teleren/devto huggingface dataset:
Appendix: Security (Data Protection) - AWS Well-Architected Framework Study Guide
Published: 2022-03-04 15:54:15

[Return to Well-Architected Framework Guide](https://dev.to/aidutcher/aws-well-architected-framework-study-guide-introduction-fjg)

[<u>Appendix: Security</u>](https://docs.aws.amazon.com/wellarchitected/latest/framework/a-security.html)

**How do you classify your data?**

- Identify the data within your workload
- Define data protection controls
- Automate identification and classification
- Define data lifecycle management

**How do you protect your data at rest?**

- Implement secure key management
- Enforce encryption at rest
- Automate data at rest protection
- Enforce access control
- Use mechanisms to keep people away from data

**How do you protect your data in transit?**

- Implement secure key and certificate management
- Enforce encryption in transit
- Automate detection of unintended data access
- Authenticate network communications

[Return to Well-Architected Framework Guide](https://dev.to/aidutcher/aws-well-architected-framework-study-guide-introduction-fjg)
Laravel Greedy Queries - a bad habit
Tags: laravel, beginners
Published: 2022-03-04 15:53:56

_Photo by [Colin Maynard](https://unsplash.com/@invent) on [Unsplash](https://unsplash.com)_

> Vous parlez français ? Lisez ce billet sur [mon blog](https://rachids.ca/blog/les-pieges-dans-laravel-les-requetes-gourmandes) :) 

When I started using Laravel, I really enjoyed the fact that I could simply grab all my data with a simple line of code:

```php
$products = Product::get();
```

All my products, in a beautiful little collection, waiting to be deliciously presented in an appealing view or handled with care in an data processing algorithm.

The problem is that sometimes / often _(pick the right one)_ I only need a few informations from my products, like the name and price and no more. I don't need the extra informations my database could hold. And the code above is loading everything: name, price, description, maybe a picture and so on.

Get into the habit of specifying the desired columns when executing queries to the database, even if they are simple or not very demanding. This is a reflex that can offer us precious seconds of optimization during more complex operations.

For instance, if my view only needs name and price :

```php
// 👎 I am loading every columns
$products = Product::get();

// 👍 I only load the specific columns I need
$products = Product::select(‘name’, ‘price’)->get();
```

The benefit is imperceptible on such simple queries and a small dataset, but it becomes essential at a certain level and helps to make the difference between a slow and fast query.

See you soon for another trap I fell for.
What are Web Vitals?
Tags: javascript, webdev, productivity, beginners
Published: 2022-03-04 15:46:25

## Web Vitals
_Proposed by **Google** to measure the quality of user experince on web and improve web performance._

![LCP, FID, CLS](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/f7gi87jw1vji8dxiowge.png)

> Measured by the above three aspects of website

**Largest Contentful Paint (LCP):** _measures loading performance. Time that browser takes to render the element having largest height in the viewport of the webpage
e.g. large slider image in the hero section._

- _Good < 2.5 seconds_
- _Average < 4 seconds_
- _Poor > 4 seconds_

![LCP](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/d1mlw994d55s7qilyjcm.png)

**First Input Delay (FID):** _measures interactivity. There might be a delay in browser performing user's action upon user's interaction becasue main thread might be busy parsing and executing some large Javascript._

- _Good < 100 ms_
- _Average < 300 ms_
- _Poor > 300 ms_

![FID](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/em8ealksgpwddrqxi9pu.png)

**Cumulative Layout Shift (CLS):** _measures visual stability. The sudden changes on webpage e.g. due to asynchronous loading of content, loading of video with unknown dimensions or an image._

- _Good < 0.1_
- _Average < 0.25_
- _Poor > 0.25_

![CLS](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/6rje47qg44j1wbb4bkzl.png)

## Measuring web vitals
- use npm package [web-vitals
](https://www.npmjs.com/package/web-vitals) to monitor your app.
- Use Chrome extension [web-vitals](https://chrome.google.com/webstore/detail/web-vitals/ahfhijdlegdabablpippeagghigmibma?utm_source=chrome-ntp-icon)
- Run in Chrome DevTools Lighthouse
How to get myself to read books
Tags: javascript, books, computerscience, reading
Published: 2022-03-04 15:43:15



## Reading Frenzy.

I love to read blogs and articles, you'll often see my browser tabs swarmed by unread articles from yesterday and the tabs gets smaller by the hour. I also love to read books however, I haven't really finished any. Yet. I have been stuck in this cycle of constantly jumping books and I get distracted over shiny and new things leaving me a half-baked idea of what the book really is - the concepts it would have illuminated me and the knowledge I could have shared.

To give justice to these books, I would challenge myself to read and absorb as much as I can by holding myself accountable through public learning and blogging. I would challenge myself to a Reading Frenzy. Doing this every day probably will suck and will make the journey less enjoyable and beneficial for me. So, I've decided to write every 3 days or at least 2 articles per week on every book/topic  I'll read.
	
> Reading multiple books might not be a good idea. But I'm willing to give it a try and see how this goes.

## **[tycs](https://teachyourselfcs.com/)**

	
tycs is a compilation of books that mirrors the course taught by the founder ([bcsi](https://bradfieldcs.com/csi/)). There are a lot of interesting books included in this list but I decided to start reading from the top. The first book would be about "The Structure and Interpretation of Programs" which is available [online](https://mitpress.mit.edu/sites/default/files/sicp/full-text/book/book.html). It is taught in a different programming language than what I'm used to so to better understand it without switching context a lot I'll use the Javascript version of this book and read it back and forth just to get a better sense of the concepts. 

	
## **Design Patterns**
	
I have been interested in learning design patterns yet, I haven't had the time to understand what they are and how they can help me. I've decided to use [Patterns.dev's](https://www.patterns.dev/)  free book on Javascript and React Design Patterns and use Head First's Design  Pattern as complementary material. 

and alas! my brain would be fried from all this technical bonanza. It needs spiritual care also. That is why I"m also going to read: 


## **Essentialism**
This is a bit awkward because the [book](https://www.amazon.com/Essentialism-Disciplined-Pursuit-Greg-McKeown/dp/0804137382) is all about the pursuit of less and yet I'll be reading a lot. There are a lot of self-help books out there but I think this is the most relevant topic at the moment. I hope that this would allow me to de-clutter my life as well as my mind. 

This won't be an easy journey and it would take a lot of courage to be consistent but I hope that I would be able to turn this into something that would not only help me but also those who struggle to do the same.
XRPL Grants Wave 3 Theme: Contributing to Open Source
Tags: xrpl, xrplgrants, blockchain, opensource
Published: 2022-03-04 15:34:47

## Applications for Wave 3 are now open! 

The official theme for this wave is “**Contributing to Open Source.**” The Program aims to support the independent, open-source ecosystem development around the XRP Ledger (XRPL). Making “Contributing to Open Source” the focus area of Wave 3 encourages projects that not only expand and enhance the resources available for XRPL developers, but that also continue to grow and strengthen the XRPL community. Types of projects may include:

- Creating and open-sourcing a new project
- Contributing to an existing open-source project
- Adding XRP or XRP Ledger support to a project
- Integrating the XRP Ledger with existing APIs, SDKs, and technologies that simplify deployment and integration
- Building libraries for the XRP Ledger
- Opening PRs for other projects to support the XRP Ledger

Projects applications for Wave 3 will be accepted form  March 4 - 28, 2022, and applicants can view and submit their applications online. For all information about applying visit www.xrplgrants.org.

## Wave 3 Timeline

- Applications Open: March 4 - 28, 2022
- Finalist Interviews: May/June 2022
- Grantees Announced: July 2022

All applications for Wave 3 will be carefully reviewed by [an expert panel of judges](https://dev.to/ripplexdev/xrpl-grants-expands-judging-committee-140n) from respected institutions and companies from around the world. Select project teams will then be invited to participate and present in a 30-minute interview with members of the grants team and the judging committee. 

Since the XRPL Grants program launched in May 2021, more than 50 projects have been funded internationally. [View all the awarded projects](https://xrplgrants.org/grantees).

## Join a Live Q&A 

We invite anyone interested in learning more about applying for an XRPL Grant to attend our official Q&A on the [RippleXDev Twitch channel](https://twitch.tv/ripplexdev) on **Tuesday, March 15, 2022 at 11 AM PT (18:00 UTC)**. 


## Have more questions about applying? 

Answers to commonly asked questions are available on the [FAQ page](https://xrplgrants.org/faq). The [XRPL Developers Discord](http://xrpldevs.org/) is also a great place to connect with the community, including past funding recipients.
What is cloud computing?
Tags: devops, aws, cloud
Published: 2022-03-04 15:19:50

Once upon a time, when the internet was created, companies how what have their websites online should have a physical infrastructure that takes space. They are also expensive, giving the companies a hard time when they want to scale their serves.

While more companies want to join the world wide web, the need for servers hoe take less space and don't cost so much to be implemented surge, and companies were AWS, Azure, and Google cloud start offer servers that other companies can use on they need this is called cloud computing.

They have servers with remote access that companies can pay only when they use, removing the need for companies to keep a structure on their builds. For this reason, companies of all sizes now can have their systems online even if they don't have an actual office.

Cloud computing turned the internet into a more accessible place for small companies making it shipper and fast to create a server infrastructure while giving all companies more possibilities. It is possible to create identical environments for test and production and provide accessible support for growth and expansion.

## Types of cloud computing

There are three main types of cloud computing when we talk about the service model: Infrastructure as a service, Platform as a service, and Software as a service.

**Infrastructure as a service (IaaS)**: Typically contains essential for cloud, has dedicated or virtual hardware, data storage, and virtual systems. Giving the user more control and flexibility.

**Platform as a service (PaaS)**: Give access to hardware and operations systems that allow the client to focus on the application since it takes care of the server's capacity software license, providing all the support for a web application.

**Software as a service(SaaS)**: Provides a complete application managed for the service provider. They are end-user applications, excluding the worry about running or handling them.

[Leia em Portugues](https://medium.com/@agathamendonca/o-que-%C3%A9-a-computa%C3%A7%C3%A3o-em-nuvem-bb25a9c1cb7b)
Appendix: Security (Infrastructure Protection) - AWS Well-Architected Framework Study Guide
Published: 2022-03-04 15:10:51

[Return to Well-Architected Framework Guide](https://dev.to/aidutcher/aws-well-architected-framework-study-guide-introduction-fjg)

[<u>Appendix: Security</u>](https://docs.aws.amazon.com/wellarchitected/latest/framework/a-security.html)

**How do you protect your network resources?**

- Create network layers
- Control traffic at all layers
- Automate network protection
- Implement inspection and protection

**How do you protect your compute resources?**

- Perform vulnerability management
- Reduce attack surface
- Implement managed services
- Automate compute protection
- Enable people to perform actions at a distance
- Validate software integrity

[Return to Well-Architected Framework Guide](https://dev.to/aidutcher/aws-well-architected-framework-study-guide-introduction-fjg)
25 Resources to Learn Next.js in 2022
Tags: javascript, beginners, webdev, productivity
Published: 2022-03-04 15:09:00

I've curated 25 online resources to learn Next.js in 2022. I hope you find these resources useful and interesting. :v: :v: :v:

I'll keep updating the below list as I discover new resources.

1. [Best of Next.js](https://www.bestofnextjs.com/)

2. [Next.js documentation](https://nextjs.org/docs)

3. [The Next.js Handbook](https://www.freecodecamp.org/news/the-next-js-handbook/)

4. [Awesome Next.js](https://awesomenextjs.com/)

5. [Complete Next.js Developer in 2022: Zero to Mastery](https://academy.zerotomastery.io/p/learn-next-js)

6. [Next.js Crash Course for Beginners 2021 - Learn NextJS from Scratch](https://www.youtube.com/watch?v=MFuwkrseXVE)

7. [Mastering Next.js](https://masteringnextjs.com/)

8. [Getting started with Next.js](https://flaviocopes.com/nextjs/)

9. [Explore all the official Next.js examples](https://nextexamples.vercel.app/)

10. [Complete Next.js with React & Node - Beautiful Portfolio App](https://academy.eincode.com/courses/complete-next-js-with-react-node-beautiful-portfolio-app)

11. [Universal React with Next.js - The Ultimate Guide](https://www.udemy.com/course/universal-react-with-nextjs-the-ultimate-guide/)

12. [Building Server-side Rendered React Apps for Beginners](https://www.pluralsight.com/courses/building-server-side-rendered-react-apps-beginners)

13. [Next.js - The ultimate way to build React apps](https://www.educative.io/courses/next-js-build-react-apps)

14. [This Mission: Next.js from the Ground Up](https://explorers.netlify.com/learn/nextjs)

15. [Learn Next.js 11 - Build Modern Next.js Applications](https://codedamn.com/learn/nextjs-fundamentals)

16. [Build a Fullstack App With Strapi and Next.js](https://www.digitalocean.com/community/tech_talks/build-a-fullstack-app-with-strapi-and-next-js)

17. [Next.js Crash Course](https://www.youtube.com/watch?v=mTz0GXj8NN0)

18. [Next.js Tutorial from The Net Ninja](https://youtube.com/playlist?list=PL4cUxeGkcC9g9gP2onazU5-2M-AzA8eBw)

19. [From Design to Development Crash Course - Full Stack Next.js Tutorial](https://www.youtube.com/watch?v=QjZIeA952jE&t=402s)

20. [Using Next.js - React Resources](https://reactresources.com/topics/nextjs)

21. [Next.js Tutorial - tutorialspoint.com](https://www.tutorialspoint.com/nextjs/index.htm)

22. [Production-Ready Next.js](https://frontendmasters.com/workshops/production-next-js/)

23. [Getting Started with Next.js](https://teacode.io/blog/getting-started-next-js)

24. [Next.js Conf 2020](https://www.youtube.com/playlist?list=PLBnKlKpPeagnT2Cmv4giCbosfrbKnuYTD)

25. [Next.js - egghead.io](https://egghead.io/q/next)

26. [Using NextJS With Wordpress Headless CMS](https://academind.com/tutorials/nextjs-wordpress-headless-cms)

***

If you're planning to build a SaaS app, then you might be interested in [NextAPI](https://github.com/devkiran/NextAPI). NextAPI is a Next.js RESTful API Starter for building SaaS Apps. NextAPI can handle the heavy lifting for common SaaS features such as authentication, team management, invites, subscriptions, and more.
Appendix: Security (Detection) - AWS Well-Architected Framework Study Guide
Published: 2022-03-04 15:06:32

[Return to Well-Architected Framework Guide](https://dev.to/aidutcher/aws-well-architected-framework-study-guide-introduction-fjg)

[<u>Appendix: Security</u>](https://docs.aws.amazon.com/wellarchitected/latest/framework/a-security.html)

**How do you detect and investigate security events?**

- Configure service and application logging
- Analyze logs, findings, and metrics centrally
- Automate response to events
- Implement actionable security events

[Return to Well-Architected Framework Guide](https://dev.to/aidutcher/aws-well-architected-framework-study-guide-introduction-fjg)
Appendix: Security (IAM) - AWS Well-Architected Framework Study Guide
Published: 2022-03-04 14:59:13

[Return to Well-Architected Framework Guide](https://dev.to/aidutcher/aws-well-architected-framework-study-guide-introduction-fjg)

[<u>Appendix: Security</u>](https://docs.aws.amazon.com/wellarchitected/latest/framework/a-security.html)

**How do you manage authentication for people and machines?**

- Use strong sign-in mechanisms
- Use temporary credentials
- Store and use secrets securely
- Rely on a centralized identity provider
- Audit and rotate credentials periodically
- Leverage user groups and attributes

**How do you manage permissions for people and machines?**

- Define access requirements
- Grant least privilege access
- Establish emergency access process
- Reduce permissions continuously
- Define permission guardrails for your organization
- Manage access based on life cycle
- Analyze public and cross account access
- Share resources securely

[Return to Well-Architected Framework Guide](https://dev.to/aidutcher/aws-well-architected-framework-study-guide-introduction-fjg)
Appendix: Security (Foundations) - AWS Well-Architected Framework Study Guide
Published: 2022-03-04 14:52:28

[Return to Well-Architected Framework Guide](https://dev.to/aidutcher/aws-well-architected-framework-study-guide-introduction-fjg)

[<u>Appendix: Security</u>](https://docs.aws.amazon.com/wellarchitected/latest/framework/a-security.html)

**How do you securely operate your workload?**

- Separate workloads using accounts
- Secure AWS account
- Identify and validate control objectives
- Keep up to date with security threats
- Keep up to date with security recommendations
- Automate testing and validation of security controls in pipelines
- Identify and prioritize risks using a threat model
- Evaluate and implement new security services and features regularly

[Return to Well-Architected Framework Guide](https://dev.to/aidutcher/aws-well-architected-framework-study-guide-introduction-fjg)
Setting up a project to build Air Console game using PhaserJS
Published: 2022-03-04 14:43:22

A few months ago, I started my journey developing a game for “AirConsole” using PhaserJS. At the beginning I spent a lot of time setting up my project. That inspired me to develop a command line interface (CLI) tool for simplifying the development environment for Air Console games using web technologies.

## What is Air Console ?

Air console is a platform focused on delivering local multiplayer experience using your TV or PC as a game console and your smartphones as controllers / gamepads. Actually the development of the game is divided in two parts, the first part is developing the actual game for the main screen and as a second part is developing the application used by gamepads (smartphones) to interact with the game.

## Prerequisites
 - JavaScript knowledge
 - NodeJS (v14.0 or higher) installed on your local machine
 - Code Editor

## Project setup

As a first step we need to install the tool that I’ve created for this purpose. The tool is a npm executable published to npmjs.org.

```
npm install -g airconsole-cli
```

After successful installation, you can create your project by executing:

```
airconsole init my-airconsole-game
```

The previous command should create a directory named my-airconsole-game.

Next steps are installing the dependencies using,

```
npm install  // (inside project directory "my-airconsole-game")
```

command inside the “my-airconsole-game” directory and running the project by executing:

```
npm start
```

I hope this is helpful.
Reconmap 1.1.0 release notes
Tags: vulnerability, pentesting, infosec, opensource
Published: 2022-03-04 14:43:16

Although we haven't been publishing a lot of articles on this website, work hasn't stopped on the Reconmap's trenches.

This release contains some exciting features and has been made possible thanks to the core devs, our financial contributors and one new community dev superhero, [Karel Rozhon](https://github.com/gano3s). He single-handedly developed many of the features you see on this release. Big kudos to him!

# Vulnerability filters

Pentest teams work on tons of projects and each one carries a large number of vulnerabilities. Having the ability to filter vulnerabilities is quite essential and this is now part of our vulnerability management product.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/m1yjwxyt162gzujb6ejk.png)

# Project vault

Pentesters, bug bounty hunters and other infosec pros manage (and found!) credentials on a regular basis. Not having a place to store project credentials on Reconmap push these teams to put them on different systems that decrease efficiencies and collaboration.

**Thanks to Karel** this release includes a project vault for pentesters to store these credentials.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/zip1uv59o6rcd546g090.png)
 

# Task priorities

A project in Reconmap contains tasks but not all tasks have the same importance. From this release on infosec teams are able to assign priorities to tasks (and filter on them).

Priorities go from lowest to highest as demonstrated below.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/bugrqfrg8ap09nnwi9ha.png)

# Arbitrary number of client's contacts

Before this release it wasn't possible to add more than one contact to a client. Contacts contain information on how to reach out to somebody on that organisation via email, phone and so on.
This version allows to add any number of contacts to a client and categorise them on general, billing or technical. 

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/qyixywsmk7girv89911b.png)

# Persistent notifications 

Dashboard notifications before were ephemeral and couldn't not be seen again once they were acknowledged. This release stores notifications on the server in a way that you can retrieve them from the dashboard (or API) at anytime.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/gnxjciim1rn9mgi4xffv.png) 

# Licenses page

We are open-source and we rely on hundred of other amazing work done by the community to deliver our work fast and reliably. Starting from this version you can see the dependencies and libraries we use in our web client licenses page.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/imbd1txyuerdxtuck5ak.png)

# Many more things!

This is just an small summary of everything that has been done in the last time. We of course included a fair amount of performance improvements, documentation and bugfixes.

Thanks everyone for their work to make of this world a safer place!
Paracetamol.js💊| #70: Explica este código JavaScript
Tags: javascript, beginners, spanish, webdev
Published: 2022-03-04 14:40:09

## **Explica este código JavaScript**

```js
let objeto1 = { valor: 10 };
let objeto2 = objeto1;
let objeto3 = { valor: 10 };

console.log(objeto1 == objeto2);
console.log(objeto1 == objeto3);

objeto1.valor = 15;
console.log(objeto2.valor);
console.log(objeto3.valor);
```

A. `true`, `false`, `15`, `10`
B. `false`, `true`, `10`, `20`
C. `true`, `true`, `15`, `20`
D. `false`, `false`, `20`, `15`

Respuesta en el primer comentario.

---