News Aggregator

Stow: Alacritty

Aggregated on: Sat Dec 10 2022 15:44:00 GMT+0000 (Coordinated Universal Time)

I’ve been working on Mac for many years with the same terminal: iTerm2. It is well known by the Mac community and not for less, a terminal is not that it has much work to do but the little it has to do, it does it very well (tabs, tmux integration, customization). The problem comes when we go to another operating system. I recently had the pleasure (and it’s not ironic) of working with the Windows environment and its WSL2, and I went crazy to find something similar.

Lessons Learned From The React Global Online Summit 22 – Junior Track

Aggregated on: Sat Dec 10 2022 15:14:00 GMT+0000 (Coordinated Universal Time)

On November 8th and 9th, I participated in the React Global Online Summit as a listener. There were numerous topics covered in this online event, and in this article, I would like to go through a few of the sessions in the junior track, such as Composable Microfrontends, React Hooks, TDD with User Interfaces, and Web Performance. Composable MicroFrontends With React – Sohini Pattanayak The React Global Online Summit started with Sohini Pattanayak, Associate Product Manager at Entando, who helps developers, architects, and enterprises accelerate development through the use of modular architecture in composable applications. She began her talk, “Composable MicroFrontends with React,“ by outlining the progression from monolithic applications to micro frontends throughout history.

Creating Real-Time Dashboards With AWS AppSync

Aggregated on: Sat Dec 10 2022 15:14:00 GMT+0000 (Coordinated Universal Time)

In this fast-paced world, applications are expected to disseminate information in real time. A few examples are tracking cargo movements, keeping a tab on stock prices, analyzing data of an ongoing football match, etc. Moreover, people use all kinds of devices like desktop, mobile, and tabs to access these applications. Also, some applications require this information and alerts to be actionable that is a user can update one or more attributes. For example, a cargo handling facility can update the status of cargo by performing an arrival scan. So, in essence, we are looking at an interactive real-time dashboard that can be accessed from multiple devices. In this article, I’ll discuss how this kind of dashboard can be built using AWS AppSync. I’ll take a common use case and create a reference solutions architecture for the use case. A quick introduction to AWS AppSync for those who are new to this service. AppSync is a serverless GraphQL interface that is robust and scalable. GraphQL is a data language that was developed to enable apps to fetch data from servers. It has a declarative, self-documenting style. In a GraphQL operation, the client specifies how to structure the data when it is returned by the server. This makes it possible for the client to query only for the data it needs, in the format that it needs it in.

(Deep) Cloning Objects in JavaScript

Aggregated on: Fri Dec 09 2022 23:14:00 GMT+0000 (Coordinated Universal Time)

Even when you pass an object to a function or method, you are passing this object by reference, not the value. If you pass (or copy) an object by reference and then change any property, the ‘source’ object’s property also changes.

Debug Like a Senior Developer

Aggregated on: Fri Dec 09 2022 23:14:00 GMT+0000 (Coordinated Universal Time)

My book on debugging is already on preorder, and I’m super thrilled to announce I’m doing a full online course to go along with it. The course website isn’t ready yet, but I already have the full outline and a lot of recorded material. I will try to drop videos at a rate of two per week in the next few months until the full course will be online. It’s shaping up to be a very detailed course. I recorded the first module and half of the second module, and I’m already close to three hours of dense recorded material! I’m publishing the course on a new YouTube channel, and I would very much appreciate likes and subscribes. If you like the video, please subscribe there or to one of the mailing lists, e.g. here, to get notified about new videos and about access to the full course as it becomes available.

Test an IoT Platform With Open-Source Tools

Aggregated on: Fri Dec 09 2022 23:14:00 GMT+0000 (Coordinated Universal Time)

Introduction The IoT industry is developing explosively. As the scale of endpoints continues to grow and business logic becomes more complex, it is necessary to verify the availability and reliability of the platform when a large number of devices are connected before the IoT platform is officially launched so as to ensure system quality. Therefore, the value and necessity of IoT performance tests are gradually highlighted. If you're delivering services, then testing your IoT system can help you find bottlenecks in performance and help you plan ahead for scalability. IoT can consist of any number of different devices using diverse protocols strung together with complex integration architecture. This can make it challenging to design effective and meaningful tests for it. This series of articles will take the IoT platform based on EMQX as an example to introduce how to use performance test tools to verify and test platform-related quality indicators.

Sending Sensor Data From Raspberry Pi Pico W to HiveMQ Cloud

Aggregated on: Fri Dec 09 2022 23:14:00 GMT+0000 (Coordinated Universal Time)

In a previous post, "MQTT Messaging With Java and Raspberry Pi," I described how data could be sent from a Raspberry Pi Linux board and Raspberry Pi Pico microcontroller to HiveMQ Cloud. Raspberry Pi Pico W On June 30, 2022, Raspberry Pi released a new product: the Pico W, a new version of the original Pico, but with Wi-Fi onboard. The new board is for sale for $6, compared to the $4 of the original Pico. The new Pico W has the same form factor as the original Pico. There is a minor change in the wiring as the connection of the onboard LED has changed. You should be able to swap to the new version in most existing projects without any problems. With this new Pico W, we can simplify the setup of the previous article, as the separate Wi-Fi module is no longer needed.

Why Discord Is Betting Big on Devs With Anjney Midha, VP of Platform Ecosystem at Discord

Aggregated on: Fri Dec 09 2022 23:14:00 GMT+0000 (Coordinated Universal Time)

How does a platform with 150 million monthly active users build for the future? In a word: Developers. Discord is betting big that the future of their company, their product, and their community is in supporting developers — and they're putting their money where their mouth is.

Using NLP To Uncover Truth in the Age of Fake News and Bots

Aggregated on: Fri Dec 09 2022 20:14:00 GMT+0000 (Coordinated Universal Time)

The modern political landscape is full of division. This is nothing new, and there have always been a number of factors contributing to the cut and thrust of political discourse. But today, political sentiment is influenced by more dynamic and immediate forces that can be used as tools in the information war. Traditional modes of communication, such as print media, political campaigns and advertisements are, of course, still prominent, but the modern information landscape contains the added variables of the web and, more significantly, social media. We are now in an age in which sentiment on any number of topics can be uncovered through the analysis of enormous amounts of data, ranging from the traditional, such as polls, election results and expert analysis, to alternative data sets, such as social media platforms. To ensure we get a true picture of any sentiment, however, we must be confident that the information we analyze is credible, which is becoming increasingly difficult to identify. As a data scientist with extensive experience in building sentiment models using natural language processing (NLP), I’d like to share my experience in uncovering the truth in today’s increasingly challenging information landscape.

Dockerizing a MERN Stack Web Application

Aggregated on: Fri Dec 09 2022 19:29:00 GMT+0000 (Coordinated Universal Time)

The MERN stack is becoming increasingly popular and could be a powerful stack to figure in. Therefore having the ability to build and deploy good MERN applications, greatly helps career prospects as a developer. What Is the MERN Stack? The MERN stack is a JavaScript stack that is designed to make the development process smoother. MERN includes four open-source components: MongoDB, Express, React, and Node.js. These components offer an associate end-to-end framework for developers to work in.

Synchronizing Basic Product Data From MySQL With DolphinDB Cached Tables

Aggregated on: Fri Dec 09 2022 16:14:00 GMT+0000 (Coordinated Universal Time)

DolphinDB is a high-throughput distributed time-series database, specially designed for big data analysis scenarios in industrial IoT (IIOT) and finance. Data analysis in DolphinDB is often conducted based on the basic product information (such as the SKU, size, and storage of a device) from an external business platform, which conventionally runs on a relational database. To associate external product information with the time series data in DolphinDB, you can use the cached tables to save the external data fetched through plugins (MySQL, MongoDB, CSV file, etc.) in memory with regular synchronizations.

Simplifying A/B/n Testing of Backend Services

Aggregated on: Fri Dec 09 2022 14:44:00 GMT+0000 (Coordinated Universal Time)

A/B/n testing, or split testing, is a testing process by which user traffic is randomly distributed between two or more versions of an application (or application component). Business metrics are evaluated to identify a winning version — the version which results in the greater profit or business value. For example, a shopping application might use revenue and user engagement as business metrics. We focus on A/B/n testing of backend services deployed in Kubernetes. For example, in the figure below, the frontend might be a Node.js based online store. It relies on a backend recommendation service to make product suggestions to users. We are interested in A/B/n testing multiple versions of the recommendation service. In the figure, we have two versions, v1 (the current or default version) and v2 (the candidate version).

The State of Deepfakes in Cyber Attacks

Aggregated on: Fri Dec 09 2022 13:44:00 GMT+0000 (Coordinated Universal Time)

AI-generated deepfake content is all over the internet today and is getting harder to spot. These fake photos, videos, or audio clips can feature real and fictional people. Hackers and scammers have begun using this technology in elaborate cyber attack campaigns, from phishing attacks to interfering in national security matters. Here is a look at what deepfakes are, how they are made, and how AI systems are fighting deepfake cyber attacks. What Are Deepfakes? Deepfakes are heavily-doctored fraudulent video or audio clips that closely match a real person’s appearance, voice, intonation, and speaking patterns. Typically, the deepfake creator will use a machine learning algorithm to train an AI system using numerous video and audio samples. The AI essentially becomes an expert on the subject’s mannerisms to such a degree that it can create a believable fake clip of the person saying or doing things they have never actually done.

Secure Shell Protocol: Everything You Need to Know

Aggregated on: Fri Dec 09 2022 13:14:00 GMT+0000 (Coordinated Universal Time)

Secure shell is a common term often used when studying computer networks. In simple terms, SSH secure shell refers to a secured network protocol that helps access remote computers securely in a network. However, it is much more complicated than it sounds. So in this blog, we will study all about secure shell protocol. Also, we will explore its working, its concepts, and the mechanisms it leverages for safe remote access. Let us start!

I Misunderstood Scalability in a Distributed System

Aggregated on: Thu Dec 08 2022 22:43:59 GMT+0000 (Coordinated Universal Time)

"Is the application scalable?" asked the manager. It was almost halfway through the weekly system roadmap meeting. I thought we were done with all the tech parts and would soon move to business-related questions. The architect of my team cleared his throat and answered, "It can easily handle double the usual load."

Top 5 Network Security Risks in 2023

Aggregated on: Thu Dec 08 2022 20:28:59 GMT+0000 (Coordinated Universal Time)

Network security refers to the technologies, processes, and policies used to protect networks, network traffic, and network-accessible assets from cyberattacks, unauthorized access, and data loss. Organizations of all sizes need network security to protect their critical assets and infrastructure. Modern network security takes a layered approach to protect the many edges of the network and the network perimeter. Any element of the network could be an entry point for attackers—endpoint devices, data paths, applications, or users. Because organizations face numerous potential threats, it is common to deploy multiple network security controls designed to address different types of threats at different layers of the network and infrastructure. This is called a defense in-depth security approach.

How to Choose the Right Messaging System for Your Organization

Aggregated on: Thu Dec 08 2022 20:13:59 GMT+0000 (Coordinated Universal Time)

In terms of messaging technologies, we have dozens of popular options on the market, while each of them may only support certain use cases in the queuing and streaming space. Before I explain how to choose the right messaging system, I think it’s worth taking some time to explain message queuing and streaming first. With a basic understanding of these concepts, we will then look at some core and advanced capabilities required for a messaging system for a modern data architecture. After that, I will give a high-level overview of Apache Pulsar, a cloud-native messaging and streaming platform, and explain what makes Pulsar suitable for some common messaging scenarios. Queuing: Decoupling A message queue (also known as a queue) is used to store messages with a first-in-first-out (FIFO) data structure. Messages stay on a queue until they are consumed by other applications or systems. Many programming languages have built-in message queues as data pipelines between tasks for asynchronous decouplings, such as java.util.Queue in Java.

12 Ways To Optimize Your JavaScript Journey in 2023 and Beyond

Aggregated on: Thu Dec 08 2022 20:13:59 GMT+0000 (Coordinated Universal Time)

JavaScript has emerged as the prominent scripting language among the next cohort of developers. It is an incredible tool for front-end programming, building interactive, feature-loaded websites, and fast and smooth web applications. Every front-end programmer knows JavaScript, however, when used without knowledge, it can make things worse. Poor JavaScript code can impact the website's performance, rendering speed, and load time. In this blog post, we will share some tips to help you optimize your JavaScript journey for the future. Let’s have a look: 1. Minify JavaScript code for small file — Minifying code is not similar to obfuscating code. However, both are ways of converting JavaScript — to be more complex to read or to make it smaller. Minifying accomplishes the latter and can shrink file sizes to reduce page load times. Line breaks, extra spaces, comments, etc., all increase the size of a JavaScript file and affects the pace at which the page loads. Minifying the code solves this problem.

Xmake v2.7.3 Released: Package Components and C++ Modules Incremental Build Support

Aggregated on: Thu Dec 08 2022 19:43:59 GMT+0000 (Coordinated Universal Time)

Xmake is a lightweight cross-platform build utility based on Lua. It is very lightweight and has no dependencies because it has a built-in Lua runtime. It uses xmake.lua to maintain project builds and its configuration syntax is very simple and readable. We can use it to build projects directly like Make/Ninja or generate project files like CMake/Meson. It also has a built-in package management system to help users solve the integrated use of C/C++ dependent libraries.

Physical Device vs Real Device Cloud Testing: A Detailed Guide

Aggregated on: Thu Dec 08 2022 18:58:59 GMT+0000 (Coordinated Universal Time)

Physical device testing has been on the market for a long time. Even today, you can’t deny the importance it holds in the world of testers. In this age of automation testing and real device cloud testing, physical device testing still has the same reverence owing to its unwavering vitality in usability testing and hardware functionality testing, such as camera and GPS. Yet, if you want to reduce your overall project cost, you need to opt for a smarter solution that would enable features such as performing cross-browser testing at scale. That’s when real device cloud testing comes to your aid. It comes with its own sets of advantages, such as cloud storage, access to communication tool integration, testing with the latest virtual browsers and OS versions, and much more.

Flutter for Building MVPs – What Makes It an Optimal Choice?

Aggregated on: Thu Dec 08 2022 17:28:59 GMT+0000 (Coordinated Universal Time)

Development time is the most prioritized factor we need to consider while developing any application. Before any product launches, it must go through the testing phase for its validity, performance, and feasibility. It will surely help you save from money loss and damage to your reputation. Suppose you plan to get into a contract with a custom mobile app development company for developing a mobile application. In that case, you are indeed opting for the best mobile app development frameworks that fit your organizational goal. And with so many mobile app development frameworks available in the market, you might get confused about which framework to choose. But now, keep your worries aside. Because Flutter is one of the most essential and ultimate solutions for MVP that can take you towards your end goal true soon.

Why Choose AWS as a “Well Architecture Framework”?

Aggregated on: Thu Dec 08 2022 15:43:59 GMT+0000 (Coordinated Universal Time)

Enterprises have a growing need to upgrade their apps and methods for delivering digital experiences to millions of people. One such approach is serverless. Tech executives are now rethinking their strategy in response to the desire to boost agility and lowering total operational overhead and costs. They had to reconsider how they could effectively, easily, and flawlessly design serverless.

SQL Commands: A Brief Guide

Aggregated on: Thu Dec 08 2022 15:43:59 GMT+0000 (Coordinated Universal Time)

SQL stands for Structured Query Language. And SQL is used for communication with the database for accessing, creating, updating the data stored in the database. SQL allows the user to do the following:

Top 10 AI and Data Science Trends in 2023

Aggregated on: Thu Dec 08 2022 14:43:59 GMT+0000 (Coordinated Universal Time)

Artificial Intelligence and Data science is the popular topic right now in the global tech market. Numerous sectors throughout the world are benefiting from autonomous systems, cybersecurity, automation, RPA, and several other advantages provided by AI models. To enhance productivity and efficiency seamlessly, tech and data-driven businesses need to be aware of emerging artificial intelligence developments. While with its data-centric awareness of the target and particular audience, data science is surely going to transform every industry. To survive in the global digital industry, businesses must be aware of some of the popular AI and data science trends or predictions.

API Test Automation

Aggregated on: Thu Dec 08 2022 00:58:59 GMT+0000 (Coordinated Universal Time)

APIs are an integral part of software development in any small/mid/large scale application. This means that testing of these APIs will dramatically improve the efficiency of the entire application. There are several benefits to API Testing, including:

How To Modify HTTP Request Headers in Java Using Selenium Webdriver

Aggregated on: Thu Dec 08 2022 00:13:59 GMT+0000 (Coordinated Universal Time)

One of the most common test automation challenges is how do we modify the request headers in Selenium WebDriver. As an automation tester, you would come across this challenge for any programming language, including Java. Before coming to a solution, we need to understand the problem statement better and arrive at different possibilities to modify the header request in Java while working with Selenium WebDriver Tutorial. In this Selenium Java tutorial, we will learn how to modify HTTP request headers in Java using Selenium WebDriver with different available options.

Should You Learn Amazon RDS or DynamoDB?

Aggregated on: Thu Dec 08 2022 00:13:59 GMT+0000 (Coordinated Universal Time)

Modern-day application stores a lot of information and data to understand customer expectations and deliver personalized solutions. All these pieces of information are stored in databases. Now, developers can leverage data from databases using various methods. What confuses them most is the choice of service or method they need to pick in order to manage their database. They can pick either relational or non-relational methods of managing databases. In terms of tools and services, there exists a plethora of services in the market that developers can pick. All these options are enough to make a developer trip over! In this article, I have tried to address whether one should pick Amazon RDS or Dynamo DB. But before we can proceed to that, let’s have a quick look at the difference between relational and non-relational databases. Understanding Relational vs. Non-Relational Databases There are two different approaches to constructing a database — relational and non-relational databases.

How To Mitigate API Risks During Development

Aggregated on: Wed Dec 07 2022 23:13:59 GMT+0000 (Coordinated Universal Time)

It takes a lot of development time, quality assurance, and bug fixes to deploy a fully functional API. What most development teams skip is the security and risk management necessary to ensure the safety of the customer and corporate data after deployment. In many development teams, the security of the API is left to monitoring, logging, and future penetration testing. Unfortunately, this leaves the API vulnerable to attackers who can find exploits before you do. Instead of leaving security to after-deployment strategies, a “shift left” approach incorporates security scanning into current development lifecycles and has shown to be much more effective at reducing risks. Many Development Teams Skip Crucial Security Validation for Faster Code Deployment Deployment velocity (speed) is often a priority in enterprise API development. While rapidly deploying features to an API is important, developers might sacrifice security for speed, which leaves endpoints open to common exploits. This can be especially dangerous for organizations that process and return sensitive data using public-facing APIs.

Web Resource Caching: Server-Side

Aggregated on: Wed Dec 07 2022 20:43:59 GMT+0000 (Coordinated Universal Time)

The subject of Web resource caching is as old as the World Wide Web itself. However, I'd like to offer an as-exhaustive-as-possible catalogue of how one can improve performance by caching. Web resource caching can happen in two different places: client-side - on the browser and server-side. In the previous post, I explained the former; this post focuses on the latter. While client-side caching works well, it has one central issue: to serve the resource locally, it must first have it in the cache. Thus, each client needs its cached resource. If the requested resource is intensive to compute, it doesn't scale. The idea behind server-side caching is to compute the resource once and serve it from the cache to all clients.

Project Documentation: How to Guarantee Your Project Endures With High Quality

Aggregated on: Wed Dec 07 2022 20:43:59 GMT+0000 (Coordinated Universal Time)

Documentation, I know, right now, you are preparing to leave this post. Documentation is not a buzzword topic, such as microservices, Kubernetes, cloud-native, etc. However, it guarantees a scalable, maintainable, and healthy project. Let's explain how to keep a better project tactically through Documentation. Why Do We Need Documentation? The first question around Documentation is why. Why should you spend time on Documentation instead of the code? Software development is expensive, and we must ensure this project will have a long life. To make it possible, we need to make life easier for a future engineer, who eventually might be yourself.

Regular Expressions With C# and .NET 7

Aggregated on: Wed Dec 07 2022 20:28:58 GMT+0000 (Coordinated Universal Time)

This article is an (adapted) excerpt from the book C# 11 and .NET 7 – Modern Cross-Platform Development Fundamentals, and takes you step-by-step through creating a console app to explore regular expressions via some cool new .NET 7 features: the [StringSyntax] attribute and source-generated regular expressions. Pattern Matching With Regular Expressions Regular expressions are useful for validating input from the user. They are very powerful and can get very complicated. Almost all programming languages have support for regular expressions and use a common set of special characters to define them. Let's try out some example regular expressions.

Projections/DTOs in Spring Data R2DBC

Aggregated on: Wed Dec 07 2022 19:43:58 GMT+0000 (Coordinated Universal Time)

When dealing with Spring Data JPA or Spring Data R2DBC, we all know that everything revolves around entities. You usually create a repository, and in most cases, it either extends the JpaRepository<T, ID> for Spring Data JPA or the R2dbcRepository<T, ID> for Spring Data R2DBC, and then you’re ready to talk to the database. With the repository in place, things are pretty straightforward: you either use the standard already-provided interface methods, you write derived-query methods, or you can use the @Query annotation to write custom stuff. Up until here, everything’s nice. As I said, everything revolves around entities (with minor exceptions, you can get a primitive return type with a custom query like an Int or String), so as a response, you’ll always get an Entity/List<Entity> for JPA and Mono<Entity>/Flux<Entity> for R2DBC. However, there are certain scenarios when you either don’t want to fetch the entire entity because some columns are redundant/not-needed or, even more, you need to construct a POJO from something completely different from your entity, yet still somehow related. Think about a group by, some counts, or some mapping at the database level, and by default you can’t do that – your repos are bound to entities. That is when projections and DTOs come into play. For Spring Data JPA there is already a fair amount of documentation/info around (official documentation, Vlad Mihalcea, Thorben Janssen, and so on). This is not the case when it comes to Spring Data R2DBC (we still have amazing documentation here).

3 Reasons for the Mounting Demand for Smart Cloud-Native Application Development

Aggregated on: Wed Dec 07 2022 18:43:58 GMT+0000 (Coordinated Universal Time)

“Business agility, scalability, and flexibility are critical to succeeding in the contemporary digital environment. With cloud-native application development, companies can attain all these success parameters.” Cloud-based solutions ensured connectivity, accessibility, availability, and business continuity when the COVID-19 crisis forced companies to build remote working models. Gradually, as companies started to realize the benefits of technological advancements, including Microservices, APIs (Application Programming Interfaces), Kubernetes containerization, and server-less architecture, the demand for cloud-native application development mounted simultaneously.

What Are the Biggest Struggles With Implementing Security for a Blockchain Project?

Aggregated on: Wed Dec 07 2022 17:43:58 GMT+0000 (Coordinated Universal Time)

For a while now, it has been talked about how blockchain is slowly making its way into the different spheres of life. Now, it has become almost an indistinguishable part of the technological world. Blockchain technology is a prominent illustration of how security principles in financial transactions and information transmission have transformed. Blockchain depends on cryptography, decentralization, and consensus to provide transactional trust. It provides a special data structure along with built-in security features. However, many firms and early adopters are experiencing persistent blockchain security issues.

Responsive vs Adaptive Design: Which One Is Better?

Aggregated on: Wed Dec 07 2022 16:43:58 GMT+0000 (Coordinated Universal Time)

Having an online presence meant designing a website that would only be seen and displayed on a desktop and maybe a laptop computer screen. Now, though, if you are planning to design a website, a plethora of screen sizes and resolutions need to be considered — from a handy device (mobile) to a laptop or tablet screen. And if your web design doesn’t display correctly on any of the devices, a user will quickly move on. The era we’re living in, where people prefer using mobile devices for visiting websites. However, there is a significant increase in the number of mobile devices. It’s vital for businesses to make their website visibility on smartphones and tablets.

Proven Ways to Make Huge Profits From Your Android App

Aggregated on: Wed Dec 07 2022 15:43:58 GMT+0000 (Coordinated Universal Time)

Android is a leading mobile operating system worldwide, with a global market share of 71%. This is quite significant compared to iOS, which accounts for only 28% of smartphone users. Hence, targeting Android users is a wise decision to make huge profits. However, with the way the app market is progressing to become competitive, with an average of over 3,700 new Android apps launched daily, you must plan your Android app development astutely to get desired results. Moreover, app development can be very daunting, especially for beginners. You need to be quite decisive regarding your choices regarding the technologies used, the type of app development company, revenue models, and the type of market you are going to enter. This post highlights some critical aspects to consider to ensure maximum profitability from your Android app development project. Tips to Ensure Increased Profits From Android App Development These simple yet critical aspects must be focused on by an app owner while developing an Android app to ensure maximum returns from a project.

A Look at the Top 5 AI Applications in 2023

Aggregated on: Wed Dec 07 2022 14:58:58 GMT+0000 (Coordinated Universal Time)

An artificial intelligence system is one that uses machine-based methods to predict, recommend, or make decisions that affect real or virtual environments based on certain human-defined goals. It has become apparent over the past few years that AI applications are rapidly gaining traction across a wide range of industries. “The United States' private investments in artificial intelligence (AI) amounted to nearly 23.6 billion U.S. dollars in 2020, the most of any nation. China, with 9.9 billion U.S. dollars in AI funding, ranks second.” A report recently published by a leading data and research firm Statista reveals so.

Catastrophic Backtracking: How Can a Regular Expression Cause a ReDoS Vulnerability?

Aggregated on: Wed Dec 07 2022 03:28:58 GMT+0000 (Coordinated Universal Time)

Regular expressions come in handy when you need to search for and replace text. However, in some cases, they may cause the system to slow down or even make vulnerable to ReDoS attacks. Introduction ReDoS is a subtype of a DoS attack. The aim of a ReDoS attack is to halt an application or cause it to slow down via an inefficient regex.

Control Your Kubernetes Cluster Compute Resources With ResourceQuota

Aggregated on: Wed Dec 07 2022 02:58:58 GMT+0000 (Coordinated Universal Time)

A Word About Kubernetes Cluster Resources Kubernetes is a container orchestration platform. It is very popular for deploying container-based workloads. Kubernetes clusters could spread across many nodes. These nodes are physical or virtual machines spread across geographies and deployed at various data centers, ensuring high availability for the cluster. These machines have a lot of computing resources aggregated at the cluster level and are at the disposal of the workloads that get deployed in the cluster. These computing resources include CPU and memory capabilities. Apart from that, the cluster also has a constraint on the number of API objects it can hold. The latest Kubernetes version supports 110 pods per node, as there are also constraints on assigning IP addresses.

5 Books for QA Engineers

Aggregated on: Wed Dec 07 2022 02:58:58 GMT+0000 (Coordinated Universal Time)

Today, I’d like to recommend some helpful books for QA engineers. Grab a cup of coffee and jot down some notes and suggestions from these software testing books. 1. Testing Computer Software, by Cem Kaner, Hung Q. Nguyen, and Jack Falk This book is a real classic that should be read by specialists, starting at the junior level. It differs from other books for QA engineers primarily in its attachment to the conditions of the real world, using the example of well-known Silicon Valley development companies.

Data-Based Decision-Making: Predicting the Future Using In-Database Machine Learning

Aggregated on: Wed Dec 07 2022 02:58:58 GMT+0000 (Coordinated Universal Time)

In just a few short years, machine learning (ML) has become an essential technology that companies deploy in almost every aspect of their business. Previously the preserve of giant institutions with deep pockets, the ML market is rapidly opening up. Every kind of business can now leverage ML to minimize repetitive manual processes, automate decision-making, and predict future trends. At almost every stage of any business task, ML is making processes smarter, streamlined, and speedier. In recent years, technological advances have helped to democratize access and drive adoption of ML by reducing the time, skill level, and number of steps required to gain ML-driven predictions. So rapid has growth been that the global ML market is expected to expand from $21 billion in 2022 to $209 billion by 2029. Tools such as declarative ML and AutoML are helping enterprises to access powerful, business-critical predictive analytics. Taking these approaches one step further, in-database ML is a new technique that’s gaining ground. It allows businesses to easily put questions to their data and rapidly get answers back using standard SQL queries.

Organizing Talent: Return of the Data Center of Excellence

Aggregated on: Wed Dec 07 2022 02:28:58 GMT+0000 (Coordinated Universal Time)

Will Larson (writer of "An Elegant Puzzle" – recommended read) may have said it best when he wrote that one of the best kinds of reorganization is the one you don’t do. However, data leaders inevitably reach a point where, due to team growth or evolving business demands, things just don’t work. Faced with these challenges, data organizations may swing back-and-forth between centralized vs. decentralized organizational structures until they achieve the right balance.

Apache Ranger and AWS EMR Automated Installation and Integration Series (2): OpenLDAP + EMR-Native Ranger

Aggregated on: Wed Dec 07 2022 00:58:58 GMT+0000 (Coordinated Universal Time)

In the first article of this series, we got a full picture of EMR and Ranger integration solutions. From now on, we will start to introduce concrete solutions one by one. This article is against “Scenario 1: OpenLDAP + EMR-Native Ranger.” We will introduce the architecture of solution, give detailed installation step descriptions, and verify installed environment. 1. Solution Overview 1.1 Architecture In this solution, OpenLDAP plays the authentication provider, all user accounts data store on it, and Ranger plays the authorization controller. Because we select the EMR-native Ranger solution, which strongly depends on Kerberos, a Kerberos KDC is required. In this solution, we recommend choosing a cluster-dedicated KDC created by EMR instead of an external KDC. This can help us save the job of installing Kerberos. If you have an existing KDC, this solution also supports it.

Code Churn: An Analysis of Troublesome Workflows and Possible Countermeasures

Aggregated on: Tue Dec 06 2022 23:28:58 GMT+0000 (Coordinated Universal Time)

The volume of activity taking place in engineering teams can be mind-boggling, making engineering teams rather difficult to manage. Successful engineering managers, however, are adept at steering their teams to success by tactfully monitoring and using software metrics. Software metrics enable visibility, and acquiring a complete understanding of the software delivery process from concept to production can help in the discovery of bottlenecks or process concerns that, when solved or optimized, can enhance the engineering team's health and efficiency.

A Maven Archetype for Jakarta EE 10 Applications

Aggregated on: Tue Dec 06 2022 22:58:58 GMT+0000 (Coordinated Universal Time)

Jakarta EE 10 is probably the most important event of this year in the Java world. Since this fall, software editors providing Jakarta EE-compliant platforms are working hard to validate their respective implementations against the TCK (Technology Compatibility Kit) supplied by the Eclipse Foundation. At Payara, as much as in bigger companies like Oracle, Red Hat, or IBM, they aren't left behind, and, as of last September, they announced the availability of the Payara 6 Platform, declined in three versions: Server, Micro, and Cloud. As an implementation of Jakarta EE 10 Web, Core, and Micro Profile, Payara Server 6 is itself proposed in two editions: Community and Enterprise. But how does this impact Java developers? What does it mean in terms of application development and portability? Is it easier or more difficult to write and deploy code compliant to the new specifications than it was with Release 9 or 8 of the Jakarta EE drafts? Well, it depends. While any new Jakarta EE release aims at simplifying the whole bunch of the API (Application Programming Interface) set and at facilitating the developers' work, the fact that, on a total of 20 specifications, 16 have been updated, and a new one has been added, shows how dynamic the communities and the working groups involved in this process are. Which isn't without some difficulties when trying to transition to the newest releases with a minimal impact.

Docker Best Practices

Aggregated on: Tue Dec 06 2022 20:28:58 GMT+0000 (Coordinated Universal Time)

In this blog, you will learn some Docker best practices mainly focussed on Java applications. This is not only a theoretical exercise, but you will learn how to apply the best practices to your Dockerfiles. Enjoy! 1. Introduction Writing Dockerfiles seems easy: just pick an example from the internet and customize it to fit your needs. However, many examples are good for a development environment but are not production worthy. A production environment has more strict requirements especially concerning security. Besides that, Docker also provides guidelines for writing good Dockerfiles. It is just like writing code: you may know the syntax, but that does not mean you can write clean and good code in that specific programming language. The same applies to Dockerfiles. With this blog, you will learn some best practices, guidelines you can apply when writing Dockerfiles. The previous sentence deliberately says can apply and not must apply. It all depends on your use case.

Run Java Microservices Across Multiple Cloud Regions With Spring Cloud

Aggregated on: Tue Dec 06 2022 19:43:58 GMT+0000 (Coordinated Universal Time)

If you want to run your Java microservices on a public cloud infrastructure, you should take advantage of the multiple cloud regions. There are several reasons why this is a good idea. First, cloud availability zones and regions fail regularly due to hardware issues, bugs introduced after a cloud service upgrade, or banal human errors. One of the most well-known S3 outages happened when an AWS employee messed with an operational command!

Hosting .NET Core Web API Image With Docker Compose Over HTTPS

Aggregated on: Tue Dec 06 2022 19:13:58 GMT+0000 (Coordinated Universal Time)

We are going to talk about the SSL Certificate configuration for secure communication over the HTTPS using .NET Core Web API and Docker after running our application inside the docker container using docker-compose. Prerequisites Visual Studio 2022 Docker Desktop .NET Core 6 SDK Introduction HTTPS is a standard internet protocol that makes the data to be encrypted and a more advanced and secure version of the HTTP protocol. SSL stands for Secure Sockets Layer and standard technology, which keeps secure our application over the internet. SSL is the part of HTTPS protocol, and it takes care of the encryption of data. It enables a secure connection and prevents hacker attacks because of its encryption algorithm and many security layers. Implementation of .NET Core Web API Application Step 1 Create a new .NET Core Web API application.

Platform Engineering Trends You Need to Know

Aggregated on: Tue Dec 06 2022 19:13:58 GMT+0000 (Coordinated Universal Time)

Platform engineering is constantly evolving. PlatformCon 2022, the virtual conference created by and for platform engineers, is proof. Platform engineering is the “discipline of designing and building toolchains and workflows that enable self-service capabilities for software engineering organizations in the cloud-native era. Platform engineers build what is often called an Internal Developer Platform (or IDP) that covers the operational necessities of the entire life cycle of an application.”

How To Use ggshield To Avoid Hardcoded Secrets [Cheat Sheet Included]

Aggregated on: Tue Dec 06 2022 19:13:58 GMT+0000 (Coordinated Universal Time)

Most developers love working in the terminal, tying together all sorts of tools with command line interfaces, CLIs, via scripting. Working with CLIs is powerful, but it can be challenging to initially learn all the ways a tool can help you do your work. While the only real way to learn any tool is by using it, one time-tested method to get over the learning curve is to keep a short list of common commands, as well as concept recaps, on hand for using the tools. At the same time, it is pretty common to adopt a tool for one or two specific functions, without investigating what other commands a tool offers. For example, just think about how many Git commands you use regularly out of the 164 currently available commands. Getting a holistic view of how a command line tool is structured and the possible commands can help you make better use of the platform.