teleren/devto huggingface dataset:
The Beginning of My AWS Story
Tags: aws, certification, developer, cloud
Published: 2021-10-11 13:58:26

---
title: The Beginning of My AWS Story
published: true
description: Recently, I had an opportunity to take some AWC Certified Developer Associate training at our office. I opted to jump into the course ... which had my coach jumping too, since I had never mentioned interest in cloud technologies.
tags: AWS, Certification, Developer, Cloud
series: AWS Notes
cover_image: https://dev-to-uploads.s3.amazonaws.com/uploads/articles/8jqsfqghd3ljmjbmfkt5.png
---

## About Me

Let me start out by saying that DevOps, CI/CI Pipelines, and the like have always fascinated me. Having said that, I have been focused for the last eight years on Front-End technologies.

Recently, I had an opportunity to take some AWC Certified Developer Associate training at our office. I opted to jump into the course ... which had my coach jumping too, since I had never mentioned interest in cloud technologies.

## Training

The training was covered by my employer on the assumption that I got my certification within (what I thought was) a reasonable deadline.

The course was average ... which led me to looking at other training, specifically:

* [Ultimate AWS Certified Developer Associate 2021 - NEW!](https://www.udemy.com/course/aws-certified-developer-associate-dva-c01/) by [Stephane Maarek](https://www.udemy.com/course/aws-certified-developer-associate-dva-c01/#instructor-1).

I wasn't long into the online-course when I realized that the five-weeks I had to prepare (and finish a course that should have taken several months) was way too short.

**I'm stubborn** ... my wife and family will certainly attest to that.

I picked up practice tests:

* [AWS Certified Developer Associate](https://www.whizlabs.com/learn/course/aws-developer-associate/160) from WhizLabs
* [AWS Certified Developer Associate Practice Exams 2021](https://portal.tutorialsdojo.com/courses/aws-certified-developer-associate-practice-exams/) from Tutorials Dojo

My plan be came study 8-hours each day (on top of work) and take at least one practice test each day as well. Once the training (160 pages of notes) was complete, I averaged three tests a day until it was time to take my test.

## Working with AWS

While all of this was going on, my employer had what we call "EDJEovation Days." This is a four-day window where we can work on vetted side-projects as a team (this year's focus was on cloud technologies.

So in addition to all of the studying, I got to try to build a WebSocket service from several online examples ... all of these failed until I tried implementing the setup in CloudFormation.

## Now

![Credly Logo](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/c9db0q2dma4pvr5ehxum.png)

Now, I am an AWS Certified Developer Associate with some experience behind me and a whole lot to explore and learn moving forward.
How to create a Offline Internationalization App:Source code and real app
Tags: flutter, sqlite, offline, strapi
Published: 2021-10-11 13:46:29

I put all the POC code in the previous article on github

{% github nasawz/strapi_flutter_internation_poc %}

I took advantage of this technical feature to develop an app that specifically consulted the Chinese "Compendium of Materia Medica"'s vegetable and fruit boil health regimen. At present, I have translated the English version using Google translation.

![ben-cao-gang-mu09-640x350](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/ux9vi314z8k91eh5nf8z.jpg)
https://www.shuge.org/ebook/ben-cao-gang-mu/

96 kinds of Chinese medicine fruits and vegetables are carefully selected for users. For each kind of fruits and vegetables' characteristics, effects, and purchase guidelines
The analysis of nutritional components, examples of dietary therapy, and health-preserving prescriptions of traditional Chinese medicine have made a comprehensive analysis, telling people that fruits and vegetables are the most natural, economical, and convenient way to cure diseases.

![Web 1920 – 2](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/jwm1gy5zfwuhk59ey9n8.png)

![image](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/nr9xw0eliwr4wcb84l6l.png)
 
  
[![Play Store](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/ocrcqncrb8uyhym5m2so.png)](https://play.google.com/store/apps/details?id=com.nasawz.diet_therap)


[![Apple Store](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/e6gwvms69chncj8lf5qe.png)](https://apps.apple.com/us/app/%E8%94%AC%E6%9E%9C%E9%A3%9F%E7%96%97/id1588683566)



There are also special introductions and exquisite pictures of each kind of fruits and vegetables in the APP, with a quick search function, so that users can quickly find the information they need. At the same time, it also supports light and dark theme styles, and users can freely set according to their own habits.

The Vegetable and Fruit Therapy APP can not only tell users exactly what to eat and how to eat, but it can also help people establish the concept of vegetable and fruit health, which is worthy of repeated reading and permanent collection.

## Dear friends, Take care of yourself~
Code Smell 92 - Isolated Subclasses Names
Tags: poo, webdev, python, javascript
Published: 2021-10-11 13:35:16

*If your classes are globals, use fully qualified names*

> TL;DR: Don't use abbreviations in subclasses

# Problems

- Readability

- Mistakes

# Solutions

1. Rename your classes to provide context

2. Use modules, namespaces or fully qualified names

# Sample Code

## Wrong

[Gist Url]: # (https://gist.github.com/mcsee/78ec88e709cd2a5efc4a0a09903c5a4e)
```java
abstract class PerserveranceDirection { 
}

class North extends PerserveranceDirection {}
class East extends PerserveranceDirection {}
class West extends PerserveranceDirection {}
class South extends PerserveranceDirection {}

//Subclasses have short names and meaningless outside the hierarchy
//If we reference East we might mistake it for the Cardinal Point
```

## Right

[Gist Url]: # (https://gist.github.com/mcsee/f46bfc303a23c3e6c2d31d7bb4168f28)
```java
abstract class PerserveranceDirection { 
}

class PerserveranceDirectionNorth extends PerserveranceDirection {}
class PerserveranceDirectionEast extends PerserveranceDirection {}
class PerserveranceDirectionWest extends PerserveranceDirection {}
class PerserveranceDirectionSouth extends PerserveranceDirection {}

//Subclasses have fully quallified names
```

# Detection

Automatic detection is not an easy task. We could enforce local naming policies for subclasses.

# Tags

- Naming

# Conclusion

Choose your names wisely.

If your language supports it, use modules, namespaces and local scopes.

# Relations

{% post https://dev.to/mcsee/code-smell-11-subclassification-for-code-reuse-1136 %}

# More Info

- [What is in a name?](https://dev.to/mcsee/what-exactly-is-a-name-part-i-the-quest-61k)

- [MAPPER](https://dev.to/mcsee/the-one-and-only-software-design-principle-3086)

# Credits

Photo by <a href="https://unsplash.com/@edvardr">Edvard Alexander Rølvaag</a> on <a href="https://unsplash.com/s/photos/hierarchy">Unsplash</a>
  
* * *

> The programmer's primary weapon in the never-ending battle against slow system is to change the intramodular structure. Our first response should be to reorganize the modules' data structures.

_Frederick P. Brooks_
 
{% post https://dev.to/mcsee/software-engineering-great-quotes-26ci %}

* * *

This article is part of the CodeSmell Series.

{% post https://dev.to/mcsee/how-to-find-the-stinky-parts-of-your-code-1dbc %}
Win the Lottery With Python
Tags: python, tutorial, programming, codenewbie
Published: 2021-10-11 13:34:12

#Building a Powerball Simulator
We're going to create a Python project that simulates [picking Powerball numbers](https://www.iceorfire.com/post/win-the-lottery-with-python). Learn how to generate random numbers using the random module.

# Support Me
If you find these tutorials helpful, please consider [buying me a coffee](https://www.buymeacoffee.com/z4F8QVS6w). Thanks!
Example Offcanvas and Skeleton Layout with ReactJS
Tags: codepen, webdev, showdev, react
Published: 2021-10-11 13:31:19

<h1>Example Offcanvas and Skeleton Layout with ReactJS</h1>

<h2>Description</h2>

<p>This is an example layout of a dashboard screen, without using any CSS frameworks.</p>

<p>All the text and icons are rendered as a skeleton item. Which means, all of those are just a placeholder.</p>

<p>There is also a shining effect on the skeleton. I don't know either what did I do that.</p>

<p>I designed this dashboard layout to work only on PC.</p>

<h2>Resources</h2>

<p>I used <a href="https://reactjs.org/">ReactJS</a> to create the layout and the functionality.</p>

{% codepen https://codepen.io/takaneichinose/pen/rNzBzLx %}
Divtober Day 11: Slice
Tags: codepen, divtober, css, showdev
Published: 2021-10-11 13:16:15

---
title: Divtober Day 11: Slice
description: An animated cartoon of a slice of pizza... with sound!
published: true
tags: codepen,divtober,css,showdev
series: divtober
cover_image: https://dev-to-uploads.s3.amazonaws.com/uploads/articles/2yg0js8e1it8awvipakv.jpg
---

Today's #divtober drawing got a little bit out of hand. The word of the day is "slice," so I went for the obvious choice of a slice of pizza. It looked a bit sad, so I added cute eyes and a mouth. Then I made it dance (à la Peanut-Butter-Jelly-Time)... and then I turned it into an audio element so it could dance/sing to the music.

Here's the demo on CodePen:

> Unfortunately, due to the browsers' privacy policies, the songs don't autoplay anymore (or not every time). So, **the song won't start until you click on the slice of pizza**. In order to do that, I had to cheat a little by adding an inline JavaScript command `onclick="this.play()"`.

{% codepen https://codepen.io/alvaromontoro/pen/qBXEdNp %}


It was fun using the `<audio>` tag instead of a `<div>`. It opened a lot of doors for enhancing the drawing, adding more than just animation. A pity that the audio doesn't support autoplay or play on click without needing JS.

Also, I learned about the `:playing` pseudo-class (which I was going to use, so the slice of pizza danced only with the music)... unfortunately, it is not supported anywhere.

This is another example of an animation that looks better on Chrome than on the other browsers because of the `@property` support that allows to animate the backgrounds.
Need help in Figma !
Tags: design, figma
Published: 2021-10-11 13:16:06

I would like to nest the components in assert section.
ie i would like to place the button inside the accordion.
I know i can do it in layer but is there any way for nesting the components in assert section?pls help me.

here is the link - https://www.figma.com/file/DWYHRLL2pdwks78egauw5L/Untitled?node-id=0%3A1

Thanks in advance...
Firebase Send email verification using python
Tags: python, programming, firebase
Published: 2021-10-11 13:10:09

CHECK PREVIOUS TUTORIAL AND EXPLANATION   [Python and firebase auth](https://blog.icodes.tech/posts/python-firebase-authentication.html) 
 Now to send an email verification using python. You need to send a POST request to 
```
https://identitytoolkit.googleapis.com/v1/accounts:sendOobCode
``` 
  You need also the token that you get after ** [sign in ](https://blog.icodes.tech/posts/python-firebase-authentication.html) **or ** [sign up](https://blog.icodes.tech/posts/python-firebase-authentication.html) **. 

```
import requests

apikey='..................'# the web api key

idToken='eyJh1pVjuYvfX72ewSqUxRNUNoGKgdhsaYdeOjs9OsQ......'#token

def VerifyEmail(idToken):
    headers = {
        'Content-Type': 'application/json',
    }
    data='{"requestType":"VERIFY_EMAIL","idToken":"'+idToken+'"}'
    r = requests.post('https://identitytoolkit.googleapis.com/v1/accounts:sendOobCode?key={}'.format(apikey), headers=headers, data=data)
    if 'error' in r.json().keys():
        return {'status':'error','message':r.json()['error']['message']}
    if 'email' in r.json().keys():
        return {'status':'success','email':r.json()['email']}
``` 
### run :

```
VerifyEmail(idToken)
``` 
### result:

**Success**

```
{'status': 'success', 'email': 'user@example.com'}
``` 
The user will receive an email from you like this :

![imageedit_4_5081572962.jpg](https://cdn.hashnode.com/res/hashnode/image/upload/v1633957554996/RkvLp61ga.jpeg)
**Failed **

```
{'status': 'error', 'message': 'INVALID_ID_TOKEN'}
```
Assignment Help UK

Tags: writing
Published: 2021-10-11 13:08:07

EssaysnAssignments Provide The Best <a href="https://essaysnassignments.co.uk/assignment-service/">Assignment Help UK</a> Writing Services. Our team is highly inclined to help those students who face difficulties in completing Essay and Assignments due to any reason. We are serving students for many years with clear goals, high values, work excellence, and a supreme reputation. Encourage Students To Overcome Academic Work Processes By Providing Dissertation Writing Service in the UK.

<a href="https://essaysnassignments.co.uk/">Academic Writing Services</a> have the honor to remain the best Assignment Help UK Writing Services. Because we offer first-class papers at affordable prices with a guarantee of privacy and nonstop communication. Our ability to cover your all academic writing needs, whether it is an essay, an assignment, coursework, thesis, dissertation, or research paper made us the No.1 choice of students. The Highly qualified and experienced UK writers provide On-time Delivery with 100% student satisfaction. Do not Worry About Writing an Academic Paper, UK’s Top Rated Academic Writers are Online to Assist You in Achieving Your Desired Grades. Let our professional assignment writers perform for you with plagiarism-free paper and impress your teachers. Trusted by 35,000+ students all over the UK.

Since 2013 provided custom-written assignments to over 70,000 students. We’ve helped each of them get the grades they need.	
Get help from the professionals of prestigious UK universities.
CWE-918
Tags: applicationsecurity, ssrf, appsec, cwe
Published: 2021-10-19 22:49:59

---
title: CWE-918
published: true
date: 2021-10-11 13:03:51 UTC
tags: applicationsecurity,ssrf,appsec,cwe
canonical_url: https://blog.shiftleft.io/cwe-918-f1fd54e0415b
---

#### Server-Side Request Forgery (SSRF)

![](https://cdn-images-1.medium.com/max/640/1*YHxJ3c42ffXeny4r2Aq5Mw.jpeg)<figcaption>Image by <a href="https://pixabay.com/users/heladodementa-3086023/?utm_source=link-attribution&amp;utm_medium=referral&amp;utm_campaign=image&amp;utm_content=1587673">Edgar Oliver</a> from <a href="https://pixabay.com/?utm_source=link-attribution&amp;utm_medium=referral&amp;utm_campaign=image&amp;utm_content=1587673">Pixabay</a></figcaption>

Server-side request forgeries (SSRF) occur when the web application sends a request to the web server, and the webserver retrieves the requested content. However, the webserver does not ensure that the request is sent to an appropriate destination.

In other words, this vulnerability allows a malicious party to get a server-side application to make HTTP requests to the domain of the malicious party’s choice.

### Why SSRF is problematic

Using SSRF attacks, a malicious party could cause the server to:

- Connect to services that should not be available to external users
- Connect to external systems, leaking sensitive information like access tokens/keys, authorization credentials, etc.

### How attacks involving SSRF are executed

There are several different ways malicious parties can execute an attack using SSRF, and attack surfaces are typically easy to find due to the extensive use of URLs:

- Modifying requests from the server to access other server-side/back-end systems. These systems would typically be inaccessible to end-user, but because the request “originates” from a known and trusted server, the malicious party can bypass security systems protecting the back-end.
- Modifying a request to a URL local to the server. Because the request originates from the server, someone can bypass the need for admin credentials. For example, visiting an /admin URL will yield nothing without proper authentication. However, the same request from the server probably won’t be blocked.

### Mitigating SSRF vulnerabilities

To help protect your application against SSRF attacks:

- Sanitize all user input that is used in URLs and other requests and avoid sending raw responses from the server-side to the client-side
- Use an allowlist to enforce the available ports/destinations to which URLs can call
- Disable HTTP redirections
- Use firewall policies or network access control rules to block all unnecessary traffic

### TL;DR

CWE-919, or server-side request forgeries (SSRF), occurs when malicious parties can induce a server to make requests that help them gain access to internal infrastructure, sensitive data, and more. The attack surface for SSRF can easily be identified via the use of URLs. They can be difficult to deal with, though sanitization and allowlists are some of the more powerful tools available.

* * *
JavaScript Crash Course
Tags: javascript, webdev, programming, tutorial
Published: 2021-10-11 13:01:40

**Javascript** is the most popular language used in the internet. There are over 1.6 billion web sites in the world, and JavaScript is used on 95% of them. In this course you will fully master and be super confident when working with Javascript. With Javascript you can build both server side and client side application enabling you one single language for the entire stack.

{% youtube J-S8ieP9L40 %}

In this course will learn

* Advanced Javascript Language including
* Promises, Generators and Async Await
* Type Coercion
* Data structures
* Module system
* Node Package Manager
* Javascript Testing
* The basics of Express JS
* The basics React JS

Full Course with **50% Off** can be found https://amigoscode.com/p/javascript-mastery/?product_id=3429254&coupon_code=JSMASTERY_20

### Video Timeline

* Intro
* Your First Javascript Code
* How Javascript works
* ECMAScript
* Visual Studio Code
* NodeJS
* Running JavaScript with NodeJS
* Comments
* Quotes and Colons
* Variables
* Data Types
* Naming Variables
* Strings
* Objects
* Boolean
* Arrays
* Arithmetic Operations
* Functions
* Built in Functions
* Loops
* Other Types of Loops
* While Loops
* Do While Loops
* Break and Continue
* Increment and Decrement Operators
* Comparison Operators
* Logical Operators
* If Statements
* Ternary if statements
* Switch Statements
* Hoisting
* Ternary if statements
* Let Keyword
* Const Keyword
* Const vs Let Keywords
* Outro

Join **Discord** and **Private Facebook** Community: https://amigoscode.com/p/join-community
Best Programming Stuff
Tags: programming, webdev, showdev, stuff
Published: 2021-10-11 13:00:15

I  have seen some of the programming stuff article on internet as usual sharing it with you guys...Some of the websites are having affiliate links

## 1. Best Monitors For Programming ##

When programming or coding for long periods, it's essential to have a comfortable monitor to keep eye strain to a minimum.

1. [Best Monitor For Programming](https://cmsinstallation.blogspot.com/2021/05/top-7-monitors-for-gammers-programmers.html)

2. [Best Monitor For Programming](https://www.rtings.com/monitor/reviews/best/by-usage/programming-and-coding)

3. [Best Monitor for Programming & Coding (2021 Update)](https://www.guru99.com/best-monitor-programming.html)

## 2. Best Keyboard For Programing ##

As developers we don’t need many tools to work, many would say that we just need a laptop or computer, and even though that’s true, there’s a difference between having the minimum required to work to have the tools that you need to work comfortably, productive and healthy.

1. [List of Best keyboard for programming India 2021](https://cmsinstallation.blogspot.com/2021/04/best-keyboards-for-programming-in-2021.html)

2. [8 Best Keyboards for Programming in India 2021](https://www.thecrazyprogrammer.com/2020/09/best-keyboards-for-programming-in-india.html)

3. [Best Keyboard for Programming & Coding in 2021](https://www.guru99.com/best-keyboards.html)

## 3. Best Mouse For Programing ##

Programmer, Gammers, and coders spend their whole day with computers. So they have comfortable things for use. A standard mouse is irritating to use for a long time. A mouse that puts your hand in an unprejudiced position is maybe the best way to reduce these problems you just have to find a vertical or trackball mouse. Here, I've listed the Best mouse for programming.

1. [7 Best Mouse For Developer / Gaming / Coding](https://cmsinstallation.blogspot.com/2021/05/7-best-mouse-for-developer-gaming-coding.html)

2. [Best MOUSE for Programming & Coding (2021 Updated List)](https://www.guru99.com/best-mouse-programming.html)

3. [The best mouse of 2021: 10 top computer mice compared](https://www.techradar.com/in/news/computing-components/peripherals/what-mouse-10-best-mice-compared-1027809)
Fibromyalgia Test - Leva Clinic
Tags: fibromyalgia
Published: 2021-10-11 12:52:38

# Where Do You Hurt With Fibromyalgia? #

Diagnosing fibromyalgia can be hard, as there is no unique take a look at to diagnose the circumstance. The signs of fibromyalgia can vary and are much like those of several different conditions. At some point of diagnosis, you will be requested approximately how your signs and symptoms are affecting your each day lifestyles.

The ache of [Fibromyalgia Test](https://www.levaclinic.com/fibromyalgia-pain-management-clinic) is normally sizeable, involving both facets of the frame. The ache usually influences the neck, buttocks, shoulders, fingers, higher returned, and chest. Ache can purpose aches all over the body, consisting of painful tender factors, deep muscle ache, chronic headaches, unending returned ache, or neck ache.


_*Read more about* [What Is The Process Of Pain Management?](http://pub33.bravenet.com/forum/static/show.php?usernum=2825152083&frmid=148&msgid=1086299&cmd=show)_
My first app outside Shopify
Tags: webapp, saas, sideprojects, webdev
Published: 2021-10-11 12:47:45

Hello All, I'm Tejas Sangoi. I have developed 15 Shopify apps over the past 5 years. 

There have been many cases where we needed to accept spreadsheets from users. Building a CSV/Excel import feature from scratch was time-consuming and maintaining it is another headache. Moreover, the upload experience for the customers got messy because they have to read the docs and follow the upload templates. In many cases, after long support email threads, we ultimately have to manually accept, clean, and input the data.

As a solution, I built the csvbox.io - my first web app outside Shopify. It's a no-code, drop-in widget that allows you to accept CSV/Excel files in minutes. Users can upload files, match columns, validate data all in a few clicks. You receive ready-to-use data in your app. A better experience for your customers, fewer headaches for your team!

Demo video - https://www.youtube.com/watch?v=fy3DH_f5oGE&ab_channel=csvbox


Currently, its at an early-stage with less than 50 paying customers.

Happy to receive feedback on everything - UI/UX, features, pricing etc - from the developer community.

https://csvbox.io