--- title: Best Security posts of 2022 | daily.dev description: The most upvoted Security posts of 2022, curated by the daily.dev community. canonical: https://daily.dev/tags/security/best-of/2022 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/security/best-of/2022 og:type: website og:site_name: daily.dev og:title: Best Security posts of 2022 | daily.dev og:description: The most upvoted Security posts of 2022, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Security — 2022 1. 1 [](/posts/please-stop-using-local-storage-nvkjpsixv "Please Stop Using Local Storage") Article Community Picks · 4y Please Stop Using Local Storage Local storage is just one big old JavaScript object that you can attach data to (or remove data from) Local storage provides at least 5MB of data storage across all major web browsers. This is a fairly low limit for people building apps that are data intensive or need to function offline. If the app you're using doesn't fit the above description: don't use local storage. 287 22 2. 2 [](/posts/diagram-as-code-c1udvr6fx "Diagram as Code") Article ByteByteGo · 4y Diagram as Code 273 16 3. 3 [](/posts/11-authentication-mistakes-and-how-to-fix-them-kil1c-fx5 "11 Authentication Mistakes and how to fix them") Article asayer · 4y 11 Authentication Mistakes and how to fix them When authenticating a form on your web application, you must be careful not to display just one error message. Displaying a specific error message is dangerous because it could let an attacker use an automated trial-and-error method to determine a user’s username and password. Injection attacks, memory leaks, and compromised systems can occur if data provided in form input is not properly checked. All of the libraries I recommend for validation. 195 4 4. 4 [](/posts/z4nzu-hackingtool-all-in-one-hacking-tool-for-hackers-gpooy5ieh "Z4nzu/hackingtool: ALL IN ONE Hacking Tool For Hackers") Article Pointer · 5y Z4nzu/hackingtool: ALL IN ONE Hacking Tool For Hackers All in One Hacking tool For Hackers. Kali Linux in WIndows10 Without VirtualBox YOUTUBE. New Tools Reverse Engineering RAT Tools Web Crawling Payload Injector. SocialMedia Bruteforce Android Hacking tools. Hash cracking tools Wifi Deauthenticate SocialMedia Finder. 166 2 5. 5 [](/posts/9-docker-extensions-every-developer-must-try-tydoq6y0r "9 Docker Extensions Every Developer Must Try") Article Community Picks · 4y 9 Docker Extensions Every Developer Must Try vclusters is a tool with which you can create virtual clusters on top of any Kubernetes cluster. The extension is readily available on the Docker desktop extensions tab and can be installed with a click. The command to list your vcluster list is, vCluster list 4. 124 3 6. 6 [](/posts/i-can-probably-hack-your-password-in-minutes---di1tcc-b "I can probably hack your password in MINUTES!") Article DZone · 5y I can probably hack your password in MINUTES! The average password is easily hacked in minutes by an experienced software developer. This is because of a fundamental flaw in how we were taught to create our passwords. There are simply not enough possible combinations in short passwords such as the above to be "random enough" to prevent a computer from guessing it. 114 16 7. 7 [](/posts/best-practices-for-creating-a-modern-npm-package-umeookn-e "Best practices for creating a modern npm package") Article Community Picks · 4y Best practices for creating a modern npm package You will first learn how to create an npm package, so you can get familiar with building and publishing a package. Then you’ll learn what’s involved with making a more robust and production-ready package by setting up a test framework, a continuous integration and deployment pipeline, security checks, and automated semantic npm publish. 107 4 8. 8 [](/posts/why-you-should-choose-nestjs-as-your-backend-framework-wmlrcmzkj "Why You Should Choose NestJS as Your Backend Framework") Article Community Picks · 4y Why You Should Choose NestJS as Your Backend Framework Open-source NestJS is an open-source project with 47,000 stars on GitHub. The framework needs to be fast and able to handle concurrent requests at scale. NestJS’s built-in modules system naturally results in a neat separation of concerns. 100 7 9. 9 [](/posts/bito-ai---a-swiss-army-knife-in-your-ide-that-can-10x-your-dev-life-ntddfx-rl "Bito AI - A Swiss Army knife in your IDE that can 10x your dev life") Article Product Hunt · 4y Bito AI - A Swiss Army knife in your IDE that can 10x your dev life A Swiss Army knife in your IDE can 10x your dev life. Free Bito’s AI Assistant can help you write code, understand syntax, write test cases, explain code, check security, and even explain high level concepts. 92 13 10. 10 [](/posts/the-most-comprehensive-list-of-devops-tools-for-2023-njmhieewj "The Most Comprehensive List of DevOps Tools for 2023") Article Spacelift · 4y The Most Comprehensive List of DevOps Tools for 2023 The Most Comprehensive List of DevOps Tools for 2023 gathers some of the most useful and commonly used DevOps tools and technologies. Git Git is the most commonly used distributed version control system and is the clear winner in this space. GitHub GitHub is the default and most broadly used code repository management system. 91 5 11. 11 [](/posts/elon-musk-hired-renowed-hacker-george-hotz-to-help-fix-twitter-3hyddevmi "Elon Musk Hired Renowed Hacker George Hotz To Help Fix Twitter") Article 80 LEVEL · 4y Elon Musk Hired Renowed Hacker George Hotz To Help Fix Twitter Elon Musk has hired renowned iPhone hacker George "geohot" Hotz to fix Twitter's long-broken searching functionality. Hotz is known as the first person who successfully removed the SIM lock on an iPhone in 2007. 85 12. 12 [](/posts/beautify-your-github-repo-nwmmsr9vq "Beautify your GitHub repo") Article ITNEXT · 4y Beautify your GitHub repo GitHub has become the primary provider to host one’s code. I want to highlight some files to beautify your GitHub repository in this post. If you want people to use your code, you should tell them under which terms they can use it. GitHub displays the raw HTML code, not the “rendered” HTML. 73 3 13. 13 [](/posts/the-7-roles-of-a-cto-jvhx-a-xw "The 7 roles of a CTO") Article Pointer · 4y The 7 roles of a CTO This post is about me figuring out what a CTO does. I tried to be methodical and deep about it, and broke it down to a few different aspects. It gave me some structure and helped talking about my responsibility, I hope it will be useful for more people. 72 4 14. 14 [](/posts/podman-vs-docker-what-s-the-difference--ot5oro6-8 "Podman vs Docker: What's the Difference?") Article Linux Handbook · 4y Podman vs Docker: What's the Difference? Docker's core runs as a "system daemon" i.e. as a daemon executed by the root user. Red Hat unveiled Podman as an alternative to Docker in 2018\. The advantage of using Podman is visible here. Podman does not have a daemon running, and certainly doesn't have any strict requirements for root access. 70 4 15. 15 [](/posts/dockerize-a-mern-stack-app-for-production-with-security-in-mind-part-ii--bfssvokqw "Dockerize a MERN Stack app for Production with Security in Mind (Part II)") Article System Weakness · 4y Dockerize a MERN Stack app for Production with Security in Mind (Part II) This post is the 2nd part of a two part series that covers how to make a MERN stack application production-ready with security in mind. The first part of this series was more of a theoretical post to grasp the basic concepts of what we want to achieve. 70 16. 16 [](/posts/wifi-hacking-lwvucgr3e "WIFI Hacking") Article System Weakness · 4y WIFI Hacking Any network adapter that can be switched to monitor mode and packet injection mode is required. “wifite’s’ is preinstalled in Kali Linux. 69 17. 17 [](/posts/top-10-security-testing-tools-for-developers-b2uyng5ll "Top 10 Security Testing Tools for Developers") Article codeguru · 4y Top 10 Security Testing Tools for Developers Security testing is the practice of evaluating an information system’s security by detecting and exploiting vulnerabilities. With the number of data breaches on the exponential rise, it is more crucial than ever for developers to ensure the security of their websites and applications. There are a number of open-source security testing tools around to help in this endeavor. 69 18. 18 [](/posts/dark-web-introduction-4nevblim3 "Dark Web Introduction") Article System Weakness · 4y Dark Web Introduction The Deep Web allows users to view information that is normally hidden behind closed doors, such as pages and databases. The dark web is not accessible through standard browsers and operates in a different manner than the ordinary DarkOwl Vision: A threat intelligence service that includes a Dark web scanner as an information source. 67 3 19. 19 [](/posts/ep26-proxy-vs-reverse-proxy-6phwfpoui "EP26: Proxy vs reverse proxy") Article ByteByteGo · 4y EP26: Proxy vs reverse proxy CDN Postman is the API platform for building and using APIs (sponsored) Postman simplifies each step of the API lifecycle and streamlines collaboration so you can create better APIs—faster. The platform is cloud-native and includes the comprehensive suite of features enterprises are looking for. 67 2 20. 20 [](/posts/meta-approves-4-programming-languages-for-employees-and-devs-d0hrzrysm "Meta approves 4 programming languages for employees and devs") Article The Register · 4y Meta approves 4 programming languages for employees and devs Meta, the social ad biz better known as Facebook, has endorsed four programming languages as preferred options for employees and for developers building software on its platform. Among the favored four is Rust, the much-loved systems language that emerged from Mozilla and is now overseen by the Rust Foundation. 65 6 21. 21 [](/posts/attacks-on-json-web-token-jwt--8ilfogxq9 "Attacks on JSON Web Token (JWT)") Article InfoSec Write-ups · 5y Attacks on JSON Web Token (JWT) In this article, we will discuss the attacking part on JWT, which is the hacker’s favorite part. Abusing None algorithm is used to generate a JWToken. In that case, anyone can create a forge JWT Token and submit it to a resource server because there is no signature available in the token. 65 1 22. 22 [](/posts/devops-trends-for-developers-in-2023-je7zgok-y "DevOps Trends for Developers in 2023") Article DEV · 4y DevOps Trends for Developers in 2023 The year 2022 saw a huge momentum in the topics such as AI/ML, automation, security, etc. DevOps practices are constantly evolving, and it is our job to keep an eye on what to focus on in the coming year. Let us see those trends and how they will impact developers and organizations. 64 23. 23 [](/posts/hacking-for-beginners-from-novice-to-ethical-hacker-overnight-wziqjkb2y "Hacking for Beginners: From Novice to Ethical Hacker Overnight") Article System Weakness · 4y Hacking for Beginners: From Novice to Ethical Hacker Overnight Hacking for Beginners: From Novice to Ethical Hacker Overnight. Iotabl founder explains how to break into systems and devices. How to dual boot Kali Linux with MacOS X and run it on a removeable disk. The NMAP Scripting Engine (NSE) is used to perform specific e.g. brute force, cross-site scripting etc. 64 24. 24 [](/posts/how-i-became-a-better-cto-using-these-8-resources-j2o4gff70 "How I became a better CTO using these 8 resources") Article EverSQL · 4y How I became a better CTO using these 8 resources Google offers 25 lessons, 30+ exercises, real case studies, and lectures from Google experts. The SaaS CTO Security Checklist provides actionable security best practices CTOs can use to harden their security. JavaScript is a bird's eye view of JavaScript, its benefits, patterns, and more. 62 25. 25 [](/posts/securing-microservices-with-oauth2-06ersymu8 "Securing Microservices with OAuth2") Article Ballerina · 5y Securing Microservices with OAuth2 This article explains how to secure your microservices deployment practically with OAuth2 using Ballerina programming language. Let’s see how to design, implement, test, deploy and observe the system. The complete example can be found at:https://ballerina.io/examples/order-management-service. 58 1 [See all Security archives](/tags/security/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/security/best-of/2022#page","url":"https://daily.dev/tags/security/best-of/2022","name":"Best Security Posts of 2022","description":"The most upvoted Security posts of 2022, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/security/best-of/2022#items","numberOfItems":25,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/please-stop-using-local-storage-nvkjpsixv","name":"Please Stop Using Local Storage"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/diagram-as-code-c1udvr6fx","name":"Diagram as Code"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/11-authentication-mistakes-and-how-to-fix-them-kil1c-fx5","name":"11 Authentication Mistakes and how to fix them"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/z4nzu-hackingtool-all-in-one-hacking-tool-for-hackers-gpooy5ieh","name":"Z4nzu/hackingtool: ALL IN ONE Hacking Tool For Hackers"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/9-docker-extensions-every-developer-must-try-tydoq6y0r","name":"9 Docker Extensions Every Developer Must Try"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/i-can-probably-hack-your-password-in-minutes---di1tcc-b","name":"I can probably hack your password in MINUTES!"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/best-practices-for-creating-a-modern-npm-package-umeookn-e","name":"Best practices for creating a modern npm package"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/why-you-should-choose-nestjs-as-your-backend-framework-wmlrcmzkj","name":"Why You Should Choose NestJS as Your Backend Framework"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/bito-ai---a-swiss-army-knife-in-your-ide-that-can-10x-your-dev-life-ntddfx-rl","name":"Bito AI - A Swiss Army knife in your IDE that can 10x your dev life"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/the-most-comprehensive-list-of-devops-tools-for-2023-njmhieewj","name":"The Most Comprehensive List of DevOps Tools for 2023"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/elon-musk-hired-renowed-hacker-george-hotz-to-help-fix-twitter-3hyddevmi","name":"Elon Musk Hired Renowed Hacker George Hotz To Help Fix Twitter"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/beautify-your-github-repo-nwmmsr9vq","name":"Beautify your GitHub repo"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/the-7-roles-of-a-cto-jvhx-a-xw","name":"The 7 roles of a CTO"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/podman-vs-docker-what-s-the-difference--ot5oro6-8","name":"Podman vs Docker: What's the Difference?"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/dockerize-a-mern-stack-app-for-production-with-security-in-mind-part-ii--bfssvokqw","name":"Dockerize a MERN Stack app for Production with Security in Mind (Part II)"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/wifi-hacking-lwvucgr3e","name":"WIFI Hacking"},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/top-10-security-testing-tools-for-developers-b2uyng5ll","name":"Top 10 Security Testing Tools for Developers"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/dark-web-introduction-4nevblim3","name":"Dark Web Introduction"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/ep26-proxy-vs-reverse-proxy-6phwfpoui","name":"EP26: Proxy vs reverse proxy"},{"@type":"ListItem","position":20,"url":"https://daily.dev/posts/meta-approves-4-programming-languages-for-employees-and-devs-d0hrzrysm","name":"Meta approves 4 programming languages for employees and devs"},{"@type":"ListItem","position":21,"url":"https://daily.dev/posts/attacks-on-json-web-token-jwt--8ilfogxq9","name":"Attacks on JSON Web Token (JWT)"},{"@type":"ListItem","position":22,"url":"https://daily.dev/posts/devops-trends-for-developers-in-2023-je7zgok-y","name":"DevOps Trends for Developers in 2023"},{"@type":"ListItem","position":23,"url":"https://daily.dev/posts/hacking-for-beginners-from-novice-to-ethical-hacker-overnight-wziqjkb2y","name":"Hacking for Beginners: From Novice to Ethical Hacker Overnight"},{"@type":"ListItem","position":24,"url":"https://daily.dev/posts/how-i-became-a-better-cto-using-these-8-resources-j2o4gff70","name":"How I became a better CTO using these 8 resources"},{"@type":"ListItem","position":25,"url":"https://daily.dev/posts/securing-microservices-with-oauth2-06ersymu8","name":"Securing Microservices with OAuth2"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Security","item":"https://daily.dev/tags/security"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/security/best-of"},{"@type":"ListItem","position":5,"name":"2022"}]}]} ```