teleren/devto huggingface dataset:
We're Lacework. We care about security.
Tags: security, devrel
Published: 2021-10-21 15:35:32

![Welcome](https://media.giphy.com/media/xT3i1acWS2AQRKHgZi/giphy.gif)
You might be worried that this is another brand trying to get a foothold in a community. It’s not. Of course, that’s what we’d say even if it was, so let’s lay out how we’re going to show you it’s not.
## Who Is Lacework?
We’re a team building out a data-driven security platform specifically aimed to help others teams understand their cloud environments.
### What Lacework does
- Pulls in a ton of data from what’s happening in your environment
- Throws it through a bunch of enrichment, clean up, and modelling
- Then highlights anomalies, misconfigurations, and other outliers

The goal is really to give you the context about behaviors in your builds so that you can make informed decisions.

The platform aims to answer the ‘simple’ (ha!) question of, “This happened, do I need to worry about it?”
## Why Should You Care?
“This happened, do I need to worry about it?” is a critical question. Mistakes and misconfigurations are the number one problem when it comes to security in the cloud. Sure, there are lots of other “cooler” things happening but they are not nearly as common as those pesky mistakes.

While we’re building out this platform, we’re learning a ton about how devs like yourself view security and how teams approach those challenges.

We’re here to help explain the latest challenges around security, why it’s important, and how you can start to think about security-by-design when you’re building.

If that sounds complicated, it can be but at the end of the day, it’s really just about constantly asking yourself, “What else can this do?”

Asking yourself that one question goes a very long way to addressing a lot of security concerns.
## What’s Next?
We plan on publishing content here around security best practices, security thinking, current news/issues, and other fun stuff to help you level up your security skill set.

That goes for everyone. We’re tired of people thinking that all security work is based on some esoteric branch of a long lost mystic art. Security is something we can all think of and it’s critical that we do.

We’re all building things that people use everyday and then expect those builds to work as expected…and **only** as expected.

Our team has a ton of ideas of what to publish here but we’d love to hear what you want to learn about. Let us know in the comments below 👇.

Thanks for having us in the community,

The Lacework Team
 
* @jesswest 
* @tessak22
* @marknca 
* @acd37 
* @danakn144
* @pedigo36
* @jeffthorne
* and more yet to join us here!
Celo Blockchain
Tags: blockchain, javascript, beginners, tutorial
Published: 2021-10-21 15:30:29

### Introduction to Celo

Celo's goal is to empower anyone with a smartphone in the world to access financial services. Celo plans to achieve this by using its complete stack of blockchain software, core libraries, and end-user applications. With over 6 billion people having smartphones that's a very ambitious goal!!

![Screenshot 2021-10-21 at 16.30.00.png](https://cdn.hashnode.com/res/hashnode/image/upload/v1634826609382/jZJd4zr_i.png)

Let's start with a refresher blockchain is a broad term used to describe a database maintained by a distributed set of computers that do not share a trust relationship or common ownership.

Celo Blockchain shares similar characteristics with Ethereum in that it is blockchain software for building general-purpose decentralized applications.

Celo has a native unit for accounting called CELO which is similar to Ether on Ethereum. Celo aims to provide a simple user experience even for users with low-cost smartphones and it achieves this by taking the full-stack approach where each layer is designed with the user in mind.

![Screenshot 2021-10-21 at 16.36.21.png](https://cdn.hashnode.com/res/hashnode/image/upload/v1634827017330/UV-xiVg-K.png)

#### Celo Blockchain

It's an open protocol that allows apps to make transactions with and run smart contracts in a secure and decentralized way. It has ancestry with Ethereum and maintains full [EVM](https://ethereum.org/en/developers/docs/evm/) compatibility for smart contracts.

Celo uses the [Byzantine Fault Tolerant(BFT)]( http://pmg.csail.mit.edu/papers/osdi99.pdf) consensus mechanism to validate transactions rather than Proof of work.

#### Celo Core Contracts

A collection of [smart contracts](https://www.ibm.com/topics/smart-contracts) that run on Celo Blockchain including ERC-20 Stable currencies.

#### Applications 📱

These are applications built on the Celo platform for the end-users. For example, the Celo wallet app allows end-users to manage accounts and make payments securely.

#### Useful Links 🔗

Checkout cool applications  built on Celo Platform -> [Celo Hub](https://celohub.org/apps)

To get a deep understanding of the Celo ecosystem read up on the Celo Whitepaper 
 -> [WhitePaper](https://celo.org/papers/whitepaper)

Maybe you are new to Blockchain and want a cool introduction to the topic?. Check out my previous blog post on the topic [Intro to Blockchain ](https://dev.to/cypriantinasheaarons/blockchain-for-dummies-4b03)

Learn more about Blockchain and Celo . And build build build!  🦾 
 
> Thanks to [ Celo ](https://celo.org/) 😉

> Thank you for reading this -Follow me on [Twitter](https://twitter.com/CyprianAarons) 🙃

> Checkout my [website](cyprianaarons.co.zw).

<a href="https://www.buymeacoffee.com/cyprianaarons" target="_blank"><img src="https://cdn.buymeacoffee.com/buttons/v2/default-yellow.png" alt="Buy Me A Coffee" style="height: 60px !important;width: 217px !important;" ></a>
Amazon Route 53 Health Checks to Monitor Website
Tags: aws, beginners, tutorial, webdev
Published: 2021-10-21 15:29:46

Amazon Route 53, a highly available and scalable Domain Name System (DNS) service.

AWS also introduced the **Route 53 health checks**,inorder to configure the traffic between Primary and Secondary sites for higher availability and monitor the health and performance of the web applications, servers, and other resources.These are based on public IPv4 addresses.

AWS enhanced this feature and introduced the domain name health checks,which help the customers in a better way for managing the availability of the services.

Domain name based health checks with Cloud Watch alarms,can be used for creating a distributed monitoring system for Amazon AWS resources. Currently, Route 53 health checks support only resources that are publicly reachable. URL monitoring will be from a single instance and a fixed location. It is known to be a single point of failure and also difficult for achieving high availability in monitoring.

We can monitor all our EC2-Classic and VPC public subnet machines availability, services monitoring from the different geographical locations of Amazon AWS Network, with Route53 health  checks. Also URL monitoring for all our applications.

In addition to these, we can even monitor our in-house or co-location applications availability.


### In-house applications availability monitoring

Health checks can be created for HTTP/HTTPS/TCP based protocol services and choose the Request interval, failure threshold and create a cloud watch alarm to alert us in case of failure. 

AWS published the list of current IP ranges used by Amazon Route 53 health checkers. 
* You can open these range of IP Addresses in Security Groups for monitoring your services. 
* It would be a good practice to create a new separate security group.
* Allow the IP Addresses and attach it to the instance while launching the instance.

### Something missing in Route 53 Health Checks.What's that?
Private IP addresses or private DNS health checks monitoring is still missing. Since AWS is forcing everyone to use VPC, which would support private resources monitoring that adds a great feature to the health checks.
</div>
Hacktoberfest 2021-completed
Tags: hacktoberfest
Published: 2021-10-21 15:22:45

<!-- ✨This template is only meant to get your ideas going, so please feel free to write your own title, structure, and words! ✨ -->


### Intro
Hi, I am Sourab. Always Wanted to know how things work in the tech world. I came up with some youtube resources about hactoberfest 2021. I registered and created 4 vaild pull requests and successfully won the hactoberfest 2021. 

### Background

Well of course I am new in opensource. I recently got to know about opensource from some youtube videos. I got involved in coding from the past few months and I am currently exploring about different things mainly DSA, AI.

### Progress

Well the process is a bit simple and it's a good initiative for the open source overall growth.


### Reflections
Well I learned a lot of things related to github in general. It was my really nice and cool experience. I will definitely participate in the coming years also.
Can generate a Tree by Golang!
Tags: go, linux, programming
Published: 2021-10-21 15:00:24

please go to https://github.com/ddddddO/gtree

There are three ways to generate tree (CLI, Package(1), Package(2)). They are explained below.

# CLI and Package(1).
Given a Markdown file or format, the result of linux tree command is printed.

Hierarchy is represented by hyphen and indentation.

Indentation should be unified by one of the following.
・Tab (default)
・Two spaces (required: `-ts`)
・Four spaces (required: `-fs`)

# Package(1)
You can customize branch format.

# Package(2)
You can also generate a tree programmatically.
Markdown is irrelevant.
You can customize branch format.
3 minor tricks for daily devs work
Tags: beginners, programming, tutorial, git
Published: 2021-10-21 14:40:10

{% youtube R0u0n9wq7yY %}

In this video, I will share with you 3 simple but helpful pieces of advice. 


Links:
[Oh My Zsh](https://github.com/ohmyzsh/ohmyzsh)
[My own Zsh profile](https://bitbucket.org/dima-loburec/working-environment/src/master/terminal/.zshrc)
[Sourcetree](https://www.sourcetreeapp.com/)
Materiais sobre acessibilidade para softwares acessíveis
Tags: braziliandevs, a11y, webdev
Published: 2021-10-21 14:37:16

#### Vamos falar de acessibilidade em Desenvolvimento de Software?

Eu não sou especialista no assunto como a [Sandy](https://sandyaraperes.com.br/), mas sei que falar de acessibilidade, especialmente sendo uma Desenvolvedora Frontend, é essencial.

Para debater sobre um assunto e começar a implementar melhores práticas de acessibilidade em nossos projetos, trouxe aqui uma pequena coletânea de materiais, notícias e vídeos sobre o assunto.

---

## Materiais sobre acessibilidade

> Legenda: 📚 Documentação | 🧾 Artigo | 🎥 Vídeo

* 📚 [Diretrizes de Acessibilidade para Conteúdo Web (WCAG) 2.1](https://www.w3c.br/traducoes/wcag/wcag21-pt-BR/) - Órgão que regulamenta padrões na Web.

* 📚 [WCAG: Guia de Consulta Rápida](https://guia-wcag.com/) - A base fundamental para que você tenha produtos digitais verdadeiramente inclusivos e acessíveis.

* 📚 [Projeto GAIA](http://talitapagani.com/gaia/) - O GAIA é um guia de recomendações para desenvolvimento de sites mais acessíveis a pessoas com Autismo.

* 📚 [Manual de Comunicação Inclusiva](https://zeroheight.com/5719ee47f/p/190a68-manual-de-comunicao-inclusiva) - Dicas para se comunicar de maneira simples e efetiva, com TODAS as pessoas.

* 🧾 [Pensar o direito para os idosos: além da moda do Legal Design](https://brasil.uxdesign.cc/pensar-o-direito-para-os-idosos-al%C3%A9m-da-moda-do-legal-design-3c62e9d454aa) - Como a interseção entre Experiência de Usuário e Direito pode gerar acessibilidade.

* 🧾 [“O que fazer” e “o que não fazer” ao projetar para Acessibilidade](https://uxdesign.blog.br/o-que-fazer-e-o-que-n%C3%A3o-fazer-ao-projetar-para-acessibilidade-7da75261fa7b) - Posteres trazem dicas sobre como projetar acessibilidade para pessoas com deficiências como cegueira, dislexia, autismo, TDAH, e surdez.

* 🧾 [Streamer cego testa opções de acessibilidade em The Last of us 2 e se emociona](https://observatoriodegames.uol.com.br/destaque/video-streamer-cego-testa-opcoes-de-acessibilidade-em-the-last-of-us-2-e-se-emociona) - O streamer Steven Saylor se emociona ao ver quantas opções de acessibilidade estão disponíveis em The Last of Us 2. 

* 🧾 [UX na perspectiva daltônica](https://brasil.uxdesign.cc/melhorando-a-experi%C3%AAncia-do-usu%C3%A1rio-dalt%C3%B4nico-3097291d0492) - Por que devo ter a preocupação em adaptar o design da minha interface para este tipo de usuário?

* 🎥 [QArentena - 08 - Teste de Acessibilidade](https://www.youtube.com/watch?v=la0c_pMS51I) - Testes de Software e QA com foco em acessibilidade.

* 🎥 [O que é TECNOLOGIA ASSISTIVA — TECNOLOGIA ADAPTATIVA?](https://www.youtube.com/watch?v=rOZCPYa2N10) - Aula sobre tecnologias assistivas.

* 🎥 [Acessibilidade web: introdução a designs inclusivos](https://www-alura-com-br.cdn.ampproject.org/c/s/www.alura.com.br/curso-online-acessibilidade-web-design-inclusivos--amp) - Curso pago da Alura sobre acessibilidade web.

---

Conhece mais materiais sobre acessibilidade? Deixa aqui nos comentários ou envia um e-mail para compiladoras@gmail.com que adicionamos no post!
PhpStorm: shortcuts and refactoring
Tags: php, programming, tutorial, productivity
Published: 2021-10-21 14:35:04

{% youtube Y7QiJWJZmoE %}

In this video, I will tell you about abilities that make the PHP Storm (possibly) the best tool for your work


Links:
[The slides](https://docs.google.com/presentation/d/1hfqZuN0spbJCkSvswGo3xEB5M6ngfW7Z667Vkg_camo/)
[Laracast](https://laracasts.com/series/how-to-be-awesome-in-phpstorm)
Personalized Music for Focus Web Platform
Tags: showdev, javascript, productivity, music
Published: 2021-10-21 14:32:34

Hello guys,

I am excited to announce that a project I have been working on for the past year, WiredVibe 2.0 has been launched recently. We are looking to gather as much feedback as possible, to help fix issues that may appear.

Features include:

Neuroscience Based Music

Timers/To-Do list

Sound Mixing

Beautiful Video Backgrounds

And many others..

It would be a huge honor for us if you are among the first people who would like to try it and share your valuable experience so far. For us, it represents an important step in the process of improving the product and overall customer satisfaction.

If you have suggestions, we could discuss them here.

https://www.wiredvibeapp.com
My aim after this
Tags: hacktoberfest, javascript, webdev, opensource
Published: 2021-10-21 14:23:51

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/ccquqe6u4rwewkt2ujrm.png)
This hactoberfest has been really intriguing. This year I have seen an entire application grow from scratch with meaningful commits.
I love the power of opensource and look forward to contribute as much as possible
🔓 A Tour Through the OWASP Top 10
Tags: security, product, devops
Published: 2021-10-21 14:13:14

#### 🔍 OWASP has issued an update to its list of the top web app security threats. We'll look at the changes and how they impact your web application environment.

### <br>

October is [National Cyber Security Awareness Month](https://www.dhs.gov/national-cyber-security-awareness-month). On top of that, OWASP just celebrated its 20th anniversary. To celebrate, we’re going to run through the newly updated [OWASP TOP 10](https://www.owasptopten.org/) to remind everyone of how you can better protect your applications, your businesses, and your customers from unlawful and damaging cyber attacks. We’ll also be highlighting where the updates were made and why and throw in some tips on how strengthening your identity solution can help mitigate these threats.

> The new Top 10 is still a working draft, and OWASP is soliciting [feedback](https://github.com/OWASP/Top10/issues) on errors and corrections.

## What is OWASP?

The [Open Web Application Security Project](https://www.owasp.org) (OWASP) is a non-profit organization that was set up to help raise awareness around web application security and provides guidance on how to incorporate preventative measures into your applications, infrastructure, and internal processes.  
  
They have several projects, including [an insecure JavaScript application used for security training](https://www.owasp.org/index.php/OWASP_Juice_Shop_Project), but the one that we’re focusing on today is the newly updated 2021 edition of their list of the top 10 threats to web app security.  
  
Updated regularly, the OWASP Top 10 lists the main security threats that affect web applications today. Each entry enumerates the threat, shows possible attack vectors, and highlights preventive measures to reduce the risk of such threat. At Auth0, we take steps to mitigate most of the issues outlined below, so when you delegate your authentication needs to us, a lot of this is already taken care of for you.

Let’s run through the list, looking at the threats and what we could be doing to make sure our own applications are secure and examining some features of the Auth0 platform that help to mitigate or entirely remove such threats.

For a high-level overview of the list updates, please refer to this handy chart, provided by [OWASP](https://owasp.org/Top10/):

![A Tour Through the OWASP Top 10](https://images.ctfassets.net/23aumh6u8s0i/3GzLwhF5nSZnDaHvvotBLf/3d6cca202946de7ce52e3ef02865082e/Uploaded_from_A_Tour_Through_the_OWASP_Top_10)

[Read more...](https://auth0.com/blog/a-tour-through-the-owasp-top-10/?utm_source=content_synd&utm_medium=sc&utm_campaign=security)
BrandEase - Stamp Your identity
Tags: flutter, darklang, uiweekly, productivity
Published: 2021-10-21 14:06:33


BrandEase -
a free, easy-to-use application that makes it easy for you to protect your content and visual data, boost your integrity, reach a wider audience and stand out from the multitude of tons of data  that we come across everyday!

In this digital age, data and content fly aimlessly about and all around us.
It’s easy to download any free and unbranded data, and claim ownership.

It’s usually difficult to track the original source of a lot of the wonderful visuals that we see, share and download.

In fact, It’s not a game of the first to upload, but a game of the one with the biggest audience.

I can re-upload your content and get more credit than you, who is the original source.
In fact this is some people’s expertise.

You see, lots of people don’t usually get  their deserved credit, because their contents were re-uploaded by a more influential individual.

A lot of business owners find it difficult to convince and earn the trust of their customers because they (the customers) assume the images of their goods were just scraped online, just as the majority of online vendors do.

A lot of people have no idea about the reach of their contents and data.
They don’t know how far their contents have gone, simply because it’s not traceable to them!

Some of my friends that sell bags, shoes, home made products, work as hair stylists and bake approached me. They complained about how difficult it was to put their logos and brands on their content.

Apart from being a software developer, I take nice photographs. When I upload a really nice picture, people share my picture as if they were theirs.

So, last December, I started building a branding application from scratch using the Flutter and Dart framework.
I finished the first version in March, 2021 but I was not satisfied. I kept adding features till I felt minimally satisfied!

In October, 2021 GooglePlay approved the first version of Brand Ease.

Yippee!

BrandEase is a free, easy-to-use application that makes it easy for you to protect your content and visual data, boost your integrity, reach a wider audience and stand out from the multitude of tons of data  that we come across everyday!


Your brand is your identity, it keeps spreading as your data spreads

Brand your data with BrandEase!

https://play.google.com/store/apps/details?id=com.mayemsolutions.beaseui
10 coisas que você não sabia que o NPM era capaz de fazer
Tags: video, javascript, npm, typescript
Published: 2022-02-16 21:38:49

---
title: 10 coisas que você não sabia que o NPM era capaz de fazer
published: true
date: 2021-10-21 13:55:00 UTC
tags: video,javascript,npm,typescript
canonical_url: https://blog.lsantos.dev/npm-10-comandos/
cover_image: https://raw.githubusercontent.com/khaosdoctor/blog-assets/master/images/2021/10/Thumb-Template.png
---

{% embed https://www.youtube.com/watch?v=tX3gQGfwvgA %}

Bora pra mais um conteúdo de vídeo lá no [meu canal](https://youtube.lsantos.dev), nesse vídeo eu comento um pouco sobre o NPM e como ele pode ser muito mais do que um gerenciador de pacotes.

No vídeo eu listo alguns comandos e também listo alguns repositórios, esses são:

- [NPM Expansions](https://github.com/npm/npm-expansions) é um repositório e um pacote open source pra você dizer qual é o significado de NPM!

E aqui vão os links dos comandos que eu mostrei no vídeo!

- [NPM dedupe](https://docs.npmjs.com/cli/v7/commands/npm-dedupe)
- [NPM prune](https://docs.npmjs.com/cli/v7/commands/npm-prune)
- [NPM dist-tag](https://docs.npmjs.com/cli/v7/commands/npm-dist-tag)
- [NPM docs](https://docs.npmjs.com/cli/v7/commands/npm-docs)
- [NPM pack](https://docs.npmjs.com/cli/v7/commands/npm-pack)
- [NPM ci](https://docs.npmjs.com/cli/v7/commands/npm-ci)
- [NPM version](https://docs.npmjs.com/cli/v7/commands/npm-version)
- [NPM view](https://docs.npmjs.com/cli/v7/commands/npm-view)
- [NPM set-script](https://docs.npmjs.com/cli/v7/commands/npm-set-script)
Clear Java Job Interview
in 2022
Tags: java, career, programming
Published: 2021-10-21 13:50:46

![Java Interview Questions](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/i1ql12mppysiyddlk16j.png) 

[Java](java.com) Core is a release of Java otherwise called Java SE (Standard Edition). The center java is fundamental Java and in interviews, the majority of the Core java Interview questions for a java designer come from here.

List of Java questions and to know their answers click on [interview questions on Java](https://www.techgeekbuzz.com/core-java-interview-questions/) blog.

1. What is Java?
2. What is Core Java?
3. What is the latest version of Java?
4. What is JVM?
5. How does a bytecode run in JAVA?
6. What is Thread in Java?
7. Why do we declare Main as Static?
8. What is Super Keyword in JAVA and Where to use it?
9. When a subclass has only parameterized constructor and a superclass does not have a matching constructor, What will happen?
10. Explain Public Static Void Main (String args[]).
11. What are Constructors in Java?
12. What do you understand by a Wrapper class?
13. Explain the local variable and instance variable?
14. Why JAVA is a statically typed language?
15. What is Java Runtime Environment(JRE)?
16. What is Package in JAVA?
17. What is the Java language programming platform?
18. What are the components of JVM?
19. Name all Java Programming language platforms.
20. What are the components that a Java Platform consists of?
21. What is Java Virtual Machine?
22. What is an API?
23. What is Java EE?
24. What is Java ME?
25. What is JavaFX?

## Conclusion

In the above article most of the questions in the above article are based on the OOP’s concepts because that’s what Java is famous for.