News Aggregator

What I Have Understood About DevOps

Aggregated on: Mon Jul 18 2022 15:51:32 GMT+0000 (Coordinated Universal Time)

When I first heard the term DevOps, What I understood from my peers is that, “The process of deploying the application in any environment (dev/QA/prod) is called DevOps. It’s just another synonym for operations.”

What Is Software Impact Analysis?

Aggregated on: Mon Jul 18 2022 15:06:32 GMT+0000 (Coordinated Universal Time)

Every time a developer makes a change to a code, there is some impact on a system. Ideally, the impact is either fairly small or fully expected. The goal is to implement the change to make its influence on the system in the right way and select the best option available. That is when a software impact analysis is relevant. Impact analysis is the process of analyzing, predicting, and estimating the potential consequences before carrying out a change in the deployed product, focusing on unexpected side effects of a decision or change in a system and indicating potentially affected areas. It tells us what part of the system can be unintentionally affected by a change and helps deal with potential problems before they arise.

Why Building an External Data Product Is So Hard

Aggregated on: Mon Jul 18 2022 15:06:32 GMT+0000 (Coordinated Universal Time)

Developing internal data products–whether a high-powered executive dashboard, a machine learning-powered predictive buyer model for marketing, or a new customer model for the BI team–is still one of the most powerful ways data teams can add value to the organization. But developing an external data product is a cut above: both in value-added and in the level of difficulty. It’s a different motion that requires your team to build new muscle memory.

Access Undenied on AWS

Aggregated on: Mon Jul 18 2022 14:21:32 GMT+0000 (Coordinated Universal Time)

Access Undenied on AWS is an open source CLI tool that analyzes AWS CloudTrail AccessDenied events, scans the environment to identify and explain the reasons for the events, and offers actionable least-privilege remediation suggestions. Basically, you give the tool a CloudTrail event with an Access Denied outcome, and the tool will tell you how to fix it! What’s the Problem? It’s a beautiful day. You’re building a lambda function, and everything is going exactly as planned. The code looks great. Then you give it a test and…

3 Ways to Create Spring Boot Docker Images Without Docker File

Aggregated on: Sun Jul 17 2022 20:21:32 GMT+0000 (Coordinated Universal Time)

In this article, we would be looking into some of the ways to create docker images for a Spring Boot Application. As technology is growing, things have changed how applications that serve requests from end-user are deployed. Traditionally you would have a machine to deploy the application and decide on the configuration of the machine to keep the application running.

Machine Learning and Data Science With Kafka in Healthcare

Aggregated on: Sat Jul 16 2022 22:06:31 GMT+0000 (Coordinated Universal Time)

IT modernization and innovative new technologies change the healthcare industry significantly. This blog series explores how data streaming with Apache Kafka enables real-time data processing and business process automation. Real-world examples show how traditional enterprises and startups increase efficiency, reduce cost, and improve the human experience across the healthcare value chain, including pharma, insurance, providers, retail, and manufacturing. This is part five: Machine Learning and Data Science. Examples include Recursion and Humana. Blog Series - Kafka in Healthcare Many healthcare companies leverage Kafka today. Use cases exist in every domain across the healthcare value chain. Most companies deploy data streaming in different business domains. Use cases often overlap. I tried to categorize a few real-world deployments into different technical scenarios and added a few real-world examples:

Regression Testing in CI/CD and Its Challenges

Aggregated on: Fri Jul 15 2022 23:21:31 GMT+0000 (Coordinated Universal Time)

The introduction of the continuous integration/continuous deployment (CI/CD) process has strengthened the software release mechanism, helping products go to market faster than ever before and allowing application development teams to deliver code changes more frequently and reliably. Regression testing ensures no new mistakes have been introduced to a software application by testing newly modified code as well as any parts of the software that could potentially be affected. The software testing market size is projected to reach $40 billion in 2020 with a 7% growth rate by 2027. Regression testing accounted for more than 8.5% of market share and is expected to rise at an annual pace of over 8% through 2027, as per reports from the Global Market Insights group. The Importance of Regression Testing Regression testing is a must for large-sized software development teams following an agile model. When many developers are making multiple commits frequently, regression testing is required to identify any unexpected outcome in overall functionality caused by each commit. The CI/CD setup identifies that and notifies the developers as soon as the failure occurs and makes sure the faulty commit doesn’t get shipped into the deployment.

CMS, CRM, and ERP – What Is It and Why?

Aggregated on: Fri Jul 15 2022 21:06:30 GMT+0000 (Coordinated Universal Time)

CMS, CRM, and ERP are the three main software solutions to automate core processes in business. They assist in managing day-to-day operations, the company’s interactions with customers, handling data, reducing redundant tasks, prioritizing leads, running a website, and much more. CMS, CRM, and ERP offer powerful tools to boost profitability and increase sales. However, the core components and the work principles are not the same, especially regarding CMS. What Is a CMS Software? Answering what CMS means in business, we come to the next definition. Content Management System (CMS) is computer software to build a web page on. It is used to publish, add, easy to replace, and manage digital content – design, text, and graphics. It provides an interface for working with content, handling both the back-end and front-end of a website to modify online business without technical knowledge or background. It is a convenient option for someone who is not technically minded to deliver content and build a dynamic website without getting into the code. For example, to write or to update a page. CMS platforms provide a variety of pre-designed templates to create a simple yet well-designed page. Templates visualize future websites. Thus, they can be used as a starting point for small businesses.

How to Improve Data Quality With GCP Protocol Buffers

Aggregated on: Fri Jul 15 2022 21:06:30 GMT+0000 (Coordinated Universal Time)

E-commerce platforms and marketplaces generate data on every step of their operations: inventory, customer orders, pick-up locations, and customer delivery, not to mention marketing channels and integrations. The requirements for data platforms used in the fast-moving online retail industry vary from business to business, though the baseline is more or less the same:Flexibility and scalability. The number of events and data sources is growing exponentially, and not just in online retail. That is why flexibility is a basic requirement for data platforms.

A Generic and Concurrent Object Pool

Aggregated on: Fri Jul 15 2022 20:36:30 GMT+0000 (Coordinated Universal Time)

In this post, we will take a look at how we can create an object pool in Java. In recent years, the performance of the JVM has multiplied manifold that object pooling for better performance has been made almost redundant for most types of objects. In essence, the creation of objects is no longer considered as expensive as it was before. However, there are some kinds of objects that certainly prove costly upon creation. Objects such as Threads, database connection objects etc are not lightweight objects and are slightly more expensive to create. In any application, we require the use of multiple objects of the above kind. So it would be great if there was an easy way to create and maintain an object pool of that type so that objects can be dynamically used and reused without the client code being bothered about the live cycle of the objects.

10 Error Status Codes When Building APIs for the First Time and How To Fix Them

Aggregated on: Fri Jul 15 2022 20:06:30 GMT+0000 (Coordinated Universal Time)

Things don’t always go well when using an API for the first time, especially if you’re a beginner and it’s your first time integrating an API into another system. Often documentation is lacking in terms of errors, since it’s easier to anticipate things going right, than things going wrong. In HTTP, many status codes can give you an idea of what was going on when you called an API. The standardized status codes go from 100 to 511, and all have different meanings, but only the ones from 400 to 511 are about errors. See them here in this handy table.

Create a Full-Stack App Using Nuxt.js, NestJS, and DataStax Astra DB (With a Little Help From GitHub Copilot)

Aggregated on: Fri Jul 15 2022 19:36:31 GMT+0000 (Coordinated Universal Time)

Building a full-stack application can be daunting because you have to not only think about how the frontend will display the data but where the data will come from and where it’s stored. However, it’s not as hard as you might think to get the basics of a full-stack application up and running. If you want to create a full-stack application, complete with dynamic data retrieved from a cloud database by an API, then watch the tutorial below, created by Eddie Jaoude. In his tutorial, Eddie shows you how to do it in less than an hour using Nuxt.js with VuetifyJS for the frontend, NestJS to create RESTful APIs, and DataStax’s Astra DB for the cloud database service. Also, you’ll use GitHub Copilot as your AI-powered pair programmer.

A Complete Guide to IoT Architecture

Aggregated on: Fri Jul 15 2022 15:51:30 GMT+0000 (Coordinated Universal Time)

The Internet of Things (IoT) is growing from strength to strength. IoT projects are in development across a huge variety of industries thanks to the technology’s automation, data gathering, and processing potential. However, understanding IoT architecture is key to creating a successful IoT project and leveraging all of its benefits. Why? Because it can give you a clear vision of how everything works and how different components interact. In its essence, IoT architecture ensures data gets where it needs to and is processed correctly. Without proper IoT architecture, networks would become unreliable, defeating the entire purpose of investing in IoT in the first place.

How Microcontainers Gain Against Large Containers

Aggregated on: Fri Jul 15 2022 15:21:30 GMT+0000 (Coordinated Universal Time)

The best practices of modern development, especially when implementing a microservices architecture, involve the use of Docker, Kubernetes, and other container technologies. Containers are transforming how enterprises deploy and use applications. The main biggest draws of containers as such are increased efficiency and portability. Сontainers allow running software without worrying about operating systems or dependencies. So, the container simplifies your software architecture, allowing you to skip building a production environment with the right settings and libraries, as the container already has that built-in.

Low-Code: Viable for Developers?

Aggregated on: Fri Jul 15 2022 14:51:30 GMT+0000 (Coordinated Universal Time)

Low-code platforms are often praised for their ease of use and understandability by business users; however, some developers may not be too excited by this prospect. What if there is an alternative to low-code that follows coding principles? Will such an interface feel more natural for developers? Before asking that question, we must ask, is low-code a viable solution for developers? In this post, we will explore if Low-code is a viable option for developers and what low-code platforms can do for developers.

4 Major Steps Of Web Application Penetration Testing

Aggregated on: Fri Jul 15 2022 04:51:30 GMT+0000 (Coordinated Universal Time)

In the early days of the internet, security was little but an afterthought. Then as hackers started to exploit businesses' lax security postures, things gradually started to change. At first, nonprofits like the Electronic Frontier Foundation started pushing web users to embrace HTTPS Everywhere. In response, certification authorities began offering free SSL certificate variations to any site admin that wanted one. As a result, at least 79.6% of all active websites now use SSL. That was only the beginning. In the ensuing years, developers and web application administrators gradually started to harden their apps against all manner of attacks. They rolled out more complex password requirements. They started to add two-factor authentication as a default measure. They even started putting public-facing services behind high-performance web application firewalls.

API Security Weekly: Issue 168

Aggregated on: Fri Jul 15 2022 03:51:30 GMT+0000 (Coordinated Universal Time)

This week, we have news of a vulnerability in the IndexedDB API in Safari 15 that exposed user information, a pair of vulnerabilities in AWS affecting AWS Glue and AWS CloudFormation, and a podcast featuring Rinki Sethi and Alissa Knight discussing API security. Last week, we featured an “awesome API security” guide from a 3rd-party site with good intentions. Subsequently, we’ve discovered that this guide is a direct and unattributed copy of the excellent guide by André Rainho previously featured in this newsletter. Our apologies to Andre for this oversight, and we strongly advise readers to check out his original Awesome API Security guide.

Security and Compliance Considerations for the Public Cloud

Aggregated on: Thu Jul 14 2022 23:36:30 GMT+0000 (Coordinated Universal Time)

Setting up your own servers requires a lot of up-front investment and ongoing maintenance. That’s why most technology companies today use an Infrastructure-as-a-Service (IaaS) provider for their compute needs. Cloud providers like Amazon Web Services (AWS), Google Cloud, and Microsoft Azure take care of infrastructure tasks like provisioning new machines and keeping them up to date for you, and their services free up your team to focus on building valuable new functionality for your application. This post is the fourth in a series about what developers need to keep in mind when sorting out security and compliance for their application. Cloud-based companies frequently need to prove that their software is set up with security best practices in mind. Compliance standards and certifications are an effective way to communicate a company’s security posture and build trust with customers.

The Cost of Production Blindness

Aggregated on: Thu Jul 14 2022 23:36:30 GMT+0000 (Coordinated Universal Time)

When I speak at conferences, I often fall back to the fact that, just a couple of decades ago, we’d observe production by kicking the server. This is obviously no longer practical. We can’t see our production. It’s an amorphous cloud that we can’t touch or feel. A power that we read about but don’t fully grasp. In this case, we have physical evidence that the cloud is there.

AWS Lambda Provisioned Concurrency AutoScaling Configuration With AWS CDK

Aggregated on: Thu Jul 14 2022 22:51:30 GMT+0000 (Coordinated Universal Time)

A couple of weeks ago, I was working on some AWS CDK-based code and I was trying to figure out how to configure auto-scaling for the provisioned concurrency configuration of an AWS Lambda function. We wanted to run some performance tests on our service and were wondering how scaling provisioned concurrency would impact our overall latency. We tried with the default configuration but also wanted to experiment with a bit more aggressive scaling policy so we had to provide our own metric configuration. In this article, I will explain what provisioned concurrency is and how to set up an auto-scaling configuration for it using AWS CDK. We’ll be looking at using predefined metric configurations, but also how to do it with a custom metric.

Groovy 4.0: These 10 New Features Make It AWESOME!

Aggregated on: Thu Jul 14 2022 22:21:30 GMT+0000 (Coordinated Universal Time)

Switch Expression Groovy has always had much more powerful switch statements compared to Java. Class case values, regular expression case values, collection case values, closure case values, or at the end, equal values case. All these options made the switch statement a first-class citizen in the Groovy world. And now, following the latest updates in the Java programming language, Groovy also supports a switch expression. The main difference between a switch statement and a switch expression is that the latter introduces a syntax compatible with Java and returns a value. You can still use a variety of combinations as cases, but the new syntax will make your code a bit more elegant. Groovy 'just a null' case 0 -> 'zero' case 1 -> 'one' case { it instanceof List && it.empty } -> 'an empty list' case List -> 'a list' case '007' -> 'James Bond' case ~/\d+/ -> 'a number' default -> 'unknown' }" data-lang="text/x-groovy"> switch (value) { case null -> 'just a null' case 0 -> 'zero' case 1 -> 'one' case { it instanceof List && it.empty } -> 'an empty list' case List -> 'a list' case '007' -> 'James Bond' case ~/\d+/ -> 'a number' default -> 'unknown' } Records Records, a handy immutable "data carrier" type, were introduced in Java 16. Now, they are also available in Groovy. The same syntax, though Groovy also introduces a `@RecordType` annotation that you can use interchangeably. And even if this is not that a game-changer as it was for Java, it's good to see Groovy heading up with the latest features introduced in its mother language.

Introduction to Data Replication With MariaDB Using Docker Containers

Aggregated on: Thu Jul 14 2022 22:21:30 GMT+0000 (Coordinated Universal Time)

Clones. Send in the clones. That’s what we do when we replicate databases. At least to some extent. In this article, you’ll learn how to perform the most basic form of replication with MariaDB. You can adapt the instructions in this article to use virtual machines or bare metal, but Docker is probably one of the easiest ways to try out MariaDB replication without having to install a full operating system before getting to the meat of the matter. So, the only requirement here is to have Docker installed and running on your system (check with docker --version in a terminal).

Write Your Kubernetes Infrastructure as Go Code - Getting Started With Cdk8s

Aggregated on: Thu Jul 14 2022 21:51:30 GMT+0000 (Coordinated Universal Time)

Infrastructure as Code (IaC) is a well established paradigm and refers to the standard practice of treating infrastructure (network, disk, storage, databases, message queues etc.) in the same way as application code and applying general software engineering practices including source control versioning, testing and more. For example, Terraform and AWS CloudFormation are widely-adopted technologies that use configuration files/templates to represent the infrastructure components. Infrastructure-IS-Code - A Different Way of Thinking About This Imagine you have an application that comprises a Serverless function fronted by an API Gateway along with a NoSQL database as the backend. Instead of defining it in a static way (using JSON, YAML, etc.), one can represent these components using standard programming language constructs such as classes, methods, etc. Here is a pseudo-code example:

Test Management for QA Engineers

Aggregated on: Thu Jul 14 2022 21:21:30 GMT+0000 (Coordinated Universal Time)

The projects that a QA Engineers participate can range from small maintenance projects, emergency fixes( spanning 1-2 days or less), mid-range projects(spanning weeks or months) to full-scale large projects( can last up to a year or more). While each of these projects may differ in terms of testing efforts and resources, they all adhere to common test process. Let’s divide this test management process into 3 categories:

Kafka Topics Naming

Aggregated on: Thu Jul 14 2022 20:21:30 GMT+0000 (Coordinated Universal Time)

Creating a Topic in a Kafka cluster is easy and is well documented for kafka-topics.sh or even the official API documentation. bin/kafka-topics.sh --help

How To Perform OCR on a Photograph of a Receipt Using Java

Aggregated on: Thu Jul 14 2022 17:51:30 GMT+0000 (Coordinated Universal Time)

The purpose of this article is to demonstrate an API that is specifically designed to perform OCR (Optical Character Recognition) operations on photographs of receipts and extract key business information from them automatically, such as the name and address of the business, the phone number, the receipt total, and much more. Further down the page, I’ve provided code examples and instructions to help you structure an API call in Java. There are dozens of costs associated with running a business, and efforts to manage those costs vary in complexity. While corporate expenditures such as office rent, salaries, and vendor contracts represent cyclical and manageable invoices that internal teams (i.e., accounts payable) can handle directly, employee expenditures in the form of client dinners, taxi rides, and team outings require corporate reimbursement which may only be accomplished with proof of the employee’s transactions. For the employee, proving such transactions entails presenting a receipt to the business. Along with displaying the all-important total cost of the outing, receipts provide other useful information which the employee’s business can verify, including the name of the venue the employee visited, its website, address, phone number, and a list of the specific purchased goods or services at that location. As simple as the receipt-expensing process may appear, however, it often suffers from a major technological deficiency: most businesses have fully digitized their payroll and expensing procedures, and receipts are still often obtained in hard-copy form. As a result, transitioning a physical receipt into a digital form presents a relevant business technology challenge.

Everything You Should Know About APIs

Aggregated on: Thu Jul 14 2022 15:36:30 GMT+0000 (Coordinated Universal Time)

API stands for Application Programming Interface. An API is a connector/ intermediary between two software components. It is a set of definite protocols that makes the interface possible. The interface simply means the nature of requests and responses. How developers would form the request and responses comes under API documentation. In simpler words, API allows two applications to communicate with each other. We use API when we check the weather on our phones or while sending and receiving messages on apps like Instagram or Facebook, etc.

It’s Time to Use a Data Privacy Vault

Aggregated on: Thu Jul 14 2022 13:36:30 GMT+0000 (Coordinated Universal Time)

Earlier in my career, our entire development team volunteered to help the reporting team validate some major updates with their service. None of us were excited about pausing our current priorities, but we all realized this was the right thing to do. After I ran my first report, it appeared that the data connected to the application might be a copy of production data. I was able to quickly validate this assumption by running reports based on my own work-related expenses.

Building a REST Service That Collects HTML Form Data Using Netbeans, Jersey, Apache Tomcat, and Java

Aggregated on: Wed Jul 13 2022 23:36:30 GMT+0000 (Coordinated Universal Time)

The Jersey project is very well documented so it makes it easy to learn REST with Java. In this article I’m going to build two projects. The first project will be a very simple HTML page that presents a form to the user and then submits it to a REST project residing on the same server. The second project will be the REST part. For this article I used the following tools:1. Netbeans 72. Apache Tomcat 73. Jersey4. Java

Best Runtime for AWS Lambda Functions

Aggregated on: Wed Jul 13 2022 22:06:30 GMT+0000 (Coordinated Universal Time)

AWS Lambda is a compute service that lets you run code without any infrastructure management and it natively supports Java, Go, NodeJS, .Net, Python, and Ruby runtimes. In this article, we will compare the performances of the same hello world Lambda functions written in Java, Go, NodeJS, .Net, and Python runtimes and I hope this article helps you to decide which runtime should we use in the scenarios we have. Structure of the Template We are using simple hello world functions to test invocation times of Lambdas’ by using the AWS SAM templates. When we compare them first we will use the latest versions of the runtimes the AWS SAM provided us. You can check the complete deployment package from this Github repository.

Reaper 3.0 for Apache Cassandra Is Available

Aggregated on: Wed Jul 13 2022 21:06:29 GMT+0000 (Coordinated Universal Time)

The K8ssandra team is pleased to announce the release of Reaper 3.1. Let’s dive into the features and improvements that 3.0 recently introduced (along with some notable removals) and how the newest update to 3.1 builds on that. JDK11 Support Starting with 3.1.0, Reaper can now compile and run with jdk11. Note that jdk8 is still supported at runtime.

The Best Authentication Methods for B2B SaaS Integrations

Aggregated on: Wed Jul 13 2022 20:36:30 GMT+0000 (Coordinated Universal Time)

From the earliest days of software development, authentication (also called auth) has been essential. To ensure system and data security, you must ensure that only properly identified users are permitted to log in to a system. If you’re building native integrations to connect your SaaS product to the other apps your customers use, one of the tricky pieces is dealing with the nuances of the third-party apps, such as authentication. Sometimes you'll be the one setting up authentication for your own app, and sometimes you'll need to configure your integrations to use whatever auth pattern has been provided. In either case, knowing how user authentication methods work and what to look for can save you time and prevent integration headaches.

How Does MySQL Configuration Work?

Aggregated on: Wed Jul 13 2022 20:06:29 GMT+0000 (Coordinated Universal Time)

If you've found yourself in the MySQL space at least for a little while, chances are that you have heard about one of its well-known files: my.cnf. my.cnf is a configuration file exclusive to MySQL and all of its flavors and it's widely regarded as the "go-to" file whenever MySQL configuration errors occur. Sure, we can set up a couple of settings when we start MySQL with the "--" options, but that doesn't do much - it's much more effective to set the settings inside of the configuration file instead. Why Does MySQL Need a Configuration File? First things first, we will look into why MySQL needs a configuration file in the first place. After all, MySQL is a powerful beast as-is, right? Well, not quite. You see, these days MySQL is running on a very wide variety of infrastructures and database servers - some servers might have 20TB of hard drive space and 256GB of RAM allocated to them, others - like small virtual private servers or the like - might only have 2GB of space and 256MB of RAM. The difference here is huge and the primary purpose of configuration files in this scenario is to provide an "endpoint" for MySQL DBAs and developers to configure it according to their requirements.

The Benefits of Open Source and the Risks of Open Core [Recording]

Aggregated on: Wed Jul 13 2022 20:06:29 GMT+0000 (Coordinated Universal Time)

The open source movement has taken center stage in software development, and its influence echoes through other areas of life, such as open culture and open data. Many software companies hope to cement both their revenue sources and their status in open source communities by offering a mixture of open source (also called “free”) and closed (proprietary) software. The combination is generally called open core which brings with it often hidden and misunderstood risks. Despite the widespread adoption of open core software, we believe it tends to have negative long-term impacts on vendors and customers alike. After watching the webinar, we invite you to draw your own conclusions. We'll discuss:

A Comprehensive Guide to Cloud Application Security Audits

Aggregated on: Wed Jul 13 2022 19:36:30 GMT+0000 (Coordinated Universal Time)

When it comes to cloud security audits, many organizations find themselves asking the same question: what is a cloud application security audit? And more importantly, what are the steps in a cloud application security audit? This comprehensive study will answer any and all of your questions, as well as a few you didn't even realize you had. We'll start by discussing the definition of a cloud application security audit and then move on to outline the steps involved in conducting one. After that, we'll take a look at some of the risks associated with using cloud applications and provide advice on how to mitigate them. Finally, we'll recommend some reputable companies that offer cloud application security audits and discuss some alternative options for those who want to conduct their own audits.

Creating GitHub Actions for Vercel Deployment

Aggregated on: Wed Jul 13 2022 03:51:29 GMT+0000 (Coordinated Universal Time)

Vercel allows you to host your project as fast as possible with little or no setup. When Vercel is used with GitHub for project deployment, things get more fascinating. When a new update is pushed to GitHub, this enables automated code deployment, streamlining your CI/CD workflow. What Is Github Actions? GitHub Actions is a CI/CD platform for automating your build, test, and deployment workflows. You can build and test every pull request in your repository using workflows, or you may deploy merged pull requests to the production repository.

What Developers Need to Know About Table Geo-Partitioning

Aggregated on: Wed Jul 13 2022 03:06:29 GMT+0000 (Coordinated Universal Time)

In the first two articles of the table partitioning series, we reviewed how the partition pruning and maintenance capabilities of PostgreSQL can speed up and facilitate the design of our applications. In this final post in the series, we’ll experiment with the table geo-partitioning feature that automatically distributes application data across multiple locations. We’ll continue using a large pizza chain as an example. This pizza chain has branches in New York, London, and Hong Kong. It also uses a single centralized database cluster to track the orders of its delighted customers.

How to Grab Eclipse Console Output Painlessly

Aggregated on: Wed Jul 13 2022 00:06:29 GMT+0000 (Coordinated Universal Time)

Use this guide to grab eclipse console output effortlessly. After reading it, you'll be able to grab eclipse console output successfully. But before we dive into it, let's start by answering this crucial question:

Java Thread Programming (Part 2)

Aggregated on: Tue Jul 12 2022 23:06:29 GMT+0000 (Coordinated Universal Time)

In a previous post, we discussed the history of threading and provided instructions on how to initiate and begin a thread. Let's take a look at an illustration of how we might leverage threads to our advantage in this article.

Creating Your Own Face Dataset with DatasetGAN and GPUs

Aggregated on: Tue Jul 12 2022 23:06:29 GMT+0000 (Coordinated Universal Time)

What Are Face Datasets? Image datasets include digital images chosen especially to help test, train, and evaluate the performance of ML and artificial intelligence (AI) algorithms, typically computer vision algorithms. Specifically, face datasets include images of human faces, curated for machine learning (ML) projects. See a list of commonly used face datasets. A face dataset includes faces shown in a variety of lighting conditions, emotions, poses, ethnicity, gender, age, and other factors. Face datasets are key enablers of face recognition, a computer vision field applicable to various use cases, such as augmented reality (AR), personal device security, and video surveillance.

Everything You Need to Know About SaaS Security Certification

Aggregated on: Tue Jul 12 2022 18:06:29 GMT+0000 (Coordinated Universal Time)

SaaS Security Certification is a process by which your SaaS business can prove to customers and partners that it has implemented security controls to protect their data. The accreditation shows that you follow industry best practices for data security. We'll talk about the significance of SaaS security certifications, the many sorts available, and how to pick which one is appropriate for your organization in this blog article. What Is SaaS Security? SaaS Security, or Software as a Service Security, is the practice of protecting data that is stored in and accessed via the cloud. SaaS applications are often used by businesses to store sensitive data, such as customer financial information or employee records. SaaS Security Certification helps to ensure that your SaaS provider has implemented security controls to protect this data.

Overcoming Challenges in End-To-End Microservices Testing

Aggregated on: Tue Jul 12 2022 17:36:29 GMT+0000 (Coordinated Universal Time)

Web and mobile application developers around the world are using microservices architecture to build and deliver amazing tech products that are fast, responsive, and highly integrated within an ecosystem. Unlocking high potential in the context of a rapidly growing tech startup comes with a set of big rewards, so anything which breaks barriers in the development of better tech is appreciated and adopted by all.

Java - Example Very Simple Player (JMF)

Aggregated on: Tue Jul 12 2022 16:21:29 GMT+0000 (Coordinated Universal Time)

package org.jmf.example; import javax.swing.JDialog; import javax.swing.JFrame; import javax.swing.UIManager; import javax.swing.UnsupportedLookAndFeelException; import javax.swing.plaf.metal.MetalLookAndFeel; public class ExampleJMF { public static void main(String[] args) { JFrame.setDefaultLookAndFeelDecorated(true); JDialog.setDefaultLookAndFeelDecorated(true); try { UIManager.setLookAndFeel(new MetalLookAndFeel()); } catch(UnsupportedLookAndFeelException e) { e.printStackTrace(); } new exampleFrame(); } } If you wonder what a JMF player is, you are in the right spot. We've noticed that many aspiring developers want to try it out but are unsure how it works. Hence, we decided to put together this guide to make things a tad easier for you. But before we dive into it, let’s answer this crucial question:

7 Ways to Dramatically Reduce Your Time in Code Review

Aggregated on: Tue Jul 12 2022 16:21:29 GMT+0000 (Coordinated Universal Time)

Code reviews can be painful. Software engineers often complain that the review process is slow, delays downstream tasks, and leads to context switching as you navigate back and forth between an open pull request (PR) and your next task. Code reviews can also be full of nitpicking and bikeshedding, making it a poor experience for everyone involved. To remedy this problem, some engineers have even gone as far as suggesting we get rid of pull requests and code reviews altogether. While that may work for small teams at startups, I don’t think this is the right solution for everyone, especially enterprise-level companies.

API Security Weekly: Issue 167

Aggregated on: Tue Jul 12 2022 15:51:29 GMT+0000 (Coordinated Universal Time)

This week, we have a long-standing vulnerability on a public-facing internal API on Uber, which allowed attackers to spoof emails. In addition, there’s an article by NordicAPIs on the RapidAPI report on the rise of partner-facing APIs, IBM’s views on the API security risk posed by the growth in omnichannel APIs, and finally (another) awesome API security mega guide. Vulnerability: Uber Bug Allows Attackers to Spoof Emails ThreatPost featured details of a vulnerability on a public-facing internal API on Uber allowing attackers to spoof emails so that they would appear to be from Uber.

What Is TTFHW?

Aggregated on: Tue Jul 12 2022 15:51:29 GMT+0000 (Coordinated Universal Time)

TTFHW is not the most common acronym you’ll hear in the tech and product domain. Even though it’s not extremely common, it can be argued that it is one of the most important acronyms for companies trying to scoop up and deliver value to new users. TTFHW, or Time To First Hello World, is likely something you’ve already thought about. Many product-led enthusiasts refer to it as the customers’ “aha!” moment. This is the moment when a customer first derives value from your platform. Something many programming languages and programmer tools refer to as a “Hello World” moment. It’s a make-or-break milestone and one that you obviously want every customer to experience. TTFHW is simply the amount of time it takes to get to that “aha!” moment.

Linux Kernel Bugs and How to Combat Them

Aggregated on: Tue Jul 12 2022 15:21:29 GMT+0000 (Coordinated Universal Time)

The importance of secure IT systems cannot be overstated. Every day, new cyber threats emerge. As well as online networks, operating systems can also be vulnerable. Although Linux is more secure than other operating systems, no operating system is 100% safe from attacks. In fact, there has been a rise in cyber attacks targeting Linux operating systems. High-value targets are often powered by Linux, making Linux security very important. For example, organizations who aim to stay HIPAA compliant in their communications need to make sure every piece of software they use—including their operating systems and even their digital workplace software—is as secure as possible.

From Ethereum to Aurora With Infura

Aggregated on: Tue Jul 12 2022 14:06:29 GMT+0000 (Coordinated Universal Time)

The promise of Web3 is enticing. Freedom from tech giants and giving power back to creators are lofty but worthy goals. Ethereum is the world’s largest and most-used public blockchain and has supported the growth of Web3 since it was launched in 2015. Being the first and most popular doesn’t come without challenges, especially when network demand is high. Slow and expensive transactions don’t exactly make for the best developer experience and the rise of L2s to ensure Ethereum scalability continues to be surprising. For developers that want to try other layer one chains, there are alternatives.

Securing Kubernetes Secrets With HashiCorp Vault

Aggregated on: Tue Jul 12 2022 05:06:28 GMT+0000 (Coordinated Universal Time)

As more and more organizations making the shift to cloud-native technologies, Kubernetes has become the de facto choice to orchestrate container-based applications. As applications grow in size, the number of microservices increases and so does the data they process. Hence, handling data, especially sensitive data becomes critical. Out of the box, Kubernetes supports "Secrets" objects to store sensitive information — like passwords, tokens, ssh keys, and so on — securely. Kubernetes secret eliminates the need to hard-code sensitive data in the application code. Secrets provide this sensitive information as data mount or expose them as environment variables.

Debugging Gson, Moshi, and Jackson JSON Frameworks in Production

Aggregated on: Tue Jul 12 2022 04:36:29 GMT+0000 (Coordinated Universal Time)

Parsing bugs are the gift that keeps giving in the age of APIs. We use a service; it works perfectly in debugging, QA, and so on. Then some user input that made its way to the web request, returns a result we just can’t parse. Unfortunately, there isn’t much we can do at this stage. We need to understand why the failure occurred and how we can workaround it and fix it. In production, that isn’t trivial. We could log all the calls we made and all the objects passed. But this will destroy our performance and send our log storage bill through the roof. It might also put us in violation of privacy laws, since the JSON data might include private user information. This is a common problem in production since a webservice might change and trigger a serialization failure at runtime. This is especially true in polyglot environments where a Java class mapped using an API like Jackson might fail on the deserialization of a NodeJS object.