--- title: Best Security posts — September 2023 | daily.dev description: The most upvoted Security posts from September 2023, curated by the daily.dev community. canonical: https://daily.dev/tags/security/best-of/2023/09 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/security/best-of/2023/09 og:type: website og:site_name: daily.dev og:title: Best Security posts — September 2023 | daily.dev og:description: The most upvoted Security posts from September 2023, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Security — September 2023 1. 1 [](/posts/the-complete-microservices-guide-gmr1myhht "The Complete Microservices Guide") Article Amplication · 3y The Complete Microservices Guide Microservices have emerged as a popular architectural approach for designing and building software systems for several compelling reasons and advantages. It is a design approach that involves dividing applications into multiple distinct and independent services called "microservices" Microservices are naturally distributed services as each service is isolated from the others and runs in its own instance. 284 6 2. 2 [](/posts/github-opens-copilot-chat-to-all-developers-h4e2i4ds8 "GitHub opens Copilot Chat to all developers") Article Developer Tech · 3y GitHub opens Copilot Chat to all developers Copilot Chat was launched for ‘Business’ users in July. The AI assistant is capable of assisting developers in their preferred natural language and promises to reduce repetitive tasks. The tool empowers developers to learn and build in the language that feels most natural. 215 22 3. 3 [](/posts/modern-vs-code-extension-development-the-basics-bnnuz26tb "Modern VS Code extension development: The basics") Article Snyk · 3y Modern VS Code extension development: The basics Microsoft Visual Studio (VS) Code is currently the most popular source code editor. It can be used as a fully-fledged integrated development environment (IDE) All you need to do is add the right set of extensions from the Visual Studio Code Marketplace. Snyk Security is defined as a linter and programming language extension. 154 6 4. 4 [](/posts/what-is-good-database-design--8nehnrqd0 "What Is Good Database Design?") Article DZone · 3y What Is Good Database Design? DZone: Good database design is essential to ensure data accuracy, consistency, and integrity. The design must address the storing and retrieving of data quickly and easily while handling large volumes of data in a stable way. Data security is a critical consideration in modern database design, given the rising prevalence of fraud and data breaches. 114 3 5. 5 [](/posts/node-js-vs-deno-vs-bun-javascript-runtime-comparison-xjtzr2kjn "Node.js vs. Deno vs. Bun: JavaScript runtime comparison") Article Snyk · 3y Node.js vs. Deno vs. Bun: JavaScript runtime comparison Node.js vs. Bun is the latest upstart, offering blistering speed and significantly outperforming its rivals. Deno aims to improve its security via fine-grained access controls. Bun is still in beta and has some gaps to fill out to be fully production-ready. 99 6 6. 6 [](/posts/top-9-microservices-design-patterns-4y9yewgdv "Top 9 Microservices Design Patterns") Article Cloud Native Now · 3y Top 9 Microservices Design Patterns Microservices design patterns are gaining immense popularity due to their myriad benefits. They offer flexibility, scalability and the ability to independently develop and deploy parts of an application. They are the blueprints that guide the design of microservices architecture, especially for cloud-native applications. 91 2 7. 7 [](/posts/2023-devops-is-terrible--9pjmhbtnc "2023 DevOps is terrible.") Article Medium · 3y 2023 DevOps is terrible. 2023 DevOps is terrible. My analysis of modern DevOps evolution is terrible. I've been around the DevOps/Cloud area of the IT industry for a few years now. The shift Big techs aside, there are a few companies out there, able to implement and manage DevOps at scale. 79 6 8. 8 [](/posts/ep75-how-does-a-password-manager-work-28o9xc2dd "EP75: How Does A Password Manager Work") Article ByteByteGo · 3y EP75: How Does A Password Manager Work This week’s system design refresher: Top 5 Most Used Architecture Patterns. How does a Password Manager work? Implement passkey authentication in minutes (Sponsored) Join TikTok, Paypal, Google, and other leading tech companies by giving your users a faster and more secure sign-in experience with passkeys. 79 1 9. 9 [](/posts/best-practices-for-securing-your-reactjs-application-g8vyj7le2 "Best Practices for Securing Your ReactJS Application") Article Community Picks · 3y Best Practices for Securing Your ReactJS Application As with any web application, security is paramount to safeguard against potential attacks like XSS (Cross-Site Scripting) and CSRF ( cross-Site Request Forgery) This article delves into essential Reactjs security best practices for fortifying Reactjs applications. Let's explore the key strategies for securing your Reactjs application effectively. 71 2 10. 10 [](/posts/why-web-ui-development-is-so-hard--4rzabuzex "Why Web UI Development Is So Hard?") Article ITNEXT · 3y Why Web UI Development Is So Hard? This piece aims to dissect the inherent challenges of web UI development, from the discrepancy between web languages and the modern UI requirements. We’ll explore often-overlooked ‘unhappy paths’ such as loading states, error handling, and broader architecture considerations including security, performance, and accessibility. 71 8 11. 11 [](/posts/10-of-the-best-programming-fonts-sitepoint-xmwwq2cmf "10 of the Best Programming Fonts — SitePoint") Article SitePoint · 3y 10 of the Best Programming Fonts — SitePoint A great programming font is legible, attractive, and personalizes the editor you use every day. It needs to be good given the hours you spend at your screen, but there are plenty of fabulous programming fonts to choose from. Sites such as programmingfonts.org allow you to preview dozens of free programming fonts. 63 6 12. 12 [](/posts/introducing-cosmos-the-all-in-one-secure-platform-for-self-hosting-nplhwdzdy "Introducing Cosmos: The All-in-One Secure Platform for Self-Hosting") Article Noted · 3y Introducing Cosmos: The All-in-One Secure Platform for Self-Hosting Cosmos is a versatile all-in-one platform for self-hosting that's designed to cater to both newcomers and seasoned users alike. It offers features like a reverse proxy, seamless Docker integration, an app store, robust security tools, and a whole lot more. 59 3 13. 13 [](/posts/rust-project-create-an-authentication-server-fxzsskced "Rust Project – Create an Authentication Server") Article freeCodeCamp · 3y Rust Project – Create an Authentication Server Rust Project is designed to provide developers with the skills and knowledge they need to implement modern authentication solutions. The Rust programming language is often used for system-level programming, emphasizing safety, concurrency, and performance. The course offers a step-by-step guide to understanding and implementing user authentication in Rust. 35 14. 14 [](/posts/5-best-practices-for-securing-your-api-gateway-lsi0ntsm8 "5 Best Practices for Securing Your API Gateway") Article The New Stack · 3y 5 Best Practices for Securing Your API Gateway Learn about five best practices for securing your API gateway, including token-based authentication, role-based access control, rate limiting, explicit CORS policy, and real-time monitoring and alerting for anomalies. 34 15. 15 [](/posts/cloudflare-is-free-of-captchas-turnstile-is-free-for-everyone-xb0zsnqty "Cloudflare is free of CAPTCHAs; Turnstile is free for everyone") Article Cloudflare · 3y Cloudflare is free of CAPTCHAs; Turnstile is free for everyone Cloudflare has eliminated CAPTCHAs and made Turnstile, its bot-stopping solution, available for free to all website operators. Turnstile's checkbox solution is just as effective as a CAPTCHA without requiring user interactivity. It uses various in-browser tests to analyze browser characteristics and detect bots. Over 1 million automated signup attempts have been blocked by Turnstile. During the beta, Turnstile received feedback and added new features, such as support for additional languages and error code transparency. Turnstile is now in general availability and is free to use. 32 3 16. 16 [](/posts/best-practices-for-securing-node-js-applications-in-production-r1skrcj0b "Best Practices for Securing Node.js Applications in Production") Article Semaphore · 3y Best Practices for Securing Node.js Applications in Production The power of Node.js lies in the NPM environment, which offers millions of libraries. Most NPM packages involve some security vulnerabilities. In this guide, you will see the 15 best practices for devising a secure node.js app architecture for production. 32 1 17. 17 [](/posts/swirl-one-search-box-to-find-it-all-fqosyzcc6 "Swirl – One search box to find it all") Article Community Picks · 3y Swirl – One search box to find it all swirl uses only existing security models, so information stays secure. swirl uses AI and large language models to get the best results, so you save time. Swirl uses a search box to find it all swirl enterprise open source search and AI swirl searches. 27 2 18. 18 [](/posts/effective-use-of-middleware-in-express-js-practical-approaches-epmtpq5i6 "Effective Use Of Middleware In Express.js: Practical Approaches") Article Hacker Noon · 3y Effective Use Of Middleware In Express.js: Practical Approaches Middleware acts as a bridge between the incoming client requests and the outgoing server responses. It's like a helpful intermediary that steps in to process, modify, or augment requests as they move through your application. Middleware in Express.js helps streamline your application flow, enhancing its performance, security, and functionality. 26 1 19. 19 [](/posts/oauth-2-0-hacking--0jmlcgokc "OAuth 2.0 Hacking 💸") Article InfoSec Write-ups · 3y OAuth 2.0 Hacking 💸 OAuth 2.0 Hacking is an open authorization protocol. It allows sharing of resources stored on one site to another site without using their credentials. It uses username and password tokens instead of credentials. The resource owner is the user/entity granting access to their protected resource, such as Twitter account Tweets. 24 20. 20 [](/posts/oauth-tools-the-online-tool-that-goes-beyond-jwts-u5bblf6ua "OAuth.Tools: The Online Tool That Goes beyond JWTs") Article The New Stack · 3y OAuth.Tools: The Online Tool That Goes beyond JWTs OAuth is a free online tool provided by Curity. It offers incredible features for anyone working with or interested in OAuth and OpenID Connect. You can decode or create JWTs with different characteristics, fetch tokens from a server, revoke tokens or add an access token to external API calls. 22 21. 21 [](/posts/postgres-16-the-exciting-and-the-unnoticed-6tteqz9rj "Postgres 16: The exciting and the unnoticed") Article Community Picks · 3y Postgres 16: The exciting and the unnoticed Postgres 16 came out last week - and this year it arrived earlier than the last few years. In addition, Postgres releases minor versions of each major release every 3 months or so with bug fixes and security fixes. No new features are released in minor versions, and that's what makes major version releases so exciting. 21 1 22. 22 [](/posts/aws-devops-continuous-docker-deployment-to-aws-fargate-from-github-using-terraform-ta6hfuthu "AWS DevOps: Continuous Docker Deployment to AWS Fargate from GitHub using Terraform") Article AWS in Plain English · 3y AWS DevOps: Continuous Docker Deployment to AWS Fargate from GitHub using Terraform AWS DevOps: Continuous Docker Deployment to AWS Fargate from GitHub using Terraform. This DevOps pipeline will allow developers to push code changes to a GitHub repository and have them automatically deployed to anAWF cluster. The provided Terraform code leverages these services to create an automated deployment pipeline for your application. 20 2 23. 23 [](/posts/how-to-manage-users-in-linux-81rzorqnb "How to Manage Users in Linux") Article freeCodeCamp · 3y How to Manage Users in Linux Linux is an open-source operating system that is widely used in various applications. One of the fundamental aspects of Linux is user management, which enables administrators to control access to resources and maintain security of the system. This article serves as a comprehensive guide to user management in Linux. 18 24. 24 [](/posts/how-to-use-ai-generated-code-in-a-safe-and-effective-way-0ksr6pan1 "How to Use AI-Generated Code in a Safe and Effective Way") Article freeCodeCamp · 3y How to Use AI-Generated Code in a Safe and Effective Way AI systems can now automatically craft code for routine and repetitive coding tasks. The emergence of artificial intelligence (AI) has empowered AI systems to quickly generate the foundational components that are critical to all forms of software. The path to the future lies in the harmonious fusion of machine-generated and human-authored code. 17 25. 25 [](/posts/introduction-to-ssh-key-management-ectbigleq "Introduction to SSH Key Management") Article Community Picks · 3y Introduction to SSH Key Management SSH keys are cryptographic keys that enable user authentication to servers. They provide a secure alternative to traditional passwords. By using an SSH key, you can: - Elevate the security of your environment by disabling regular password access and mandating a passphrase-protected SSH key. 15 [See all Security archives](/tags/security/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/security/best-of/2023/09#page","url":"https://daily.dev/tags/security/best-of/2023/09","name":"Best Security Posts — September 2023","description":"The most upvoted Security posts from September 2023, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/security/best-of/2023/09#items","numberOfItems":25,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/the-complete-microservices-guide-gmr1myhht","name":"The Complete Microservices Guide"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/github-opens-copilot-chat-to-all-developers-h4e2i4ds8","name":"GitHub opens Copilot Chat to all developers"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/modern-vs-code-extension-development-the-basics-bnnuz26tb","name":"Modern VS Code extension development: The basics"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/what-is-good-database-design--8nehnrqd0","name":"What Is Good Database Design?"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/node-js-vs-deno-vs-bun-javascript-runtime-comparison-xjtzr2kjn","name":"Node.js vs. Deno vs. Bun: JavaScript runtime comparison"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/top-9-microservices-design-patterns-4y9yewgdv","name":"Top 9 Microservices Design Patterns"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/2023-devops-is-terrible--9pjmhbtnc","name":"2023 DevOps is terrible."},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/ep75-how-does-a-password-manager-work-28o9xc2dd","name":"EP75: How Does A Password Manager Work"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/best-practices-for-securing-your-reactjs-application-g8vyj7le2","name":"Best Practices for Securing Your ReactJS Application"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/why-web-ui-development-is-so-hard--4rzabuzex","name":"Why Web UI Development Is So Hard?"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/10-of-the-best-programming-fonts-sitepoint-xmwwq2cmf","name":"10 of the Best Programming Fonts — SitePoint"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/introducing-cosmos-the-all-in-one-secure-platform-for-self-hosting-nplhwdzdy","name":"Introducing Cosmos: The All-in-One Secure Platform for Self-Hosting"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/rust-project-create-an-authentication-server-fxzsskced","name":"Rust Project – Create an Authentication Server"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/5-best-practices-for-securing-your-api-gateway-lsi0ntsm8","name":"5 Best Practices for Securing Your API Gateway"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/cloudflare-is-free-of-captchas-turnstile-is-free-for-everyone-xb0zsnqty","name":"Cloudflare is free of CAPTCHAs; Turnstile is free for everyone"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/best-practices-for-securing-node-js-applications-in-production-r1skrcj0b","name":"Best Practices for Securing Node.js Applications in Production"},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/swirl-one-search-box-to-find-it-all-fqosyzcc6","name":"Swirl – One search box to find it all"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/effective-use-of-middleware-in-express-js-practical-approaches-epmtpq5i6","name":"Effective Use Of Middleware In Express.js: Practical Approaches"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/oauth-2-0-hacking--0jmlcgokc","name":"OAuth 2.0 Hacking 💸"},{"@type":"ListItem","position":20,"url":"https://daily.dev/posts/oauth-tools-the-online-tool-that-goes-beyond-jwts-u5bblf6ua","name":"OAuth.Tools: The Online Tool That Goes beyond JWTs"},{"@type":"ListItem","position":21,"url":"https://daily.dev/posts/postgres-16-the-exciting-and-the-unnoticed-6tteqz9rj","name":"Postgres 16: The exciting and the unnoticed"},{"@type":"ListItem","position":22,"url":"https://daily.dev/posts/aws-devops-continuous-docker-deployment-to-aws-fargate-from-github-using-terraform-ta6hfuthu","name":"AWS DevOps: Continuous Docker Deployment to AWS Fargate from GitHub using Terraform"},{"@type":"ListItem","position":23,"url":"https://daily.dev/posts/how-to-manage-users-in-linux-81rzorqnb","name":"How to Manage Users in Linux"},{"@type":"ListItem","position":24,"url":"https://daily.dev/posts/how-to-use-ai-generated-code-in-a-safe-and-effective-way-0ksr6pan1","name":"How to Use AI-Generated Code in a Safe and Effective Way"},{"@type":"ListItem","position":25,"url":"https://daily.dev/posts/introduction-to-ssh-key-management-ectbigleq","name":"Introduction to SSH Key Management"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Security","item":"https://daily.dev/tags/security"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/security/best-of"},{"@type":"ListItem","position":5,"name":"September 2023"}]}]} ```