Better Dev Link - BetterDev #164 - How to secure anything
Better Dev #164 Aug 10, 2020
Hi everyone, Welcome to issue #164. This week we got some hard lession from Capital One Breach that results in $80 million fine. We include some links to the tools that might help to prevent that.
FusionAuth provides authentication, authorization, and user management for any app: deploy anywhere, integrate with anything, in minutes. Download and install FusionAuth today and we’ll send you a FREE t-shirt!
Security engineering is the discipline of building secure systems. Its lessons are not just applicable to computer security. In fact, in this repo, I aim to document a process for securing anything, whether it’s a medieval castle, an art museum, or a computer network
It’s Twitter thread so a bit hard to read but worth it. The cause is due to an AWS IAM policy s3:GetObject
to *
resource. IAM is trial and error, you run your app, see if it works and need what permission and grant it. Sometime you feel frustrated and just quickly do a *
and there we go. $80 million fine. What can we do about it? This thread give some tips and guide line to improve security when working with IAM. Some tools such as police sentry to review IAM, or Netflix’s repokid to automatically revoking unused IAM permission.
quay.io is a docker registry and went down on May 19th. The root cause is a storm of tens of thousands of database connection that locking MySQL instance. Reading these post motern help level up your debugging skill because it’s the hard lesson from these teams.
This link is a PDF on dropbox so it can be a bit hard to read online or on mobile. It outlines how facebook leverage the end-to-end networking infrastructure to prevent or mask any disruptions in face of releases.
This project won first place in JS1024. It made use of Web Audio API to make a piano all in 1024 bytes. We will go over every single line of code together with tips and tricks to achieve that.
It’s very important to get this right now in Node 14. here are now two kinds of scripts: there are old-style CommonJS (CJS) scripts and new-style ESM scripts (aka MJS). CJS scripts use require() and exports; ESM scripts use import and export. ESM and CJS are completely different animals.
Imagine assigning some value to a variable, reading it back immediately after, and finding out that somehow the write had no effect at all - madness! Whether an update becomes visible sooner rather than later depends on the guarantees offered by the database.
Title says it all. COVID-19 increase demand for video chat system. And video streaming require bandwidth and cpu/gpu to decode data from camera stream.
Compare two tables in great way to verify something like ETL job, backup, replication. The normal method is table1 - table2 union table2 - table1
but that fetch each tables 2 times? How can we do that with a single fetch per table?
Have feel frustrated because you have a SSH session that disconnect/timeout somehow when returning to your laptop? Most of the time I ended up just close my terminal. But it has a way to do that properly. Basically, to force terminate a frozen SSH session, press ~
then .
. Note that when press ~
nothing will show up on terminal though.
Code to read
A Library to Make Elements Easier to Manipulate: drag, drop, resize, pinch, roundable etc.
JavaScripta gem that allows the records of a Ruby on Rails ActiveRecord model to be organised as a tree structure (or hierarchy)
RubyA cool project where it implement MySQL protocol and syntax so we can use it to parse SQL and executes queries on your own data sources. A simple in-memory database and table impelemtation are provided. If you works with thing like SphinxSearch, you know you can leverage these kind of library to basically avoid writing client since you can just use the normal mysql
client.
Video
A talk between Gitlab CEO and Kelsey Hightower of K8S legendary to discuss about Kubernetes, Serverless and computing.
Tools
an open-source container runtime (aka runc), originally developed by Nestybox, that enables Docker containers to act as virtual servers capable of running software such as Systemd, Docker, and Kubernetes in them, easily and with proper isolation
an AWS IAM linting library. It reviews policies looking for problems such as: malformed json, bad polici patterns
Set up your script and run it and the tool determines the minimum set of permissions needed for future runs. You lock that permission set in for future runs. Netflix has a companion post
A simple terminal UI for both docker and docker-compose, written in Go with the gocui library.
a tool for exploring and publishing data. It helps people take data of any shape or size and publish that as an interactive, explorable website and accompanying API.
You can view this issue in web browser.
If you have any suggestion/feedback, do tell me by replying to this email. I read them all.
No longer want to receive these emails? Unsubscribe
Older messages
BetterDev #163 - 90 Lines of code to convert your face movement into keyboard commands
Monday, August 3, 2020
Better Dev #163 Aug 03, 2020 Hi everyone. This week sponsor is FusionAuth. Sponsor helps keep this newsletter up and running. Check them out, FusionAuth is a rock solid authentication option. Don't
BetterDev #162 - Debugging Incidents in Google's Distributed Systems
Tuesday, July 28, 2020
Better Dev #162 Jul 27, 2020 Hi everyone, Welcome to issue #162. If you like this newsletter, please help spread the words out. Thank you. Debugging Incidents in Google's Distributed Systems How
BetterDev #161 - Why is processing a sorted array faster than processing an unsorted array?
Tuesday, July 21, 2020
Better Dev #161 Jul 20, 2020 Hi everyone, Welcome to issue #161. This week is a busy week for me so this is a short issue and have no description for link. They are great anyway, check them all out :-)
BetterDev #160 - How does Linux's display work
Thursday, July 16, 2020
Better Dev #160 Jul 13, 2020 Hi everyone, Welcome to issue #160. Let's get straight to our link this week. How does Linux's display work? Linux has an amazing yet frustrated at the same time
BetterDev #159 - Scaling Linux Services: Before accepting connections
Monday, July 6, 2020
Better Dev #159 Jul 06, 2020 Hi everyone, Welcome to issue #159. If you like this newsletter, please help forward this email to a friend, tweet, or shout from a rooftop. It goes a long way :-). Scaling
You Might Also Like
Spyglass Dispatch: The Xitter Bail Out • OpenAI Tender • Grokking Grok • Smartphone Sales • Fischer Random Chess • Scott Bessent for Treasury
Wednesday, November 27, 2024
The Xitter Bail Out • OpenAI Tender • Grokking Grok • Smartphone Sales • Fischer Random Chess • Scott Bessent for Treasury The Spyglass Dispatch is a free newsletter sent out daily on weekdays. Feel
The Long Road Home: A Story of Loss, Learning, and Renaissance - PART 4
Wednesday, November 27, 2024
Top Tech Content sent at Noon! How the world collects web data Read this email in your browser How are you, @newsletterest1? 🪐 What's happening in tech today, November 27, 2024? The HackerNoon
Top Tech Deals 🏷️ PS5 Slim, 4K TVs, 10th Gen iPad, and More!
Wednesday, November 27, 2024
The Black Friday madness is here! How-To Geek Logo November 27, 2024 Top Tech Deals: PS5 Slim, 4K TVs, 10th Gen iPad, and More! The Black Friday madness is here! Black Friday sales are here, and we
The 165+ best Black Friday deals
Wednesday, November 27, 2024
Windows Super God Mode; Bluesky starter packs; Tech gifts under $100 -- ZDNET ZDNET Tech Today - US November 27, 2024 Black Friday 2024 live blog Best Black Friday deals 2024: 165+ sales live now
⚙️ Neuralink's new trial
Wednesday, November 27, 2024
Plus: Zoom is becoming an AI-first company
Matrix Botnet Exploits IoT Devices in Widespread DDoS Botnet Campaign
Wednesday, November 27, 2024
THN Daily Updates Newsletter cover The AI Value Playbook ($35.99) FREE for a Limited Time Business leaders are challenged by the speed of AI innovation and how to navigate disruption and uncertainty.
The Sequence Chat: Why are Foundation Models so Hard to Explain and What are we Doing About it?
Wednesday, November 27, 2024
Addressing some of the interpretability challenges of foundation models and the emerging fields of mechanistic interpretability and behavioral probing. ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏
Overcoming Perfectionism: How to Break Free from the Enemy of Progress
Wednesday, November 27, 2024
Discover how perfectionism hinders progress and learn practical strategies to overcome the fear of imperfection, boost productivity, and achieve your goals without getting stuck in the pursuit of
🖤 Laravel Black Friday Deals!
Wednesday, November 27, 2024
The biggest deals of the year Laravel Black Friday Deals View in browser Laravel News Editor Note: We are sending this outside the regular Sunday newsletter schedule because some of these specials end
BetterDev #271 - Memory: The Forgotten History and Why did Windows 95 setup use three operating systems?
Wednesday, November 27, 2024
Better Dev #271 Nov 26, 2024 Hi all, Welcome to thanksgiving issue of BetterDev. Hope everyone had a safe and warm thanksgiving. It's getting so cold these days. If you are in warzone such as