Best of Security — 2024

1. 1
   Article

   builder.io·2y

   Best AI Coding Tools for Developers in 2024

   In 2024, AI coding tools are revolutionizing software development by enabling faster, more efficient, and innovative coding processes. Key tools like GitHub Copilot, Amazon CodeWhisperer, and Codeium enhance productivity with advanced code completion, while AI code generators like Claude and ChatGPT create entire functions from natural language descriptions. Design-to-code conversion tools like Visual Copilot streamline the transformation of Figma designs into responsive code. Additionally, tools like Snyk improve code quality and security, and AI-enhanced IDEs like Cursor offer seamless integration of AI capabilities in development environments. The future of coding is increasingly AI-driven, enhancing human creativity and efficiency.

   7.4K

   270
2. 2
   Article

   Hacker News·2y

   Server Setup Basics

   Setting up a robust server includes steps like configuring secure SSH login, creating non-root users, setting up NGINX, managing logs, and securing network ports with UFW and Fail2Ban. Additionally, best practices for backups and choosing the right tools for server management are emphasized. The use of tools like Btop, Neoss, GoAccess, MC, and NCDU is recommended for improving server management efficiency.

   4.1K

   135
3. 3
   Article

   DEV·2y

   SSL in localhost takes 5 seconds now.

   Setting up SSL for localhost traditionally requires tedious manual configurations and repetitive steps. However, Ophiuchi simplifies the process by automatically generating certificates, updating the hosts file, providing an integrated web server, and ensuring instant trust. It saves time and allows developers to focus on building great software.

   2.4K

   123
4. 4
   Article

   DEV·2y

   REST API Design Rules

   Importance of clean REST API designs for usability, maintainability, security, performance, development time, scalability, reusability, and documentation. URI rules include plural collections, singular/singletons, no trailing forward slashes, hyphen use, lowercase letters, no file extensions, and avoiding CRUD function names. HTTP method rules for creating, reading, updating, deleting, and patching resources. Versioning for maintaining backward compatibility and consistent API design.

   1.3K

   32
5. 5
   Article

   Tech World With Milan·2y

   How to learn API?

   Learn the essentials of API development, including core protocols, architecture styles, and security practices. Discover best practices for designing, documenting, and testing APIs, alongside a curated list of resources to aid in your API journey. Avoid common API anti-patterns with practical examples and tips.

   1.2K

   33
6. 6
   Article

   Community Picks·2y

   JavaScript Security: Simple Practices to Secure Your Frontend

   Learn simple practices to secure your frontend JavaScript code, including keeping dependencies up-to-date, using security headers, and sanitizing user input.

   766

   31
7. 7
   Article

   DEV·2y

   Mastering Version Control with Git: Beyond the Basics

   This post delves into advanced strategies and workflows for mastering version control with Git. It covers branching strategies, best practices for working with feature branches, Git hooks for automation, and more.

   586

   4
8. 8
   Article

   ByteByteGo·2y

   EP97: 10 Good Coding Principles to Improve Code Quality

   Learn about 10 good coding principles, how Disney Hotstar captures emojis, and how VPNs work.

   586

   17
9. 9
   Article

   Bits and Pieces·2y

   Best-Practices for API Authorization

   API authorization is crucial for securing digital assets and maintaining user trust. Best practices include using token-based authorization with JWT, implementing fine-grained access control, securing API Gateway configuration, and encrypting sensitive data in transit and at rest.

   491

   9
10. 10
    Video

    Seytonic·2y

    How the FBI Hacked the Trump Shooter's Phone

    484

    27
11. 11
    Article

    DEV·2y

    Top Programming Blogs to Read in 2024

    Discover top programming blogs to read in 2024 and immerse yourself in the coding culture. Stay informed about the latest developments and technologies in the industry with these resources.

    459

    11
12. 12
    Article

    DEV·2y

    Why You Should Self-Host Everything

    Take back control of your digital life by self-hosting everything. Enjoy privacy, control, flexibility, and financial benefits. Compare the cost of self-hosting with cloud services.

    428

    32
13. 13
    Article

    DEV·2y

    JWT explained in 4 minutes (With Visuals)

    Explanation of JWT authentication, its structure, advantages, and disadvantages.

    427

    11
14. 14
    Article

    DEV·2y

    Dockerfile Best Practices: How to Create Efficient Containers

    In the era of microservices and cloud computing, optimizing Dockerfiles is essential for building lightweight, fast, and secure containers. Key practices include using minimal base images like Alpine or Scratch, reducing layers by combining commands, optimizing layer caching, installing dependencies wisely, managing secrets carefully, using a '.dockerignore' file, employing multi-stage builds, avoiding running containers as the root user, scanning for vulnerabilities, and directing logs to standard output. Regular updates and using specific version pins also enhance security and reproducibility.

    376

    3
15. 15
    Article

    Community Picks·2y

    Security Best Practices for Your Node.js Application

    Node.js applications are common targets for attacks, including XSS, DoS, and brute force. This guide outlines common security threats and provides best practices to mitigate them. Techniques include using parameterized queries, sanitizing inputs, employing ORMs, implementing rate limiting, and using multi-factor authentication. The importance of using secure headers, securing dependencies, and monitoring/logging activities is also highlighted, along with practical code examples.

    374

    5
16. 16
    Article

    Community Picks·2y

    JWT vs PASETO: New Era of Token-Based Authentication

    The post offers a detailed comparison between JWT (JSON Web Token) and PASETO (Platform-Agnostic Security Tokens), examining their core functionalities, security features, and potential vulnerabilities. While JWT is popular for its simplicity, PASETO addresses many of its security issues by enforcing safer defaults and mitigating algorithm confusion. The post covers the workflows of both token types, their structures, and key differences in their approach to security, making it a valuable read for developers looking to implement secure token-based authentication.

    360

    4
17. 17
    Article

    ByteByteGo·2y

    EP137: Proxy vs Reverse Proxy

    A forward proxy serves as an intermediary between user devices and the internet, commonly used for protecting clients, avoiding browsing restrictions, and blocking access to certain content. Conversely, a reverse proxy accepts client requests, forwards them to web servers, and returns the results, providing benefits like server protection, load balancing, caching static content, and handling SSL communication.

    347

    4
18. 18
    Article

    Javarevisited·2y

    6 Best Cybersecurity Courses for Beginners and Experienced in 2024

    Discover the best cybersecurity courses on Udemy for beginners and experienced individuals in 2024. These courses cover topics like cyber security, ethical hacking, network security, and information security.

    337

    5
19. 19
    Article

    Community Picks·2y

    Typesense

    Typesense is a privacy-friendly, open-source search engine optimized for high performance and ease-of-use. It employs advanced search algorithms, corrects typos, offers flexible ranking, and supports a variety of search features such as synonym recognition, filtering, and geographic searches. Typesense can handle multiple users' data, sort records dynamically, and provide resilient, production-grade search services with simple setup steps.

    330

    10
20. 20
    Article

    Medium·2y

    Airclap — Send any file to any device

    Airclap is a cross-platform file transfer tool that enables users to easily share any file type across devices like iOS, macOS, Android, Windows, and Linux. With a minimalist design, it offers secure and high-speed transfers using AES encryption and a customized SSDP discovery protocol. Key features include one-step file transfer, offline sending, and integration with over 20 languages. It supports numerous use cases ranging from developer workflows to educational resource sharing. Airclap is permanently free and does not require an internet connection, ensuring user data privacy.

    315

    50
21. 21
    Article

    Cerbos·2y

    Simple Role-Based Access Control in JavaScript

    Learn how to integrate Cerbos, an open-source authorization layer, with a JavaScript To-Do List application to implement role-based access control (RBAC). Understand the benefits of using RBAC and Cerbos for better security and scalability. The tutorial covers policy creation, testing, and implementation. Examples demonstrate how different permissions can be assigned to various roles such as admin and user.

    312

    9
22. 22
    Article

    freeCodeCamp·2y

    How to Get Started With Cybersecurity

    Cybersecurity is a vital field that involves protecting individuals and their data on the internet. To start a career in cybersecurity, one must understand basic concepts, research various career paths, choose a specialized field, gain practical knowledge, and network within the community. The post provides a step-by-step guide to becoming a cybersecurity professional, including resources and additional tips to enhance learning and career progression.

    306

    6
23. 23
    Article

    Community Picks·2y

    Better Auth

    Supports popular frontend, backend, and meta frameworks like React, Vue, Svelte, and more. Provides secure email and password authentication, multiple OAuth providers for social sign-on, built-in two-factor authentication, and tools for managing user access. Extend functionality via official and community plugins.

    302

    8
24. 24
    Article

    ITNEXT·2y

    Understanding CORS

    A post explaining CORS (Cross-Origin Resource Sharing) and its relevance in web development. It covers real-life examples, CSRF attacks, and provides code samples for implementing CORS in a backend API and frontend application.

    291

    17
25. 25
    Article

    Syncfusion·2y

    Secure JWT Storage: Best Practices

    JSON Web Tokens (JWTs) are crucial for securing data transmission in single-page applications (SPAs), but they come with security risks such as cross-site scripting (XSS) and cross-site request forgery (CSRF). Secure storage methods include using HttpOnly cookies with the Secure flag, encrypting JWTs before client-side storage, and employing server-side session management. Advanced practices like using web workers and Content Security Policies (CSPs) further enhance security. Continuous security audits and updates are necessary to maintain a secure SPA.

    275

    11