teleren/devto huggingface dataset:
SEC-T - 0x0FOO
Tags: 100daystooffload, security, conference, hacking
Published: 2023-09-19 16:57:11



## SEC-T: A Great Single Track Security Conference in Stockholm

Last week, I attended the [SEC-T](https://www.sec-t.org/) security/hacking conference in Stockholm, Sweden. It was a two-day single track conference, and my first time attending a security conference. I had a great time!

Security conferences can be a great way to learn about the latest threats and trends in the industry, network with other professionals, and attend talks by experts in their field.

All the talks (almost) from the conference have already been uploaded to YouTube and can be found here: [SEC-T 2023](https://www.youtube.com/playlist?list=PLv84MTo7Io20Vdg0ExpfmiHnR-TZtybTR)

My top three talks were:

* Rami McCarthy - [Beyond the Baseline: Horizons for Cloud Security Programs](https://www.youtube.com/watch?v=YPuxkgRVk1Y&list=PLv84MTo7Io20Vdg0ExpfmiHnR-TZtybTR&index=13)
* Julia Zdunczyk - [How to Break into Organizations with Style](https://www.youtube.com/watch?v=JW1ii01Rexk&list=PLv84MTo7Io20Vdg0ExpfmiHnR-TZtybTR&index=7)
* Fredrik Sandström - [Take all my money - penetrating ATMs](https://www.youtube.com/watch?v=l-UdUttJoEk&list=PLv84MTo7Io20Vdg0ExpfmiHnR-TZtybTR&index=9)

I highly recommend checking out these talks if you're interested in learning more about cloud security, social engineering, or ATM hacking.

Overall, I had a great time at the SEC-T conference. It was a well-organized event with a great lineup of speakers. I would definitely recommend it to anyone interested in learning more about security.
Understanding and implementing steps for Cost Optimization and in cloud
Tags: cloudoperations, aws
Published: 2023-09-19 16:53:46

In any personal, SME, mid-size and huge enterprises cost plays a huge role in the decision make process. in the case of IT  infrastructure cloud provides a wide range of paying options, as it is build on satisfying the customer needs first, this includes guiding and educating on getting value for your money when using their services.
There are a number of key pointers that highlight and shed light on steps to implement in order to grow financial awareness to key stack holders in the business or organization that take part in implementing, adopting and operating day to day tasks on cloud.

Financial implementation awareness
with the establishment of most departments that deal with operations and also to some extend security, the finance sector should also be equipped with equal measure if not more, as it is a core player in the life support for the other departments.

Fit consumer model
There is no one fit for all model for all businesses adopting cloud, as operations varies, size and needs. This factors shape the needs of a business to use tailor made infrastructure resources for instance compute type and size, a company that has memory intensive workload is not like another with general purpose tasks.

Efficiency is key
While having identified your needs, adopting and implementing the cloud resources it is also key to measure its effectiveness based on also cost delivery for example avoiding over provisioning at the expense of cost, this may lead to unsustainability and costly in the long run.

Transparency on expenditure
The cloud offers a breakdown of all the resources used and the total cost incurred when using them, each department should work towards an aware use of resources that will be billed centrally.
It is a collective responsibility for each department to work towards the same goal, and the finance part is not left behind.

---

conclusion
Few steps and things to be aware are key determiners of the  "successful" adoption of the cloud, this does not mean they should be held to the latter but should used as pointers when navigating to the adoption of cloud.
Mastering React.js Virtual DOM with Practical Examples
Tags: webdev, javascript, react, programming
Published: 2023-09-19 16:50:18

## Understanding the Virtual DOM

The Virtual DOM is a lightweight copy of the actual DOM, represented as a JavaScript object. When a component's state or props change, React constructs a new Virtual DOM tree. It then performs a "diffing" algorithm to determine the minimal set of changes needed to update the actual DOM.

## Example: Todo List Application

Let's create a simple Todo List application to demonstrate the power of the Virtual DOM in React.

```jsx
import React, { useState } from 'react';

const TodoList = () => {
  const [todos, setTodos] = useState(['Learn React', 'Build a project']);
  const [newTodo, setNewTodo] = useState('');

  const handleAddTodo = () => {
    setTodos([...todos, newTodo]);
    setNewTodo('');
  };

  return (
    <div>
      <ul>
        {todos.map((todo, index) => (
          <li key={index}>{todo}</li>
        ))}
      </ul>
      <input
        type="text"
        value={newTodo}
        onChange={(e) => setNewTodo(e.target.value)}
      />
      <button onClick={handleAddTodo}>Add Todo</button>
    </div>
  );
};

export default TodoList;
```

In this example, we have a `TodoList` component that manages a list of todos. It allows users to add new todos, demonstrating the use of state and event handling.

## How Virtual DOM Optimizes Updates

1. **Initial Rendering**:
   - React creates a Virtual DOM representation based on the initial state and renders the component.

2. **Adding a Todo**:
   - When a new todo is added, React constructs a new Virtual DOM with the updated todo list.

3. **Virtual DOM Diffing**:
   - React compares the new Virtual DOM with the previous one to identify the changes (addition of a new todo).

4. **Updating the Actual DOM**:
   - React applies the specific change (adding the new todo) to the actual DOM, updating only the necessary parts.

## Advantages of the Virtual DOM

- **Efficiency**: The Virtual DOM minimizes direct DOM manipulation, resulting in faster updates and improved performance.

- **Consistency**: Developers can work with a consistent, virtual representation of the DOM across different platforms and browsers.

---

## Conclusion

Understanding the Virtual DOM is crucial for maximizing React's performance and building efficient web applications. By leveraging its power and using it effectively, developers can create seamless and responsive user interfaces.
Filtering Zero-Width SPaces (ZWSPs) using ColdFusion
Tags: coldfusion, java, cfml, security
Published: 2023-09-19 16:19:15

This is a follow-up to a January 11, 2019 article I wrote on my old Tumber blog.

> The Hacker News posted an [article](https://thehackernews.com/2019/01/phishing-zero-width-spaces.html) regarding the ability to bypass Microsoft Office 365's "Safe Links" security feature by adding zero-width spaces (ZWSPs).  I generated some sample URLs to test against my ColdFusion-based URL blacklist script and discovered that it was also vulnerable.  Using isValid("url") returns TRUE for strings with ZWSPs. Clicked links also redirect to the correct destination as the browser (or DNS) appears to automatically ignore the ZWSP characters. This makes it possible for cybercriminals and email scammers to send malware and phishing links through our servers. It's impossible to filter using a blacklist without removing the characters.
> For example, this function permanently redirects GET requests for "/shop/?" to "/shop/".
> I've developed a ColdFusion CFC with various methods to trim, sanitize (replace/remove) & identify these invisible characters by both character and HTML entities. I'm still evaluating the library by testing it in a couple of smaller projects and am hoping to post more in the very near future.  (I've actually been meaning to write this for a while in order to trim non-breaking spaces from data imported by user-generated Excel files.)

I just realized that I never shared the `whitespace.cfc` that I developed back in 2019. Public methods include:
- dumpRegex (performs a CFDump of regex rules)
- getConfig (Lists all rules used when a tag is specified)
- getRegex (Generates pipe-delimited REGEX list of whitespace/ZWSP characters. Ex. 'chr(32)|A_Space')
- hasWhiteSpace (Checks if string contains any whitespace)
- hasUnsafeSpace (Checks if string contains unsafe-ish whitespace)
- identifyUnsafeSpace (Provides a array of shortcodes, names, decimal or hex values of identified whitespace and their regex positions)
- leftTrim (Performs a left trim and strips all whitespace)
- rightTrim (Performs a right trim and strips all whitespace)
- fullTrim (Performs a left/right trim and strips all whitespace)
- sanitize (Performs a left/right trim and strips control characters)
- compressText (Santizes, reduces multiple space characters to a single character)
- compressHtml (Replaces a huge amount of unnecessary whitespace from your HTML code)
- singleLine (Modifies content to output on a single line (for logging))

https://gist.github.com/JamoCA/68673cbac81d5924c80754c3fe4effcf

{% gist https://gist.github.com/JamoCA/68673cbac81d5924c80754c3fe4effcf %}
🚀 TCP vs. UDP: Unravelling the Mystery for Developers
Tags: learning, networking, cybersecurity
Published: 2023-09-19 16:15:58



Hey Devs! 🌟

Have you ever been in the middle of a project and found yourself pondering over which transport protocol to go with? TCP or UDP? No worries. I've got you covered. Let's dive into the essentials and figure out what sets these two apart.


![Source:Top10vpn](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/f0katysynzirucbnypnz.png)


## 🤝 Connection-Oriented vs. Connectionless

**TCP** - Think of it as your dedicated friend who ensures you both establish an understanding before diving deep into any conversation. That's TCP for you: connection-oriented, ensuring that the data flows systematically.

**UDP** - Ever had that friend who blurts out everything at once, no order, no waiting? That's UDP! Connectionless and doesn't care about the formalities.

## 🛡 Reliability

**TCP** - It's like that reliable buddy who ensures your coffee order is correct every single time. Even if the barista messes up, your friend will make it right.

**UDP** - This buddy hands you the coffee as quickly as possible, not worrying too much if it's your exact order. Speed over precision.

## 🚦 Flow Control

**TCP** - Picture a traffic cop, ensuring cars move smoothly without congestion. That's TCP for your data!

**UDP** - It's like a highway without speed limits. You go as fast as you want, at your own risk!

## 🔍 Error Checking

**TCP** - Your meticulous friend who double-checks everything, ensuring there are no mistakes.

**UDP** - While it does give a quick glance, it's not going to lose sleep over a minor error.

## 📦 Data Ordering

**TCP** - Imagine a librarian ensuring every book is in order. TCP does that for your data packets.

**UDP** - It's the chaotic professor whose books are everywhere. The info's all there, just maybe not in order!

## 💡 Use Cases

**TCP** - When you need reliability, like when building web apps, sending emails, or file transfers.

**UDP** - When speed is the essence, perfect for online games, streaming, or broadcasting where a minor data loss isn't a deal-breaker.

## Wrapping Up

It all boils down to what you value more: a systematic, reliable approach (TCP) or a fast, get-it-done attitude (UDP). Hopefully, this analogy-filled dive gives you clarity!

Happy coding! 🔥

P.S.: Devs, what are your experiences with TCP and UDP? Drop your thoughts and stories in the comments below! 👇
Messages like this are another vibe.
Tags: buildinpublic, coding, bot, happy
Published: 2023-09-19 16:09:10

Recently, I built a Telegram Chat Bot to help students who are using the Forest Study App.

![Telegram chat screenshot appreciating the bot that I created.](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/yn0nuh7cw9egwhe2bhgp.png)
The Art of Code: Why Developers Should Read Others' Creations
Tags: programming, developercommunity, codingskills
Published: 2023-09-19 15:52:25

In the world of programming, every line of code is a canvas, and every function a brushstroke. Just as artists express themselves through paint and writers through words, programmers communicate their thoughts through code. The code we write is more than just a set of instructions for a computer; it's an expression of our ideas and problem-solving skills.

In this article, we explore the artistry of coding and delve into the reasons why reading others' code is a fundamental practice for developers. We'll discuss how code can be akin to poetry, how each program is a unique novel, and why understanding different coding styles and patterns is essential for personal and professional growth.

## Why Should Developers Read Others' Code?

**Learning and Growth**: Reading code exposes us to various coding styles, design patterns, and problem-solving techniques. It's like reading different genres of literature; each codebase has its unique storytelling.

**Collaboration and Teamwork**: In today's collaborative development environment, understanding and contributing to others' code is crucial. It facilitates code reviews, teamwork, and ensures a shared understanding of the project.

**Debugging and Maintenance**: At some point, you'll need to debug or maintain code written by someone else. Reading others' code prepares you for this task by helping you decipher logic and understand the intended functionality.

**Best Practices**: Exposure to different codebases teaches best practices and design patterns. You can learn how experienced developers structure their code, handle edge cases, and optimize for performance.

**Empathy and Appreciation**: Reading others' code fosters empathy for fellow developers. It helps you appreciate the challenges and decisions made by the code's creator, leading to a more supportive development community.

Ready to dive into the world of code artistry? Read the full article on my blog: [The Art of Code: Why Developers Should Read Others' Creations.](https://njoroge.tomorrow.co.ke/blog/python/reading_code)

Let's celebrate the art of coding and become better developers together! 🎨👩‍💻
Software Testing
Tags: software, testing
Published: 2023-09-19 15:43:47

SOFTWARE TESTING:
 The process is verifying software applications for further actions.
 It improves performance
 Reduces cost wise developing etc.
NEED OF SOFTWARE TESTING:
 Once we ordered we can identify the problems and the issues by code within software products received
 Not only cut the cost in very first but helps to run the applications for need of business.
 In digitized world customer satisfaction is very important right now.
 Product of quality should be maintained is what ensures the brands improvement.
 Secures the ordered product via any risk and uncertainties.
Example- shopping apps ,travelling app etc..
 It enhance the development process.
RELEVANCE OF SOFTWARE TESTING:
 Cost and time effectiveness
 Companies reputation
 User satisfaction
 Security
 Software quality
 Compliance with industry standards etc..
Threads Video Downloader - Snapthreads.io
Tags: threads
Published: 2023-09-19 15:40:11

SnapThreads is a tool to download videos from Threads social network. No need to install software or log in to an account. Available on PC, Android, Iphone.
Addess: 28 Fitzroy St, Cleveland QLD 4163, Australia
Phone: +61448574344
Email: snapthreads.io@gmail.com
Google maps: https://maps.app.goo.gl/9tRWm9GzzmLA5eyNA
Website: [Threads Video Downloader](https://snapthreads.io)
Facebook: https://www.facebook.com/snapthreadsio
Instagram: https://www.instagram.com/snapthreadsio
Youtube: https://www.youtube.com/@snapthreadsio
Quora: https://www.quora.com/profile/Snapthreads-1
Threads: https://threads.net/@snapthreadsio
Google maps: https://maps.app.goo.gl/9tRWm9GzzmLA5eyNA
First Project Completed
Tags: javascript, html, css
Published: 2023-09-19 15:34:22

For this project, I did a basic To-do list using HTML, CSS, and JavaScript that's after doing a ton of research and watching tutorials, although I am still struggling to keep up with most of the syntax in JavaScript, I believe with practice I will get better. 
 In this project, I used JS to implement Event Listener, and I also incorporated a display of time and date using the Date and Time function.


#Baby Steps.
#Upcoming Frontend Developer

Attached is what the project looks like.
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/crr19g9ikidl4p5lwst2.png)
reCAPTCHA V3 Solver - 2captcha
Tags: captcha
Published: 2023-09-19 14:16:04


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/wdsegasrmd2otfwqyy1q.png)

[https://chrome.google.com/webstore/detail/captcha-solver-auto-recog/ifibfemgeogfhoebkmokieepdoobkbpo](https://chrome.google.com/webstore/detail/captcha-solver-auto-recog/ifibfemgeogfhoebkmokieepdoobkbpo)

reCAPTCHA V3 is a security measure used to prevent automated bots from performing certain actions on websites. It is different from reCAPTCHA V2 in that it does not require the user to solve a captcha. Instead, it uses a browser scoring mechanism to determine if the user is a human or a program. This makes it more difficult to bypass than reCAPTCHA V2. However, 2captcha provides a solution to bypass reCAPTCHA V3 using its online recognition and bypass API.

2captcha is a service that provides automatic captcha recognition. It offers an easy API integration for PHP, Python, C++, Java, C#, Ruby, and Go. To use 2captcha's reCAPTCHA V3 solving service, you need to send the sitekey and pageurl to the 2captcha API. The API will then return a token with a score of 0.9, which indicates that it is most likely a human. The token can then be used to bypass reCAPTCHA V3 on the website.

2captcha also provides an auto solver for reCAPTCHA V3. The auto solver is a software that automatically solves reCAPTCHA V3 on Google Chrome. To use the auto solver, you need to unzip the archive and open Google Chrome. Then, click on the menu button and select "More tools" > "Extensions". Enable "Developer mode" and click on "Load unpacked". Select the unzipped files and click on "Select folder". The auto solver will then be installed and ready to use.

In conclusion, [2captcha](https://2captcha.com/?from=10075179) provides a reliable solution to bypass reCAPTCHA V3 using its online recognition and bypass API. It also offers an auto solver for reCAPTCHA V3 on Google Chrome. However, it is important to note that the use of such services may violate the terms of service of some websites and may be illegal in some countries. Therefore, it is important to use these services with caution and in compliance with the laws and regulations of your country.
Machine Learning Algorithms: Importance of Understanding inner workings of these algorithms.
Tags: machinelearning, datascience, ai, python
Published: 2023-09-19 15:32:24

Machine Learning (ML) algorithms have become increasingly powerful and accessible, enabling us to solve complex problems. While importing ML algorithms from popular libraries like scikit-learn (sklearn) may seem quick and convenient, it is crucial to invest time in understanding the inner workings of these algorithms. In this discussion, we will emphasize the importance of comprehending ML algorithm principles beyond mere implementation, and how this knowledge can enhance our ability to develop robust and effective models.

**1. Understanding the Intuition Behind ML Algorithms:** We will delve into the fundamental concepts and intuition behind popular ML algorithms such as linear regression, decision trees, support vector machines, and neural networks. By grasping the mathematical foundations, key assumptions, and underlying principles, we can gain valuable insights into how these algorithms make predictions and generalize to new data.

**2. Evaluating Algorithm Assumptions and Limitations:** We will explore the assumptions made by ML algorithms, such as linearity in linear regression or independence between features in Naive Bayes. Understanding these assumptions helps us evaluate the applicability and potential limitations of specific algorithms in different real-world scenarios. This knowledge empowers practitioners to choose the right algorithm for their specific problem and make more informed decisions.

**3. Improving Model Performance through Hyperparameter Tuning:** We will discuss the impact of hyperparameters on ML algorithm performance and highlight their importance in fine-tuning models. By understanding the role of hyperparameters and how they interact with algorithm behavior, we can optimize our models to achieve better performance and accuracy. Moreover, we will explore techniques like cross-validation to validate our models, guarding against overfitting and ensuring robustness.

**4. Gaining Insights to Improve Model Interpretability:** Understanding the inner workings of ML algorithms enables us to interpret model outcomes and gain actionable insights. For example, knowing how decision trees make splits or attributing importance to different features in a random forest can help explain model predictions to stakeholders and build trust in our models' decision-making processes.

**Conclusion:** While importing pre-built ML algorithms can save time, investing effort to learn how these algorithms work yields numerous benefits. Understanding ML algorithm principles empowers us to make informed choices, optimize model performance, interpret results effectively, and develop innovative approaches. By delving deeper into the inner workings of these algorithms, we can unlock the true potential of machine learning for solving complex problems.
92 berufliches Vorwärtskommen: Weshalb Geld allein nicht alles ist.
Tags: deutsch, career, motivation, discuss
Published: 2023-09-19 15:30:00

Moin Moin,

wir sprachen bereits über [Leute, die erfolgreich auf ihrem Karriere-Weg sind→](https://dev.to/amustafa16421/31-berufliches-vorwartskommen-der-eigentliche-weg-erfolgreiche-leute-4m48). Interessanterweise sprachen wir, um die Zeit der Veröffentlichung herum, nicht darüber wie viel Geld sie verdienten, sondern darüber was sie leisteten. Dieser Umstand ist der Kernpunkt meiner Ausführung: Auch wenn wir eine Entlohnung in Geld entgegennehmen (1), geht es jedoch im eigentlichen um die erreichten Arbeitsziele – man könnte auch Meilensteine sagen, nicht einfach ums Geld. Diese Arbeitsziele können Beiträge zu gemeinschaftlichen Software-Projekten sein, oder ein relevanter Beitrag innerhalb eines Unternehmens oder auch eine Unternehmensgründung. Auch das Lösen technisch-gesellschaftlicher Probleme, wie dies beispielsweise SpaceX mit dem Projekt [Starlink↗](https://www.starlink.com/) tut, kann ein solcher Meilenstein sein über den man eines Tages erfreut [auf seinen Karriere-Weg zurückblickt→](https://dev.to/amustafa16421/25-berufliches-vorwartskommen-ein-gerader-berufsweg-das-ende-2n37). Zusätzlich gilt, dass es die Meilensteine sind über die Leute sprechen. 

Man unterhält sich auch teilweise darüber wie viel Geld bestimmte Leute haben. Für gewöhnlich ist bekannt wer offiziell die Liste der reichsten Leute anführt. Dies kann ein Ergebnis dessen sein, dass man bestimmte Meilensteine erreicht hat und andere dies für nützlich hielten und einem entsprechend Geld gegeben haben.

Kurz vielleicht: Selbstverwirklichung?

Siehe auch:
[focus.de – Faktoren bei der Arbeitsplatzwahl↗](https://www.focus.de/finanzen/boerse/deutsche-bahn-ploetzlich-in-den-top-10-das-sind-die-beliebtesten-arbeitgeber-2021_id_13418371.html)

Lass uns mittels Kommentaren austauschen.

Beste Grüße,
Mustafa

Oder auch mittels E-Mail: mustafa.kevin.dwenger@posteo.de
Betreff: Austausch

(1) Unter anderem als Entlohnung für den zeitlichen Aufwand.