Discussion
Loading...

#Tag

Log in
  • About
  • Code of conduct
  • Privacy
  • Users
  • Instances
  • About Bonfire
Hacker News
Hacker News
@h4ckernews@mastodon.social  ·  activity timestamp last week

CSRF protection without tokens or hidden form fields

https://blog.miguelgrinberg.com/post/csrf-protection-without-tokens-or-hidden-form-fields

#HackerNews #CSRFProtection #WebSecurity #Programming #BestPractices #TechBlog

CSRF Protection without Tokens or Hidden Form Fields

A couple of months ago, I received a request from a random Internet user to add CSRF protection to my little web framework Microdot, and I thought it was a fantastic idea.When I set off to do this…
  • Copy link
  • Flag this post
  • Block
🫧 socialcoding.. boosted
🫧 socialcoding..
🫧 socialcoding..
@smallcircles@social.coop  ·  activity timestamp last week

Any #gleam developers on this here #fediverse delightful commons?

Any #OpenStandards lovers?
Any #BestPractices geek out there?
Searching for #Elegance and #Simplicity?

blobaww Then this may be for you..

https://codeberg.org/socialcoding/delightful-commons/issues/115

#SX #Socialcoding #DelightfulGems

Codeberg.org

Candidate curated list delightful-gleam-standards

First inkling of an idea to start a curated list on the Venn diagram topics of: 1. Open standards 2. Open technologies 3. Gleam best practices Collecting open standards based libraries is particularly interesting, as robust Gleam (reference) implementations can be feature-complete, their...
  • Copy link
  • Flag this post
  • Block
🫧 socialcoding..
🫧 socialcoding..
@smallcircles@social.coop  ·  activity timestamp last week

Any #gleam developers on this here #fediverse delightful commons?

Any #OpenStandards lovers?
Any #BestPractices geek out there?
Searching for #Elegance and #Simplicity?

blobaww Then this may be for you..

https://codeberg.org/socialcoding/delightful-commons/issues/115

#SX #Socialcoding #DelightfulGems

Codeberg.org

Candidate curated list delightful-gleam-standards

First inkling of an idea to start a curated list on the Venn diagram topics of: 1. Open standards 2. Open technologies 3. Gleam best practices Collecting open standards based libraries is particularly interesting, as robust Gleam (reference) implementations can be feature-complete, their...
  • Copy link
  • Flag this post
  • Block
Hacker News
Hacker News
@h4ckernews@mastodon.social  ·  activity timestamp 2 weeks ago

Your job is to deliver code you have proven to work

https://simonwillison.net/2025/Dec/18/code-proven-to-work/

#HackerNews #Your #job #is #to #deliver #code #you #have #proven #to #work

codequality #softwaredevelopment #programming #bestpractices #technews

Simon Willison’s Weblog

Your job is to deliver code you have proven to work

In all of the debates about the value of AI-assistance in software development there’s one depressing anecdote that I keep on seeing: the junior engineer, empowered by some class of …
  • Copy link
  • Flag this post
  • Block
Hacker News
Hacker News
@h4ckernews@mastodon.social  ·  activity timestamp 2 weeks ago

Avoid UUIDv4 Primary Keys

https://andyatkinson.com/avoid-uuid-version-4-primary-keys

#HackerNews #AvoidUUIDv4 #PrimaryKeys #DatabaseDesign #BestPractices #TechAdvice

Software Engineer, Author, High Performance PostgreSQL for Rails

Avoid UUID Version 4 Primary Keys (for Postgres)

Introduction Over the last decade, when working on databases with UUID Version 41 as the primary key data type, these databases have usually had bad performance and excessive IO. https://datatracker.ietf.org/doc/html/rfc4122#section-4.4 ↩
  • Copy link
  • Flag this post
  • Block
Nithin Coca నితిన్
Nithin Coca నితిన్
@ncoca@social.coop  ·  activity timestamp 3 weeks ago

Had to go through a " #security" training for a new #nonprofit client, and all I could think was - you call this secure? Are these really your " #bestpractices"? Is this how nonprofits operate? Why are you really using all these #bigtech platforms?

As an individual, I have better #privacy & #data management systems than they do.

  • Copy link
  • Flag this post
  • Block
Hacker News
Hacker News
@h4ckernews@mastodon.social  ·  activity timestamp 3 weeks ago

I've asked Claude to improve codebase quality 200 times

https://gricha.dev/blog/the-highest-quality-codebase

#HackerNews #codequality #improvement #coding #bestpractices #Claude #HackerNews #200times

  • Copy link
  • Flag this post
  • Block
Hacker News
Hacker News
@h4ckernews@mastodon.social  ·  activity timestamp 4 weeks ago

Patterns for Defensive Programming in Rust

https://corrode.dev/blog/defensive-programming/

#HackerNews #DefensiveProgramming #Rust #Patterns #Coding #BestPractices #SoftwareDevelopment

Corrode Rust Consulting

Patterns for Defensive Programming in Rust | corrode Rust Consulting

I have a hobby. Whenever I see the comment // this should never happen in code, I try to find out the exact conditions under which it could happen. And in 90% of cases, I find a way to do just that. More often than not…
  • Copy link
  • Flag this post
  • Block
Hacker News
Hacker News
@h4ckernews@mastodon.social  ·  activity timestamp last month

Build the habit of writing meaningful commit messages

https://github.com/arpxspace/smartcommit

#HackerNews #Build #the #habit #of #writing #meaningful #commit #messages #meaningfulcommits #writinghabits #softwaredevelopment #git #bestpractices

  • Copy link
  • Flag this post
  • Block
Hacker News
Hacker News
@h4ckernews@mastodon.social  ·  activity timestamp last month

We should all be using dependency cooldowns

https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns

#HackerNews #dependencycooldowns #softwaredevelopment #coding #bestpractices #techinnovation

  • Copy link
  • Flag this post
  • Block
Hacker News
Hacker News
@h4ckernews@mastodon.social  ·  activity timestamp 2 months ago

Microservices? No, modularity is what matters

https://binaryigor.com/modular-monolith-and-microservices-modularity-is-what-truly-matters.html

#HackerNews #Microservices #Modularity #SoftwareArchitecture #Development #BestPractices

Modular Monolith and Microservices: Modularity is what truly matters

Modularity is a crucial concept when designing and creating software. Independent of whether our chosen architecture style is to have a single unit of deployment - Monolith or multiple units of deployment - Microservices/Services. It is a quality that should be treated completely independent of how many deployable units of software we choose to have.
  • Copy link
  • Flag this post
  • Block
Public Knowledge Project
Public Knowledge Project
@PublicKnowledgeProject@mastodon.social  ·  activity timestamp 2 months ago

You're invited! #EIFL webinar: How to manage OJS through containers – November 5 2025, 9 AM UTC

During the webinar, @marcbria of Universitat Autònoma de Barcelona will walk through setting up OJS with commonly used tools like #Docker and #DockerCompose, how to keep it secure and backed up, and practical tips for everyday management.

This is the 7th in the EIFL #OpenJournalSystems #BestPractices and Use Cases series.

Registration and previous webinar recordings: 

https://eifl.net/resources/eifl-webinar-ojs-best-practices-and-use-cases-6

  • Copy link
  • Flag this post
  • Block
Hacker News
Hacker News
@h4ckernews@mastodon.social  ·  activity timestamp 2 months ago

Don't Forget These Tags to Make HTML Work Like You Expect

https://blog.jim-nielsen.com/2025/dont-forget-these-html-tags/

#HackerNews #HTML #Tags #Web #Development #Coding #BestPractices #JimNielsen

Don’t Forget These Tags to Make HTML Work Like You Expect

Writing about the big beautiful mess that is making things for the world wide web.
  • Copy link
  • Flag this post
  • Block
𝕂𝚞𝚋𝚒𝚔ℙ𝚒𝚡𝚎𝚕
𝕂𝚞𝚋𝚒𝚔ℙ𝚒𝚡𝚎𝚕
@kubikpixel@chaos.social  ·  activity timestamp 4 months ago

»Crate Layout Best Practices: lib.rs, mod.rs, and src/bin«

Slowly, slowly, I'm learning what Rust uses for what in its coding.

🦀 https://dev.to/sgchris/crate-layout-best-practices-librs-modrs-and-srcbin-4abd

#rust #code #lib #mod #src #rustlang #it #bestpractices #coding #blog #structure

  • Copy link
  • Flag this post
  • Block
Michał "rysiek" Woźniak · 🇺🇦
Michał "rysiek" Woźniak · 🇺🇦
@rysiek@mstdn.social  ·  activity timestamp 5 months ago

Oh I see the absurdly, negligently insecure Tea app is now getting the "hackers hacked" treatment, so that it can comfortably deflect blame to some unspecified scary hackers?

Cool, cool.

takes out a bullhorn

📢 Tea kept drivers license photos of thousands of women in an unprotected Google Firebase storage bucket.

📢 Centering "hackers" means helping let those responsible for the horrendous negligence at Tea off the hook.

👏 There is no "hack", only other people's negligence.

#InfoSec #Tea

Screenshot of NBC News article headline and lede:

Hackers leak 13,000 user photos and IDs from the Tea app, designed as a women's safe space

The viral app requires new users to take selfies, which it says it deletes after review.
Screenshot of NBC News article headline and lede: Hackers leak 13,000 user photos and IDs from the Tea app, designed as a women's safe space The viral app requires new users to take selfies, which it says it deletes after review.
Screenshot of NBC News article headline and lede: Hackers leak 13,000 user photos and IDs from the Tea app, designed as a women's safe space The viral app requires new users to take selfies, which it says it deletes after review.
The Agender Kiwi
The Agender Kiwi
@agender_kiwi@mastodon.social replied  ·  activity timestamp 5 months ago
@rysiek there is absolutely zero reason to store insecure, unencrypted, information in a bucket, s3 or otherwise.

Corporations/Institutions need to start being held accountable when PII is leaked due to shoddy and insufficient security practices are being implemented

If they can't secure their data infrastructure, then they shouldn't be asking for such sensitive information.

#DataPrivacy#EncryptEverything#BestPractices

  • Copy link
  • Flag this comment
  • Block
Angela Antunovic boosted
PaulaToThePeople
PaulaToThePeople
@PaulaToThePeople@climatejustice.social  ·  activity timestamp 6 months ago

A little reminder to everybody on climatejustice.social (but it similarly also applies to all Mastodon servers).

If you're posting mostly in one language, please go to https://climatejustice.social/settings/preferences/other and set your primary posting language, if you haven't yet. It does not have to be the same as your interface language.

While you're there you can also filter languages. If you select any of the languages in the list, then only posts in that or those languages will display in public timelines for you. This does not work if people set their posts to the wrong language though.

If you regularly switch languages, please try to make a habit of manually selecting the posting language every time.

Apart from the language filters, some other advantages of setting the correct language:
* climatejustice.social and many other servers have a built in translation function, but it only works if the language is set correctly (this is especially important for moderators - you'll be making our live a lot easier)
* Alt text is also translated, so for accessibility, please always write your alt text in the post's language
* trends are language specific. if you set your posts to the wrong language, you could be spamming the trends for that language
* your account is recommended to people based on the set language(s) of your posts, if your privacy settings allow account recommendation
* if someone follows you and you post in different languages and actually set them correctly every time, they can go to your profile and select which of your languages they wand to subscribe to

#language #accessibility #translation #mastodon#BestPractices

  • Copy link
  • Flag this post
  • Block
PaulaToThePeople
PaulaToThePeople
@PaulaToThePeople@climatejustice.social  ·  activity timestamp 6 months ago

A little reminder to everybody on climatejustice.social (but it similarly also applies to all Mastodon servers).

If you're posting mostly in one language, please go to https://climatejustice.social/settings/preferences/other and set your primary posting language, if you haven't yet. It does not have to be the same as your interface language.

While you're there you can also filter languages. If you select any of the languages in the list, then only posts in that or those languages will display in public timelines for you. This does not work if people set their posts to the wrong language though.

If you regularly switch languages, please try to make a habit of manually selecting the posting language every time.

Apart from the language filters, some other advantages of setting the correct language:
* climatejustice.social and many other servers have a built in translation function, but it only works if the language is set correctly (this is especially important for moderators - you'll be making our live a lot easier)
* Alt text is also translated, so for accessibility, please always write your alt text in the post's language
* trends are language specific. if you set your posts to the wrong language, you could be spamming the trends for that language
* your account is recommended to people based on the set language(s) of your posts, if your privacy settings allow account recommendation
* if someone follows you and you post in different languages and actually set them correctly every time, they can go to your profile and select which of your languages they wand to subscribe to

#language #accessibility #translation #mastodon#BestPractices

  • Copy link
  • Flag this post
  • Block

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances
Bonfire social · 1.0.1-alpha.44 no JS en
Automatic federation enabled
Log in
  • Explore
  • About
  • Members
  • Code of Conduct