avatar of snykSnyk·3y

    Node.js vs. Deno vs. Bun: JavaScript runtime comparison

    Node.js vs. Bun is the latest upstart, offering blistering speed and significantly outperforming its rivals. Deno aims to improve its security via fine-grained access controls. Bun is still in beta and has some gaps to fill out to be fully production-ready.

  6. 6
    Article
    Avatar of cloudnativenowCloud Native Now·3y

    Top 9 Microservices Design Patterns

    Microservices design patterns are gaining immense popularity due to their myriad benefits. They offer flexibility, scalability and the ability to independently develop and deploy parts of an application. They are the blueprints that guide the design of microservices architecture, especially for cloud-native applications.

  7. 7
    Article
    Avatar of medium_jsMedium·3y

    2023 DevOps is terrible.

    2023 DevOps is terrible. My analysis of modern DevOps evolution is terrible. I've been around the DevOps/Cloud area of the IT industry for a few years now. The shift Big techs aside, there are a few companies out there, able to implement and manage DevOps at scale.

  8. 8
    Article
    Avatar of bytebytegoByteByteGo·3y

    EP75: How Does A Password Manager Work

    This week’s system design refresher: Top 5 Most Used Architecture Patterns. How does a Password Manager work? Implement passkey authentication in minutes (Sponsored) Join TikTok, Paypal, Google, and other leading tech companies by giving your users a faster and more secure sign-in experience with passkeys.

  9. 9
    Article
    Avatar of communityCommunity Picks·3y

    Best Practices for Securing Your ReactJS Application

    As with any web application, security is paramount to safeguard against potential attacks like XSS (Cross-Site Scripting) and CSRF ( cross-Site Request Forgery) This article delves into essential Reactjs security best practices for fortifying Reactjs applications. Let's explore the key strategies for securing your Reactjs application effectively.

  10. 10
    Article
    Avatar of itnextITNEXT·3y

    Why Web UI Development Is So Hard?

    This piece aims to dissect the inherent challenges of web UI development, from the discrepancy between web languages and the modern UI requirements. We’ll explore often-overlooked ‘unhappy paths’ such as loading states, error handling, and broader architecture considerations including security, performance, and accessibility.

  11. 11
    Article
    Avatar of sitepointSitePoint·3y

    10 of the Best Programming Fonts — SitePoint

    A great programming font is legible, attractive, and personalizes the editor you use every day. It needs to be good given the hours you spend at your screen, but there are plenty of fabulous programming fonts to choose from. Sites such as programmingfonts.org allow you to preview dozens of free programming fonts.

  12. 12
    Article
    Avatar of notedNoted·3y

    Introducing Cosmos: The All-in-One Secure Platform for Self-Hosting

    Cosmos is a versatile all-in-one platform for self-hosting that's designed to cater to both newcomers and seasoned users alike. It offers features like a reverse proxy, seamless Docker integration, an app store, robust security tools, and a whole lot more.

  13. 13
    Article
    Avatar of freecodecampfreeCodeCamp·3y

    Rust Project – Create an Authentication Server

    Rust Project is designed to provide developers with the skills and knowledge they need to implement modern authentication solutions. The Rust programming language is often used for system-level programming, emphasizing safety, concurrency, and performance. The course offers a step-by-step guide to understanding and implementing user authentication in Rust.

  14. 14
    Article
    Avatar of newstackThe New Stack·3y

    5 Best Practices for Securing Your API Gateway

    Learn about five best practices for securing your API gateway, including token-based authentication, role-based access control, rate limiting, explicit CORS policy, and real-time monitoring and alerting for anomalies.

  15. 15
    Article
    Avatar of cloudflareCloudflare·3y

    Cloudflare is free of CAPTCHAs; Turnstile is free for everyone

    Cloudflare has eliminated CAPTCHAs and made Turnstile, its bot-stopping solution, available for free to all website operators. Turnstile's checkbox solution is just as effective as a CAPTCHA without requiring user interactivity. It uses various in-browser tests to analyze browser characteristics and detect bots. Over 1 million automated signup attempts have been blocked by Turnstile. During the beta, Turnstile received feedback and added new features, such as support for additional languages and error code transparency. Turnstile is now in general availability and is free to use.

  16. 16
    Article
    Avatar of semaphoreSemaphore·3y

    Best Practices for Securing Node.js Applications in Production

    The power of Node.js lies in the NPM environment, which offers millions of libraries. Most NPM packages involve some security vulnerabilities. In this guide, you will see the 15 best practices for devising a secure node.js app architecture for production.

  17. 17
    Article
    Avatar of communityCommunity Picks·3y

    Swirl – One search box to find it all

    swirl uses only existing security models, so information stays secure. swirl uses AI and large language models to get the best results, so you save time. Swirl uses a search box to find it all swirl enterprise open source search and AI swirl searches.

  18. 18
    Article
    Avatar of hackernoonHacker Noon·3y

    Effective Use Of Middleware In Express.js: Practical Approaches

    Middleware acts as a bridge between the incoming client requests and the outgoing server responses. It's like a helpful intermediary that steps in to process, modify, or augment requests as they move through your application. Middleware in Express.js helps streamline your application flow, enhancing its performance, security, and functionality.

  19. 19
    Article
    Avatar of infosecwriteupsInfoSec Write-ups·3y

    OAuth 2.0 Hacking 💸

    OAuth 2.0 Hacking is an open authorization protocol. It allows sharing of resources stored on one site to another site without using their credentials. It uses username and password tokens instead of credentials. The resource owner is the user/entity granting access to their protected resource, such as Twitter account Tweets.

  20. 20
    Article
    Avatar of newstackThe New Stack·3y

    OAuth.Tools: The Online Tool That Goes beyond JWTs

    OAuth is a free online tool provided by Curity. It offers incredible features for anyone working with or interested in OAuth and OpenID Connect. You can decode or create JWTs with different characteristics, fetch tokens from a server, revoke tokens or add an access token to external API calls.

  21. 21
    Article
    Avatar of communityCommunity Picks·3y

    Postgres 16: The exciting and the unnoticed

    Postgres 16 came out last week - and this year it arrived earlier than the last few years. In addition, Postgres releases minor versions of each major release every 3 months or so with bug fixes and security fixes. No new features are released in minor versions, and that's what makes major version releases so exciting.

  22. 22
    Article
    Avatar of awsplainenglishAWS in Plain English·3y

    AWS DevOps: Continuous Docker Deployment to AWS Fargate from GitHub using Terraform

    AWS DevOps: Continuous Docker Deployment to AWS Fargate from GitHub using Terraform. This DevOps pipeline will allow developers to push code changes to a GitHub repository and have them automatically deployed to anAWF cluster. The provided Terraform code leverages these services to create an automated deployment pipeline for your application.

  23. 23
    Article
    Avatar of freecodecampfreeCodeCamp·3y

    How to Manage Users in Linux

    Linux is an open-source operating system that is widely used in various applications. One of the fundamental aspects of Linux is user management, which enables administrators to control access to resources and maintain security of the system. This article serves as a comprehensive guide to user management in Linux.

  24. 24
    Article
    Avatar of freecodecampfreeCodeCamp·3y

    How to Use AI-Generated Code in a Safe and Effective Way

    AI systems can now automatically craft code for routine and repetitive coding tasks. The emergence of artificial intelligence (AI) has empowered AI systems to quickly generate the foundational components that are critical to all forms of software. The path to the future lies in the harmonious fusion of machine-generated and human-authored code.

  25. 25
    Article
    Avatar of communityCommunity Picks·3y

    Introduction to SSH Key Management

    SSH keys are cryptographic keys that enable user authentication to servers. They provide a secure alternative to traditional passwords. By using an SSH key, you can: - Elevate the security of your environment by disabling regular password access and mandating a passphrase-protected SSH key.