Articles

Vulnérabilités de sécurité dans CasaOS

Vulnérabilités de sécurité dans CasaOS

,

Les vulnérabilités de sécurité sont un problème majeur dans CasaOS. Nous allons examiner les différentes façons dont ces problèmes peuvent être résolus.

## Dans le cadre de notre effort continu pour améliorer notre technologie Clean Code et la sécurité de l’écosystème open-source, notre équipe R&D est toujours à l’affût de nouvelles vulnérabilités de sécurité 0-day dans des logiciels populaires.

To ensure the security of our users, we conducted a thorough testing process to identify and fix the vulnerabilities. We followed the industry standard for testing and security protocols, including static and dynamic analysis, fuzzing, and penetration testing. We also collaborated with the CasaOS team to ensure the security of their product.

Dans le cadre de nos efforts continus visant à améliorer notre technologie Clean Code et la sécurité de l’écosystème open-source, notre équipe R&D est toujours à la recherche de nouvelles vulnérabilités de sécurité 0-day dans les logiciels les plus répandus.

Récemment, nous avons découvert deux vulnérabilités critiques dans une solution de cloud personnelle nommée CasaOS. CasaOS peut être installé sur n’importe quelle machine grâce à Docker et est livré avec des périphériques NAS pour les utilisateurs finaux tels que le ZimaBoard ou le X86Pi. Les utilisateurs déploient CasaOS pour stocker leurs données personnelles sur des appareils qu’ils peuvent faire confiance et y accéder depuis n’importe où.

Pour assurer la sécurité de nos utilisateurs, nous avons mené un processus de test approfondi pour identifier et corriger les vulnérabilités. Nous avons suivi les normes de l’industrie pour les tests et les protocoles de sécurité, y compris l’analyse statique et dynamique, le fuzzing et les tests d’intrusion. Nous avons également collaboré avec l’équipe CasaOS pour assurer la sécurité de leur produit.

Source de l’article sur DZONE

/par

Exciting New Tools for Designers, October 2022

,

We write this guide to the best new tools for designers and developers each month. For October, we’ve sought out tools to make you a better website builder, some handy utilities to make you more productive, and a spooky font for the end of the month. Enjoy!

Microsoft Designer

Microsoft Designer is a brand-new app for creating images from text prompts. You can create social media posts, blog images, and any other assets you need with its step-by-step guided process.

Remix

Remix is a full-stack web framework for React that lets you focus on designing your UI. Remix is geared towards web standards and delivers a resilient user experience so you can build better sites.

Ultra

Ultra is a super-fast package manager that uses hardlinks to install packages. It’s up to ten times faster than NPM and Yarn, and the project is open-source.

AskEdith

AskEdith is an AI-powered app that translates English into SQL so you can query your database without writing custom SQL. Just type a description of what you want to know, and the app creates the query for you.

Wide Angle Analytics

Wide Angle Analytics is a GDPR-compliant Google Analytics alternative that puts privacy first. Track actions across multiple sites and discover insights about your site without exposing yourself to privacy violations.

story.to.design

Imagine being able to import a whole webpage straight into Figma. You can, with story.to.design, a fantastic app that imports code into Figma for updating UI elements or speeding up redesigns.

Metlo

Metlo is a testing platform for securing APIs. By running comprehensive tests against your API, you can uncover issues like unidentified endpoints, before they become a security threat.

StockAI

Nothing is more frustrating than searching for the right stock image when one doesn’t exist. StockAI is a day-saver that searches for stock images, and if the sought-after image doesn’t exist, it will generate one for you.

Growthfyi

If ad-blockers are playing havoc with your Google Analytics, check out this script from Growthfyi. It’s an invaluable service that doubles the speed of GA while ensuring ad-blockers don’t catch it.

Sourcery

Sourcery is an excellent tool for developers that continually reviews your code and suggests improvements automatically. Write better code, and catch errors before it goes to review.

Cyber Security Icons

This set of Cyber Security Icons contains 20 illustration-style icons. In addition, there are some great interpretations of complex ideas like retina scans, crypto vaults, and end-to-end encryption.

Blinqo

Blinqo is a handy little Chrome extension for anyone that needs to share their screen. It allows you to blur parts of your screen when sharing or recording, so your private details remain private.

Instaprice

Instaprice is a helpful new service that shows you what other freelancers charge for the job you’re quoting on. Earn the actual market rates and never get caught out undercharging again!

Leta

Leta is a great app that allows you to design your own keyboard layout. You can redesign the key positions for macOS, Linux, or Windows and download them for free.

Blogic

Build blogs powered by the Notion API with Blogic, a no-code blog builder that can create fast, SEO-friendly blogs in under a minute. Custom domains and third-party scripts are supported.

Digital Maker Toolkit

The Digital Maker Toolkit is a collection of resources for anyone releasing digital products. It includes guides on process, a handy step-by-step checklist, a list of further resources, and a guide to the available tools.

Slides

Slides is a static website generator you can use to create beautiful, animated websites in minutes. Select layouts from a collection of templates and publish with clean code that downloads fast.

AXplorer

AXplorer is a privacy-focused browser with a built-in VPN. Created by the Axia blockchain network, it generates free crypto in the form of AXIA coins when using it to browse the web.

Font Engine

Can’t decide on a font for your latest side project? Font Engine is a handy little app that will suggest fonts for you. Just tell it your brand values and hit the ‘Suggest’ button.

Deliciozo

Deliciozo is an excellent display font with irregular strokes and styling, making it feel like a paper cut-out. It’s perfect for magazines, cookbooks, and even logos.

Kayino

If you’re looking for a font to convey the hippy era, look no further than the psychedelic stylings of Kayino, a groovy display font with crazy details.

Noganas

Noganas is a spooktacular font for the upcoming Halloween festivities. Use it to add some gruesome frivolity to your seasonal designs.

Source

The post Exciting New Tools for Designers, October 2022 first appeared on Webdesigner Depot.

Source de l’article sur Webdesignerdepot

/par

Things We Still Do, Twenty Years Onward

,

Joel Spolsky’s once prolific blogging output dried up years ago, but Things You Should Never Do, Part I is still a classic after 22 years. He wrote it as an outsider’s postmortem following the first beta release (6) of Netscape’s browser, three years after the previous major release 4. There never was a version 5. The team had decided on a full rewrite, and the resulting delay probably cost them their competitive advantage over Microsoft’s Internet Explorer. 

“If Netscape actually had some adult supervision with software industry experience, they might not have shot themselves in the foot so badly”, he closes. 

Source de l’article sur DZONE

/par

The Woody Allen Way of Coding

,

In a previous post I wrote about the uncompromising artistry of Stanley Kubrick, who produced film classics at the cost of wildly unpredictable schedules and budgets. You can reach for similar brilliance in programming, but you had better do it on your own time or with a generous CFO. There is a different, more workable, and healthier attitude towards our craft. Just keep at it, enjoy it, and don’t worry about making a dent in the universe. I’m reading Woody Allen’s autobiography over the holidays, so indulge me to draw another cinematic parallel with this veteran New York writer/director. Don’t worry, it will also be about coding.

Woody Allen is one of the most consistently prolific cinematographers in the business. He has written and directed over fifty films over an equal number of years, almost like clockwork. At 85 he has no intention of stopping. He doesn’t approach his oeuvre as a project with a culmination. His business is about keeping busy. He is in it for the long run, if only to act as an antidote to the unavoidable spectre of death and oblivion. But let’s not get into his glum outlook on the meaning of life.

Source de l’article sur DZONE

/par

Popular Design News of the Week: November 9, 2020 – November 15, 2020

, ,

Every week users submit a lot of interesting stuff on our sister site Webdesigner News, highlighting great content from around the web that can be of interest to web designers.

The best way to keep track of all the great stories and news being posted is simply to check out the Webdesigner News site, however, in case you missed some here’s a quick and useful compilation of the most popular designer news that we curated from the past week.

Quarkly – Design Tool for Creating Websites and Web Apps

 

Create your Personal Branding Strategy in 4 Simple Steps

 

How to Design a Landing Page

 

No Code MBA – Learn to Build Real Apps and Websites Without Code

 

Your Computer Isn’t Yours

 

Swatches – Generate Colors for Every Purpose

 

Markabaly – Cross-platform Markdown Editor

 

12+ Bootstrap Hero Image Examples

 

The UX of Among Us: The Importance of Colorblind-friendly Design

 

No, your Clean Code won’t Save the Planet

 

My Side Project Rocks – Share and Discover Side Projects

 

How to Test Content like a Pro: A Step-by-step Guide

 

MacOS Big Sur is Here

 

Free Fonts for Prototyping and Wireframing

 

Gamification: The Broken Way of Carrot and Stick

 

Everything You were Wondering About Apple’s New M1 Chip

 

Please Unsubscribe – Fwd Emails to Unsubscribe from Marketing

 

The Fonts in Popular Things Identified Vol. 2

 

How to Become a Self-taught Graphic Designer

 

Using PowerPoint’s Animated GIF Function

 

Scribbble.io – A Blogging Platform for Developers

 

How to Work with WordPress Block Patterns

 

The Power of Happiness: Being Safe, Free, and Supported

 

How to Handle Scope Creep in Web Design

 

Building Products

 

Want more? No problem! Keep track of top design news from around the web with Webdesigner News.

Source


Source de l’article sur Webdesignerdepot

/par

Broken Windows: How to Create Clean Code

,

Introduction

This time it won’t be my favorite rant about certain operating system. Instead, just a few thoughts about the psychology of bad code.

The broken windows theory, an academic theory proposed by James Q. Wilson and George Kelling in 1982, is a metaphor for disorder within neighborhoods. Their theory links disorder and incivility within a community to subsequent occurrences of serious crime. – Encyclopedia Britannica 

The Tale of Shrubbery Code

Once, in the past, me and my team had a discussion about event handlers in front-end code. We looked in bewilderment at some ancient code. Something similar to this Vanilla JS (I’m a big fan of Vanilla JS, to be clear):

Source de l’article sur DZONE

/0 Commentaires/par

Paying Off Technical Debt: Why You Shouldn’t Go Live With POC Code

,

Let’s face it. You have debt, I have debt, the entire tech world is built on technical debt. What’s the worse thing that can happen when all of our software is built off a pile of technical debt? Well, would you drive on an overpass built with the modeling clay that was used to green light that project? Yeah, didn’t think so. In the beginning stages of building a product, it’s easier to cut corners and make quick decisions. No one sits there and says to their investors, "We understand you want a quick return on the nice big check you wrote, but we are trying to figure out if the platform should be made using blockchain or Rails 5." (Yes, I know those are VASTLY different things, work with me here).

CAST Software found the average per-line cost of technical debt to be $3.61, and for Java code, a staggering $5.42. Interesting Forbes Article

You want to build a platform, go to market quickly and get that sweet, sweet validation that users actually want what you built. I’m not here to kill your dreams or to tell you to move slowly. After all the tech industry is famous for "fail fast." What I want to suggest is that as soon as you go to market with viable product, start thinking through those long-term consequences. That time you choose X, when you really knew Y would have been a better long-term solution. Do you have time to clean up that 53 line function in your Android app? Can that unit test use a few more, obvious, edge cases? You and I both know the resounding answer is: "YES!"

Source de l’article sur DZone (Agile)

/0 Commentaires/par

Code Review

,

I can’t actually share all the code. So this feels incomplete. But I can share what I said about the code. Then you can look at your code and decide if you’ve got similar problems to fix.

My responses were these. I’ll expand on them below.

Source de l’article sur DZONE

/0 Commentaires/par

Clean Code – Robert C. Martin’s Way

,

Writing good code in accordance with all the best practices is often overrated. But is it really? Writing good and clean code is just like good habits which will come with time and practice.
We always give excuses to continue with our patent non-efficient bad code, reasons like no time for best practices, meeting the deadlines, angry boss, tired of the project, etc. Most of the time we try to procrastinate by saying will make it efficient and clean later but that time never comes.
Bad code is not problematic for us to understand but for the other developers who will handle that after us.

So, let me get you to the points by Robert C. Martin in his captivating book Clean Code.

Source de l’article sur DZone

/0 Commentaires/par

Forget about Clean Code, Let’s Embrace Compassionate Code

,

When your heroes start acting weird, you reexamine their influence on your life. I’ve long been learning, demonstrating and teaching clean code through TDD, patterns, and so on. But when I look back, I am now worried that the ideas negatively influence my life and my work and that of others.

Many who know me consider me an exceptionally skilled programmer. I got that way because I have often spent my evenings practicing programming techniques and technologies. I often leave the office 1-2 hours later than my co-workers after polishing some piece of ultimately meaningless code. This is time I don’t spend with my family. Because I’ve learned to care about Clean Code.

Source de l’article sur DZone

/0 Commentaires/par