Intro to basic web application security

Intro to basic web application security” is an excellent overview of the most common mistakes web developers make when it comes to security. The article provides practical examples (including code snippets and screenshots), which illustrate the problems and ways to solve them. The list includes:

  • SQL injection (of course! no such guide would be complete without it)
  • Cross-site scripting (XSS)
  • Cross-site Request Forgery (CSRF/XSRF)
  • Local file inclusion (LFI)
  • Insufficient password hashing
  • Man in the middle (MITM)
  • Command injection
  • XML external entity (XXE)
  • Sensitive data exposure (including error messages and exceptions)
  • Login rate limits
  • and a variety of other, small, but potentially dangerous issues.

Mobile Jazz Company Handbook

I’ve seen plenty of company handbooks. Some of those were in the companies that I worked for. Others – shared documents from companies I’ve only heard about. Mos of these handbooks were rather boring HR documents, explaining boring HR rules and polices to mostly new employees – working hours, company structure, dress code, and the like.

Today I came across a different kind of the company handbook. It comes from the Mobile Jazz, which is a mobile and web development company.

Have a look at this PDF. It’s a thing of beauty!

Before I even finished reading through it, I wanted to work for or with the company. It’s cool. It’s fun. It’s awesome!

And it doesn’t matter from which perspective you are looking at it. The design of the document is great. The content is great. The purpose is great. And it radiates the company culture, and what a culture it is!

I just can’t get enough of it. It’s exactly the kind of place most techies want to work for. It’s open. It’s transparent. It has great values. It’s immediately trustworthy.

This is an excellent example for so many companies to follow! Raising the bar, one company handbook at a time…

The Complicated Economy of Open Source Software

Open Source Software is cool and exciting. If you are a developer. But building a business around it is quite challenging. Many have tried and failed. And only a few have succeeded.

Recently, I came across this article – “The Internet Was Built on the Free Labor of Open Source Developers. Is That Sustainable?” – which dives into this issue and explores it pretty deep.

That also reminded me of so many post-mortems for technical startups that I’ve read over the years. “RethinkDB: why we failed” is one such example.

Surely, articles like these shouldn’t stop people from building businesses around the Open Source Software. But they should at least balance out the rosy eyes approach many entrepreneurs have.

Refactoring.Guru : Design Patterns + PHP

Refactoring.Guru is a great resource for learning about refactoring best practices and design patterns. A lot of the website’s content is also available as Dive into Design Patterns ebook.

Today I came across this GitHub repository, which makes this resource even better specifically for PHP developers. Yup, that’s right, the GitHub repository features all code examples written in PHP 7.3, making it super easy to jump into coding.

And if you aren’t a PHP developer, have a look at the other repositories, which do the same for a few other programming languages.

Slack Tips

Tips and demo are probably my most favorite sections on any website, especially so for productivity tools. I’m glad to see that Slack Tips are now launched as well, with a collection of simple, yet powerful recipes on how to make everyone’s life easier.