News Aggregator

You only need ONE design pattern

Aggregated on: 2021-10-30 12:05:47

Let me tell you a secret; Design patterns are the natural consequences of programming idioms and paradigms that are so inferior that it's impossible to create working code without them. Design patterns are like wheel chairs, they're trying to fix that which is already broken. A piece of advice, if you can of course, try to rather avoid getting into a wheel chair in the first place (read; Use OOP that is) - Than to run to the wheel chair arguably the same way junior software developers are running to OOP these days ... A really great programming language doesn't need design patterns in fact. This is true to the extent of that I once saw a super senior developer going through all the original 23 design patterns from the Gang of Four, and proved how 19 of them made absolutely no sense what so ever for Lisp, which we all know is a far superior programming language than any "modern" programming languages of course (duh!)

MDC Logging With MuleSoft Runtime 4.4

Aggregated on: 2021-10-30 07:50:47

MDC stands for Mapped Diagnostic Context. Mapped Diagnostic Context enriched the logs by providing more information about the event in the logs. By default, Mule logs two entries: processor which shows the location of current events, events which shows the correlation Id of the event. Mule Runtime 4.4 introduced Tracing module and enables you to add more information to the logs by by adding, removing, and clearing variables from the logging context for a given Mule event.

Live From INTERACT: Engineering Leadership Screwups

Aggregated on: 2021-10-30 02:20:46

Have you ever had to manually book 50,000 flights because you rushed to deliver new features on your product? In this episode of the Dev Interrupted podcast, we asked some of our favorite engineering leaders if they could share memorable stories of professional mistakes with our audience.

How To Improve Mobile Application Performance Through Cloud Integration

Aggregated on: 2021-10-29 23:35:46

Mobile application development has increased tenfold due to the high demand for such digital platforms among users worldwide. According to a report, there are more than 3 billion mobile application users, and this is where most businesses are looking to capitalize. Mobile application software helps businesses engage users on mobile devices, making it an attractive investment. Mobile applications offer higher engagement value for organizations, but they also help organizations generate more leads.

Building Apps That Avoid In-App Taxes: There Are Several Workable Options

Aggregated on: 2021-10-29 19:05:46

Freedom has always been the cornerstone of technology. And yet, there is no freedom without options. For example, users should have a choice in how they pay for digital goods offered in-app. Although the Supreme Court’s recent decision in the battle between Epic Games and Apple was mixed, the judges ruled Apple cannot stop developers from directing users to other methods of payment in their apps. That’s good news for app developers looking for alternatives. There are many different options for hosting payments — in-app or on the web, developing an actual web app that would not require mandatory taxes, a hybrid of in-app and outside the app, and so on. The options are ever-changing, so it can be difficult to keep up.

Temporary Tables in MySQL: A High-level Overview

Aggregated on: 2021-10-29 03:05:46

Anyone who has done substantial work with MySQL has probably noticed how big data affects MySQL databases — most likely some partition nuances or a couple of items related to indexes. However, another important feature offered by MySQL for big data purposes is the ability to create temporary tables. In this blog post, we are going to go into more detail on this subject. What Are Temporary Tables? In MySQL, a temporary table is a special type of table that (you guessed it) holds temporary data. These kinds of tables are usually created automatically and are typically only considered when certain types of problems arise-for example, when ALTER TABLE statements are run on vast sets of data.

Practicing Nebula Operator on Cloud

Aggregated on: 2021-10-29 01:35:46

Hi, everybody! As you know, Nebula Operator has been open-source, and we published an introduction to it. Today, I would like to introduce my practice on Nebula Operator on the Cloud. About Nebula Operator What is Nebula Operator? You can refer to Nebula Operator Overview: Automated Operation on Kubernetes. Today, this article will focus on the practicing Nebula Operator. I hope it could help you get started with it soon and enjoy Nebula Graph.

We Should Write Java Code Differently

Aggregated on: 2021-10-28 20:05:46

For the last few years, I’m writing articles that describe a new, more functional way to write Java code. But the question of why we should use this new coding style remains largely unanswered. This article is an attempt to fill this gap. Just like any other language, Java evolves over time. So does the style in which Java code is written. Code written around Y2K is significantly different from code written after 2004-2006 when Java5 and then Java6 was released. Generics and annotations are so widespread now, that it’s hard to even imagine Java code without them.

How To Choose an EiPaaS Platform

Aggregated on: 2021-10-28 19:05:46

Introduction Most businesses have been engaged in some form of digital transformation effort during the past few years. During the pandemic, the enthusiasm towards automating business processes and accelerating digital transformation continued to increase. Previously, digital transformation required a massive effort from internal and external developers and was a time-consuming task. However, current events and the business landscape dictate that businesses should transform rapidly. Most businesses fail in their digital transformation efforts, or they deliver a hybrid model, where only a subset of business processes have been digitally transformed. As opposed to Greenfield (or digital native) companies such as Uber and Airbnb, mostly Brownfield companies (i.e., real-enterprise companies with a subset of their business processes automated) fail in their effort towards digital transformation.

The Advent of Ethical Artificial Intelligence in the Healthcare Industry

Aggregated on: 2021-10-28 18:50:46

Introduction As with any other industry, life sciences and healthcare is a big market of technology, especially the most talked-about technologies these days. Any guesses? Obviously, artificial intelligence and machine learning. Whether it is machine learning to help with automation tools or diagnoses, artificial intelligence plays an essential role in streamlining medical processes so the physicians can focus on what’s more crucial: helping the patient. A recent survey by Software Advice depicts a vast amount of patients who trust AI applications in healthcare.

Spinnaker Meets Minikube: Part 2

Aggregated on: 2021-10-28 18:50:46

Introduction In the previous article, we installed Spinnaker on a Minikube cluster running on Windows 10. In this article, we will add GitHub as a data provider for a Spinnaker pipeline to continuously deploy a dockerized Spring Boot microservice onto the Minikube cluster. The pipeline will be triggered using a Cron job and can be templated so that all one's micro-services are automatically deployed to have a fully up-to-date local development environment at all times. Requirements An understanding of Spring Boot, Github, and Docker Hub is presumed. However, fall-back instructions will be given for those that want to follow a lighter track that pulls the Docker image from the author's registry. However, certain things like proper artifact binding might not work as expected should the full guide not be followed.

Kubernetes Container Lifecycle Events and Hooks

Aggregated on: 2021-10-28 18:05:46

You might encounter cases where you need to instruct Kubernetes to start a pod only when a condition is met, such as dependencies are running, or sidecar containers are ready. Likewise, you might want to execute a command before Kubernetes terminates a pod to release the resources in use and gracefully terminate the application. You can do so easily with two container lifecycle hooks:

We Are Testing Software Incorrectly and It's Costly

Aggregated on: 2021-10-28 17:35:46

Many engineers believe that for every public method of every class, they must create a corresponding "unit test." That is wrong. That wasn't what many meant by "unit" when the term "unit testing" was first used.

The 3 "Best" Config File Formats

Aggregated on: 2021-10-28 16:50:45

There are countless configuration file formats. Some are custom-designed for a specific application, such as those used by the Apache webserver or BIND. But more commonly these days, new applications use some sort of standardized configuration file formats, such as YAML, JSON, XML, or INI. Some applications, such as WordPress even use executable code as configuration files. Most modern languages have libraries that will let you read (and in some cases, write) to a wide variety of configuration formats. Go’s Viper package supports 6 distinct file formats. Perl’s Config::Any supports 5 (plus executable Perl code).

What CI Observability Means for DevOps

Aggregated on: 2021-10-28 16:20:45

In the endeavors to conquer and expand, we have found ourselves now wrestling the beasts of the clouds. After all, the battle of Cloud development with all its gains was expected to be nothing less than enigmatic. Our greatest strategy, anticipated to secure yearning triumph has been laid out and given the most peculiar yet apt name. DevOps. However, there lies within this great strategy potential harm to its core and therefore warrants its safekeeping. Alright, let’s get to the point now, Cloud Computing! A great progression in software development and definitely a concept that has proven its worth over the past decade now. With the promise of delegating most of the infrastructural and operational responsibility to cloud vendors, allowing us to primarily focus on the business logic.

How To Learn DevOps

Aggregated on: 2021-10-28 16:20:45

One question I hear a lot is “How do I learn DevOps?” As straightforward as the question may seem, the answer is actually full of a lot of nuänce. There are many ways to answer, depending on exactly what is meant by the question. So in this article, my goal is to clear up some confusion about “DevOps”, and provide some pointers for those who want to learn about it.

Using PowerShell To Create Instance of Azure Cognitive Services

Aggregated on: 2021-10-28 16:20:45

This video tutorial will walk you through the entire list of commands which are required to create an instance of Azure Cognitive Services using PowerShell.

Getting Started With Face API Azure Cognitive Services

Aggregated on: 2021-10-28 15:50:45

This video guides you through all the steps required to get started with Azure Face API including documentation links. It also demonstrates how to make a call to Face API using both client-side SDK and REST APIs.

Advanced Kubernetes

Aggregated on: 2021-10-28 15:50:45

Kubernetes is a distributed cluster technology that manages container-based systems in a declarative manner using an API. There are currently many learning resources to get started with the fundamentals of Kubernetes, but there is less information on how to manage Kubernetes infrastructure on an ongoing basis. This Refcard aims to deliver advanced-level quick, accessible information for operators using any Kubernetes product.

Overruling the Product Owner?

Aggregated on: 2021-10-28 15:50:45

There are plenty of failure possibilities with Scrum. Since Scrum is an intentionally incomplete framework with a reasonable yet short “manual,” this effect should not surprise anyone. For example, what if the stakeholders (who bring the budget that is funding your Scrum team) insist on calling the shots by overruling the Product Owner’s prerogative to define the composition and the ordering the Product Backlog? What if your stakeholders suffer from the “my budget, my feature” syndrome? Join me and delve into the effects of overruling the Product Owner in less than 140 seconds.

Ddosify: High-performance Load Testing Tool, QAInsights

Aggregated on: 2021-10-28 15:20:45

There are over 50+ tools and solutions available in the market for performance testing your application and services. Now it is time to check out Ddosify, a high-performance load testing tool that offers free and commercial features to test web applications and services over HTTP(S), HTTP/2, and other protocols are on their way. In this blog article, let us deep-dive into the Ddosify tool and see whether it satisfies a typical performance engineer or not. Before we see Ddosify, let us try to understand the name of the tool. Ddosify contains Ddos term. DDoS stands for Distributed Denial of Services. Below is the Wikipedia entry for Denial of Service:

Cloud Observability - Understand the Complex State of Your System

Aggregated on: 2021-10-28 13:05:45

Cloud-based systemic optimization is central to the agility of a business in today’s post-COVID world. Whilst the accelerating trend to embrace the cloud is good, the key focus should lie in identifying and outmaneuvering any future uncertainties. Nobody expected to be forced to work from home, neither did some industries expect a volatile growth in traffic and demand. For example, Netflix saw a sharp 16 million spike in the number of new subscribers, highlighting the unprecedented growth in demand and the need for tactical systems to handle the same. With the growing scale and complexity of systems architecture and new challenges being imposed, IT professionals are under high pressure to identify anomalies, derive solutions for the same, and ensure that they don’t arise in the future. To assure that, enterprises are looking at Observability.

Beginner’s Guide To Using Amazon S3 Storage Classes

Aggregated on: 2021-10-28 12:35:45

As the world increasingly moves towards the cloud, there’s been an insane demand for the right cloud platforms and solutions over the last few years. Furthermore, with the gradual introduction of advanced technologies and concepts like data science, artificial intelligence, machine learning, and more into organizations’ operational modules, there is a constant need to have adequate storage space to accommodate increasing data generation requirements. For those of you who are on the lookout for quality and cost-effective AWS cloud migration tools and services, this guide will introduce you to Amazon’s S3 Storage. This post will offer you extensive insights on what it is all about and help you make better decisions on migrating to this service.

Edge Cloud: Benefits and Top Considerations

Aggregated on: 2021-10-28 11:35:45

Have you ever wondered how data gets onto your phone so quickly? Or, for that matter, how do the Internet of Things (IoT) devices, streaming video to your mobile device, and smart city technologies interact at lightning speed with far-off information systems? The answer is “the edge,” that zone where network access is closest to an end-user or connected device—the network’s edge, so to speak. Changes in consumers’ use of devices, along with the advent of 5G and the IoT, among other things, have driven a huge increase in the size and sophistication of edge infrastructure. Today’s edge is comprised of thousands of small data centers and antennas sitting atop bare metal computing infrastructure. The concept of the edge is evolving rapidly, too, with seemingly endless growth in its reach and complexity.

Become 235 billion times more productive

Aggregated on: 2021-10-28 11:35:45

According to a study done by scientists from Oslo and Gothenburg 69% of IT leaders says their primary obstacle preventing them from innovating is technical debt. Another study concluded that between 24 and 41 percent of resources were wasted on technical debt. Yet another study again, this time from Harvard, told us 11 million people quit their jobs in the US alone between January 2021 and July 2021. The sectors that were hit the hardest were (obviously) IT and health. It doesn't take a rocket scientist to understand why, and if you don't recognise the problem, you need more experience. We've all been there, our job sux, we're burned out, and we feel awful about our lives. Every single time I quit a job myself the last 5 years, these were my exact reasons. Life is simply too short to spend it fixing legacy garbage code!

The Cloud Continuum

Aggregated on: 2021-10-28 11:35:45

Organizations are reinventing their futures amid exceptional situations. Nowadays, change has become the new ordinary. That is why so many firms are reinventing themselves and moving systems and apps to the Cloud. And they’re doing it while their industries and businesses are changing. It’s analogous to a ship repairing its engine and retraining its crew while attempting to maintain speed and direction amid a severe storm. But all this hard work pays. According to Accenture’s global survey of about 4,000 global businesses and IT leaders, nearly 65% of respondents saw up to 10% in cost savings, on average, from moving to the Cloud. But it is not the only positive outcome. A tiny fraction of the surveyed firms — roughly 12–15 percent, depending on region — are experiencing significant benefits from their sustained cloud involvement. They profit even amid global upheavals because they see the Cloud as a springboard for innovation and new business ways.

Agile Architecture - What Is It?

Aggregated on: 2021-10-28 08:29:29

Project development using agile methods is nothing new. However, it is very common to associate the idea that in agile projects there is no need to design the architecture of a system. The question that remains is: How the system's architecture design would fit into Agile development? Many will argue that in an agile development scenario, it's not useful stopping to think about the architecture so that it will inevitably change over time. We agree with the second part of this statement, the architecture will change during the project and the longer the project time, the greater the probability of changes in the initially defined architecture.

A New Era of Software Processes Is on the Horizon

Aggregated on: 2021-10-27 23:44:29

The report late last year from FireEye of a state-sponsored attack targeting SolarWinds’ Orion software sent a shockwave through the industry and the reverberations from the discovery are continuing to ripple. As many as 18,000 SolarWinds customers — including at least nine U.S. government agencies — were infected via the SunBurst breach of the network monitoring and management solution. Moreover, according to a recent study from IronNet, the average financial impact of that attack was 11% of annual revenue or about $12 million per company. U.S. intelligence has put the blame for the attack on Russian-sponsored hackers, who compromised multiple Orion software updates that were released between March and June 2020, giving bad actors a backdoor into exploited systems. Our research found that the Orion software build and code-signing infrastructure was compromised, with the source code of the affected library directly modified to include malicious backdoor code that was compiled, signed, and delivered via the existing patch release management system.

Connect to a Database Instance Running Inside a Java Testcontainer Using IntelliJ IDEA

Aggregated on: 2021-10-27 22:44:29

JUnit is one of the most popular unit testing frameworks used with Java to create repeatable tests. With JUnit, each test is written as a separate method inside a Java class. IntelliJ IDEA provides an option to run these test cases from within the IDE. In case you have a module that communicates with a MySQL database, you can unit test the module by providing it access to a MySQL server running inside a Testcontainer. You can also configure this MySQL database instance with your desired username, password, and database name (in MySQL server) using the API provided by the Testcontainers framework.

Automatically Import SASS/SCSS Into Every Vue.js Component

Aggregated on: 2021-10-27 21:44:29

If you’ve done any work with Vue.js and SASS (or SCSS from here on), you may have run into this very common issue: you have SCSS variables in one file that you want to make available to your Vue components. The good news is that the Vue CLI makes it incredibly easy to support writing SCSS, and with Vue’s single-file components, you can simply add lang="scss" to the <style> block (docs).

Deploy a Java application using Helm, Part 2

Aggregated on: 2021-10-27 21:14:29

In the previous article in this series, you learned how to deploy Java applications to Red Hat JBoss Enterprise Application Platform (JBoss EAP) using Helm on Red Hat OpenShift. Developers can use the procedures in Part 1 to easily stand up traditional Java application servers on Kubernetes with predefined Kubernetes manifestos. What if you could have the same benefits when you develop microservices using JBoss EAP and Helm charts? JBoss EAP provides the Extension Pack (XP) to implement content trimming, packaging to a bootable JAR, and a MicroProfile specification including fault tolerance, monitoring and tracing in support of microservices in the cloud. This article explains how to make a bootable JAR using JBoss EAP XP and Helm and deploy the application to OpenShift.

How CSS Subgrids Make Vertical Alignment Easy

Aggregated on: 2021-10-27 18:29:29

Do you know that both the grids and alignment CSS properties are always talked about together? Why? Because of the nature of their existence and the mess that alignment creates on different screen devices. How easy and convenient would web developers’ lives become if all the devices in this world existed with the same screen size. That would be a dream! But coming back to reality, we have to deal with hundreds of devices with varying screen sizes, and the problems they create for the developers with alignment is an add-on. CSS grids and CSS subgrids were introduced to tackle the alignment problem with multiple elements existing side by side. Grids were responsive, and instead of the “hit and try” of pixel and margin values, setting display: grid worked like a charm. As time stands witness to the issues tackled by web developers, if they do not have one, they invent one themselves. Now the developers have started to create complex web designs with one grid nested with other grids. That was a makeshift arrangement, and making it work was an endeavor in itself.

Container Creates Instant Database API

Aggregated on: 2021-10-27 18:29:29

In this tutorial, we’ll show how to use ApiLogicServer to create, customize and run a Database based API. API Logic Server is an open-source Docker container. With the commands shown below, you get: Working Software, Now: A database API server, to unblock UI development. A multi-page web app, to engage Business Users — early in the project. Declarative logic using unique spreadsheet-like rules — 40X more concise than code, extensible with Python — for remarkable business agility. Customizable projects, using a standard language and tools. Operate in a cleanly isolated, containerized environment that matches your deployment architecture. TL;DR — Create Database API and Basic Web App Create the sample project in a minute or two, as follows. With Docker started, enter these Terminal commands (Windows, use Powershell):

How To Pass a Technical Interview: Recommendations and Win Strategy

Aggregated on: 2021-10-27 17:59:29

What This Is Article About Maybe you were or you will be a candidate for a technical interview. Here, I'll share my personal experience as an interviewer. I'll share the best strategies to pass technical interviews considering the interviewer (company) side. I'm sure both juniors and seniors could learn something from this article. Earlier I published an article with recommendations on how to conduct technical interviews for interviewers. In that article, I recommended asking high difficulty questions first and then moving to simpler questions. In such a way, the interviewer can identify the candidate's knowledge quite quickly. However, this approach has one disadvantage: interviewed developers might experience a lot of stress. For this reason, companies may follow a different approach.

The Shifting Cloud-Native Landscape: Understanding Kubernetes Compliance and Security Frameworks

Aggregated on: 2021-10-27 17:14:29

There’s a reason why Kubernetes (K8s) has become the world’s leading container orchestration platform, with 74% of today’s IT companies using it for containerized workloads in production. It’s often the simplest way to handle container configuration, deployment, and management at scale. But while Kubernetes has made use of containers easier, it has also added complexities when it comes to security. Kubernetes’ default configurations don’t always provide optimal security for all workloads and microservices deployed. Plus, today you are responsible not only for defending your environment against vicious cyberattacks but also for meeting a wide variety of compliance requirements.

How to Fix the 5 Most Common AWS IaC Misconfigurations [Webinar Sign-up]

Aggregated on: 2021-10-27 17:14:29

Infrastructure as code (IaC) is critical for developing cloud-native applications at scale, but with added complexity comes added security considerations. If gone undetected, one IaC misconfiguration can snowball into hundreds of alerts and cloud risk. In this talk, we analyzed the most common AWS misconfigurations within Bridgecrew’s IaC scan data to illustrate the importance of IaC security. We’ll walk through each of the misconfigurations, the potential risk they pose, and show how to fix them.

Microsoft Cloud for Retail: Architect Perspective

Aggregated on: 2021-10-27 01:29:28

2020 was the year in which we experienced disruptive changes at a pace and a scale that we could never have imagined. COVID-19 caused disruptions in product supply and demand, in the labor pool, and consumer spending. But it also allowed many sectors to embrace digitalization like never before. Retail is 31% of the world’s GDP, and that data is the demand signal for the world. In 2020, the retail industry faced challenges but also opportunities. First, the retail sector accelerated the already underway transition from physical retail to e-commerce quickly.

How to Enable Subscription in Apollo Federation With NestJS GraphQL

Aggregated on: 2021-10-27 00:59:28

Setting up a GraphQL server in NestJS saves 5x-10x of the effort with vanilla NodeJS. NestJS uses the standard Apollo library for setting up GraphQL. It supports both normal and federation mode. In federation mode, we can set up GraphQL servers in every microservice, which can be aggregated using a gateway just like API-Gateway with REST services. It is a very good technique if you are running microservices and want to separate the responsibility for each service. NestJS is one of the most powerful NodeJS frameworks available as of today. One of the cool features of NestJS is that it allows easy integration with databases, message queues, authentication, etc. Furthermore, it allows developers to create applications using NodeJS within a much stricter, robust, and flexible framework like Spring Boot/Angular.

Prometheus Definitive Guide: Prometheus Operator

Aggregated on: 2021-10-27 00:59:28

In this blog post, we will focus on how we can install and manage Prometheus on the Kubernetes cluster using the Prometheus Operator and Helm in an easy way. Let’s get started! What Is an Operator? Before moving directly to the installation of the Prometheus using the Prometheus Operator, let’s first understand some of the key concepts needed to understand the Prometheus Operator.

How to Use FCM for Push Notifications and ViewFlipper in Android

Aggregated on: 2021-10-27 00:59:28

I have used Firebase Cloud Messaging (FCM) for push notification and ViewFlipper view component for sliding multiple images in Android. So let’s start the code! Steps: 1. Create a new project and integrate FCM or another service.

Creating an Amazon SNS SQS Publish-Subscribe Model in Mule 4

Aggregated on: 2021-10-27 00:14:28

MuleSoft — SNS Connector Anypoint Connector for Amazon SNS (Amazon SNS Connector) provides connectivity to the Amazon Simple Notification Service (Amazon SNS) API, enabling you to build distributed web-enabled applications. Mule apps can use Amazon SNS Connector to easily push real-time notification messages to interested subscribers over multiple delivery protocols. MuleSoft — SQS Connector Anypoint Connector for Amazon SQS (Amazon SQS Connector) provides an easy way to interface with the Amazon Simple Queue Service (Amazon SQS) API, enabling Mule users to manage SQS queueing services without having to interact with the API directly.

How to Build a Metadata-Driven UI

Aggregated on: 2021-10-26 23:44:28

A metadata-driven UI approach is especially useful in project teams with a high back-end or DBA competence rather than UI. In general, it provides element alignment by invocation of a single endpoint that provides all data required such as cardinality, language, font size, and the font itself. The library itself aims to provide a configurable metadata engine and a set of endpoints. At the same time, UI should be written from scratch, taking into account corresponding use case specifics to be able to properly handle metadata and construct itself based on it.

Ultra-fast Java In-Memory Database Apps & Microservices with MicroStream

Aggregated on: 2021-10-26 23:14:28

MicroStream is a fundamentally new persistence framework for storing complex Java object graphs natively, which means the object graph is stored on disk as it is in RAM. Vice versa it allows you to load any single subgraph on-demand that is then merged with your object graph in ram automatically. This leads to fantastic benefits: You can use object graphs as an in-memory database. An object graph is a powerful multi-model data structure. You can use any Java type, collections, and formats like JSON. Matching this, Java provides the perfect query language. With Java Streams, searching even huge object graphs will take only microseconds - up to 1000x faster than comparable SQL queries and even much faster than reading data directly from a local cache. DB-specific data structures or formats become meaningless for Java. No more expensive mappings. No more data-type conversion. No more DB-specific query language. Only one data model: Java classes (POJOs). No additional caching framework is required. No more inconvenient object copies. Simple architecture and type-safe query code. Core-Java only instead of DB-specific concepts. As an end result, you will get out an ultra-fast Java in-memory database app or microservice. MicroStream is in productive use for more than 5 years and becomes now open source and part of the popular microservice frameworks Helidon and Open Liberty.

How to Fix Cyber Vulnerability and Protect Data in Ghost 4.3.2

Aggregated on: 2021-10-26 23:14:28

Ghost is one of the most popular Node.js-based Content Management Systems (CMS). According to the vendor, there are currently more than 2.5 million installs of it and the project has more than 38k stars on GitHub. During our research on open-source applications, the SonarSource Security Research team analyzed the code and found a vulnerability in Ghost 4.3.2 that allows attackers to gain control of admin accounts. In this blog post, we will first look at some web technologies that are required to understand the vulnerability. Then we will show the vulnerability and how it could have been exploited by attackers. Finally, we will explain how to avoid or fix such issues during development.

Using pgbench With CockroachDB Serverless

Aggregated on: 2021-10-26 23:14:28

Previous Articles Using PGBouncer with CockroachDB Using PGBouncer with Cockroach Cloud Free Tier Exploring PGBouncer auth_type(s) with CockroachDB Motivation I've worked at Cockroach Labs for almost two years. In the last two years, I've come across many products in the PostgreSQL ecosystem. Surprisingly, pgbench was one of those utilities I've heard about but never really tried on my own. As coincidence may have it, in the last few weeks, I had two customers with specific requirements that fit well with what pgbench can provide. I decided to spend a couple of days and evaluate this tool with CockroachDB. From the pgbench documentation:

How to Build HTML Forms Right: User Experience

Aggregated on: 2021-10-26 23:14:28

As you build out forms for the web, getting the semantics, accessibility, and styling right is a lot of work. If you can get all those right, you’re doing quite well for yourself. However, there are still some things we can do to make life better for the folks filling out our forms. In this article, we’ll look at some of the dos and don’ts of HTML form user experience (UX). If you are looking for a refresher on the previous steps mentioned above, take a look at the other articles in this series.

HTTP Methods: GET, POST, DELETE and PUT — RESTful Web Services With Spring Framework | Spring Boot

Aggregated on: 2021-10-26 22:44:28

In the video below, we take a closer look at HTTP Methods: GET, POST, DELETE and PUT — RESTful Web Services with Spring framework | Spring Boot. Let's get started!

Understanding Spring Boot Project, Spring Initializr, and POM.xml

Aggregated on: 2021-10-26 22:44:28

In the video below, we take a closer look at the understanding Spring Boot project, Spring Initializr, and pom.xml. Let's get started!

Flink on TiDB: Reliable, Convenient Real-Time Data Service

Aggregated on: 2021-10-26 22:14:28

TiDB is a distributed SQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads. It is MySQL compatible and features horizontal scalability, strong consistency, and real-time Online Analytical Processing (OLAP). Apache Flink is the most popular, open-source computing framework. It provides high-throughput, low-latency data computing and exactly-once semantics. These two powerful software provide reliable, convenient support for our real-time gaming applications. In this article, I'll share our pain points when using Flink, how Flink guarantees exactly-once semantics, and how we implement it on TiDB. I hope you enjoy this article and find our experience helpful.

Confluent Kafka Installation and Demo

Aggregated on: 2021-10-26 22:14:28

About KAFKA and Confluent Apache Kafka is an open-source community distributed event streaming platform used by thousands of corporations for high-performance streaming, data pipelines, and critical applications. Kafka was developed by the Apache Software Foundation written in Scala and Java. Confluent Open Source is a developer-optimized distribution of Apache Kafka. Confluent Platform is a full-scale data streaming platform that enables you to easily access, store, and manage data as continuous, real-time streams. Confluent is a more complete distribution of Apache Kafka. It streamlines the admin operations procedures with much ease.