--- title: Best Security posts of 2023 | daily.dev description: The most upvoted Security posts of 2023, curated by the daily.dev community. canonical: https://daily.dev/tags/security/best-of/2023 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/security/best-of/2023 og:type: website og:site_name: daily.dev og:title: Best Security posts of 2023 | daily.dev og:description: The most upvoted Security posts of 2023, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Security — 2023 1. 1 [](/posts/the-complete-microservices-guide-gmr1myhht "The Complete Microservices Guide") Article Amplication · 3y The Complete Microservices Guide Microservices have emerged as a popular architectural approach for designing and building software systems for several compelling reasons and advantages. It is a design approach that involves dividing applications into multiple distinct and independent services called "microservices" Microservices are naturally distributed services as each service is isolated from the others and runs in its own instance. 284 6 2. 2 [](/posts/the-future-of-web-development-uelqaomuh "The Future of Web Development") Article DZone · 3y The Future of Web Development The Future of Web Development: Predictions and Possibilities Discover the future of web development. Explore AI, PWAs, VR, and more. Get insights on possibilities and the role of web developers. 278 27 3. 3 [](/posts/doing-much-better-than-your-env-file-hu3hba0iz "Doing much better than your .env file") Article Medium · 3y Doing much better than your .env file Tony: I argue again for why we should reduce the practice of storing all environment variables in a.env file and move to a more sophisticated approach for managing them in local development. He says this article is intended for software development teams and not security and devops teams that already have this figured out. 269 34 4. 4 [](/posts/explaining-ssh-to-my-uber-driver-zt5ig5ne7 "Explaining SSH to my Uber Driver") Article DEV · 3y Explaining SSH to my Uber Driver SSH is a secure, secret tunnel that allows developers to connect to another computer over the internet and perform various tasks. It is commonly used for deploying code and updating server configurations. SSH's encryption and authorization protocols make it more secure than older communication protocols. By using public-key authentication, SSH protects user information from hackers. 249 5 5. 5 [](/posts/password-session-cookie-token-jwt-sso-oauth---authentication-explained---part-1-713xf4khd "Password, Session, Cookie, Token, JWT, SSO, OAuth - Authentication Explained - Part 1") Article ByteByteGo · 4y Password, Session, Cookie, Token, JWT, SSO, OAuth - Authentication Explained - Part 1 Password, Session, Cookie, Token, JWT, SSO, OAuth - Authentication Explained - Part 1\. We discuss the problems each method solves and how to choose the right authentication method for our needs. The diagram below shows where these methods apply in a typical website architecture and their meanings. 227 6 6. 6 [](/posts/github-opens-copilot-chat-to-all-developers-h4e2i4ds8 "GitHub opens Copilot Chat to all developers") Article Developer Tech · 3y GitHub opens Copilot Chat to all developers Copilot Chat was launched for ‘Business’ users in July. The AI assistant is capable of assisting developers in their preferred natural language and promises to reduce repetitive tasks. The tool empowers developers to learn and build in the language that feels most natural. 215 22 7. 7 [](/posts/ep68-top-architectural-styles-sflnzuur9 "EP68: Top architectural styles") Article ByteByteGo · 3y EP68: Top architectural styles New Relic APM 360 goes beyond incident response and unlocks daily performance, security, and development insights for all engineers in one unified view. Firewall explained to Kids… and Adults A firewall is a network security system that controls and filters network traffic, acting as a watchman between a private network and the public Internet. 198 8. 8 [](/posts/how-to-get-a-github-student-developer-pack-0ku0gh4kg "How to Get a Github Student Developer Pack") Article freeCodeCamp · 3y How to Get a Github Student Developer Pack GitHub Student Developer Pack provides students with access to a variety of top-notch developer tools. The pack is made up of a selection of benefits generously provided by GitHub's partners and collaborators. As a student, you will get access to six free months of 60+ courses covering in-demand topics. 176 14 9. 9 [](/posts/best-practices-for-security-in-next-js-0packo5i3 "Best Practices for Security in Next.js") Article asayer · 3y Best Practices for Security in Next.js Explore common security vulnerabilities in web applications and learn best practices for securing Next.js applications, including keeping dependencies up-to-date, input validation, authentication and authorization, data encryption, implementing security headers, and using TypeScript for type safety. 175 2 10. 10 [](/posts/modern-vs-code-extension-development-the-basics-bnnuz26tb "Modern VS Code extension development: The basics") Article Snyk · 3y Modern VS Code extension development: The basics Microsoft Visual Studio (VS) Code is currently the most popular source code editor. It can be used as a fully-fledged integrated development environment (IDE) All you need to do is add the right set of extensions from the Visual Studio Code Marketplace. Snyk Security is defined as a linter and programming language extension. 154 6 11. 11 [](/posts/10-weird-algorithms-dd08rsao4 "10 weird algorithms") Video Fireship · 3y 10 weird algorithms Explore 10 weird algorithms that are used to solve interesting real-world problems in science, gaming, machine learning, and digital security. 146 12. 12 [](/posts/stop-using-json-web-tokens-for-user-sessions-jos3ghy3k "Stop using JSON Web tokens for user sessions") Article Hacker News · 3y Stop using JSON Web tokens for user sessions Using JSON Web tokens (JWTs) for user sessions without an effectively implemented logout mechanism can lead to security vulnerabilities. An XSS vulnerability can allow an attacker to access and exploit the JWT, gaining unauthorized access to the application. 142 5 13. 13 [](/posts/why-we-chose-node-js-over-deno--o3yuqvavh "Why We Chose Node.js Over Deno?") Article Amplication · 3y Why We Chose Node.js Over Deno? Node.js was the de-facto standard for writing server-side JavaScript apps in the 2010s. Ryan Dahl introduced Deno in 2018 in his controversial JSConf EU talk titled "10 Things I Regret About Node.JS" This article gives an overview of the platforms, history, performance, security, and all other critical features. 136 21 14. 14 [](/posts/best-practices-for-building-large-scale-node-js-applications-ymazgnji8 "Best Practices for Building Large-Scale Node.js Applications") Article Medium · 4y Best Practices for Building Large-Scale Node.js Applications Best practices for building and scaling large-scale Node.js applications, including code organization, performance optimization, scalability, and security. 123 2 15. 15 [](/posts/github-copilot-now-has-a-better-ai-model-and-new-capabilities-wwlc-nlyb "GitHub Copilot now has a better AI model and new capabilities") Article GitHub Blog · 4y GitHub Copilot now has a better AI model and new capabilities GitHub Copilot has upgraded its AI model, resulting in better code suggestions and reduced serving time. It also introduced a new security vulnerability filter to identify insecure coding patterns. Developers can now experience faster coding with more accurate suggestions. 122 11 16. 16 [](/posts/api-security-for-developers-ir1nyxf3q "API Security for Developers") Article InfoSec Write-ups · 4y API Security for Developers This post provides a high-level checklist for developers to securely develop APIs, covering all OWASP Top 10 API security issues. It emphasizes the importance of secure APIs and the risks they pose. The checklist includes recommendations for broken object-level authorization, broken authentication, excessive data exposure, lack of resources and rate limiting, broken function level authorization, mass assignment, security misconfiguration, injection, improper assets management, and insufficient logging and monitoring. 117 4 17. 17 [](/posts/ep84-top-12-tips-for-api-security-na0xcy3gl "EP84: Top 12 Tips for API Security") Article ByteByteGo · 3y EP84: Top 12 Tips for API Security The article provides top 12 tips for API security, explains the mobile app release process, and discusses the difference between Git and Github. 116 18. 18 [](/posts/what-is-good-database-design--8nehnrqd0 "What Is Good Database Design?") Article DZone · 3y What Is Good Database Design? DZone: Good database design is essential to ensure data accuracy, consistency, and integrity. The design must address the storing and retrieving of data quickly and easily while handling large volumes of data in a stable way. Data security is a critical consideration in modern database design, given the rising prevalence of fraud and data breaches. 114 3 19. 19 [](/posts/microservices-best-practices-fh5zrcnt5 "Microservices Best Practices") Article Semaphore · 4y Microservices Best Practices Microservices architecture involves designing and developing loosely-coupled services. Best practices include adopting the Single Responsibility Principle, building teams with clear responsibilities, using the right tools and frameworks, keeping asynchronous communication between microservices, adopting the DevSecOps model, using separate data stores for each microservice, deploying each microservice separately, orchestrating microservices using platforms like Kubernetes, and using an effective monitoring system. 110 5 20. 20 [](/posts/node-js-vs-deno-vs-bun-javascript-runtime-comparison-xjtzr2kjn "Node.js vs. Deno vs. Bun: JavaScript runtime comparison") Article Snyk · 3y Node.js vs. Deno vs. Bun: JavaScript runtime comparison Node.js vs. Bun is the latest upstart, offering blistering speed and significantly outperforming its rivals. Deno aims to improve its security via fine-grained access controls. Bun is still in beta and has some gaps to fill out to be fully production-ready. 99 6 21. 21 [](/posts/top-9-microservices-design-patterns-4y9yewgdv "Top 9 Microservices Design Patterns") Article Cloud Native Now · 3y Top 9 Microservices Design Patterns Microservices design patterns are gaining immense popularity due to their myriad benefits. They offer flexibility, scalability and the ability to independently develop and deploy parts of an application. They are the blueprints that guide the design of microservices architecture, especially for cloud-native applications. 91 2 22. 22 [](/posts/how-hackers-took-over-linus-tech-tips-i5chsore7 "How hackers took over Linus Tech Tips") Article The Verge · 4y How hackers took over Linus Tech Tips The Verge YouTube channel Linus Tech Tips and two other YouTube channels have been restored after a major hack allowed a bad actor to do things like livestream crypto scam videos, change channel names, and even delete videos. In a new video, owner Linus Sebastian explains that the breach bypassed things like password and two-factor protections. 86 17 23. 23 [](/posts/serving-frontends-in-microservices-architecture-fseadl2eg "Serving Frontends in Microservices Architecture") Article Amplication · 3y Serving Frontends in Microservices Architecture The microservices architecture has emerged as a dominant paradigm in the software development landscape. The frontend - which serves as the user's gateway to the application - is equally crucial. This article aims to explore the challenges and solutions associated with serving frontends in a microservices environment. 86 1 24. 24 [](/posts/backend-development-is-more-than-writing-endpoints-for-frontend-drevluaxi "Backend development is more than writing endpoints for frontend") Article This is Learning · 3y Backend development is more than writing endpoints for frontend Backend development is a crucial part of web development that involves creating and maintaining the logic, functionality and data of a website or an application. Backend developers are responsible for writing backend code that communicates with the frontend, the server and the database. They also ensure that the backend code is secure, scalable, reliable and efficient. 86 4 25. 25 [](/posts/api-101-securing-the-rest-apis-t5du-de4g "API 101: Securing the REST APIs") Article System Weakness · 4y API 101: Securing the REST APIs An API is a set of definitions and protocols for building and integrating application software. It's a way for an organization to share resources and information while maintaining security, control, and authentication. Security is a concern across all the constraints the REST API has to consider during the design and implementation phases. 84 2 [See all Security archives](/tags/security/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/security/best-of/2023#page","url":"https://daily.dev/tags/security/best-of/2023","name":"Best Security Posts of 2023","description":"The most upvoted Security posts of 2023, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/security/best-of/2023#items","numberOfItems":25,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/the-complete-microservices-guide-gmr1myhht","name":"The Complete Microservices Guide"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/the-future-of-web-development-uelqaomuh","name":"The Future of Web Development"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/doing-much-better-than-your-env-file-hu3hba0iz","name":"Doing much better than your .env file"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/explaining-ssh-to-my-uber-driver-zt5ig5ne7","name":"Explaining SSH to my Uber Driver"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/password-session-cookie-token-jwt-sso-oauth---authentication-explained---part-1-713xf4khd","name":"Password, Session, Cookie, Token, JWT, SSO, OAuth - Authentication Explained - Part 1"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/github-opens-copilot-chat-to-all-developers-h4e2i4ds8","name":"GitHub opens Copilot Chat to all developers"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/ep68-top-architectural-styles-sflnzuur9","name":"EP68: Top architectural styles"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/how-to-get-a-github-student-developer-pack-0ku0gh4kg","name":"How to Get a Github Student Developer Pack"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/best-practices-for-security-in-next-js-0packo5i3","name":"Best Practices for Security in Next.js"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/modern-vs-code-extension-development-the-basics-bnnuz26tb","name":"Modern VS Code extension development: The basics"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/10-weird-algorithms-dd08rsao4","name":"10 weird algorithms"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/stop-using-json-web-tokens-for-user-sessions-jos3ghy3k","name":"Stop using JSON Web tokens for user sessions"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/why-we-chose-node-js-over-deno--o3yuqvavh","name":"Why We Chose Node.js Over Deno?"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/best-practices-for-building-large-scale-node-js-applications-ymazgnji8","name":"Best Practices for Building Large-Scale Node.js Applications"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/github-copilot-now-has-a-better-ai-model-and-new-capabilities-wwlc-nlyb","name":"GitHub Copilot now has a better AI model and new capabilities"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/api-security-for-developers-ir1nyxf3q","name":"API Security for Developers"},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/ep84-top-12-tips-for-api-security-na0xcy3gl","name":"EP84: Top 12 Tips for API Security"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/what-is-good-database-design--8nehnrqd0","name":"What Is Good Database Design?"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/microservices-best-practices-fh5zrcnt5","name":"Microservices Best Practices"},{"@type":"ListItem","position":20,"url":"https://daily.dev/posts/node-js-vs-deno-vs-bun-javascript-runtime-comparison-xjtzr2kjn","name":"Node.js vs. Deno vs. Bun: JavaScript runtime comparison"},{"@type":"ListItem","position":21,"url":"https://daily.dev/posts/top-9-microservices-design-patterns-4y9yewgdv","name":"Top 9 Microservices Design Patterns"},{"@type":"ListItem","position":22,"url":"https://daily.dev/posts/how-hackers-took-over-linus-tech-tips-i5chsore7","name":"How hackers took over Linus Tech Tips"},{"@type":"ListItem","position":23,"url":"https://daily.dev/posts/serving-frontends-in-microservices-architecture-fseadl2eg","name":"Serving Frontends in Microservices Architecture"},{"@type":"ListItem","position":24,"url":"https://daily.dev/posts/backend-development-is-more-than-writing-endpoints-for-frontend-drevluaxi","name":"Backend development is more than writing endpoints for frontend"},{"@type":"ListItem","position":25,"url":"https://daily.dev/posts/api-101-securing-the-rest-apis-t5du-de4g","name":"API 101: Securing the REST APIs"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Security","item":"https://daily.dev/tags/security"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/security/best-of"},{"@type":"ListItem","position":5,"name":"2023"}]}]} ```