• Notes from React Native EU 2022

    Notes from React Native EU 2022

    React Native EU 2022 was held couple of weeks ago and it’s a conference which focuses exclusively on React Native but consists also on general topics which are universal in software development while applied to RN context. This year the online event provided great talks and especially there were many presentations about apps performance improvements,…

  • Raspberry Pi 3+ and Joy-IT 7″ touchscreen on Debian 11

    I’ve had for sometime a Joy-IT 7″ IPS display for Raspberry Pi waiting in my drawer and now I got around to put it into use with Ikea Ribba frame. Setting up the touch screen was easy but getting it inverted (upside down) took some extra steps. The touchscreen is “RB-LCD-7-2″ from Joy-IT which is…

  • Short notes on tech 31/2022

    Software development How to explain technical architecture with a natty little videoSome thoughts on explaining architecture through diagraming, in particular the advantage of scrappy videos to show diagramming step-by-step. (from DevOps Weekly) What Are Vanity Metrics and How to Stop Using ThemMeasurement and metrics are an important part of devops practices, but establishing metrics always…

  • Short notes on tech 25/2022

    Tools CyberChefSimple, intuitive web app for analysing and decoding data without having to deal with complex tools or programming languages. CyberChef encourages both technical and non-technical people to explore data formats, encryption and compression. Software development The Art of Code CommentsSarah Drasner talked at JSConf Hawaii 2020 about how commenting code is a more nuanced…

  • Learn to write secure code with DevSecLab

    Learn to write secure code with DevSecLab

    There are lots of pitfalls in software development and creating a secure Web application needs some thought and keeping especially the OWASP Top-10 in mind. One effective way to learn secure software development is to learn by doing and that’s what DevSecLab by Fraktal provides: teach developers to write secure code with hands-on exercises.… Jatka…

  • Short notes on tech 22/2022

    Worklife GitLab’s Guide to All-RemoteGood writeup of remote work in GitLab, i.a. it’s benefits and drawbacks and tips to better remote. DevOps Honeycomb’s O’Reilly Book Observability Engineering“Achieving Production Excellence by Charity Majors, Liz Fong-Jones, and George Miranda” Set up a Terraform Pipeline with GitHub Actions and GitHub OIDC for AWSA walkthrough of a Terraform pipeline…

  • Override nested NPM dependency versions

    Sometimes your JavaScript project’s dependency contains a library which has a vulnerability and you’re left with a question how to solve the issue. If the nested dependency (with vulnerability) is already fixed but the main dependency isn’t, you can use overrides field of package.json as explained in StackOverflow answer. You’ll need a recently new version…

  • Using CASL and roles with persisted permissions

    Using CASL and roles with persisted permissions

    How do you implement user groups, roles and permissions in a multitenant environment where you have multiple organizations using the same application and each have own users and groups and roles? There are different approaches to the issue and one is to implement Attributes-based access control (ABAC) in addition with roles (RBAC).… Jatka lukemista →

  • Short notes on tech 15/2022

    Week 15 of 2022 Before leaving for a short Easter holiday here are some links to go through. Security Top10 CI/CD Security Risks Automagically Auditing GitHub (Actions) Security using OpenSSF Scorecards “How to use the OpenSSF Scorecards GitHub Action to audit your GitHub and GitHub Actions configuration, and a breakdown of some of the issues…

  • Short notes on tech 13/2022

    Learning Personal Goal Setting Playbook“Setting personal goals can be used in many contexts to help people achieve tasks, objectives or improvements of any kind, big or small.” Design A Designer’s Guide to Documenting Accessibility & User Interactions Understanding Figma’s interactive components feature (from WDRL) Backend How to design better APIs15 language-agnostic, actionable tips on REST…