|
You can’t compare SAST tools using only lists, test suites, and benchmarks
-
snyk.io
-
5 years ago
-
eng
Choosing the right SAST tool for your organization is important. Learn why it’s difficult to compare SAST tools using only lists (like OWASP Top 10 and SANS-25), test suites, and benchmarks
|
|
Recruiters have told me that they achieve a 7% (at best) success rate for replies to messages from candidates. Meanwhile, I’m able to secure a 60% success rate when I reach out to prospective engineering candidates. The main reason for this is that engineers prefer to hear from other engineers. The weight of a message from a VP or Director is much greater than that of a recruiter or someone outside of the engineering org. That’s why it is s..
|
|
President Biden’s executive order regarding Improving the Nation’s Cybersecurity explicitly mentions the adoption of SBOMs and the formalization of SBOM standards as a goal. Learn how Snyk is contributing to this effort.
|
|
Figure 1. Three mason jars, full of fermenting vegetables. Two Bánh Mì(ish) and one eggs. I’ve been fermenting vegetables of various kinds (and occasionally other things) at home for a little over two years. It’s a fun, interesting & nutritious hobby. On the whole it’s pretty easy and low stakes – the worst thing that happens is a few cucumbers go mouldy. Because it doesn’t involve any heat – but does include pouring, measuring, stirri....
|
|
I’ve put together, described (in Polish) and implemented (in Python) every required algorithm for the IT Matura exam.
|
|
So the motorcycle-touring season has started, albeit a little late this year because of the COVID situation, and I’ve been avidly pursuing it. On Sunday, I embarked on a 700 km trip from my place to the Dolomites and back. It’s been a glorious day. We ( Antonio and I) visited many renowned Mountain Passes, enjoyed stunning views, ate great food and chatted like there’s no tomorrow. I took my GoPro along with me. I wanted to record som..
|
|
Ever find yourself typing more characters than is necessary when using some annoying application or website? Here’s a quick hack around that. Intro : There’s a magic program called xdotool written by Jordan Sissel that solves this problem. I’ve known about his excellent work for years, but only today did I learn he also wrote xdotool. It’s named as such because it tells the X server to do something for you.
|
|
Ever find yourself typing more characters than is necessary when using some annoying application or website? Here’s a quick hack around that. Intro : There’s a magic program called xdotool written by Jordan Sissel that solves this problem. I’ve known about his excellent work for years, but only today did I learn he also wrote xdotool. It’s named as such because it tells the X server to do something for you.
|
|
TLDR: Attention masks allow us to send a batch into the transformer even when the examples in the batch have varying lengths. We do this by padding all sequences to the same length, then using the “attention_mask” tensor to identify which tokens are padding. Here we use a batch with three samples padded from the left since we want to predict the next token on the right. (Padding on the right would probably predict another pad.)
|
|
Had been a while since I looked into generating Xcode projects from a Swift package. On my latest use of the generate-xcodeproj subcommand, I was greeted by a nice warning surprise… swift package generate-xcodeproj Xcode can handle Swift packages directly. Similarly, xcodebuild can handle them too. This isn't new. It's likely been available since Xcode 11. I just totally missed it. Note: I've yet to dig into Xcode 13 beta, as Swift ....
|
|
New O’Reilly book — Cloud Native Application Security: Embracing Developer-First Security for the Cloud Era
-
snyk.io
-
5 years ago
-
eng
We’re excited to announce the release of the latest O’Reilly book from Guy Podjarny, "Cloud Native Application Security: Embracing Developer-First Security for the Cloud Era".
|
|
Snyk provides native integration for Atlassian Bitbucket Cloud security
-
snyk.io
-
5 years ago
-
eng
Atlassian and Snyk released a new integration that natively embeds Snyk vulnerability scanning into Bitbucket Cloud security.
|
|
Slugify # Transliterate everything to ASCII # Strip out apostrophes # Anything that's not a letter or number to a dash # Strip leading & trailing dashes # Everything to lowercase function slugify () { iconv -t ascii//TRANSLIT \ | tr -d "'" \ | sed -E 's/[^a-zA-Z0-9]+/-/g' \ | sed -E 's/^-+|-+$//g' \ | tr "[:upper:]" "[:lower:]" } This is point-free style – so, once you’ve dec..
|
|
How to Rebuild Static Sites at Fixed Intervals with Netlify and GitHub Actions
-
rafaelquintanilha.com
-
5 years ago
-
eng
Learn how to schedule redeployments at regular intervals by building a simple application that fetches stock market data.
|
|
Sometimes I want to resolve several promises at once, then do something when they’re all done. For example, make several API calls, then do something with all the results. I was doing something like this before: // Build your promises array let promises = [ fetch ( ' https://blah.com/static/file.json ' ), fetch ( ' https://blah.com/api/thing/one ' ), fetch ( ' https://blah.com/apr/thing/two ' ), ] ....
|
|
Controlling concurrency with asyncio and semaphores to make large batches of Python HTTP requests fast.
|
|
Controlling concurrency with asyncio and semaphores to make large batches of Python HTTP requests fast.
|
|
Convolutional neural networks have had breakthrough success in image recognition, natural language processing, and even board games like Chess and Go. But what’s really going on during convolution? Well, I think the easiest way to explain is with an interactive demo. Feel free to play around with the parameters below to see for yourself! number: four three eight padding: kernel size: stride: speed: ..
|
|
Last week I encouraged you to collect general knowledge. Viking trade routes, anime, Rothko paintings, architecture, typography, bluegrass standards -- where ever your interests lead you. For these kinds of things, it may be hard to write a note though. You could certainly write down something, but it's unlikely that you'll develop a few paragraphs of a coherent thought about lots of random things. James Webb Young said to use index cards f..
|
|
When we collect software performance measurements, we get a bunch of time intervals. Typically, we tend to interpret time values as continuous values. However, the obtained values are actually discrete due to the limited resolution of our measurement tool. In simple cases, we can treat these discrete values as continuous and get meaningful results. Unfortunately, discretization may produce strange phenomena like pseudo-multimodality or zero..
|
|
When we collect software performance measurements, we get a bunch of time intervals. Typically, we tend to interpret time values as continuous values. However, the obtained values are actually discrete due to the limited resolution of our measurement tool. In simple cases, we can treat these discrete values as continuous and get meaningful results. Unfortunately, discretization may produce strange phenomena like pseudo-multimodality or zero..
|
|
A while ago, I wrote an article about Using Context API in React. However, most of my examples on that page used Class components, , and…
|
|
Using Cortex with Snyk allows teams to know what security vulnerabilities exist throughout their microservice architecture.
|
|
RSS feeds help make consuming any website a million times better. In this post, I show how to make an RSS feed in SvelteKit with a simple endpoint.
|
|
Best viewed on the original page , where extended functionality like the footnote helper is available. What Should You Do with Your Life? Directions and Advice TLDR: The article “What Should You Do with Your Life? Directions and Advice” by Alexey Guzey provides guidance for people who are unsure about their life plans. Here’s a summary: What to work on : Guzey suggests several resources for finding interesting problems to wo....
|
|
Best viewed on the original page , where extended functionality like the footnote helper is available. What Should You Do with Your Life? Directions and Advice TLDR: The article “What Should You Do with Your Life? Directions and Advice” by Alexey Guzey provides guidance for people who are unsure about their life plans. Here’s a summary: What to work on : Guzey suggests several resources for finding interesting problems to wo....
|
|
Best viewed on the original page , where extended functionality like the footnote helper is available. What Should You Do with Your Life? Directions and Advice TLDR: The article “What Should You Do with Your Life? Directions and Advice” by Alexey Guzey provides guidance for people who are unsure about their life plans. Here’s a summary: What to work on : Guzey suggests several resources for finding interesting problems to wo....
|
|
Best viewed on the original page , where extended functionality like the footnote helper is available. What Should You Do with Your Life? Directions and Advice TLDR: The article “What Should You Do with Your Life? Directions and Advice” by Alexey Guzey provides guidance for people who are unsure about their life plans. Here’s a summary: What to work on : Guzey suggests several resources for finding interesting problems to wo....
|
|
Best viewed on the original page , where extended functionality like the footnote helper is available. What Should You Do with Your Life? Directions and Advice TLDR: The article “What Should You Do with Your Life? Directions and Advice” by Alexey Guzey provides guidance for people who are unsure about their life plans. Here’s a summary: What to work on : Guzey suggests several resources for finding interesting problems to wo....
|
|
Best viewed on the original page , where extended functionality like the footnote helper is available. What Should You Do with Your Life? Directions and Advice TLDR: The article “What Should You Do with Your Life? Directions and Advice” by Alexey Guzey provides guidance for people who are unsure about their life plans. Here’s a summary: What to work on : Guzey suggests several resources for finding interesting problems to wo....
|
|
Best viewed on the original page , where extended functionality like the footnote helper is available. What Should You Do with Your Life? Directions and Advice TLDR: The article “What Should You Do with Your Life? Directions and Advice” by Alexey Guzey provides guidance for people who are unsure about their life plans. Here’s a summary: What to work on : Guzey suggests several resources for finding interesting problems to wo....
|
|
Best viewed on the original page , where extended functionality like the footnote helper is available. What Should You Do with Your Life? Directions and Advice TLDR: The article “What Should You Do with Your Life? Directions and Advice” by Alexey Guzey provides guidance for people who are unsure about their life plans. Here’s a summary: What to work on : Guzey suggests several resources for finding interesting problems to wo....
|
|
The last 14 months have been a grand experiment in how to manage teams remotely. In one sense this has been a great success. Teams have managed to stay productive and companies have shown record profits. On the other hand, there is a concern of an eventual return-to-office culture.
|
|
there at north east so many business person come to there for his business purpose and they want to get female service in city to take rest and resh so they want to get housewife female service and north east escorts agency easly provide that.
|
|
We’re ironically searching for counterexamples to the Riemann Hypothesis. Setting up Pytest Adding a Database Search Strategies Unbounded integers Deploying with Docker Performance Profiling Scaling up Productionizing In the last article we added a menagerie of “production readiness” features like continuous integration tooling (automating test running and static analysis), alerting, and a simple deployment automation. Then I let it loose o..
|
|
We’re ironically searching for counterexamples to the Riemann Hypothesis. Setting up Pytest Adding a Database Search Strategies Unbounded integers Deploying with Docker Performance Profiling Scaling up Productionizing In the last article we added a menagerie of “production readiness” features like continuous integration tooling (automating test running and static analysis), alerting, and a simple deployment automation. Then I let it loose o..
|
|
We’re ironically searching for counterexamples to the Riemann Hypothesis. Setting up Pytest Adding a Database Search Strategies Unbounded integers Deploying with Docker Performance Profiling Scaling up Productionizing In the last article we added a menagerie of “production readiness” features like continuous integration tooling (automating test running and static analysis), alerting, and a simple deployment automation. Then I let it loose o..
|