Web Developer Security Checklist

By

-

May 22, 2017

Developing secure, robust web applications in the cloud is hard, very hard. If you think it is easy, you are either a higher form of life or you have a painful awakening ahead of you.

If you have drunk the MVP Kool-aid and believe that you can create a product in one month that is both valuable and secure — think twice before you launch your “proto-product”. After you review the checklist below, acknowledge that you are skipping many of these critical security issues. At the very minimum, be honest with your potential users and let them know that you don’t have a complete product yet and are offering a prototype without full security.

10 JavaScript Concepts Every Node.js Programmer Must Master

By

InfoWorld

-

May 22, 2017

With JavaScript and the V8 engine at the core, an event-driven architecture, and scalability out of the box, Node.js has quickly become the new de facto standard for creating web applications and SaaS products. Many frameworks like Express, Sails, and Socket.IO enable users to quickly bootstrap applications and focus only on the business logic.

Of course Node.js owes much to JavaScript for its enormous popularity. JavaScript is a multiparadigm language that supports many different styles of programming, including functional programming, procedural programming, and object-oriented programming. It allows the developer to be flexible and take advantage of the various programming styles.

Using Docker in Production

By

O'Reilly

-

May 22, 2017

Right now, Docker is an excellent tool to manage distributed applications. This is the result of quite a bit of evolution; in its earlier stages, Docker focused mainly on managing containers themselves. Thinking back to two or three years ago, getting started with Docker was a bit of a pain because there weren’t very mature developer tools in the ecosystem. Instead you were left with documentation and really long “docker run” commands, and you really had to know what was happening at the container level. Now Docker has grown and evolved a bit to where the container is just an implementation detail, allowing you as an engineer to focus on what’s really important: the services themselves.

Security in Serverless: What Gets Better, What Gets Worse?

By

The New Stack

-

May 22, 2017

The emerging serverless computing architecture alleviates several server-oriented security risks, but it also requires new threat analysis and prevention, asserted Snyk CEO and co-founder Guy Podjarny said at the Serverlessconf conference in Austin recently.

In his presentation, Podjarny broke serverless security threats into three categories: Those threats diminished (but still present) in serverless environments, threats that remain the same, and new risks that come from not having to manage servers.

Top 32 Nmap Command Examples For Sys/Network Admins

By

Vivek Gite

-

May 20, 2017

Nmap is short for Network Mapper. It is an open source security tool for network exploration, security scanning and auditing. However, nmap command comes with lots of options that can make the utility more robust and difficult to follow for new Linux users.

The purpose of this post is to introduce a user to the nmap command line tool to scan a host and/or network, so to find out the possible vulnerable points in the hosts. You will also learn how to use Nmap for offensive and defensive purposes.

Keynote: Cloud Native Networking- Amin Vahdat, Fellow & Technical Lead For Networking, Google

By

The Linux Foundation

-

May 19, 2017

https://www.youtube.com/watch?v=1xBZ5DGZZmQ?list=PLbzoR-pLrL6p01ZHHvEeSozpGeVFkFBQZ

Amin Vahdat, Fellow & Technical Lead For Networking at Google, talks about networking challenges we’ll face over the next decade at Open Networking Summit.

Voice-Controlled Home Automation from Scratch Using IBM Watson, Docker, IFTTT, and Serverless

By

The Linux Foundation

-

May 19, 2017

https://www.youtube.com/watch?v=xM1b8Au4pa4?list=PLbzoR-pLrL6pSlkQDW7RpnNLuxPq6WVUR

At the recent Embedded Linux Conference, IBM IoT/Mobile software engineer Kalonji Bankole and IBM Cloud & Watson developer Prashant Khanal detailed Big Blue’s spin on serverless, called IBM Bluemix OpenWhisk.

This Week in Open Source News: Google Fuchsia Pros & Cons, Microsoft’s Steady Linux Embrace & More

By

The Linux Foundation

-

May 19, 2017

This week in OSS & Linux news, Jack Wallen shares a rundown of Google Fuchsia features and how they affect Android, Microsoft can no longer ignore Linux in the data center, & more! Read on to stay open-source-informed!

1) Jack Wallen shares pros and cons of Google Fuchsia

What Fuchsia Could Mean For Android– TechRepublic

2) “Microsoft is bridging the gap with Linux by baking it into its own products.”

How Microsoft is Becoming a Linux Vendor– CIO

3) Sprint’s CP30 “is designed to streamline mobile core architecture by collapsing multiple components into as few network nodes as possible.”

Sprint Debuts Open Source NFV/SDN Platform Developed with Intel Labs– Wireless Week

4) Move over, Siri! Open source Mycroft is here to assist us.

This Open-Source AI Voice Assistant Is Challenging Siri and Alexa for Market Superiority– Forbes

5) Heterogenous memory management is being added to the Linux kernel. Here’s what that will mean for machine learning hardware:

Faster Machine Learning is Coming to the Linux Kernel– InfoWorld

Product Development in the Age of Cloud Native

By

Open Source Entrepreneur Network

-

May 19, 2017

In a cloud native world, where workloads and infrastructure are all geared towards applications that spend their entire life cycle in a cloud environemnt, One of the first shifts was towards lightning fast release cycles. No longer would dev and ops negotiate 6 month chunks of time to ensure safe deployment in production of major application upgrades. No, in a cloud native world, you deploy incremental changes in production whenever needed. And because the dev and test environments have been automated to the extreme, the pipeline for application delivery in production is much shorter and can be triggered by the development team, without needing to wait for a team of ops specialists to clear away obstacles and build out infrastructure – that’s already done.

Google Reveals a Powerful New AI Chip and Supercomputer

By

MIT Technology Review

-

May 19, 2017

At the company’s annual developer conference today, CEO Sundar Pichai announced a new computer processor designed to perform the kind of machine learning that has taken the industry by storm in recent years.

The announcement reflects how rapidly artificial intelligence is transforming Google itself, and it is the surest sign yet that the company plans to lead the development of every relevant aspect of software and hardware.

Perhaps most importantly, for those working in machine learning at least, the new processor not only executes at blistering speed, it can also be trained incredibly efficiently. Called the Cloud Tensor Processing Unit, the chip is named after Google’s open-source TensorFlow machine-learning framework.