Short notes on tech 13/2021

Week 13 of 2021

Learn

SMS: Substitutable Message Service
"Replacing the content of previously sent SMSs is actually possible."

Emoji under the hood
How “biggest innovation in human communication since the invention of the letter 🅰️” works under the hood.

Tools of the trade

Pyright
Static type checker for Python.

lazydocker
A simple terminal UI for both docker and docker-compose, written in Go with the gocui library.

Codetour
"CodeTour is a Visual Studio Code extension, which allows you to record and playback guided walkthroughs of your codebases. It's like a table of contents, that can make it easier to onboard (or re-board!) to a new project/feature area, visualize bug reports, or understand the context of a code review/PR change."

Responsively
"Develop responsive web apps 5x faster! A must-have DevTool for all Front-End developers."

Permissions
A simple site to test permission-related UI for web APIs.

Simulator Status Magic
"Modify the iOS Simulator so that it has a perfect status bar, then run your app and take perfect screenshots every time."

Cloud

Security Logging in Cloud Environments - GCP
"If you had to architect a multi-account security logging strategy, where should you start?" (from Cloud Security Reading List)

Something different

Ask HN: What was the biggest contributor to your happiness in the past year?
"Video walks on Youtube."

Short notes on tech 11/2021

Week 11 of 2021

Work life

Handbook for Remote employees
Read how Remote works as a company and take notes.

How to Deal with Difficult People on Software Projects

Your Thinking Rate Is Fixed
"You can’t force yourself to think faster. If you try, you’re likely to end up making much worse decisions. Here’s how to improve the actual quality of your decisions instead of chasing hacks to speed them up." (from Hackernewsletter)

Generalists vs specialists - who has a greater chance of success?
(from Hackernewsletter)

Learning

The Front-End Developer Learning Roadmap

AWS Cloud Development Kit Workshop
Learn CDK.

Software development

Best practices for REST API design
"In this article, we'll look at how to design REST APIs to be easy to understand for anyone consuming them, future-proof, and secure and fast since they serve data to clients that may be confidential." (from Hackernewsletter)

You really should use dev containers
tl;dr; "use development containers, indicating the act of running and compiling code inside a container, not on the host machine OS."

The case for and against Amazon Cognito

Information Security

How often should I rotate my ssh keys?
"More often than never! As often as you can. And make sure you retire old keys when you’re done with them." (from Hackernewsletter)

Tools of the trade

Helppo
"Instant admin UI for your database" Supports PostgreSQL and MySQL.

TSDX
Zero-config CLI for TypeScript package development

Colorful VSCode titlebars for better productivity
tl;dr;
"workbench.colorCustomizations": {
"titleBar.activeBackground": "#553955" // change this color!
}

Short notes on tech 10/2021

Week 10/2021

iOS development

Analyse, Design & Code the ClubHouse app with SwiftUI
This video from Franck Ndame on recreating the Clubhouse UI from scratch is incredibly well-produced and enjoyable to watch. Follow it up by checking out the Figma design and source code. (from iOS Dev Weekly)

Cloud

A Quick Look at GKE Autopilot (in 15 minutes)
"I was curious to take a look at GKE Autopilot, so if you don't have time to play with it, I did it for you. (from Cloud Security Reading List)"

Software development

Ethical Design Guide
Resources for creating ethical products that don't cause harm. (from Weekend Reading List)

Why is it so hard to see code from 5 minutes ago?
"Do you undo recent changes to remember what the code looked like a few minutes ago? Why can’t IDEs do that for us?" Waiting for "Yestercode" to be a VS Code extension. (from Weekend Reading List)

Modules, monoliths, and microservices
(from Hacker News comments)

Worklife

Things your manager might not know
If you never managed people before, it's not obvious how to manage your manager. Julia explains how to do that. (from Weekend Reading List)

How to be more productive without forcing yourself

Something different

Internet Archive Infrastructure
tl;dr; Lots of hardware.

Short notes on tech 9/2021

Week 9/2021

Tools of the trade

Uizard
"The design tool for everybody. Scan a paper scribble and you get a wireframe. Upload images and it will extract color and style to generate a matching theme." (from Weekend Reading)

Camo
Camo makes you look great on Zoom by using your iPhone as a webcam. You can control lighting, cropping, focus, Bokeh effect, stream 1080p with no stutter (needs cable), use front-facing, telephoto or wide lens. (from Weekend Reading)

Free for developers
List of free and free tier resources.

Cloud

Kubernetes README
"A collection of useful resources to read to learn more about Kubernetes." (from Cloud Security List)

Work

Unpacking Interview Questions
"Series sharing some of the questions the writer uses when he interviews for technical roles. He’ll unpack the question, when to ask it, and how to evaluate answers."

Something different

Scientists break through the wall of sleep to the untapped world of dreams
"Researchers at Paller’s lab at Northwestern University in Illinois, along with researchers in France, Germany and the Netherlands, have independently demonstrated two-way communication with people as they are lucidly dreaming during REM (rapid eye movement) sleep." (from Weekend Reading)

Monthly notes 56

Issue 56, 26.2.2021

Work life

Researchers identify four causes of "Zoom fatigue" and their simple fixes
"Those video calls are likely tiring you out." tl;dr;

  • Excessive amounts of close-up eye contact is highly intense.
  • Seeing yourself during video chats constantly in real-time is fatiguing.
  • Video chats dramatically reduce our usual mobility.
  • The cognitive load is much higher in video chats.

Maximizing Developer Effectiveness
"It’s all about tight feedback loops." (from Weekend Reading)

Information security

OWASP Top 10 for Web
"Inspired by real-world vulnerabilities and case studies, we have created a series of interactive application security training modules to help developers understand, identify and mitigate security vulnerabilities in their applications."

3 Ways to Mitigate Risk When Using Private Package Feeds
"Microsoft whitepaper on best practices to follow to reduce risks against substitution attacks." (from Cloud Security List)

How to use Docker Security Scan Locally
"Docker and Snyk recently entered into a partnership to provide container vulnerability scanning to official images on Docker Hub. Additionally, Docker has integrated scanning directly into Docker for Desktop clients." (from Cloud Security List)

Cloud

Introducing GKE Autopilot: a revolution in managed Kubernetes
"Autopilot is a new mode of operation in Google Kubernetes Engine (GKE). Autopilot clusters are pre-configured with an optimized cluster configuration that is ready for production workloads. This streamlined configuration follows GKE best practices and recommendations for cluster and workload setup and security." You can achieve "the same" by manually ticking the right options.

AWS Account Setup Guide
A guide for configuring new AWS accounts with an emphasis on security, including customizable templates. (from Cloud Security List)

Microservices

A Practical Guide to Writing Secure Dockerfiles
How to write secure Dockerfiles, and how to automate security checks as codified policies and validate them against the Dockerfiles to identify potential security risks before deploying them into production. (from Cloud Security List)

Learning

Tackling TypeScript: Upgrading from JavaScript
"For JavaScript developers looking to learn TypeScript." (from Weekend Reading)

How they SRE
A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE) (from Hacker Newsletter)

Tools of the trade

skan
"sKan is a Kubernetes configuration files and resources scanner that enables developers and devops team members to check whether their work is compliant with security & ops best practices." (from Cloud Security List)

Something different

Calvin and Hobbes search engine
(from Hacker Newsletter, comments)

Short notes on tech 7/2021

Week 7/2021

Microservices

A Practical Guide to Writing Secure Dockerfiles
How to write secure Dockerfiles, and how to automate security checks as codified policies and validate them against the Dockerfiles to identify potential security risks before deploying them into production. (from Cloud Security List)

Tools of the trade

Dockle
Container Image Linter for Security, Helping build the Best-Practice Docker Image.

Cloud

AWS Account Setup Guide
A guide for configuring new AWS accounts with an emphasis on security, including customizable templates. (from Cloud Security List)

Software development

Short notes on tech 5/2021

Week 5/2021

Worklife

Why Working from Home Will Stick
Or will it? Hacker News comments provide a good pointers why it won't stick for the broader society.

Software development

Maximizing Developer Effectiveness
"It’s all about tight feedback loops." (from Weekend Reading)

Google Engineering Practices Documentation
"Google has many generalized engineering practices that cover all languages and all projects. These documents represent our collective experience of various best practices that we have developed over time." Unfortunately it currently contains only "Google's Code Review Guidelines".

Awesome Software and Architectural Design Patterns
"A curated list of software and architecture related design patterns."

Tools of the trade

deep-email-validator
"Library that handles all the email validation strategies: regex, common typos, disposable email blacklists, MX record lookup, and SMTP to check the inbox exists." (from Weekend Reading)

Mock Service Worker
Seamless API mocking library for browser and Node. (from Weekend Reading)

Short notes on tech 4/2021

It's already week 4 of 2021 😱 This week the short notes is a bit bigger edition recapping the three first weeks of 2021.

Week 4, 2021

Web-End

Progressive Web Apps in 2021
So far it's been a slow start for PWA. The thing is, they're pretty hard to deploy or retrofit into existing websites. But I expect new stacks will ship with PWA support and at some point they'll become the default choice, the tide will turn (from Weekend Reading)

User stories that should never exist
Twitter account with 😂 user stories.

Choosing a stack of low-code solutions by Jason Lengstorf
"This is a really good thread about choosing a stack of low-code solutions" (from Weekend Reading)

Exploring Rootless Docker
"With the release of Docker 20.10, the rootless containers feature has left experimental status. This post explores setup and usability of rootless Docker." (from Cloud Security Reading List)

Programming

naming-cheatsheet
"A cheetsheet for naming variable and function names. The styling here is JavaScript, but you can adapt these rules to any other language." (from Weekend Reading)

Worklife

No Meetings, No Deadlines, No Full-Time Employees
"What if work was like open source?"

HR is not your friend, and other things I think you should know
"I think people go into HR with the ideal of helping, and in the beginning it's all fun and office parties. By the time they realize that HR is “The Department for Mitigating Legal Risk”, it's too late." (from Weekend Reading) (Hacker News comments)

Cloud

How to Enable Logging on Every AWS Service in Existence (Circa 2021)
"Cloud security best practices, as well as most compliance programs, require that logging be enabled for all in-scope services. However, that simple requirement - enable logging - comes with many follow-up questions. Is CloudTrail enough? How do I turn on logging for all these services? Aren't logs collected by default?" (from Cloud Security Reading List)

What You Need to Know About AWS Security Monitoring, Logging, and Alerting
"Post laying out the different AWS security monitoring and logging sources, how to collect logs from them, and how to select the most appropriate collection technique." (from Cloud Security Reading List)

AWS announces forks of Elasticsearch and Kibana
"Elastic will change their software licensing strategy from the Apache License, Version 2.0 (ALv2) to the Elastic License (which limits how it can be used) or the Server Side Public License (which has requirements that make it unacceptable to many in the open source community). This means that Elasticsearch and Kibana will no longer be open source software. In order to ensure open source versions of both packages remain available and well supported we are announcing that AWS will step up to create and maintain a ALv2-licensed fork of open source Elasticsearch and Kibana."

Tools of the trade

Hush
"Noiseless browsing". This is a tiny app that blocks nags to accept cookies and privacy invasive tracking. Safari only, macOS/iOS, open source, so maybe you can port it to Android/Chrome. Free. (from Weekend Reading)

Scott Hanselman's 2021 Ultimate Developer and Power Users Tool List for Windows

Signal, Telegram, WhatsApp and other apps, what’s the difference?
Ola Bini's Twitter thread of giving an overview about perspective on the security of different applications.

Altair
"GraphQL client app with tons of features."

cloudfour/lighthouse-parade
"Command line tool that crawls a domain and gathers lighthouse performance data for every page." (from Weekend Reading)

OpenScan – open-source document scanner app

Upptime – GitHub-powered uptime monitor and status page

Something different

I logged my activities at 15-minute intervals for the whole year
"Where does the time go?" Log it and find out. (Hacker News comments)

Monthly Notes 55

It's a new year and let's start it with Monthly notes. Something new and something old from the short tech notes. Let this year be good!

Issue 55, 5.1.2021

Tools of the trade

Awesome CI
List of Continuous Integration services. There's a bunch of them to choose, my favorites are: GitHub Actions, Circle CI, Google Cloud Build, Drone CI.

Alternatives to JIRA which is moving to cloud only:
Asana
ClickUp
Linear
Redmine

Ignore node_modules in BackBlaze

PostgREST
"PostgREST serves a fully RESTful API from any existing PostgreSQL database. It provides a cleaner, more standards-compliant, faster API than you are likely to write from scratch." (from hackernewsletter)

alyssaxuu/screenity
"Screenity is a feature-packed screen and camera recorder for Chrome. Annotate your screen to give feedback, emphasize your clicks, edit your recording, and much more." (from Weekend Reading)

Foam
"Foam is a personal knowledge management and sharing system inspired by Roam Research, built on Visual Studio Code and GitHub."

Web Development

Integrate the Web Share API into our websites
"Use the Web Share API instead of these ugly lists of social icons. We should take care that our products support the native frameworks to make the web a better place." (from WDRL 285)

Sass vars, CSS vars, and semantic theme vars
"How we should define semantic variable names in the age of light and dark themes." (from WDRL 285)

Apple now lets us integrate Face ID and Touch ID on the web
"Building it on top of the Web Authentication API. Imagine how this can improve the logging in experience for a good part of your user base."

Work life

A Day in the Life of an Engineering Manager
"Engineering Manager is one of the roles that most people don’t know exactly what it’s about and what these people do. Karl Hughes explains what he does all day and it turns out it’s a role full of soft skills like networking, explaining things or translating between two people, between company departments and to raise awareness around delivery, around process management and recruiting as well as people’s happiness in their jobs." (from WDRL 285)

Development

Collection of tips for note taking by Dr. Sam Ladner
"This is a great collection of tips for note taking. For user research, design reviews, board meetings, whatever". (from Weekend Reading)

How to Make Your Code Reviewer Fall in Love with You
"Value your reviewer’s time". tl;dr; Start with these and read the article for more:

  • Review your own code first
  • Write a clear changelist description
  • Automate the easy stuff
  • Answer questions with the code itself
  • Narrowly scope changes
  • Separate functional and non-functional changes
  • Break up large changelists

Cloud

Monitoring & securing AWS with Microsoft
"Interesting approach, how to setup (advanced) monitoring of AWS with Azure Security Center (CSPM), Azure Defender (CWPP), Cloud App Security (CASB), and Azure Sentinel (SIEM)." (from Cloud Security Reading List)

Learning

How I read books: setting up a new system
"Knowledge is much more valuable when we can act on it, and change our behavior."
tl;dr; Active learning / reading; Processing and reflecting; Repeating; Presenting; Taking action. (from HackerNewsletter)

Things you're allowed to do
"This is a list of things you’re allowed to do that you thought you couldn’t, or didn’t even know you could."

Short notes on tech 52/2020

Week 52, 2020

Code

Learning

Stop using Material Design text fields!
"But Google uses it!" — yeah, that’s not a good enough reason. (from Weekend Reading)

Collection of tips for note taking by Dr. Sam Ladner
"This is a great collection of tips for note taking. For user research, design reviews, board meetings, whatever". (from Weekend Reading)

Tools

EStimator 
"Calculate how much you can save by switching your website to modern JavaScript." (from Weekend Reading)

An Instant GraphQL API Using Google Sheets
"The takeaway is, skip the complicated and under-documented Google Sheets API, and use the Google Charts Visualization API instead." (from Weekend Reading)

Something different

The 'Japanese Bob Ross': How a 73-year-old artist took YouTube by storm
(from hackernewsletter)