teleren/devto huggingface dataset:
Security Awareness, Secure Coding, and Zero-Trust - Bridging Frontend and Cybersecurity
Tags: cybersecurity, frontend, owasp, security
Published: 2024-04-02 17:49:18

## What is "Security Awareness"

Security awareness is about the knowledge and attitude of team members about protecting the company assets or software.

Let's talk about the attitude (letting OWASP Top Ten for the knowledge for now since defects, bugs, and logic flaws are consistently the primary cause of commonly exploited software vulnerabilities).

## What is "Secure Coding"

So, we can think that code review, code style guides, well-maintained, well-structured, and tested code is on the very basis. Then, following these practices (along with others, like implementing code analysis e.g. Snyk, Semgrep, etc.) might let us assume certain feelings about the code being secure.

Building secure software requires more than this, let me remark that, It also requires a basic understanding of security principles and practices, insecure patterns, and the language, technologies, third-parties, and aspects upon which the frontend relies on along its development.

## What is "Zero Trust"

But the attitude (along with training) plays a relevant and not prescindible role. And our key to attitude is not to trust. And this is why:

The approach developers follow differs from the one attackers walk down.

  * A development team designs an application to perform specific tasks based on functional requirements and use cases.
  * Meaning a Dev team approaches an application based on what it is intended to do. 

Conversely, attackers primarily think that "any action not specifically denied, could be allowed". Having more interest in the unintended or unexpected behavior than the expected use case results.

Not trusting that the code will always be used as expected is the basis and first layer of defense in our attitude. Even in terms of verification, limiting the impact, and properly handling a response. In this context, It's what we can call a Frontend Devs Zero-Trust.

## Conclusion

Let's summarize:

* What is "Security Awareness"? attitude and training.
* What is "Secure Coding"? principles and practices.
* What is "Zero Trust"? Not trusting that the code will always be used as expected is the basis and first layer of defense in our attitude.

## Resources

* Fron-End: 
  * OWASP Foundation: https://owasp.org/www-project-top-ten/
* Back-End: 
  * OWASP Foundation: https://cheatsheetseries.owasp.org/cheatsheets/Nodejs_Security_Cheat_Sheet.html
  * Security Best Practices: https://nodejs.org/en/docs/guides/security
* AWS Vulnerabilities already found: 
  * CVE AWS: https://www.cvedetails.com/vulnerability-list/vendor_id-12126/Amazon.html
Let Us Code
Tags: wecoded
Published: 2024-04-02 17:47:52

---
title: Let Us Code
published: true
description: In honor of WeCoded, for anyone who has ever had to worry about anything other then doing their jobs.
tags: wecoded
# cover_image: https://direct_url_to_image.jpg
# Use a ratio of 100:42 for best results.
# published_at: 2024-03-10 14:53 +0000
---

The underrepresented don't want to solve the gender gap, the inequality gap, the hushed sexism and racism in side conversations, comments and "jokes". We don't want to worry about how someone will interpret our outfit, our hair, always choosing a careful set of words to be met with disrespect anyway.

We want to be wholly in our jobs, in our work, and have peace at the end of the day that we put our best forward and made a difference in someway. We want to be equally supported by our managers, by our team, and feel like we belong here.

The truth is, I've made it my personal vendetta, erm, mission since 2014, and burnt out so bad it took almost three years to heal. I addressed _everything_ within my control for every excuse that was ever given of why underrepresented people can't thrive/survive in tech. I've watched my fellow women coworkers go above and beyond to be taken seriously, my Black and Brown friends get called some horrid things in the office. I've also had some pretty disgusting sexism shared right to my face, and all of this within my first two years in tech (and of course on ward as well).

They said people weren't in the interview pipelines, I worked on creating blog posts for fixing interviews from both sides of the table. They said people weren't negotiating well, through my meetup LaDev, we had a negotiation and financial wellness session. For every excuse, I had at minimum a blog to address it. At most, I had a session through LaDev, and in some cases even presented at meetups or conferences sharing my knowledge.

While I'll acknowledge the majority of my impact was local, I wasn't the only one pushing forward. Through conferences I met so many wonderful individuals with my same passion for improving things.

Fast forward to 2024, I'm now in a leadership role where I can provide equal opportunities to my team, ensure my interview process is fair, and hope for a ripple effect as other people take note and ask for my input in improving their own. It's not lost on me that my team is an anomaly. I want to keep moving things forward, but I've learned an important lesson.

It's going to take more. This is systematic change we're trying to push for. While things are _better_, they are not equal or fair. We need leaders who care, and new leaders to help others rise and thrive in tech. 

So here's my challenge to the tech world: do better.
Be better than you were yesterday, push your leaders to be better than they were yesterday, and don't settle. The road is long, sometimes difficult, unbearable at times, definitely lonely, but anything worth doing is.

Let us code, for we are freaking tired. <3
Unlocking Opportunities in India's AI Job Market: Roles and Salaries
Published: 2024-04-02 17:44:15

 Unlocking Opportunities in AI: Lucrative Jobs in Kerala's Growing Tech Scene

1. AI Strategist/Consultant
   - Salary: INR 8,00,000 - 15,00,000 per annum

2. Data Scientist
   - Salary: INR 6,50,000 - 12,00,000 per annum

3. AI Engineer
   - Salary: INR 7,00,000 - 14,00,000 per annum

4. AI Ethics Specialist
   - Salary: INR 8,50,000 - 15,00,000 per annum

5. AI Trainer/Annotation Specialist
   - Salary: INR 5,50,000 - 10,00,000 per annum

6. AI Product Manager
   - Salary: INR 9,00,000 - 16,00,000 per annum

7. AI Researcher
   - Salary: INR 7,50,000 - 14,00,000 per annum

8. AI Software Developer
   - Salary: INR 6,00,000 - 11,00,000 per annum

9. AI Security Specialist
   - Salary: INR 8,00,000 - 14,00,000 per annum

10. AI Marketing Analyst
    - Salary: INR 6,50,000 - 12,00,000 per annum

11. AI Education and Training
    - Salary: INR 5,00,000 - 9,00,000 per annum

12. AI Policy Analyst
    - Salary: INR 7,00,000 - 13,00,000 per annum

13. AI Project Manager
    - Salary: INR 8,50,000 - 15,00,000 per annum

In Kerala's vibrant tech hub, Kozhikode, AI professionals are in high demand across various sectors. From strategizing AI implementation to ensuring ethical AI practices, there's a range of lucrative opportunities awaiting skilled individuals. Whether you're passionate about data science, software development, or AI research, Kerala's burgeoning tech scene offers competitive salaries and ample room for growth. Explore the possibilities and carve your path in the dynamic realm of AI.
How Kubernetes Enhances Retrieval Augmented Generation (RAG) Systems
Published: 2024-04-02 17:44:08

Batch Jobs for Data Processing: RAG systems require extensive data processing to retrieve and process external knowledge sources. Kubernetes' Batch Jobs efficiently manage this by running short-lived pods that execute these tasks to completion.

Stateful Sets for Persistent Data: The Stateful Service pattern ensures that pods for RAG models have a stable storage backend, which is crucial for maintaining the state of the external knowledge base.

Services for Load Balancing: Kubernetes' Service object allows RAG systems to distribute network traffic to pods, providing a stable entry point and handling high loads during real-time data retrieval.

Init Containers for Setup: Before a RAG pod can serve requests, it might need data from external sources. Init Containers can prepare the environment, pulling in the necessary datasets to be readily available for the RAG system.

Sidecars for Auxiliary Tasks: Auxiliary containers can run alongside the main RAG model container, handling tasks like logging, monitoring, or updates to the knowledge base without affecting the primary application.

Operators for Automation: Kubernetes operators can manage complex RAG applications, automating tasks such as scaling, updates, and maintenance.
Knights Plumbing and Drain
Published: 2024-04-02 17:39:27


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/4rfh455tqpzprlo87wjv.png)


Knights Plumbing & Drain, established in 1995, has been synonymous with quality Modesto plumber services, earning the title of Hometown Heroes. Our motto, "Respect, Protect, and Serve," underscores our commitment to exceptional customer service. With over a decade of experience serving Modesto, Manteca, Tracy, Stockton, Lodi, and Turlock, our certified technicians offer transparent pricing and top-notch service for all your plumbing needs. Whether it's a burst pipe or a water heater installation, trust Knights Plumbing & Drain for reliable and efficient solutions.

Knights Plumbing and Drain
Address: [Stockton, CA 95207](https://www.google.com/maps?cid=6006776837987612160)
Phone: 209-466-1717
Website: [https://www.knightsplumbinganddrain.com/ ](https://www.knightsplumbinganddrain.com/ )
Contact email: les@mailknights.com

Visit us:
[Knights Plumbing and Drain Facebook](https://www.facebook.com/KnightsPlumbingAndDrain/)
[Knights Plumbing and Drain Twitter](https://twitter.com/KnightsPlumber)
[Knights Plumbing and Drain YouTube](http://www.youtube.com/user/knightsplumbing)

Our services:
Plumbing services
Commercial plumbing
Drain cleaning
Water heater repair
Sewer line repair
Future of Work: AI Jobs Shaping Human Roles & Impacting Traditional Employment
Published: 2024-04-02 17:36:23

Human Roles in AI Jobs:
1. AI Trainer/Teacher
2. AI Ethicist
3. AI Psychologist
4. AI User Experience (UX) Designer
5. AI Policy Analyst
6. AI Content Creator

AI Impact on Human Jobs:
1. Administrative Roles
2. Customer Service Representatives
3. Manufacturing and Assembly Line Workers
4. Data Analysts
5. Transportation and Delivery Drivers
6. Retail Sales Associates
Domine os Generators em JavaScript
Tags: javascript, generators, webdev
Published: 2024-04-02 17:28:14

Domine os Generators em JavaScript: Torne seu Código Mais Eficiente e Poderoso!

Na jornada de todo desenvolvedor JavaScript, chega um momento em que a busca por código mais eficiente e maneiras de lidar com operações assíncronas torna-se imperativa. É aqui que os Generators brilham, oferecendo um caminho elegante e poderoso para escrever funções que podem pausar e retomar sua execução, tornando o gerenciamento de fluxos assíncronos uma brisa.

🚀 O que são Generators?
Generators são funções especiais em JavaScript que podem suspender sua execução e posteriormente retomá-la, permitindo que elas produzam uma sequência de resultados ao longo do tempo, ao invés de computar todos os valores de uma vez. Eles são marcados pela sintaxe function* e utilizam os operadores yield e yield* para pausar e retornar valores.

🔍 Por que usar Generators?

Manuseio Eficiente de Sequências Infinitas: Generators permitem que você trabalhe com sequências de dados potencialmente infinitas de maneira eficiente, consumindo valores sob demanda.
Simplificação de Código Assíncrono: Ao combinar Generators com Promises ou async/await, você pode simplificar significativamente o manejo de operações assíncronas, especialmente em fluxos de dados complexos.
Controle de Fluxo Customizado: Generators oferecem um controle de execução fino, permitindo cenários complexos de controle de fluxo que seriam difíceis com abordagens tradicionais.

🛠 Como usar Generators?

Vamos ver um exemplo simples:

```typescript
function* contador() {
  let count = 0;
  while(true) {
    yield count++;
  }
}

const gen = contador();

console.log(gen.next().value); // 0
console.log(gen.next().value); // 1
console.log(gen.next().value); // 2
// E assim por diante...
```

Este exemplo demonstra a criação de um generator simples que produz uma sequência infinita de números. Ao chamar gen.next(), retomamos a execução do generator, obtendo o próximo valor na sequência.

🌟 Conclusão:
Generators são uma ferramenta incrivelmente poderosa no arsenal de qualquer desenvolvedor JavaScript, oferecendo uma maneira elegante de escrever funções pausáveis, manipular dados assíncronos e gerenciar fluxos de controle complexos. Se ainda não está utilizando Generators em seus projetos, agora é uma excelente hora para começar a explorar seu potencial!

💡 Desafio: Experimente implementar uma função generator em seu próximo projeto. Seja para lidar com dados assíncronos ou simplesmente para uma manipulação mais limpa de sequências de dados, você verá como eles podem tornar seu código mais limpo e eficiente.
PDF 2.0, what's new?
Tags: pdf, onedoc, feature, adobe
Published: 2024-04-02 17:21:02


## Introduction
### Overview

Adobe Systems, the creator of the Portable Document Format (PDF), has seen PDF become a ubiquitous tool for viewing and interacting with documents. 
Over 25 years since its inception, PDF has evolved significantly and was adopted as an open international standard in 2008. 
The latest milestone in this evolution is the release of PDF version 2.0 by the International Organization for Standards (ISO) on July 28. 
This update is the result of an 8-year collaborative effort involving experts across various disciplines and countries, with Adobe engineers playing a significant role. <br />
The new 971-page PDF 2.0 specification enhances **document security**, **accessibility***, and the handling of graphically **rich media** including 3D models, video, geospatial data, and advanced print features.

## What's new?

### Improved security
PDF 2.0 incorporates advanced encryption with support for *256-bit AES encryption*, supports Unicode characters in passwords, and introduces an unencrypted wrapper for encryption details, aiding applications like Acrobat Reader in decryption.

### Improved accessibility

Accessibility has been enhanced through an extended tagging architecture, the addition of text-to-speech features for images and a braille reader. Making content more accessible to users with disabilities. 

### Rich media support

The 2.0 version also supports **PRC** (a popular 3D modeling language) which enriches the PDF experience with advanced tools for interacting with rich 3D content.
![Sample PDF file with PRC 3D model of an electric helicopter.](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/z4bth17igvvs1y0n0f2n.png)

Geospatial capabilities are greatly expanded, allowing for sophisticated interactions with GIS data (Geospatial information systems) and the exchange of geographic content such as satellite imagery, astronomy, city mappings and more.
Another significant improvement in the geospatial field is the support for coordinate systems, enabling geospatial objects to be associated with a spatial reference point or projection.

### Improvements in color accuracy

PDF 2.0 also brings significant advancements in color management for print workflows, including page-level output profiles, black point compensation, and spectrally defined colors, improving color accuracy and management across various printing scenarios.
Stay Updated with PHP/Laravel: Weekly News Summary (25/03/2024–31/03/2024)
Tags: laravel, php
Published: 2024-04-02 17:00:17

Intro: Check out this informative summary of the latest PHP Laravel weekly news from March 25, 2024, to March 31, 2024. Stay updated with the newest developments and enhancements in the PHP Laravel ecosystem with this concise overview.

**Key Points:**
- Laravel 9.1.0 release introduces dynamic rate limiting based on user roles and permissions.
- Laravel Sanctum v3.0 is released, featuring improvements and bug fixes.
- A Laravel package for generating PHP code snippets from SQL queries is introduced.
- Learn about Laravel's new authorization capabilities for better control over user actions.
- The Laravel community spotlight features tutorials on deploying Laravel Vapor and managing Laravel backups.
- Get insights into the Laravel documentation updates and community contributions.

Don't miss out on these exciting updates and enhancements in the PHP Laravel ecosystem. Stay informed and engaged with the latest news and developments.

Check out the complete article here [https://poovarasu.dev/php-laravel-weekly-news-summary-25-03-2024-to-31-03-2024](https://poovarasu.dev/php-laravel-weekly-news-summary-25-03-2024-to-31-03-2024)
Vscode setup with Foam and Logseq for Digital Note Taking
Tags: digitalnotetaking, vscode, logseq, foam
Published: 2024-04-02 17:00:11

Setting up Visual Studio Code (VSCode) with Foam and Logseq for digital note-taking involves a few steps to integrate these tools into a powerful personal knowledge management system. Here's a guide to get you started:

1. **Install Visual Studio Code**: If you haven't already, download and install VSCode from the official website.

2. **Install Foam**:
   - Foam is a personal knowledge management system inspired by Roam Research, built on VSCode and GitHub¹.
   - Use the `foam-template` to generate a new Foam workspace. You can find this template on the Foam GitHub page².
   - Clone the repository locally and open it in VSCode.

3. **Configure Foam Settings**:
   - After setting up the repository, open `.vscode/settings.json` and edit, add, or remove any settings you’d like for your Foam workspace¹.
   - Foam provides features like graph visualization, backlinking, and wikilinks to help you organize your thoughts and notes.

4. **Install Logseq Compatibility Extension (Loam)**:
   - Loam is a fork of Foam that enables better compatibility with Logseq, allowing you to open your Logseq folder in VSCode and get a comparable note-taking experience³.
   - Install Loam from the VSCode Marketplace to integrate Logseq into your workflow.

5. **Use Logseq**:
   - Logseq is a privacy-first, open-source knowledge base that works on top of your local files.
   - You can use Logseq alongside Foam to manage your notes, tasks, and knowledge graph.

6. **Customize Your Workflow**:
   - Both Foam and Logseq are highly customizable, so take the time to adjust the settings and extensions to fit your personal workflow.
   - Explore additional VSCode extensions that can complement your note-taking, such as Markdown All in One, Markdown Preview Enhanced, and others.

By following these steps, you'll have a robust setup for digital note-taking in VSCode, leveraging the strengths of both Foam and Logseq to manage your knowledge effectively. Happy note-taking! 📚✨

Source:
(1) A personal knowledge management and sharing system for VSCode - Foam.   https://foambubble.github.io/foam/.
(2) A personal knowledge management and sharing system for VSCode. https://github.com/foambubble/foam.
(3) Loam - Visual Studio Marketplace. https://marketplace.visualstudio.com/items?itemName=ciceroisback.loam.
Overall Health Benefits: The Positive Impact of Dental Implants on General Well-Being
Published: 2024-04-02 16:59:27

Dental implants are one-time investments that offer impressive benefits in replacing missing teeth. These prostheses can permanently anchor themselves within the jawbone, thereby providing a strong foundation. 

You may be wondering about the best [dental implants dentist near me](https://www.alpinedentalcenter.net/dental-implants/)! Then you are at the right place! Look no further and scroll down to learn about dental implants and their benefits for oral rehabilitation.

What are dental implants?

Dental implants are artificial screw-like posts that mimic the lost tooth roots. They are surgically inserted prostheses that fuse with the natural bone through osseointegration to offer anchorage to permanent teeth replacements. 

What benefits do they offer?

The key benefits of dental implants, listed below make them unique from other teeth replacement solutions: 

Superior aesthetics: Dental implants support and anchor permanent teeth restorations like crowns and dentures in the most aesthetically pleasing manner. These screw-like devices stay hidden within the jawbone, adding a superior touch to aesthetics.  

Permanent solution: These posts are fixed inside your jawbone permanently and mimic tooth roots to anchor the final tooth restoration like crowns, and dentures.

Improved speech: Poor-fitting dentures can negatively impact your speech and pronunciation since there is an increased risk of implant displacement. Dental implants allow you to speak with confidence, without the fear of the implant slipping away or falling off.

Superior comfort: You no longer have the discomfort of cleaning your removable dentures, without the risk of losing them since they are permanently fixed to your jawbone. 

Eating convenience: Dental implants function like your natural teeth by mimicking your lost tooth roots, allowing you to chew well with confidence and without pain. This may improve chewing, thereby lowering your risk of nutritional deficiencies. 

Improved self-esteem: Dental implants can revitalize your smile, boosting your confidence, and self-esteem. 

Enhanced oral health: Dental implants do not require any preparation of the adjacent teeth because they do not require any support from them. This leaves your natural teeth intact, improving long-term oral health. They also provide easy interdental access thereby improving oral hygiene. 

Durability and longevity: Dental implants are durable, and with proper care, they can last a lifetime. They eliminate the inconvenience of removing dentures, and messy adhesives to keep fixed dentures in place. 

Dental implants serve as resilient structures that replicate the function of natural tooth roots, providing robust support and stability for replacement teeth. With a track record of proven efficacy, they offer enduring benefits that not only enhance oral health but also promote overall well-being.
Urgent Attention Needed: Pipe Leak Alert!
Tags: pipe, php, typescript, beginners
Published: 2024-04-02 16:59:16

We regret to inform you that there has been a significant [pipe leak](https://usawaterrestoration.com/how-to-fix-leaking-pipes/) detected in the vicinity. The leak has been identified as a potential hazard and requires immediate attention.

The safety of our community is our utmost priority, and we urge all residents to exercise caution and take necessary precautions until the issue is resolved. Please refrain from using water unnecessarily and report any additional leaks or suspicious activities to the authorities.

Our maintenance team is actively working on resolving the situation, but we anticipate that repairs may take some time. We kindly ask for your cooperation and understanding during this period.

In the meantime, we advise residents to store water for essential use and avoid areas affected by the leak. We will provide regular updates as the situation progresses.

Your cooperation in this matter is greatly appreciated as we work towards ensuring the safety and well-being of everyone in our community.

Thank you for your understanding and cooperation.