How docker is useful to me ? I'm not doing any serious work in PHP anymore but now and then, we have customers or friends asking about problem in their PHP app. Since I don't have proper PHP environment setup anymore, having docker is super useful to quickly test issue with these PHP code. //@devkini

http://metak4ml.blogspot.my/2018/03/php-with-docker.html

One good lesson here. Never serve user generated content at the same domain of your main website. This is very common practice actually.

Let your website is www.easyphone.com, and you allow user to upload a profile picture, probably you'll serve the profile picture from something like www.easyphone.com/images/user/xyz/profile.jpg. That's wrong.

If users can upload HTML documents and have them hosted on your application’s primary domain, that’s an excellent way to setup phisihing opportunities for attackers. Serving user content from your domain can also fool users into thinking malicious content is actually legitimate content from your company, as the FCC found out last fall.

Users could upload malicious javascript that would be run by the browser with the same trust level as your application’s javsacript code, allowing it to tamper with your site’s cookies and potentially steal user’s credentials, sessions or other data.

Always serve the uploaded files from different domain like www.ep-content.com/images/user/xyz/profile.jpg. //@devkini

https://blog.hartleybrody.com/startup-security/

Few days ago my friend released new golang library, called gubrak. A weird name isn't it?

This library is useful for solving common programming task, very similar like lodash or underscorejs but for golang, I think you might find this library useful.

Currently there are around 46 available functions. I'll keep adding more functions during spare time.

One thing special from gubrak, it has very detailed api documentation.

Creating modular functions that accept various type of data is pretty hard in golang, since this language is statically-typed. but it's still possible using interface{} and reflect. And that's the first reason that triggers gubrak creation.

While working on this library, he learned 3 things:

1. laws of reflection; read more about it at https://blog.golang.org/laws-of-reflection

2. Vue JS; he use this library to build the landing & documentation page from scratch. vuex, vue-router, He started to fell in love with it haha

3. TDD; He did follow TTD paradigm, and it's fun! He can say this library has the most intensive test compared to other libraries created (around 2600 line of codes just for the tests!)

Please, have a look :D https://gubrak.github.io

Some notes about Startup/Developer meetup last Saturday.

https://blog.xoxzo.com/2018/03/31/startup-developer-2018/

Daily git command - show all changes to a single file:-

git log --color=always --follow -p -- filename | less -r

Flutter beta 2 released.

https://medium.com/flutter-io/https-medium-com-flutter-io-announcing-flutters-beta-2-c85ba1557d5e

Boleh rujuk post sebelum ini untuk maklumat ringkas berkaitan Flutter - https://t.me/devkini/558.

Debian developer at 15, now CTO at Nylas. AMA session with Christine Spang. #devkini

https://dev.to/spang/hi-im-christine-and-i-started-contributing-to-debian-when-i-was-15-now-im-the-cto-of-nylas-ask-me-anything-2hh0

4 Jenis bug yang biasa dihadapi oleh programmer:-

Bohrbugs - Ini yang biasa. Biasanya dengan hanya ikut step yang dinyatakan oleh pengguna yang menemui bug ini, programmer akan dapat "reproduce" bug ini dengan mudah.

Heisenbugs - Bug jenis ini biasanya hilang, atau berpindah ke tempat lain bila programmer cuba errr ... debug program tersebut.

Boleh baca artikel ini untuk mengetahui 2 lagi jenis bugs yang biasa ditemui. //@devkini

https://opensourceforu.com/2010/10/joy-of-programming-types-of-bugs/

"Software developers should be willing to turn down jobs that pay little and also be willing to improve their own skills and move onto positions at other companies that pay more."

We talked to Daisuke Horie (Dice), VP of Engineering at Peatix and asked few questions related to software engineering career. Read the full interview at Xoxzo's blog https://blog.xoxzo.com/2018/05/15/interview-with-daisuke-horie/.

//@devkini

Q: What is Microsoft doing with Go?
A: Microsoft is using Go internally to power pieces of the Azure infrastructure, like AKS [Azure Container Service]. For customers, Go is definitely a first-class citizen on Azure – you can use Go to make calls to the Azure SDK and provision services and infrastructure. You can also use Go to call into those services and consume things like Cosmos DB, other databases, message queues, any of the services that Microsoft provides. The Azure team has been investing in a great experience for Go developers.

https://open.microsoft.com/2018/02/21/go-lang-brian-ketelsen-explains-fast-growth/

Stop disabling SELinux, please.

https://stopdisablingselinux.com/

It seem there's some discontent on the explicit use of "132 Women In Cybersecurity ..." of the linked article above. They argued, the title should not use any gender remark and just say "132 In Cybersecurity To Follow ..."

While that still left to be debated, we apologized if the article above look offended.

Good to keep this in mind in case of high disk IO usage:-

We found an alternative solution by mounting two different disks in each node. We use one disk for the Docker filesystem, where Docker stores information about the containers running. We use the other disk for our own workloads, where customers run their build commands.