Articles

In my role as a consultant for CleanSlate Technology Group, I am required to enter my time on a periodic basis. Our company currently utilizes the FinancialForce solution within Salesforce for professional services billing. For years, I have found that it is easier to enter my time on a daily basis. This allows me to provide detailed comments on what was accomplished with each time entry. At the start of the month, I work with the service delivery manager and my clients to establish a personal goal. This goal is normally set in total hours for a given month.

I like to make my goal and create a personal burndown chart, so I can quickly see how my billable hours compare to the hours expected. I quickly realized that Salesforce did not provide a default reporting solution that met my needs. Using Microsoft Excel, I was able to create a sheet which included a burndown chart:

Source de l’article sur DZONE

As a consistent user and developer on the OpenShift platform over the years, I’ve tried helping users by sharing my application development content as we’ve journeyed from cartridges all the way to container base development.

With container based development we’ve also transitioned from using templates to define how to deploy our tooling and applications, to operators. There are many examples of how to work with the templated versions of our applications around decision management and process automation found on Red Hat Demo Central and JBoss Demo Central.

Source de l’article sur DZONE

2020 has been an interesting year, to say the least. And although I’m sure many of you can’t wait until the calendar flips ahead to 2021, it doesn’t look as though we’re going to be able to say goodbye to 2020 so easily. Many of the changes we’ve had to make this year are now expected to stay with us — a least for the following year.

The latest research gives us some hints about what’s to come.

If you want to start preparing for 2021 now, then these reports and surveys from organizations like 99designs, Upwork, Content Marketing Institute, and McKinsey & Company are a must-read:

1. 99designs Reports on the Common Challenges Freelancers Faced in 2020

I don’t want to make 99designs’s Design Without Borders 2020 report sound like it’s all doom-and-gloom. Because it’s not.

That said, 2020 has been a rough year and it would be irresponsible for me not to acknowledge the challenges that all of us freelancers have encountered this year. This report is one of the few I’ve found that includes data on the major challenges freelancers have dealt with this year, including:

  • 36% have struggled to maintain a steady flow of work or a stable client base;
  • 27% had clients who cut their business budgets and, consequently, their freelancers’ workloads;
  • 26% had at least one project cancelled or indefinitely paused;
  • 22% have been ghosted by at least one client.

Beyond working more hours and hustling to find new clients all the time, what else can freelancers do to weather a business disruptor like COVID-19? There are a number of things.

For starters, it would be really helpful to have a crisis management plan for your finances. It would also be beneficial to refocus your efforts on finding clients who pay for the value you provide and not for the hours you spend building websites. Clients who see the value in what you do will be less likely to ghost or drop you at the first sign of trouble.

2. Upwork’s Survey Reveals Educational Opportunities for Freelancers

Upwork commissioned Edelman Intelligence to put together its very first Freelance Forward survey. The goal of the ensuing report was to shed light on the state of freelancing, how the pandemic has changed it, and what we can expect in the future as a result.

One of the data sets I think web designers should pay close attention to is this:

According to this survey, freelancers only spend about 52% of their time on billable work.

Now, one of the reasons why entrepreneurs and enterprise companies make so much money is because tasks are relegated to different team members. For instance, if a design agency owner is good at building relationships with prospects, they’re going to spend time on sales calls and managing social media. The day-to-day admin tasks would then get offloaded to virtual assistants and billable project work would go to designers, developers, writers, and so on.

But as a freelancer, you don’t have the ability to delegate and scale when you’re working solo.

Rather than burn yourself out trying to handle all these things yourself, the report suggests there’s something else you can do:

Although freelancers recognize how important soft skills and business skills are, the first data set suggests that not enough attention might be paid to them.

What I suggest is that you take a look at the division of your work hours. If you’re spending less than half of your time on billable work, it might be a good idea to strengthen your non-design skills. That way, things like marketing, contract preparation, and client management won’t consume so much of your time in the future and you can bill more.

3. CMI’s Annual Report Reveals Profitable Opportunities for Web Designers

Content Marketing Institute’s annual B2B Content Marketing Report is, once again, chock full of useful tidbits about the state of content marketing.

While a lot of the data is focused around marketing organizations and how they’ve pivoted during the pandemic, I thought this bit of info would be really helpful for web designers:

For those of you who design B2B websites, take note of where these companies plan to invest in 2021. If 2020 has been particularly hard on you, or you simply want to expand your horizons, there are some other opportunities worth jumping into:

B2B Marketing Investment => Web Designer Opportunity
Content creation => Blog graphic design, infographic design, and schema markup creation
Website enhancements => Website redesign, website audits
Content distribution => Social media ad design, Google ad design, schema markup creation
Getting to know audiences better => UX research, UX design
Customer experience => Chatbot/live chat development, support portal creation

4. McKinsey B2B Analysis Suggests That Digital Is Here to Stay

For those of you who’ve worked for a B2B sales organization before, you know how important in-person interactions are to them. It’s not as though they can just sell their products or services online the way B2C ecommerce companies can. The key to B2B success is through customer (and partner) relationship building.

Prior to 2020, this meant lots of in-person meetings, phone calls, and emails. But something has changed this year, on both sides of the fence.

This chart from McKinsey suggests that digital relationship building and customer service aren’t just a temporary solution for COVID-19. B2B decision-makers are coming around to the idea that this is going to be their “next normal” (as McKinsey refers to it).

These new “go-to-market models” include the following:

  1. Talk to prospects, customers, and partners via video calls;
  2. Digital self-service options for customers who prefer the DIY method.

As a web designer, you can help your B2B clients level up their efforts to achieve this next normal.

For starters, you can integrate scheduling into their websites. This’ll empower prospects to schedule video meetings (for demos, discovery calls, etc.) with your clients’ sales teams.

Another thing you can do is build out self-service elements like live chat or chatbots, FAQs pages, knowledgebases, and support portals. As consumers become more confident with doing business online, these self-service options will make a world of difference in their experience with brands.

Wrap-Up

I know, I know. 2020 sucked. But at least we have a good amount of research and experience that gives us a much clearer idea of what we’re getting ourselves into with the coming year. (At least, I hope so.)

Source


Source de l’article sur Webdesignerdepot

This week on the Dev Interrupted podcast, I spoke with Cate Huston, Director of Engineering at DuckDuckGo. She’s an expert in asynchronous development and shared tons of interesting ideas: 

  •  How DuckDuckGo utilizes transient and permanent spaces differently
  •  How product feedback sessions are completed asynchronously
  •  How to help new remote employees feel a sense of belonging and accomplishment. 
  •  The unique relationship between asynchronous managers and developers  

Cate is really smart and has a super-awesome sounding accent so check it out! 

Source de l’article sur DZONE

When I use map apps such as Google Maps, I often use Street View to display more detailed views of a street or inside of a building.  Although Google Street View is fantastic, there are many use cases where I want to control the development pipeline and assets without having to upload images to Street View. 

To control and optimize your business workflow, you can use open-source Marzipano to build virtual tours yourself and host the tours on your own web site.  This tutorial explains how to build the tour with open source software and host it for free on GitHub Pages. The technology and techniques can scale to large cloud businesses and are in production at commercial sites.   This tutorial focuses on a minimal simplified site to get you started with the basic concepts in minutes.

Source de l’article sur DZONE

Serverless computing, which is commonly referred to as just Serverless, is a promising cloud-based technology model that has emerged on the app development and software architecture horizon in recent years. Trying to avail themselves of the huge serverless framework potential, many big-time market players have been quick to jump on the cloud services bandwagon. Such software giants like Google, Microsoft, IBM, and Amazon already offer the customers to migrate all the local business operational efficiencies to be hosted on their flagship serverless platforms like AWS Lambda and Azure Functions.   

Simply put, serverless architecture is an event- and request-driven tech solution allowing application developers to create actionable working environments in the cloud that have all the necessary computational resources needed for a smooth coding flow. This framework comes in handy especially when time is an issue and the tasks assigned are quite resource-intensive.

Source de l’article sur DZONE

Convenience is the key take away from AWS and Azure, because out of the box, they give you all the stuff you need to get started with your application development. However, creating your own cloud doesn’t need to be that difficult. If you create your own cloud you’ll also get rid of dozens of lockin technologies, such as Azure Functions, Lambda Functions, Cosmos DB, etc. These « features » provides you with few necessities besides the usual lockin. An acquaintance of me once compared these features to « the heroin marketing model, where the first doze is always free. »

If you want to create your own cloud, you’ll need the following features to get started.

Source de l’article sur DZONE

As more organizations move to establish DevOps techniques into their Software Development Life Cycle, the need of security becomes even more evident when so much application development is going on. But…

Security and DevOps Aren’t Natural Companions

The idea of security in DevOps or DevSecOps doesn’t go very well with the classic DevOps process that insists on continuous integration, delivery, and deployment. When at production you’re constantly releasing smaller bits of your code and application using the DevOps pipeline, introducing security to DevOps can slow down the process significantly. You can’t just pass that through a security team that takes several weeks bringing the new release out to production. 

Source de l’article sur DZONE

A hacked WordPress site is as damaging as having your home burgled. It can completely shatter your peace of mind and adversely impact your online business. 

Why do hackers target WordPress sites? The answer is relatively simple: WordPress is the single biggest platform for website creation these days, so there’s a larger base to attack; this attracts the attention of online criminals. 

So, how can a hack impact your website? 

Depending on the type of attack, your website could suffer any of the following:

  • It could be defaced completely;
  • It could load or operate very slowly on any device;
  • It could completely crash and malfunction;
  • It could display the dreadful “White Screen of Death”;
  • Its incoming visitors could be redirected to other suspicious websites;
  • It could lose all your valuable customer data.

This list is not exhaustive but you get the idea.

Now that we know how a successful hack can impact your website and online business, let us look at the top 10 reasons behind WP hacks and prevent them.

1. An Insecure Web Host 

Like any website, WordPress is hosted on a web host or server. Unfortunately, most site owners do not pay much attention to the web host they select and choose the cheapest they can find. For example, it is more affordable to host a website on a shared hosting plan — one that shares its server resources with many other websites like yours.

This can make your site vulnerable to hackers as a successful hack into any website on the shared server. A single hacked site can consume the overall server bandwidth and impact all the other sites’ performance.

The only way to fix this problem is to opt for a reliable host and a virtual or dedicated server.

Pro tip: If you’re already using a shared hosting plan, check with your hosts if they offer VPS hosting and make the switch.

2. Use of Weak Passwords

Weak passwords are the main reason behind successful brute force attacks that target your account. Even to this day, users continue to use weak and common passwords like “password” or “123456”; if you’re one of them, your website could land in trouble!

Guessing weak passwords allows hackers to enter the admin accounts where they can inflict the maximum damage.

How do you fix this problem? Simple, ensure all your account users (including admin users) configure strong passwords for their login credentials. With at least 8 characters, passwords must be a mix of upper- and lower-case alphabets, numbers, and symbols. 

For added safety, install a password management tool that can automatically generate and store strong passwords.

Pro tip: You can use a plugin to reset passwords for all your users.

3. An Outdated WP Version

Outdated software is among the most common reasons why websites get hacked. Despite being free to download, most site users defer updating their site to the latest version, for fears of updates causing their site to crash.

Hackers take advantage of any vulnerability or bug in an older version and cause issues like SQL Injections, WP-VCD Malware, SEO Spam & other major issues like website redirecting to another site.

How do you solve this problem? When you see a notification about an update on your dashboard, update your site as soon as possible.

Pro tip: If you are worried about updates crashing your live website, you can first test the updates on a staging site.

4. Outdated WP Plugins and Themes

Similar to the previous point, hackers also take advantage of outdated, unused, or abandoned plugins and themes installed on websites. With over 55,000 plugins and themes that are available, it is easy to install a plugin or theme, even from unsafe or untrusted websites. 

Plus, many users do not update their installed plugins/themes to the latest version or do not find the updated version. This makes it easier for hackers to do their job & infect sites.

How do you avoid this problem? As with the core WP version, update each of your installed plugins/themes on your site regularly. Take stock of all the unused ones and remove them or replace them with better alternatives.

You can update your plugins/themes from your hosting account.

Pro tip: We suggest setting aside time every week to run updates. Test them on a staging site and then update your site.

5. Common Admin Usernames 

In addition to weak passwords, users also create common usernames that are easy to guess. 

This includes common usernames for admin users like – “admin”, “admin1”, or “admin123”. Common admin usernames make it easier for hackers to get into admin accounts and control backend files in your WP installation.

How do you avoid this problem? If you are using any such usernames that are easy to guess, change them immediately to a unique username. The easiest way of doing it is through your hosting account’s user management tool, by deleting the previous admin user and creating a new admin user with a unique username.

As the first step, change the default username of your admin user and limit users who have administrator privileges.

Pro tip: WordPress has 6 different user roles with limited permissions. Only grant admin access to users who really need it.

6. Use of Nulled Plugins/Themes 

Coming back to the importance of plugins/themes, users have access to many websites that sell nulled or pirated copies of popular and paid plugins and themes. While these are free to use, they are often riddled with malware. They can compromise your website’s overall security and make it easier for hackers to exploit. 

Being a pirated copy, nulled plugins/themes do not have any available updates from its development team, hence will not have any security fixes.

How do you fix this problem? Simple, for a start, only download original plugins and themes from trusted websites and marketplaces.

Pro tip: If you don’t wish to pay for paid or premium plugins and themes, opt for a free version of the same tools that will have limited features but are still safer to use than the nulled version. 

7. Unprotected Access to wp-admin Folder

To take control of your site, hackers often try to break into and control your wp-admin folder in your installation. As the website owner, you must take measures to protect your wp-admin directory.

How can you protect your wp-admin folder? First, restrict the number of users having access to this critical folder. Additionally, apply for password protection as an added layer of security for access to the wp-admin folder. You can do this using the “Password Protection Directories” feature of the cPanel in your web host account.

Pro tip: Besides these fixes, you can also implement Two Factor Authentication (or 2FA) protection for all your admin accounts.

8. Non-SSL Website

You can easily migrate your HTTP website to HTTPS by installing an SSL certificate on your site. SSL (or Secure Socket Layer) is a secure mode of encrypting any data transmission between your web server and the client browser.

Without this encryption, hackers can intercept the data and steal it. Plus, a non-secure website can have many negative implications for your business – lower SEO ranking, loss of customer trust, or a drop in incoming traffic.

How do you fix this problem? You can quickly obtain an SSL certificate from your hosting company or SSL providers. It encrypts all data that is sent from and received by your website. 

Pro tip: You can get a free SSL certificate from places like Let’s Encrypt, but these provide limit protection that will only be sufficient for a starter site or small site.

9. No Firewall Protection

Lack of firewall protection is another common reason why hackers can bypass website security measures and infiltrate the backend resources. Firewalls are the last line of defence against hackers and work like the security alarm installed on your house. Firewalls monitor web requests coming from various IP addresses, including the suspicious (or bad) ones. 

They can identify and block requests that are known to be malicious in the past, thus preventing easy access for hackers to your website domain. Web application firewalls can thwart various attacks, including brute force attacks, XSS, and SQL injections.

Pro tip: A firewall provides much-needed security and is  your first line of defence. But it’s important to also have a malware scanner installed.

10. Lack of WordPress Hardening Measures

Typically, hackers target the most vulnerable areas or weaknesses within a WP installation, to illegally access or damage the website. The WordPress team has identified these vulnerable areas and has devised a list of 12 hardening measures recommended for every website.

A few of these include:

  • Disabling the File Editor;
  • Preventing PHP execution in untrusted folders;
  • Changing the security keys;
  • Disallowing plugin installations;
  • Automatic logout of inactive users;

How do you implement these hardening measures? While some steps are easy to understand, others require the technical expertise of how WordPress works. 

Pro tip: You can implement hardening measures on your own. However, some measures require technical expertise so in these cases, it’s much easier and safer to use a plugin.

 

Featured image via Pexels.

Source


Source de l’article sur Webdesignerdepot

API test is a significant part of a successful Continuous Integration/ DevOps practice. As per Google Trends, the interest in Web/ API services tests has been progressively growing over the few decades. According to SmartBear research over 3,372 software professionals in API test over 2019, 91 percent of participants either presently have, or thinking to have a formal API test procedure in place in the coming future. Around 45 percent of API testers reported that their company already automated 50% or more of test projects. Moreover, by more than 75 percent of companies across industries, API quality is considered a top priority.

With APIs more and more becoming crucial elements for software development, it has become critically essential for programmers and developers to carry out API testing. API test is a procedure that concentrates on identifying whether an API that has been developed meets up the expected threshold concerning security, reliability, performance, and functionality. As these tests are crucially vital, you need to make use of the top API testing tools out there. 

Source de l’article sur DZONE