Tag: What are the concepts every Java C# C++ Python Rust programmer must know?

Programming paradigms are different styles or approaches to solving problems using code. They define how you structure and write programs.Continue reading on Medium »

Continue reading on Medium »

Continue reading on Medium »

In this article I’ll introduce types of firewalls, more specifically IPS/IDS, WAF and iptables. And how to implement your own WAF and…Continue reading on Medium »

If you’re just getting started with anime.js and struggling with weird bugs, animations not working, or simply not understanding why your…Continue reading on Medium »

Make your blind spots disappear.Continue reading on Engineering Manager’s Journal »

The Cleanup Pattern You Didn’t Know You NeededContinue reading on Medium »

Stream, Channel & JoinSet Best Practices in Async RustContinue reading on Medium »

AI agents are evolving fast — jumping from lab experiments to real-world tools that take real-world action. But the ecosystem is…Continue reading on Medium »

Topics Covered: Introduction to SootUp, Integration in Spring Boot, Real-World Use Cases, Code Examples, and FAQs.Continue reading on Towards Dev »

p-values, t-tests, and bootstrap CI — with Python examplesContinue reading on Medium »

Keterangan : Display waktu : Berfungsi menunjukan waktu stopwatch, saat jam atau menitnya bernilai 0, jam atau menitnya tidak akan…Continue reading on Medium »

Today, we’re going to master the SOLID principles using just one simple example: a Notifier system. Personally, I’ve always found it…Continue reading on Medium »

Traditional Devs, Look Away — This One’s Not for You!Continue reading on Python in Plain English »

alright everbody!Continue reading on Medium »

Anda dapat menghubungi layanan pelanggan Shopee Tlpn/whatsapp+6281361112454. Sampaikan niat dan alasan pembatalan anda, kemudian siapkan…Continue reading on Medium »

When it comes to disaster management applications like landslide monitoring, reliability is everything. While sensor networks are crucial…Continue reading on Medium »

Once upon a time, in a small town, there was a young web developer named Alex. Alex had just started learning about web security and had…Continue reading on Medium »

Learn how to write compact and powerful Python lambda functions with real examples. Master anonymous functions today!Continue reading on Medium »

As a software Engineer, making sure your app is bug Free and make sure that it works every device properly. Manual trying out can be time…Continue reading on Let’s Code Future »

Okay, whenever I load a dataset in Pandas, I used to reflexively type df.describe().Continue reading on Medium »

Hey there, readers! 👋 If you’ve ever wrestled with data in Python, you’ve probably heard of Pandas — the Swiss Army knife of data…Continue reading on Medium »

Hey there, readers! 👋 If you’ve ever wrestled with data in Python, you’ve probably heard of Pandas — the Swiss Army knife of data…Continue reading on Medium »

Deep dive on its functionsContinue reading on Python Girl »

🌟 Editor’s Note This is edited and posted, and sent, once a week. If you notice any errors, issues, or anything else, please message the…Continue reading on Medium »

When working with strings in TypeScript, developers often face the decision of whether to use includes() or === for comparisons. Each…Continue reading on Techbodia »

Continue reading on Medium »

Unlock the power of side effects in React with useEffect! In Day 8 of our React + Next.js series, we dive deep into how useEffect works…Continue reading on Medium »

Written by Caelum Anarion, once called Eos, Published with permission by David J LilleContinue reading on Medium »

Menentukan jurusan kuliah bukan lagi sekadar soal ikut-ikutan atau tren. Di era digital seperti sekarang, memilih jurusan yang sesuai…Continue reading on Medium »

submitted by /u/notarealoneatall [link] [comments]

submitted by /u/ketralnis [link] [comments]

submitted by /u/ketralnis [link] [comments]

submitted by /u/ketralnis [link] [comments]

submitted by /u/ketralnis [link] [comments]

submitted by /u/ketralnis [link] [comments]

submitted by /u/ketralnis [link] [comments]

submitted by /u/ketralnis [link] [comments]

submitted by /u/ketralnis [link] [comments]

Share it with someone who may need it! 🙂 submitted by /u/pseudonym24 [link] [comments]

submitted by /u/teivah [link] [comments]

submitted by /u/xtreak [link] [comments]

submitted by /u/Fit_Mushroom_250 [link] [comments]

I recently designed and conducted interviews and had many thoughts documented here: https://towardsdatascience.com/beyond-the-code-unconventional-lessons-from-empathetic-interviewing/ It contains: 5-page Brief sent to candidates Feedback from the offered candidate. It provides guidance on how to make a good session, diving into detailed mindsets and behaviours. I'm interested to hear unique experiences you've had in interviews: Any activities or specific discussions you found were particularly engaging or beneficial to the process? What feedback did you receive, after putting in what effort to get it? How did your interviewers misinterpret you, or how you could have told a story better? Anything else you wish was done to make both sides more prepared? submitted by /u/promle [link] [comments]

submitted by /u/vladaionescu [link] [comments]

submitted by /u/MerrimanIndustries [link] [comments]

A few hours ago, we discovered that the offical XRP NPM package has been compromised and malware has been introduced to steal private keys. This is the official Ripple SDK, so it could lead to a catastrophic impact on the cryptocurrency supply chain. Luckily, we did catch it early so hopefully won't be introduced by the major exchanges. Currently, this is still live on NPM https://www.npmjs.com/package/xrpl?activeTab=code submitted by /u/Advocatemack [link] [comments]

submitted by /u/gingerbill [link] [comments]

submitted by /u/brokeCoder [link] [comments]

submitted by /u/cekrem [link] [comments]

In development, we often need to share a preview of our current local project, whether to show progress, collaborate on debugging, or demo something for clients or in meetings. This is especially common in remote work settings. There are tools like ngrok and localtunnel, but the limitations of their free plans can be annoying in the long run. So, I created my own setup with an SSH tunnel running in a Docker container, and added Traefik for HTTPS to avoid asking non-technical clients to tweak browser settings to allow insecure HTTP requests. I documented the entire process in the form of a practical tutorial guide that explains the setup and configuration in detail. My Docker configuration is public and available for reuse, the containers can be started with just a few commands. You can find the links in the article. The link to the article: https://nemanjamitic.com/blog/2025-04-20-ssh-tunnel-docker I would love to hear your feedback, let me know what you think. Have you made something similar yourself, have you used a different tools and approaches? submitted by /u/nemanja_codes [link] [comments]

submitted by /u/ketralnis [link] [comments]

submitted by /u/ketralnis [link] [comments]

So I was reading about OAuth to learn it and have created this explanation. It's basically a few of the best I have found merged together and rewritten in big parts. I have also added a super short summary and a code example. Maybe it helps one of you 🙂 OAuth Explained The Basic Idea Let’s say LinkedIn wants to let users import their Google contacts. One obvious (but terrible) option would be to just ask users to enter their Gmail email and password directly into LinkedIn. But giving away your actual login credentials to another app is a huge security risk. OAuth was designed to solve exactly this kind of problem. Note: So OAuth solves an authorization problem! Not an authentication problem. See [here][ref1] for the difference. Super Short Summary User clicks “Import Google Contacts” on LinkedIn LinkedIn redirects user to Google’s OAuth consent page User logs in and approves access Google redirects back to LinkedIn with a one-time code LinkedIn uses that code to get an access token from Google LinkedIn uses the access token to call Google’s API and fetch contacts More Detailed Summary Suppose LinkedIn wants to import a user’s contacts from their Google account. LinkedIn sets up a Google API account and receives a client_id and a client_secret So Google knows this client id is LinkedIn A user visits LinkedIn and clicks "Import Google Contacts" LinkedIn redirects the user to Google’s authorization endpoint: https://accounts.google.com/o/oauth2/auth?client_id=12345&redirect_uri=https://linkedin.com/oauth/callback&scope=contacts client_id is the before mentioned client id, so Google knows it's LinkedIn redirect_uri is very important. It's used in step 6 in scope LinkedIn tells Google how much it wants to have access to, in this case the contacts of the user The user will have to log in at Google Google displays a consent screen: "LinkedIn wants to access your Google contacts. Allow?" The user clicks "Allow" Google generates a one-time authorization code and redirects to the URI we specified: redirect_uri. It appends the one-time code as a URL parameter. So the URL could be https://linkedin.com/oauth/callback?code=one_time_code_xyz Now, LinkedIn makes a server-to-server request (not a redirect) to Google’s token endpoint and receive an access token (and ideally a refresh token) Finished. Now LinkedIn can use this access token to access the user’s Google contacts via Google’s API Question: Why not just send the access token in step 6? Answer: To make sure that the requester is actually LinkedIn. So far, all requests to Google have come from the user’s browser, with only the client_id identifying LinkedIn. Since the client_id isn’t secret and could be guessed by an attacker, Google can’t know for sure that it's actually LinkedIn behind this. In the next step, LinkedIn proves its identity by including the client_secret in a server-to-server request. Security Note: Encryption OAuth 2.0 does not handle encryption itself. It relies on HTTPS (SSL/TLS) to secure sensitive data like the client_secret and access tokens during transmission. Security Addendum: The state Parameter The state parameter is critical to prevent cross-site request forgery (CSRF) attacks. It’s a unique, random value generated by the third-party app (e.g., LinkedIn) and included in the authorization request. Google returns it unchanged in the callback. LinkedIn verifies the state matches the original to ensure the request came from the user, not an attacker. OAuth 1.0 vs OAuth 2.0 Addendum: OAuth 1.0 required clients to cryptographically sign every request, which was more secure but also much more complicated. OAuth 2.0 made things simpler by relying on HTTPS to protect data in transit, and using bearer tokens instead of signed requests. Code Example: OAuth 2.0 Login Implementation Below is a standalone Node.js example using Express to handle OAuth 2.0 login with Google, storing user data in a SQLite database. ```javascript const express = require("express"); const axios = require("axios"); const sqlite3 = require("sqlite3").verbose(); const crypto = require("crypto"); const jwt = require("jsonwebtoken"); const jwksClient = require("jwks-rsa"); const app = express(); const db = new sqlite3.Database(":memory:"); // Initialize database db.serialize(() => { db.run( "CREATE TABLE users (id INTEGER PRIMARY KEY AUTOINCREMENT, name TEXT, email TEXT)" ); db.run( "CREATE TABLE federated_credentials (user_id INTEGER, provider TEXT, subject TEXT, PRIMARY KEY (provider, subject))" ); }); // Configuration const CLIENT_ID = process.env.GOOGLE_CLIENT_ID; const CLIENT_SECRET = process.env.GOOGLE_CLIENT_SECRET; const REDIRECT_URI = "https://example.com/oauth2/callback"; const SCOPE = "openid profile email"; // JWKS client to fetch Google's public keys const jwks = jwksClient({ jwksUri: "https://www.googleapis.com/oauth2/v3/certs", }); // Function to verify JWT async function verifyIdToken(idToken) { return new Promise((resolve, reject) => { jwt.verify( idToken, (header, callback) => { jwks.getSigningKey(header.kid, (err, key) => { callback(null, key.getPublicKey()); }); }, { audience: CLIENT_ID, issuer: "https://accounts.google.com", }, (err, decoded) => { if (err) return reject(err); resolve(decoded); } ); }); } // Generate a random state for CSRF protection app.get("/login", (req, res) => { const state = crypto.randomBytes(16).toString("hex"); req.session.state = state; // Store state in session const authUrl = https://accounts.google.com/o/oauth2/auth?client_id=${CLIENT_ID}&redirect_uri=${REDIRECT_URI}&scope=${SCOPE}&response_type=code&state=${state}; res.redirect(authUrl); }); // OAuth callback app.get("/oauth2/callback", async (req, res) => { const { code, state } = req.query; // Verify state to prevent CSRF if (state !== req.session.state) { return res.status(403).send("Invalid state parameter"); } try { // Exchange code for tokens const tokenResponse = await axios.post( "https://oauth2.googleapis.com/token", { code, client_id: CLIENT_ID, client_secret: CLIENT_SECRET, redirect_uri: REDIRECT_URI, grant_type: "authorization_code", } ); const { id_token } = tokenResponse.data; // Verify ID token (JWT) const decoded = await verifyIdToken(id_token); const { sub: subject, name, email } = decoded; // Check if user exists in federated_credentials db.get( "SELECT * FROM federated_credentials WHERE provider = ? AND subject = ?", ["https://accounts.google.com", subject], (err, cred) => { if (err) return res.status(500).send("Database error"); if (!cred) { // New user: create account db.run( "INSERT INTO users (name, email) VALUES (?, ?)", [name, email], function (err) { if (err) return res.status(500).send("Database error"); const userId = this.lastID; db.run( "INSERT INTO federated_credentials (user_id, provider, subject) VALUES (?, ?, ?)", [userId, "https://accounts.google.com", subject], (err) => { if (err) return res.status(500).send("Database error"); res.send(`Logged in as ${name} (${email})`); } ); } ); } else { // Existing user: fetch and log in db.get( "SELECT * FROM users WHERE id = ?", [cred.user_id], (err, user) => { if (err || !user) return res.status(500).send("Database error"); res.send(`Logged in as ${user.name} (${user.email})`); } ); } } ); } catch (error) { res.status(500).send("OAuth or JWT verification error"); } }); app.listen(3000, () => console.log("Server running on port 3000")); ``` submitted by /u/trolleid [link] [comments]

submitted by /u/starlevel01 [link] [comments]