Better Dev Link - BetterDev #164 - How to secure anything
Better Dev #164 Aug 10, 2020
Hi everyone, Welcome to issue #164. This week we got some hard lession from Capital One Breach that results in $80 million fine. We include some links to the tools that might help to prevent that.
FusionAuth provides authentication, authorization, and user management for any app: deploy anywhere, integrate with anything, in minutes. Download and install FusionAuth today and we’ll send you a FREE t-shirt!
Security engineering is the discipline of building secure systems. Its lessons are not just applicable to computer security. In fact, in this repo, I aim to document a process for securing anything, whether it’s a medieval castle, an art museum, or a computer network
It’s Twitter thread so a bit hard to read but worth it. The cause is due to an AWS IAM policy s3:GetObject
to *
resource. IAM is trial and error, you run your app, see if it works and need what permission and grant it. Sometime you feel frustrated and just quickly do a *
and there we go. $80 million fine. What can we do about it? This thread give some tips and guide line to improve security when working with IAM. Some tools such as police sentry to review IAM, or Netflix’s repokid to automatically revoking unused IAM permission.
quay.io is a docker registry and went down on May 19th. The root cause is a storm of tens of thousands of database connection that locking MySQL instance. Reading these post motern help level up your debugging skill because it’s the hard lesson from these teams.
This link is a PDF on dropbox so it can be a bit hard to read online or on mobile. It outlines how facebook leverage the end-to-end networking infrastructure to prevent or mask any disruptions in face of releases.
This project won first place in JS1024. It made use of Web Audio API to make a piano all in 1024 bytes. We will go over every single line of code together with tips and tricks to achieve that.
It’s very important to get this right now in Node 14. here are now two kinds of scripts: there are old-style CommonJS (CJS) scripts and new-style ESM scripts (aka MJS). CJS scripts use require() and exports; ESM scripts use import and export. ESM and CJS are completely different animals.
Imagine assigning some value to a variable, reading it back immediately after, and finding out that somehow the write had no effect at all - madness! Whether an update becomes visible sooner rather than later depends on the guarantees offered by the database.
Title says it all. COVID-19 increase demand for video chat system. And video streaming require bandwidth and cpu/gpu to decode data from camera stream.
Compare two tables in great way to verify something like ETL job, backup, replication. The normal method is table1 - table2 union table2 - table1
but that fetch each tables 2 times? How can we do that with a single fetch per table?
Have feel frustrated because you have a SSH session that disconnect/timeout somehow when returning to your laptop? Most of the time I ended up just close my terminal. But it has a way to do that properly. Basically, to force terminate a frozen SSH session, press ~
then .
. Note that when press ~
nothing will show up on terminal though.
Code to read
A Library to Make Elements Easier to Manipulate: drag, drop, resize, pinch, roundable etc.
JavaScripta gem that allows the records of a Ruby on Rails ActiveRecord model to be organised as a tree structure (or hierarchy)
RubyA cool project where it implement MySQL protocol and syntax so we can use it to parse SQL and executes queries on your own data sources. A simple in-memory database and table impelemtation are provided. If you works with thing like SphinxSearch, you know you can leverage these kind of library to basically avoid writing client since you can just use the normal mysql
client.
Video
A talk between Gitlab CEO and Kelsey Hightower of K8S legendary to discuss about Kubernetes, Serverless and computing.
Tools
an open-source container runtime (aka runc), originally developed by Nestybox, that enables Docker containers to act as virtual servers capable of running software such as Systemd, Docker, and Kubernetes in them, easily and with proper isolation
an AWS IAM linting library. It reviews policies looking for problems such as: malformed json, bad polici patterns
Set up your script and run it and the tool determines the minimum set of permissions needed for future runs. You lock that permission set in for future runs. Netflix has a companion post
A simple terminal UI for both docker and docker-compose, written in Go with the gocui library.
a tool for exploring and publishing data. It helps people take data of any shape or size and publish that as an interactive, explorable website and accompanying API.
You can view this issue in web browser.
If you have any suggestion/feedback, do tell me by replying to this email. I read them all.
No longer want to receive these emails? Unsubscribe
Older messages
BetterDev #163 - 90 Lines of code to convert your face movement into keyboard commands
Monday, August 3, 2020
Better Dev #163 Aug 03, 2020 Hi everyone. This week sponsor is FusionAuth. Sponsor helps keep this newsletter up and running. Check them out, FusionAuth is a rock solid authentication option. Don't
BetterDev #162 - Debugging Incidents in Google's Distributed Systems
Tuesday, July 28, 2020
Better Dev #162 Jul 27, 2020 Hi everyone, Welcome to issue #162. If you like this newsletter, please help spread the words out. Thank you. Debugging Incidents in Google's Distributed Systems How
BetterDev #161 - Why is processing a sorted array faster than processing an unsorted array?
Tuesday, July 21, 2020
Better Dev #161 Jul 20, 2020 Hi everyone, Welcome to issue #161. This week is a busy week for me so this is a short issue and have no description for link. They are great anyway, check them all out :-)
BetterDev #160 - How does Linux's display work
Thursday, July 16, 2020
Better Dev #160 Jul 13, 2020 Hi everyone, Welcome to issue #160. Let's get straight to our link this week. How does Linux's display work? Linux has an amazing yet frustrated at the same time
BetterDev #159 - Scaling Linux Services: Before accepting connections
Monday, July 6, 2020
Better Dev #159 Jul 06, 2020 Hi everyone, Welcome to issue #159. If you like this newsletter, please help forward this email to a friend, tweet, or shout from a rooftop. It goes a long way :-). Scaling
You Might Also Like
Import AI 399: 1,000 samples to make a reasoning model; DeepSeek proliferation; Apple's self-driving car simulator
Friday, February 14, 2025
What came before the golem? ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏
Defining Your Paranoia Level: Navigating Change Without the Overkill
Friday, February 14, 2025
We've all been there: trying to learn something new, only to find our old habits holding us back. We discussed today how our gut feelings about solving problems can sometimes be our own worst enemy
5 ways AI can help with taxes 🪄
Friday, February 14, 2025
Remotely control an iPhone; 💸 50+ early Presidents' Day deals -- ZDNET ZDNET Tech Today - US February 10, 2025 5 ways AI can help you with your taxes (and what not to use it for) 5 ways AI can help
Recurring Automations + Secret Updates
Friday, February 14, 2025
Smarter automations, better templates, and hidden updates to explore 👀 ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏
The First Provable AI-Proof Game: Introducing Butterfly Wings 4
Friday, February 14, 2025
Top Tech Content sent at Noon! Boost Your Article on HackerNoon for $159.99! Read this email in your browser How are you, @newsletterest1? undefined The Market Today #01 Instagram (Meta) 714.52 -0.32%
GCP Newsletter #437
Friday, February 14, 2025
Welcome to issue #437 February 10th, 2025 News BigQuery Cloud Marketplace Official Blog Partners BigQuery datasets now available on Google Cloud Marketplace - Google Cloud Marketplace now offers
Charted | The 1%'s Share of U.S. Wealth Over Time (1989-2024) 💰
Friday, February 14, 2025
Discover how the share of US wealth held by the top 1% has evolved from 1989 to 2024 in this infographic. View Online | Subscribe | Download Our App Download our app to see thousands of new charts from
The Great Social Media Diaspora & Tapestry is here
Friday, February 14, 2025
Apple introduces new app called 'Apple Invites', The Iconfactory launches Tapestry, beyond the traditional portfolio, and more in this week's issue of Creativerly. Creativerly The Great
Daily Coding Problem: Problem #1689 [Medium]
Friday, February 14, 2025
Daily Coding Problem Good morning! Here's your coding interview problem for today. This problem was asked by Google. Given a linked list, sort it in O(n log n) time and constant space. For example,
📧 Stop Conflating CQRS and MediatR
Friday, February 14, 2025
Stop Conflating CQRS and MediatR Read on: my website / Read time: 4 minutes The .NET Weekly is brought to you by: Step right up to the Generative AI Use Cases Repository! See how MongoDB powers your