News Aggregator

How To Integrate Security Into the DevOps Toolchain

Aggregated on: Sun Nov 07 2021 13:05:52 GMT+0000 (Coordinated Universal Time)

Traditional Security Conundrum in DevOps DevOps tactics and tools are significantly transforming the way businesses innovate. However, amidst this transformation, IT decision-makers are cognizing that traditional ‘siloed’ security approaches are hampering organizations from realizing the full potential of DevOps. In fact, the conventional security methods and controls are perceived as inhibitors to speed, agility, and scalability offered by DevOps. Baking Security into DevOps In response, forward-thinking and fortune 500 companies have started integrating security practices and controls into each phase of the DevOps software development lifecycle, a methodology popularly known as DevSecOps. It integrates security practices and procedures into DevOps tools and underlying policies, making security an integral part of software development. As DevSecOps gathers steam, IT firms are more likely to blend vulnerability assessment, risk modeling, and security automation into DevOps processes and toolchains. As a result, it improves security and compliance maturity levels of the DevOps pipeline and toolchain, while enhancing product quality and delivery. How? DevSecOps enables seamless flow of application changes through DevOps pipelines, bestowing on the developers the authority and autonomy, without axing security or increasing risk.

DevOps Toolchain for Beginners

Aggregated on: Sun Nov 07 2021 12:05:52 GMT+0000 (Coordinated Universal Time)

In the digital world, business agility and speed are imperative for IT organizations, given the pace at which the business and technology landscape is evolving. They are obliged to respond and deliver at speeds greater than the pace of digital disruption. And, DevOps has emerged as the panacea to these challenges. DevOps is the combination of cultural philosophies, processes, and tools that increase an organization's ability to deliver software faster while maintaining excellence in quality. This speed enables businesses to serve their customers better and gain a competitive edge in the market. DevOps automates and integrates the efforts of development and IT operations teams to help them build, test, deploy, and monitor applications with speed, quality, and control. It is all about automating manual tasks, reducing errors, eliminating bottlenecks, and cutting down rework across the Software Development Life Cycle (SDLC) phases.

SRE vs. DevOps: Responsibilities, Differences, and Salaries

Aggregated on: Sun Nov 07 2021 11:35:52 GMT+0000 (Coordinated Universal Time)

There is significant debate around the differences between Site Reliability Engineering (SRE) and DevOps. Given that there are certain similarities between these two approaches to software development and deployment, it isn’t uncommon for people to use these terms interchangeably. However, SRE and DevOps have distinct identities and processes in place to meet the requisite goals. This article will highlight the differences between the two with regard to fundamentals, associated responsibilities, and salary.

In-memory Automated UI Testing ASP.NET Core

Aggregated on: Sun Nov 07 2021 10:20:52 GMT+0000 (Coordinated Universal Time)

Introduction In this article, we look at how to run in-memory automated UI tests for an ASP.NET Core web app using Playwright and NUnit. The article provides demo code and solutions to issues found along the way. Automated UI Testing Automated testing of any web application is essential to ensure it functions correctly. On the top of the “testing pyramid” proudly sits UI testing or end-to-end testing, above integration and unit testing. Automated UI testing involves launching and controlling a browser to drive through a set of interactions that a user would perform. Assertions are made to see if the web app and browser behave as expected. Browsers are controlled by testing tools such as Selenium, Puppeteer, or the new kid on the block, Playwright.

A-Z Guide to an Ideal Dashboard Design

Aggregated on: Sun Nov 07 2021 09:05:52 GMT+0000 (Coordinated Universal Time)

In the modern tech-savvy age, it’s hard to imagine a person who doesn’t use a dozen apps every day. Thousands of apps enter the market every day in hopes of winning a fair share of the booming mobile technology market. Still, only a few of them succeed. The reason for this is the growing sophistication of users picking only intuitive, helpful, and visually appealing software. So, how can you maximize the chances of your app’s success on the market? One of the key considerations at the design stage is the app’s dashboard. It is often the primary criterion of the user’s app choice. In a nutshell, a dashboard is the app’s activity display showcasing the KPIs and activities you can measure with its help.

How Product Engineering Teams Avoid Dependencies

Aggregated on: Sun Nov 07 2021 08:35:52 GMT+0000 (Coordinated Universal Time)

Independent Executor Model It is natural to need things from other teams. It can be tempting to wait for them or depend on them to provide something for you. This happens because they own the area you need to do work in. For example, you might need a team to add a field into their API. Or you might need them to build a new API for you. Sometimes without these changes, you can’t deliver what you need to. This is an organizational trap. It leads to pain and misery.

How to Avoid Vulnerabilities in Your Code

Aggregated on: Sat Nov 06 2021 19:50:51 GMT+0000 (Coordinated Universal Time)

In recent times, we have witnessed several information security breaches worldwide: vulnerabilities, ransomware, Man-in-the-middle, among other problems that become headaches not only for the engineering team but for the whole company and even for customers of your product. What if we say that most security problems could be avoided? This article will cover the importance of information security and how to include it throughout the development process: the so-called DevSecOps.

From Spring Boot Microservices to Lambda Functions

Aggregated on: Sat Nov 06 2021 19:05:51 GMT+0000 (Coordinated Universal Time)

You may be one of many organisations (or an engineer in one) that operates Java microservices in the cloud with a desire to move towards a serverless architecture, but are unable to justify the steep migration path (e.g. decomposing your services into functions, rewriting in a more suitable language etc.) from those microservices to the likes of AWS Lambda. But fear not! Because with the help of spring-cloud-function you can repurpose your existing microservices into serverless functions in a gradual and controlled manner, with minimal effort or interruption of service.

It’s Time to Reevaluate the Relational Database Model

Aggregated on: Sat Nov 06 2021 17:35:51 GMT+0000 (Coordinated Universal Time)

The relational database model was first proposed by IBM Data Scientist Edgar F. Todd in 1970 and is still widely deployed today. It’s rare to see models survive decades of software evolution and suggests that the model is intuitive, practical, and proven. The relational model makes sense as we organize our data into elements and their properties, and how we associate different elements with each other. The introduction of SQL, a declarative language that is expressive enough to answer the simplest or most complex questions about our data, was another industry milestone. Well-understood by DBAs, developers, data scientists, and analysts, SQL or its variants, are found in all relational databases, in addition to popular non-relational databases.

Untraceable Communication is Here

Aggregated on: Sat Nov 06 2021 17:35:51 GMT+0000 (Coordinated Universal Time)

Have you ever watched a spy movie where the hero casually walks to a bench in a park and nonchalantly retrieves some papers from under it, or a microfilm roll, or in a more modern spy movie an sd-card? That is what spycraft calls a “Dead Drop”. During a “Dead Drop” the two operatives exchanging information don’t need to meet, which enhances operational security. Even if third parties are actively monitoring one or even both operatives, the two will never be at the same place at the same time, therefore no useful information can be gained by watching them. If they are careful enough, that is.

Using the Notion API to Build a Content Management System

Aggregated on: Sat Nov 06 2021 03:35:51 GMT+0000 (Coordinated Universal Time)

At Appsmith, we use Notion to manage our content calendar. We also work with a few external agencies and freelancers for some of our content. It is impossible to create granular access control and develop a workflow on Notion to run the process smoothly and thus, as soon as Notion released their API, we decided to build an application that helps us manage our entire content management in one place while giving our collaborators the necessary access only. Our application uses our Notion (mock) Table as a data source and lets you plant, submit, and edit articles on the application, while at the same time having a provision for integrating with an email service of your choice (we use SendGrid here) to send reminder emails or updates to people in the project.

How to handle hypergrowth like Grammarly

Aggregated on: Sat Nov 06 2021 03:35:51 GMT+0000 (Coordinated Universal Time)

Grammarly has a simple but ambitious goal: turn all of its users into great writers. Their product has become synonymous with quality and working professionals the world over depend on the digital writing assistant to improve their grammar, catch spelling mistakes and write engaging content.

Lessons From an Internet Outage: Issues Caused by Let’s Encrypt DST Root CA X3 Expiration

Aggregated on: Sat Nov 06 2021 02:35:51 GMT+0000 (Coordinated Universal Time)

As a monitoring and observability company, we have a lot of monitoring built into our systems as well. We have the standard monitoring to make sure that systems are performing properly, data is flowing through our infrastructure, etc. At the same time, we have monitoring for any sudden changes to tests that our customers are running. On September 29, 2021, at 19:21:40 UTC, we started to see a tsunami of alerts at Catchpoint. They originated from some of our web tests from our synthetic nodes, occurring when our Let’s Encrypt “R3” certificate expired. These types of incidents are pretty rare.

Using Machine Learning for Log Analysis and Anomaly Detection: A Practical Approach to Finding the Root Cause

Aggregated on: Sat Nov 06 2021 00:05:51 GMT+0000 (Coordinated Universal Time)

There are many articles on applying machine learning for log analysis. However, most of them are dated, academic in nature, or don’t focus on practical outcomes. On DZone, the last time an article covering how ML can be used for log analysis was published 5 years ago. In this article, we want to share our real-life experience on using ML/AI for log analysis and anomaly detection with the specific purpose of automatically uncovering the root cause of software issues.

Spring Boot Pet Clinic App: A Performance Study

Aggregated on: Sat Nov 06 2021 00:05:51 GMT+0000 (Coordinated Universal Time)

Spring pet clinic application is a sample application developed by the Spring Framework developers to demonstrate the capabilities of Spring Boot, Spring MVC, and Spring Data Framework. We set out to conduct a performance test on this application and see whether we can identify any performance bottlenecks. Environment Setup We cloned the Spring pet clinic application’s official Github repository and followed instructions to build a JAR file. Once the JAR file was ready, we launched the application on http://localhost:8080.

Deploying Jamstack Sites to Azure

Aggregated on: Fri Nov 05 2021 23:35:51 GMT+0000 (Coordinated Universal Time)

Azure and Static Web Apps Azure is Microsoft’s cloud computing service. Developers use it for building and deploying all sorts of applications and services. Many larger organizations rely on their secure, global data centers for managing enterprise applications. But, an increasing number of smaller teams are embracing the platform, especially ones with quick scale in mind. Recently, Microsoft officially released Azure Static Web Apps at their virtual Code to Scale event. This announcement means that Microsoft users can now use Github CI/CD pipelines and their favorite development tools to deploy static resources and even trigger Azure API functions.

The 7 Most Expensive Bugs in History

Aggregated on: Fri Nov 05 2021 23:35:51 GMT+0000 (Coordinated Universal Time)

NASA Mars Climate Orbiter: $193 Million Nasa’s Mars Orbiter was the second probe in their Mars Surveyor Program, which also included the Mars Global Surveyor that launched in November 1996 and the Mars Polar Lander that launched in January 1999. They were designed to arrive at roughly the same time to conduct experiments on the surface, climate, and atmosphere of Mars. It was supposed to arrive in orbit on September 23, 1999.

The Top 5 Data Breaches of the Decade and What We Can Learn From Them

Aggregated on: Fri Nov 05 2021 22:05:51 GMT+0000 (Coordinated Universal Time)

While we entered the new digital world of the 2010s optimistic and trusting, all the major headlines about data breaches at the world’s largest organizations have made us all more cautious. As we enter a new decade, data security has become more relevant than ever before.

See Spring Native in Action With the Okta Spring Boot Starter

Aggregated on: Fri Nov 05 2021 22:05:51 GMT+0000 (Coordinated Universal Time)

The Spring team announced a new experimental Spring Native project in the fall of 2020, which gave Spring developers hope for faster startup times. Converting your Spring apps to native executables is what Spring Native is all about, and it does this by using GraalVM. This was a huge announcement because the new kids on the block, Micronaut, and Quarkus, created native executables by default. When I first heard about Spring Native, I was quite excited. Despite its initial release (v0.8.3) on November 23, 2020, I began using it in September 2020, likely due to SpringOne. How do I know for sure? Because that's when I tried it for the first time and reported an error for the Okta Spring Boot starter. In the waning weeks of 2020, I was able to get things functioning with Spring Security's OAuth dependencies (rather than the Okta starter).

SLA vs SLO vs SLI: Understanding the Similarities and Differences

Aggregated on: Fri Nov 05 2021 21:35:51 GMT+0000 (Coordinated Universal Time)

The world of Site Reliability Engineering is filled with acronyms — especially ones that start with S. In addition to SRE (which can stand for both Site Reliability Engineering and Site Reliability Engineer), there are three other essential S acronyms to know: SLA, SLO, and SLI. Understanding what SLA, SLO, and SLI mean and how they relate to SRE can be a bit tricky. The differences between the three terms are small yet important, and you don’t want to make the mistake of conflating these terms.

What is DevOps?

Aggregated on: Fri Nov 05 2021 19:50:51 GMT+0000 (Coordinated Universal Time)

DevOps is a mix of Development and Operations that combines people from a distributed stack, tools used to create efficient applications with the process of development to enable faster delivery of quality products. By bringing together the people, tools, and processes, DevOps enables rapid development and delivery with a scope of incremental features added to the product.

Cybersecurity, Data, and Automation: What You Need to Know

Aggregated on: Fri Nov 05 2021 16:50:50 GMT+0000 (Coordinated Universal Time)

What is Cybersecurity? Cybersecurity is defined as how people and organizations can reduce their risk of damage to computer systems and networks. In practice, cybersecurity practitioners fend off cyberattacks, and the rest of us do our best not to fall for online scams. Cybersecurity has become a major focal point in protecting customer data, with so much of what we do now moving online and relying on computers. This is especially true in a post-pandemic era. One study found the number of global data breaches jumped by 273 percent in the first quarter of 2020, compared with the corresponding period in 2019.

A Brief History of API Management and Where It’s Going

Aggregated on: Fri Nov 05 2021 16:20:51 GMT+0000 (Coordinated Universal Time)

The term “API Management” is used frequently, but it can mean different things to different people. There is no single “right” or “wrong” way to define it, but it is important to understand what somebody refers to when they talk about API Management. One interesting way of looking at the various possible perspectives on API Management is to look at the evolution of API Management and of the API space, in general. Such a view on how the space and how practices have evolved allows us to better understand why terms such as API Management have changed meaning, over time.

SQL IntelliSense Auto-completion Alternative to SSMS

Aggregated on: Fri Nov 05 2021 15:50:51 GMT+0000 (Coordinated Universal Time)

Is there a SQL developer who wouldn't love to make their daily coding simple and error-free? Would they resist smart assistance with suggestions and autocompletion that eliminate the need to memorize and type everything manually? Would they reject getting quick access to object and parameter information? The answer to all of these questions is, naturally, no, no, and no. We all want to get rid of monotonous tasks by automating and accelerating them. We all want to focus on more important matters at hand. And that's how we become so picky when it comes to selecting tools for our daily work - for instance, such tools as autocompletion in SQL Server Management Studio.

Developer's Guide to Building Notification Systems: Part 1 - User Requirements

Aggregated on: Fri Nov 05 2021 15:05:50 GMT+0000 (Coordinated Universal Time)

So your CTO has just handed you a project to revamp or build your product’s notification system. It seemed like a simple and straightforward project, but you started doing research and realized that not only is the process pretty complicated, there’s not a lot of information online on how to do it. After all, companies like LinkedIn, Uber, and Slack have large teams of over 25 employees working just on notifications. But smaller companies don’t have that luxury - so how can you meet the same level of quality with a team of one? This can certainly be overwhelming, which is why we’ve created a blog post series to guide you through building the best notification system for your company. This is the first post in this series, and we’re introducing you to the essential user requirements for both developers and non-technical users of your notification system.

Codeanywhere adventures - Getting started with developer decision management tooling (part 4)

Aggregated on: Fri Nov 05 2021 14:35:50 GMT+0000 (Coordinated Universal Time)

In the previous article in this series, we introduced the world of Codeanywhere, a cloud IDE and container development experience all available in just your browser. Are you ready for some more amazing, easy to use, developer tooling that requires not a single tooling installation and no configuration?

Design Twitter Like Application Using Lambda Architecture

Aggregated on: Fri Nov 05 2021 14:35:50 GMT+0000 (Coordinated Universal Time)

The key necessity of the private social community application is to build a platform for a individuals' network who come together online to socialize and communicate through posting information in the form of images, comments, or messages. Apart from functional aspects, other important dimensions to be considered for designing the social networking platform include: Fault tolerance against hardware failures and human errors. Must include low latency querying as well as updates. Support active communities of millions of users. Usage of open-source big data solutions to reduce costs. Lambda Architecture Lambda Architecture is a very useful framework to think about designing big data applications and distributed data processing systems like social network platforms. It provides a data-processing platform that can support both historic as well as real-time data processing, which is a key necessity for a social community application. The below diagram depicts a suitable architecture of the social community application and high-level details of components involved using this architecture.

Common Spyware Types and How To Detect Them

Aggregated on: Fri Nov 05 2021 14:05:50 GMT+0000 (Coordinated Universal Time)

Spyware is a type of malicious software or malware that sneaks into the user’s system and gains complete unauthorized access to the system or devices without the user knowing anything. As the name suggests spyware spies on your activities and performs operations like tracking your online activities, reading your personal emails and messages, gaining access to sensitive and critical information like passwords, bank details, and credit card details. It collects data about your online activities and then forwards the data to an external server without your knowledge or consent.

Apache Spark: All About Serialization

Aggregated on: Fri Nov 05 2021 14:05:50 GMT+0000 (Coordinated Universal Time)

In Distributed Systems, data transfer over the network is the most common task. when not handled efficiently we may end up facing numerous problems like high memory usage, network bottlenecks, and performance issues. Serialization plays an important role in the performance of any distributed application to eliminate several issues that come with data transfer over network of distributed systems. Serialization Converting objects into a stream of bytes and vice-versa(De-Serialization) in an optimal way to transfer over nodes of network or to store it in file/memory buffer. Spark provides two serialization libraries with supported and configured modes through spark.serializerproperty: Java Serialization (Default) Java Serialization is the default serialization that is used by Spark when we spin up the driver. Spark serializes objects using Java’s ObjectOutputStream framework. The serializability of a class is enabled by the class implementing the java.io.Serializable interface. Classes that do not implement this interface will not have any of their state serialized or deserialized. All subtypes of a serializable class are themselves serializable.

AWS CLI – Basics

Aggregated on: Fri Nov 05 2021 13:35:50 GMT+0000 (Coordinated Universal Time)

Introduction You might be using the AWS web console for managing your infrastructure. However, the AWS web console is really ideal for once in a while kind of tasks. As you get more serious about building your AWS footprint, you’ll need to automate. Meet AWS CLI, which makes it relatively easy to launch any AWS action from the command line on your own PC, to make managing and repeating your admin tasks easier.

Quarkus for Spring Developers: Kubernetes-native Design Patterns

Aggregated on: Fri Nov 05 2021 13:35:50 GMT+0000 (Coordinated Universal Time)

Microservice applications designed today are often deployed on a platform such as Kubernetes. This platform can orchestrate the deployment and management of containerized microservices. Microservices development calls for sophisticated patterns, such as health checks, fault tolerance, load balancing, distributed tracing, and remote debugging and development. Because of this, it is essential to adopt technologies and frameworks that support these patterns while also providing a great developer experience. This article will discuss some of these patterns and showcase why Quarkus is ideal for Kubernetes-native Java applications.

10 VS Code Extensions to Fight Technical Debt

Aggregated on: Fri Nov 05 2021 13:35:50 GMT+0000 (Coordinated Universal Time)

Many engineering teams get stuck and cannot ship quality software fast because of technical debt. The best engineering teams I’ve talked to use the right tools to continuously refactor code, improve their codebase communication, and address technical debt. Here are 10 VS Code extensions that’ll help you navigate the production landscape.

Saying "NO" - A Superpower

Aggregated on: Fri Nov 05 2021 13:05:50 GMT+0000 (Coordinated Universal Time)

While becoming more proficient at coding and learning new frameworks definitely helps, there are some key superpowers that can make you stand out even more as a distinguished engineer. These help you not only to avoid burnout but also to have long-term continued success. To expand on this, here are some key benefits that you unlock by practicing this superpower:

Add gRPC to Your Java Application

Aggregated on: Fri Nov 05 2021 04:35:50 GMT+0000 (Coordinated Universal Time)

gRPC is a high-performance, open-source universal RPC framework.There are various benefits to using gRPC. It simplifies development by providing client/server code. It supports multiple languages. It all starts with defining a .proto file, .proto files reside on src/main/proto file.

Power Up Your Rails Apps With a NewSQL Database

Aggregated on: Thu Nov 04 2021 21:50:50 GMT+0000 (Coordinated Universal Time)

If you are a Ruby on Rails developer, I think you'll really enjoy this article. It aims to help you get started with TiDB, an open-source NewSQL database, and use it to power up your Rails applications. Use TiDB to Build Up Your Ruby on Rails Applications TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads. It is MySQL compatible and features horizontal scalability, strong consistency, and high availability.

Easy Local Development with TiDB

Aggregated on: Thu Nov 04 2021 21:05:50 GMT+0000 (Coordinated Universal Time)

When you develop an application, you begin by coding and testing in your local environment. Many applications interface with a database, so in this early stage, you might use SQLite rather than the database brand used in production. This is an issue, however, because ideally, you want to develop the application with the production database in mind. When using a distributed system setting up and starting/stopping the components needed for this can become error-prone and time-consuming.

Create and Deploy a Laravel Application Using a Low-code Approach

Aggregated on: Thu Nov 04 2021 21:05:50 GMT+0000 (Coordinated Universal Time)

In this post, I want to show how quickly and easily Laraboot can help you create a solid starting point for your next Laravel application, including models, CRUD routes, and Jetstream integration. Best of all, we won’t have to write any code. Once we got the application ready we will use AWS ECR to deploy it.

Data Table Filtering Using a D3 Timeline

Aggregated on: Thu Nov 04 2021 20:50:50 GMT+0000 (Coordinated Universal Time)

Here I am going to explain how we can implement data table filtering using a timeline. It will be a great approach to interact with records in a table and also to have better visualization of the data. To make this happen, I will use Angular framework, D3.js, moment.js, and a bit of Bootstrap. Getting Started Start with generating an Angular application :

Spinnaker Meets Minikube: Part 3

Aggregated on: Thu Nov 04 2021 20:50:50 GMT+0000 (Coordinated Universal Time)

In the previous posting, we build a Spinnaker pipeline to pull images from Dockerhub to deploy to a Minikube cluster. In this article, we will build a pipeline that deploys to a second staging environment after waiting for the go-ahead from an approval step. Kustomize will, furthermore, be used to illustrate how Spinnaker utilizes its built-in kubectl command to manage configurations from one environment to the next. Requirements The hard yards have been done and it is time for play. Only Kustomize will be added to the soup. Do not despair should you not be familiar with it. This write-up serves as an excellent introduction to Kustomize.

Migrating a Spacecraft Engineering Model in UML to a Knowledge Graph

Aggregated on: Thu Nov 04 2021 19:35:50 GMT+0000 (Coordinated Universal Time)

Goal: Migrate the UML-based engineering model of a spacecraft to TypeQL Why Do This Migration in the First Place? The spacecraft lifecycle is roughly divided into seven consecutive design phases. Part of the early design phases deals with the feasibility of the intended mission. Feasibility is identified by assessing each design aspect that is needed to accomplish the specific mission. This requires that engineers lay out all possible design options and iteratively go through them in relation to all the other engineering design options, ultimately ending up with a sound system solution.

The Most Common Blind Spots in DevOps Governance and Compliance

Aggregated on: Thu Nov 04 2021 19:35:50 GMT+0000 (Coordinated Universal Time)

If you work in a highly regulated industry, audits are a fact of life. Yet somehow, even though you know they’re coming, audits never seem to get any easier for your development team. Why is that? In many organizations, auditing is still an arduous fire drill. If your team isn't sufficiently prepared for an audit, it can be disruptive and invasive for everyone — leading to unplanned work and delayed progress.

Export Mulesoft Application Logs To Amazon Cloudwatch

Aggregated on: Thu Nov 04 2021 19:35:50 GMT+0000 (Coordinated Universal Time)

Application logging plays an important role in any software development projects. As much as we’d like our software to be perfect, issues will always arise within a production environment. When they do, a good logging strategy is crucial because it contains information about application events, messages, errors, and warnings, along with a few other informational events. This article will provide deep insight on how you can export your application logs to other monitoring & operational metrics tools such as Amazon CloudWatch. We will be using the popular Log4j2 library in this example.

Understanding Eclipse's Plugin Build

Aggregated on: Thu Nov 04 2021 19:35:50 GMT+0000 (Coordinated Universal Time)

This article provides a concise definition of the term Eclipse Plugin for the purpose at hand: What Is This Plugin Thing You Are Talking About? When we say 'Plugin' in this article, we mean an OSGi bundle that is running on an Eclipse runtime which has the Equinox Extension Point Registry installed.

Kali Linux vs Parrot OS: Which One Is the Best?

Aggregated on: Thu Nov 04 2021 19:35:50 GMT+0000 (Coordinated Universal Time)

Linux is a well-known operating system that is known to many developers and security hackers. Many Linux distributions in the market are flexible based on the workflow if you are a hacker, bug bounty hunter, penetration tester, or security researcher. Linux has a diverse set of distributions that are accessible, but the most famous among the distributions is the Kali Linux operating system. Kali Linux and Parrot OS are among the most favored operating system of ethical hackers and penetration testers to carry out testing and ethical hacking.

Challenges of AI in the Media Industry and How Developers Are Facing It

Aggregated on: Thu Nov 04 2021 19:35:50 GMT+0000 (Coordinated Universal Time)

Different industries today are adopting AI techniques to improve user experience in their own domains. AI in media has one of the most significant impacts on users with a high percentage of people resorting to media entertainment while being confined to their homes for the better part of the last two years. Subtitling, for example, has opened doors to the consumption of content from all over the globe, and has broken barriers of language that long restrained content consumption for users. As alluring and attractive as these new AI solutioning services may seem, on the backend, it has increased stakes for developers who have had to deal with a whole new list of challenges while dealing with this new technology and its limitless scope. Understanding the Different Use Cases As a developer, it is important to be able to understand a given business use case and decide whether pursuing the same with the help of artificial intelligence is the best approach. In the media industry, use cases like video subtitling and recommendation systems for content are appropriate to use cases that can leverage the abilities of artificial intelligence. Meanwhile, use cases like automation for managing equipment required in a studio may already have better-implemented solutions in the market that can be utilized rather than using AI. Being able to make the right call at the very beginning is a challenge for some developers.

Best Practices for TiDB Load Balancing

Aggregated on: Thu Nov 04 2021 19:35:50 GMT+0000 (Coordinated Universal Time)

Load balancing distributes connections from applications to TiDB Server instances. This helps to distribute the load over multiple machines and, depending on the load balancing option, can automatically reroute connections if a TiDB instance becomes unavailable. Load Balancing Types There are many different ways to implement a load balancer. This section describes the most common types.

How Prototyping Saves You Key Development Time

Aggregated on: Thu Nov 04 2021 19:35:50 GMT+0000 (Coordinated Universal Time)

Developing websites and apps for your business takes time. Don’t waste precious time relying only on developing alpha, beta, and final release models. There are more than 3 stages when developing a website or app. Prototyping is the blueprint stage of creating a product when designers go from laying the foundation for the design to creating a lifelike replica of how the website or app should work. When prototyping, there are many stages, such as creating the user journey, creating basic sketch outlines, and creating the prototype app with real animations and interactions. Using prototyping is faster than developing because of basic concepts such as drag and drop that help product teams quickly develop a webpage from scratch. Below are five ways prototyping helps a product team and the overall product be more impactful on the targeted audience.

Creating Light and Dark Themes for Websites The Right Way Using prefers-color-scheme

Aggregated on: Thu Nov 04 2021 19:35:50 GMT+0000 (Coordinated Universal Time)

You’re likely already familiar with media queries. They’re in widespread use for making websites responsive. The width and height properties contain the viewport’s dimensions. We then use CSS to render different layouts at different dimensions. The prefers-color-scheme media query works the same way. The user can configure their operating system to use a light or dark theme. prefers-color-scheme contains that value. The value is either light or dark, though the W3C spec states that it might support future values like sepia. We specify different values of CSS variables for both modes and let the user’s OS decide.

MariaDB Encryption (TDE) Using MariaDB’s File Key Management Encryption Plugin

Aggregated on: Thu Nov 04 2021 18:05:50 GMT+0000 (Coordinated Universal Time)

Transparent Data Encryption (TDE) encryption is one of the most common customer requirements. MariaDB supports TDE and provides a variety of options for implementing it. This blog discusses implementing TDE at the database layer using MariaDB’s File Key Management Encryption Plugin. This blog is the first in a series regarding data-at-rest encryption. In this blog, I answer the following questions:

Convergence in Cybersecurity and Cloud Operations: Lessons From NOC and SOC Fusion

Aggregated on: Thu Nov 04 2021 18:05:50 GMT+0000 (Coordinated Universal Time)

The IT organizational structure is in massive flux, as traditional models no longer fit the modern demands of cloud infrastructure and digital transformation. While this is happening in many different shapes and forms, one of the most interesting shifts is the convergence happening between network operations centers (NOC) and the security operations center (SOC) teams. To understand why this is not just interesting but also critical, let me give an example. In one company, the SOC team investigated a suspect data breach for ten days without alerting any other part of the organization. During this period the SOC team searched for new information, stopping when they needed more data, and looking at the traffic that seemed nefarious. Their approach prevented any communication across other stakeholders. Neither the legal or internal press team was aware that a crisis might have been happening. No one else provided additional input or data or was engaged to help thwart the event.