Veille de la semaine - Numéro #4
Culture générale
You can't optimize all software quality attributes: https://stackoverflow.blog/2022/01/17/plan-for-tradeoffs-you-cant-optimize-all-software-quality-attributes/
Does Google engineering practices work for a startup: https://engineering.instawork.com/do-googles-engineering-practices-work-for-a-startup-6b9a3b6b0ad7
The web 3 stack, what "web 2" developers need to know: https://thenewstack.io/web3-stack-what-web-2-0-developers-need-to-know
A new version of the GDPR guide has been published (french - Internal sharing): https://www.cnil.fr/fr/la-cnil-publie-une-nouvelle-version-de-son-guide-rgpd-pour-les-developpeurs
There's no such things as clean code: https://www.steveonstuff.com/2022/01/27/no-such-thing-as-clean-code
How to run nearly perfect meetings: https://betterhumans.pub/googles-guide-to-running-the-perfect-meeting-4ee24c5fe89e
Minimizing scaling headaches: https://medium.com/bbc-design-engineering/scaling-part-3-minimising-scaling-headaches-774664bee539
That time my manager made me cry at my desk: https://flameeyes.blog/2022/01/25/that-time-my-manager-made-me-cry-at-my-desk-and-other-stories/
Commit your code as if it could be accidentally deployed : https://matthiasnoback.nl/2022/01/commit-your-code-as-if-it-could-be-accidentally-deployed/
Building infrastructure platform: https://martinfowler.com/articles/building-infrastructure-platform.html
Clean code applied to PHP (Internal sharing): https://github.com/jupeter/clean-code-php
Don't do code review, try MOB: https://medium.com/verotel/dont-do-code-review-try-mob-instead-82149ef035df
Ordering files to improve app startup time: https://medium.com/geekculture/how-order-files-reduce-app-startup-time-c01f7765d29
Cloud computing
Developing sustainable serverless applications: https://medium.com/lego-engineering/think-sustainability-while-developing-serverless-applications-d61a37845914
Serverless lock-in doesn't exist if your team know hexagonal architecture: https://thecillu.medium.com/cloud-serverless-lock-in-doesnt-exist-if-your-team-knows-hexagoxal-architecture-4f64e93463aa
CasaOS, a Docker-based home OS: https://www.casaos.io/
WebVM, a server-less x86 virtual machine in the browser: https://medium.com/leaningtech/webvm-client-side-x86-virtual-machines-in-the-browser-40a60170b361
systemd by example: https://seb.jambor.dev/posts/systemd-by-example-part-2-dependencies/
DockerCon live 2021 videos are available: https://www.youtube.com/watch?v=o9PuYHGljp8&list=PLkA60AVN3hh8s7S5kWpnvX7LiKN7-VO8M
Network
A toy DNS resolver written in Go: https://jvns.ca/blog/2022/02/01/a-dns-resolver-in-80-lines-of-go/
Database
Database schema, a beginners guide: https://www.cockroachlabs.com/blog/database-schema-beginners-guide/
Migrating your reporting queries from a "general purpose database" to a "data warehouse": https://vkontech.com/migrating-your-reporting-queries-from-a-general-purpose-db-mongodb-to-a-data-warehouse-clickhouse-performance-overview/
If necessary, consider making an index invisible instead of deleting it: https://twitter.com/tobias_petry/status/1489255762924695559
Security
How I discovered thousands of open database on AWS: https://infosecwriteups.com/how-i-discovered-thousands-of-open-databases-on-aws-764729aa7f32
BlackHat Europe 2021 has made his talks public: https://www.youtube.com/watch?v=wpXrkVOCJGo&list=PLH15HpR5qRsW62N-GLRb1q56Zr7sm10rF
Tools
EvilSelenium, a "weaponized" selenium designed to attack Chrome: https://github.com/mrd0x/EvilSelenium
Hlb, a testing language built for several software: https://github.com/openllb/hlb
TextQL, query files using SQL: https://databasedive.com/how-to-use-sql-to-directly-query-files-1522e69309b6
PHP
Z-Engine, an API for the PHP engine: https://github.com/lisachenko/z-engine
On using PSR abstractions: https://stitcher.io/blog/re-on-using-psr-abstractions
Xpath is great, love it (french): https://jolicode.com/blog/re-decouverte-des-selecteurs-xpath
How to build a REST API with Neo4J, PHP and OpenAPI: https://medium.com/neo4j/how-to-build-a-json-restful-api-with-neo4j-php-and-openapi-e45bf0a8956
Statistics with PHP: https://dev.to/robertobutti/statistics-with-php-4pfp
Go
A set of algorithms written in Go: https://github.com/TheAlgorithms/Go
Symfony
How I was able to find multiple vulnerabilities of a Symfony application: https://infosecwriteups.com/how-i-was-able-to-find-multiple-vulnerabilities-of-a-symfony-web-framework-web-application-2b82cd5de144
Frontend
Yes, I can connect to a database in CSS: https://www.leemeichin.com/posts/yes-i-can-connect-to-a-db-in-css.html