teleren/devto huggingface dataset:
Developer Challenge: SAST vs DAST vs SCA?
Tags: cybersecurity, softwaredevelopment, softwareengineering, programming
Published: 2021-07-28 18:28:43

---
title: Developer Challenge: SAST vs DAST vs SCA?
published: true
date: 2021-07-28 13:03:36 UTC
tags: cybersecurity,softwaredevelopment,softwareengineering,programming
canonical_url: https://blog.shiftleft.io/sast-vs-dast-vs-sca-887274d8997a
---

#### Do you know the difference? Test yourself in the Secure Developer Challenge.

![](https://cdn-images-1.medium.com/max/1024/0*mSfXF9MozXdG9-bP)<figcaption>Photo by <a href="https://unsplash.com/@jeshoots?utm_source=medium&amp;utm_medium=referral">JESHOOTS.COM</a> on <a href="https://unsplash.com?utm_source=medium&amp;utm_medium=referral">Unsplash</a></figcaption>

SAST? DAST? SCA?

What’s up with the acronyms in the security world? In this developer challenge, let’s get to know the types of security tools we often hear about: SAST, DAST, and SCA, their pros and cons, as well as when to implement them into the development cycle. Learn about the differences between SAST, DAST, and SCA in our blog post here:

[SAST vs. DAST vs. SCA: A Comparison](https://blog.shiftleft.io/sast-vs-dast-vs-sca-a-comparison-2d42cea6579f)

Match the following statements to a type of security tool. Do these statements apply to SAST, DAST, or SCA?

1. Also called “Static Analysis Security Testing”.
2. Best if run towards the end of the development lifecycle, and ran in an environment close to the production environment.
3. Often bundled with SAST tools and ideally run alongside SAST tools.
4. Tests for publicly disclosed vulnerabilities in third-party components of an application.
5. Runs an application and tests it for vulnerabilities that attackers can actually exploit. Can find exploitable vulnerabilities and runtime issues.
6. Examines an application’s custom source code or binary to find vulnerabilities such as the OWASP top ten and information leaks.
7. You need to pick a tool tailored for the language you use.
8. Creates a list of third-party components your application uses and scans vulnerability databases for matching entries.
9. Also called “Software Composition Analysis”.
10. Also called “Dynamic Application Security Testing”.
11. Best if run early and often, ideally with every pull request or significant code change.

### Rules:

- Submit your full name, email address, organization, along with your answer to this link: [go.shiftleft.io/developer-challenger-07–2021](http://go.shiftleft.io/developer-challenger-07-2021) by July 31, 2021, 11:59 PM PT.
- Three correct submissions will be selected randomly to win a SnackMagic snack box. We will announce the winners by August 31, 2021.
- We will run developer challenges every month. At the end of the year, all developers who participate will be entered into a raffle for a special prize based on the number of challenges they participated in. (Each challenge submission gets one raffle ticket.)

* * *
Python Flask Series for beginners
Tags: python, flask
Published: 2021-07-28 12:20:00

Hi.! everyone I hope you are fine and doing well.

I was started learning flask few days back now I have an idea to learn with you guys.

I'm planning a beginners post series on **Dev Community** my plan is to make a Blog with flask and briefly describe how we can make better and rich web apps using python flask. I'm including these technologies.

- tailwindcss
- Webpack
- Flask
- Flask WT Forms
- Flask Login
- AJAX with flask

Every episode is on weekend..

Also you can get the updated code on [GitHub Repo](https://github.com/MuhammadSaim/flask_tutorial_blog)

What you guys think and query and suggestion you have to feel free to write it down.

Thanks 🤗
Deno installation on Arch Linux
Tags: deno, archlinux, javascript, rust
Published: 2021-07-28 12:18:52

What is Deno? [deno.land](https://deno.land/), the official website, tells shortly and impressively:

> Deno is a simple, modern and secure runtime for JavaScript and TypeScript that uses V8 and is built in Rust.

The [Github](https://github.com/) repository is [here](https://github.com/denoland/deno).

Here shows how to install it in [Arch Linux](https://www.archlinux.org/). Really simple. Just use [`pacman`](https://wiki.archlinux.org/title/pacman) like this:

```console
# pacman -Sy deno
```

Done.
Now `deno` is available with [V8 engine](https://v8.dev/) and [TypeScript](https://www.typescriptlang.org/) in your computer:

```console
$ deno --version
deno 1.12.1 (release, x86_64-unknown-linux-gnu)
v8 9.2.230.14
typescript 4.3.5
```

What is next? There is [the official getting started](https://deno.land/#getting-started).
For example, run Deno program with a one-liner on the command line:

```console
$ deno run https://deno.land/std/examples/welcome.ts
Download https://deno.land/std/examples/welcome.ts
Warning Implicitly using latest version (0.102.0) for https://deno.land/std/examples/welcome.ts
Download https://deno.land/std@0.102.0/examples/welcome.ts
Check https://deno.land/std/examples/welcome.ts
Welcome to Deno!
```

Well, `deno` can execute a local `index.js` / `index.ts` just as [Node.js](https://nodejs.org/) can. However, it is notable that `deno` doesn't create `package.json`, `package-lock.json` and even `node_modules` directory!
Here is another example.

```console
$ mkdir my-first-deno
$ cd my-first-deno
$ touch index.js # or index.ts
```

Add the line to `index.js`:

```javascript
console.log('Hello, world.');
```

You can run it:

```console
$ deno run index.js
Hello, world.
```
TCP/ IP Network Model 
Tags: linux
Published: 2021-07-28 12:10:08

TCP/IP Network model
I was intrested in security so i started using tools without knowing the basic knowledge of it , i started with Nmap a port scanning tool on kali linux scanning random ip addresses i did not understand what TCP UDP port was,later started learning about networks.

TCP/IP network model or Transmission Control Protocol/Internet Protocol Network model.
TCP/IP network model has five layers they are:
1. Application Layer
2. Transport Layer 
3. Network Layer
4. Data-link Layer
5. Physical Layer
![TCP/IP model](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/23w5mbjicak1j0he8nmj.png)

Each layer a different protocols 
1.Application layer has HTTP,HTTPS,SMTP,FTP,TELNET.

2.Transport layer has TCP/UDP

TCP stands for Transmission Control Protocol and User Datagram Protocol an example for UDP is video call where continous delivery of packets, if a packet is lost it does not care ,while in TCP if a packet is lost it asks the sender to send it again.

When the data arrives at the transport layer, the protocols at the layer start the process of data encapsulation. The transport layer encapsulates the application data into transport protocol data units.

The transport layer protocol creates a virtual flow of data between the sending and receiving application, differentiated by the transport port number. The port number identifies a port, a dedicated location in memory for receiving or sending data. In addition, the transport protocol layer might provide other services, such as reliable, in order data delivery. The end result depends on whether TCP, SCTP, or UDP handles the information

Establishing a TCP Connection

TCP uses segments to determine whether the receiving system is ready to receive the data. When the sending TCP wants to establish connections, TCP sends a segment that is called a SYN to the TCP protocol on the receiving host. The receiving TCP returns a segment that is called an ACK to acknowledge the successful receipt of the segment. The sending TCP sends another ACK segment, then proceeds to send the data. This exchange of control information is referred to as a three-way handshake.

3.Network layer - IP (logical addressing )ICMP 


https://youtu.be/OTwp3xtd4dg
https://docs.oracle.com/cd/E18752_01/html/816-4554/ipov-29.html#ipov-32
Facts about Stardrew Valley’s Abigail
Published: 2021-07-28 12:06:44

Have you ever heard of Stardew Valley? Even though there is no doubt that some individuals have never heard of it before, and there are other people who are absolutely in love with it and want to know 
<a href="https://www.etechnoblogs.com/gaming/fun-facts-about-stardrew-valleys-abigail/">fun facts about Stardrew Valley’s Abigail</a>
<a href="https://techransom.com/">Techransom</a>
Wednesday Links - Edition 2021-07-28
Tags: java, jvm, spring, kotlin
Published: 2021-07-28 12:05:54

The Java Version Almanac📖
https://javaalmanac.io

Is Java 17 a Glass Half Full? (3 min read)🥛
https://www.infoq.com/news/2021/07/java-17-glass

How to make debug-friendly method references (5 min read)🦮
https://habr.com/en/post/569414

JVM Anatomy Quark #27: Compiler Blackholes (5 min read)⚫
https://shipilev.net/jvm/anatomy-quarks/27-compiler-blackholes

JVM Anatomy Quark #28: Frequency-Based Code Layout (5 min read)🤸
https://shipilev.net/jvm/anatomy-quarks/28-frequency-based-code-layout

JVM Anatomy Quark #29: Uncommon Traps (5 min read)🪤
https://shipilev.net/jvm/anatomy-quarks/29-uncommon-traps

JEP draft: InetAddress host name and address lookup service provider interface (3 min read)🛎️
https://openjdk.java.net/jeps/8263693

Java state API would speed app startup (2 min read)🚄
https://www.infoworld.com/article/3626351/java-state-api-would-speed-app-startup.html

What the Heck Is the SpringExtension Used For? (7 min read)🤔
https://rieckpil.de/what-the-heck-is-the-springextension-used-for

Switch expressions in Groovy 4.0.0 (30 sec read)🔀
https://twitter.com/daniel_sun/status/1418908178222227456

Optimizing Your Kotlin Build (7 min read)🏃
https://www.zacsweers.dev/optimizing-your-kotlin-build

So, how do I write a Kotlin Symbol Processor (KSP)? (12 min read)🔣
https://proandroiddev.com/so-how-do-i-write-a-kotlin-symbol-processor-ksp-b9606e9e3818

Public CDNs Are Useless and Dangerous (12 min read)🛑
https://httptoolkit.tech/blog/public-cdn-risks
Today's Fun Joke For Developers - Daily Developer Jokes
Tags: jokes, dailydeveloperjokes
Published: 2021-07-28 12:00:13

---
title: "Today's Fun Joke For Developers - Daily Developer Jokes"
description: "Check out today's daily developer joke! (a project by Fred Adams at xtrp.io)"
series: "Daily Developer Jokes"
published: true
tags: #jokes, #dailydeveloperjokes
---

Hi there! Here's today's Daily Developer Joke. We hope you enjoy it; it's a good one.

![Joke Image](https://private.xtrp.io/projects/DailyDeveloperJokes/public_image_server/images/5e1259118e11e.png)

---

For more jokes, and to submit your own joke to get featured, check out the [Daily Developer Jokes Website](https://dailydeveloperjokes.github.io/). We're also open sourced, so feel free to view [our GitHub Profile](https://github.com/dailydeveloperjokes).

### Leave this post a ❤️ if you liked today's joke, and stay tuned for tomorrow's joke too!

_This joke comes from [Dad-Jokes GitHub Repo by Wes Bos](https://github.com/wesbos/dad-jokes) (thank you!), whose owner has given me permission to use this joke with credit._

<!--
Joke text:
___Q:___ What's a compiler developer's favorite spice?

___A:___ Parsley.
 -->
Don't use vanilla JavaScript! I am serious!
Tags: webdev, javascript, beginners, programming
Published: 2021-07-28 11:50:30

---
title: Don't use vanilla JavaScript! I am serious!
published: true
description: 
tags: webdev,javascript,beginners,programming
cover_image: https://dev-to-uploads.s3.amazonaws.com/uploads/articles/a3h1slqhe91o48gher3j.jpeg
---

People often claim that frameworks are evil. It's a horrible statement. 

Using vanilla you will find yourself doing things that frameworks have already done and tested for you. 

If you think vanilla is better for simple projects, then you are missing the point of Frontend tools.

Any simple website is easy to build using a framework in a matter of minutes. Sure thing, you can do it with vanilla, but it will take x10+ longer.

Take static site generators. Not only do they address all SEO requirements, but they are also blazing fast out of the box. They have tons of integrations only to save you hours, if not days of work and countless bug fixes.

Easy and free deployment is a great bonus.

**A good web developer knows the tools and uses them to be productive.**

There is no way you can be productive reinventing the wheel. 

The best devs to work with are pips who found the **balance between delivering and enjoying coding**. 

Another crazy statement is to push beginners to learn fundamentals without any context. Will cover this problem in my next post.

Follow for more.
Beautiful Random Color Generator With Vanila JavaScript
Tags: javascript, webdev, html, css
Published: 2021-07-28 11:50:23

JavaScript is most fun language to make fun stuff. I decided to make a **Beautifull Color Generator** to generate the random colors on every click.

## Step #01
Create a folder on your desired location and create three files on it.
- index.html
- app.js
- style.css
![image](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/awb8bfrplrh69l2w597b.png)

## Step #02
Now its time to write some HTML for the project.
```html
<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <link rel="stylesheet" href="style.css" />
    <title>Beautiful Ranadom Color Generator</title>
  </head>
  <body>
    
    <div class="wrapper">
      <span class="colorCode" id="colorCode">#1abc9c</span>
      <button class="genNewBtn" id="genNewBtn">Click For New</button>
    </div>

    <script src="app.js"></script>
  </body>
</html>
```
Now run this on a browser and its look like this.
![image](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/ygz9yh8vzwiljjaav4d4.png)


## Step #03
Now its time make this beaytifull add some styles to it. put these css styles in <kbd>style.css</kbd>.
```css
@import url("https://fonts.googleapis.com/css2?family=Montserrat:wght@500&display=swap");
* {
  margin: 0;
  padding: 0;
  font-family: "Montserrat", sans-serif;
  font-size: 16px;
}

body {
  height: 100vh;
  background-color: #1abc9c;
  display: flex;
  justify-content: center;
  align-items: center;
}

.wrapper {
  align-self: center;
}
.wrapper span,
.wrapper button {
  display: block;
}
.wrapper span {
  color: #fff;
  font-size: 3.75rem;
  text-transform: uppercase;
}
.wrapper button {
  background: none;
  border: 3px solid #fff;
  padding: 10px 20px;
  color: #fff;
  font-size: 2.25rem;
  margin-top: 10px;
  outline: none;
}

```

Now our App is something looks like this.
![image](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/94ptoqc9uaqgrl7wyv5o.png)
 
## Step #04
Now its time for the fun part of the App The JavaScript part. Now put this code in <kbd>app.js</kbd>.
```javascript
var colorContainer = document.getElementById("colorCode");

var genButton = document.getElementById("genNewBtn");

var symbols = "0123456789ABCDEF";

var color = "";

genButton.addEventListener('click', function(){
	for(var i=0; i<6; i++){
		color += symbols[Math.floor(Math.random() * 16)];
	}	
	
	colorContainer.innerHTML = "#" + color;
	document.body.style.background = "#"+color;
	color = "";
});
```

Yeah our fun app is ready 🥳

Thanks for reading 🤗

If you like please thumbs up and follow me for more fun stuff.
How to use MMenu.JS in Angular CLI project?
Tags: html, css, javascript, angular
Published: 2021-07-28 11:39:52

In my Angular CLI project, the MMenu.JS library is malfunctioning.

Live project: [Stack Blitz](https://stackblitz.com/edit/github-1gc9sw)

![Below is a clip from the error](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/cohunxe9spaurno50i2n.gif)
How Does Recurring Task Management Increase Productivity
Published: 2021-07-28 11:39:50

Task Management is a process of monitoring a task from start to end. It includes Planning, Execution, Completion, and Reporting. To perform these actions, you need task tracker software to track the progress of a task. 

Some tasks happen regularly, which are called recurring tasks. The central pain point revolves around doing tasks daily, which is annoying and time-consuming.  

Advantages of Recurring Task Management Software

Before we dive into the pros of Task Management software, below are the examples of recurring tasks:
1.	Weekly team meetings
2.	Weekly status reports
3.	Monthly project reports
4.	Monthly client meetings

To improve productivity to smooth operations, Task Management has many benefits. Let’s have a look at them:

1. Centralized Management: The software lets you keep all the required information, such as notes, calendar, etc., in one place. 
2. Prioritize Tasks: You can set the priority level for each task and complete high-priority tasks first, leaving enough time for other tasks.
3. Overview of the Tasks: With a task manager, you can track the progress of all the tasks within minutes. 
4. Delegate Easily: It lets you delegate the tasks to a specific person or multiple persons with a few clicks.  
5. Team Collaboration: By using the software, everyone can see what others are working on and collaborate to complete the projects faster. 
6. Automate Tasks: Automate the recurring tasks which save time and effort for your team. 
7. Online Task Manager: The project management can be done online, creating a paperless environment - an eco-friendly option. It means accessing the files online is a lot easier.
8. Frequency for Tasks: Set the frequency for recurring tasks daily, weekly, or monthly. 
9. Add Sub-tasks: Breaking more significant tasks into small or sub-tasks makes the workflow smoother. 

Finding software with above all the advantages is difficult. 

How Successful Recurring Task Management Can Increase Productivity:

Read More on How Does Recurring Task Management: https://www.orangescrum.com/blog/how-does-recurring-task-management-increase-productivity.html
Datastax Summer Series
Tags: database, graphql, react, firstpost
Published: 2021-07-28 11:37:43

Hey Everyone,
This is my Firstpost at dev.to, and I am very excited to write about Datastax's summer series which was quite interesting and helpful to me to start my inspiration in the web development. Datastax developer team had worked very hard to provide awesome content to the masses in a unique way of doing hands on project within 2 hours. Mentors were very helpful throughout the series and I made unique clones of Netflix, Tiktok and a Todosapp. I get to play with Rest API, Document API and GraphQL.
The series is available on the Youtube within the channel name- Datastax Developers (Link-https://www.youtube.com/channel/UCAIQY251avaMv7bBv5PCo-A) , I urge to anyone who want to learn these things, do visit their channel and spread the word.
I want to thank all the team members of Datastax Developers for helping students and professionals throughout the Globe.

Thanks for reading! Have a Great Day!
Introduction to Kubernetes #1 
Tags: kubernetes, devops, cloudnative, beginners
Published: 2021-07-28 11:36:39

## What is Kubernetes?

- Kubernetes is an open-source container orchestration tool powered by Google.
- It helps us manage apps that are made of containers.

## What problems does it solve ?

- Apps moving from a monolithic app structure to microservices comprise of isolated containers, and managing these containers can be a difficult task.
- Kubernetes guarantees 
     1. High availability 
     2. Scalability 
     3. Disaster Recovery

## Basic architecture

- There is one **master node** and connected to it are a couple of **worker nodes**.
- Each node has a kubelet running on it that enables it to connect to other nodes.
- Worker nodes are where the actual work is happening.
- The master node runs several processes that are important to run Kubernetes. These processes are:
    - API Server: This is a container that is an entry point to the Kubernetes cluster.
    - Controller Manager: Keeps track of what is happening in the cluster.
    - Scheduler: It is responsible for scheduling containers on different nodes.
    - Etcd: It is key-value storage that holds the current state of a Kubernetes cluster at any given time. This is the backing store of Kubernetes
- Worker nodes run heavier tasks than master nodes but the master nodes run more important tasks.


## Basic Concepts

- Pod: A pod is the smallest unit that a Kubernetes user can interact with.
- On each worker node, there are multiple pods and on each pod, there are multiple containers.
- We usually have one pod per application.
- Each pod has its own self-containing server and its own internal IP addresses.
- These pods connect to each other using this internal IP address.
- If a pod dies a new pod is created which has a new IP address.

## What is a service?

**Definition**: An abstract way to expose an application running on a set of Pods as a network service.

Pods get created and destroyed all the time in Kubernetes according to the need of the deployment. Every time a new pod is created it gets a new IP address and its connection with other pods gets lost. It would be inconvenient to adjust the IP addresses all the time. This is where **services** come to play.

A service is set in front of a pod(or replica of pods) and has its own IP address which is permanent.Clients use this IP address instead of the pods' IP addresses. So even if a pod dies and the IP address gets changed, it won't affect the communication between the the services.

Services have many functionalities, it has a permanent IP address and at the same time it is a load balancer.

More about it on the next blog :) 
Stay Tuned!
Thuốc ho bổ phế Bảo Thanh
Published: 2021-07-28 11:00:49

Thuốc ho Bảo Thanh - Không chỉ giảm ho mà còn Bổ phế. Kế thừa và phát huy bản sắc y học cổ truyền Phương Đông và kinh nghiệm dân gian Việt Nam
Thông tin về chúng tôi:
Thuốc ho bổ phế Bảo Thanh
Địa chỉ: B19 D6 - Khu Đô thị mới Cầu Giấy, phường Dịch Vọng, quận Cầu Giấy, Hà Nội
Phone: 1900571255
Email: tvkh@hoalinhpharma.com.vn
Website: https://thuochobophebaothanh.vn/
9 Steps to a Successful Web Design for Your Company
Tags: websitedesignagencyindubai, webdesigncompanyindubai
Published: 2021-07-28 10:57:02

Before creating a website, most people and businesses should think about a few things. Web design is both an art and a business. Getting the “formula” right is critical to success. Your website can look great, but you won’t see any results if you don’t get the fundamentals right.
So here are some steps to grow your Business Online.

https://redberries.ae/9-steps-to-a-successful-web-design-for-your-company/
What's important in tech interviews
Tags: programming, video
Published: 2021-07-28 10:47:18

---
title: What's important in tech interviews
published: true
date: 2021-07-28 10:41:38 UTC
tags: programming,video
canonical_url: https://siderite.dev/blog/whats-important-in-tech-interviews/
---

Original URL: https://siderite.dev/blog/whats-important-in-tech-interviews/
Original video here: https://www.youtube.com/watch?v=osnOY5zgdMI

I like [Dave Farley](https://www.davefarley.net/ "Thoughts on Continuous Delivery and Agile development.")'s video channel about the software industry quality, [Continuous Deployment](https://www.youtube.com/channel/UCCfqyGl3nq_V0bo64CjZh8g "Explores ideas that help to produce Better Software Faster: Continuous Delivery, DevOps, TDD and Software Engineering."), so I will share this video about how tech interviews should be like. Not a step by step tutorial as much as asking what is the actual purpose of a tech interview and how to get to achieve it:

[![IMAGE_ALT](https://img.youtube.com/vi/osnOY5zgdMI/0.jpg)](https://www.youtube.com/watch?v=osnOY5zgdMI)

_Top Software Engineering Interview Tips - Dave Farley_