--- title: Best Security posts — April 2024 | daily.dev description: The most upvoted Security posts from April 2024, curated by the daily.dev community. canonical: https://daily.dev/tags/security/best-of/2024/04 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/security/best-of/2024/04 og:type: website og:site_name: daily.dev og:title: Best Security posts — April 2024 | daily.dev og:description: The most upvoted Security posts from April 2024, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Security — April 2024 1. 1 [](/posts/the-2024-software-architect-or-solution-architect-roadmap-cpmrpvsh3 "The 2024 Software Architect or Solution Architect RoadMap") Article Javarevisited · 2y The 2024 Software Architect or Solution Architect RoadMap An illustrated guide to becoming a Software Architect in 2024 with links to relevant courses. 214 7 2. 2 [](/posts/help-us-to-take-down-the-parasite-website-5o4j5h60n "Help us to take down the parasite website") Article Hacker News · 3y Help us to take down the parasite website A website posing as the official Notepad++ website, https://notepad.plus/, is causing frustration and potential security risks for users. It is filled with malicious advertisements and aims to divert traffic from the legitimate website. Assistance is requested to report the malicious site and protect the Notepad++ community. 149 18 3. 3 [](/posts/top-5-underutilized-javascript-features-edat31htq "Top 5 Underutilized JavaScript Features") Article The New Stack · 2y Top 5 Underutilized JavaScript Features Explore underutilized JavaScript features such as hooks for detecting malicious websites, generating reports in Node.js, controlling execution flow with generators, improving date management with Temporal, and creating reusable code with high-order functions. 109 3 4. 4 [](/posts/ep108-how-do-we-design-a-secure-system--hvf94j1s3 "EP108: How do we design a secure system?") Article ByteByteGo · 2y EP108: How do we design a secure system? The post discusses the importance of designing secure systems and provides a cheat sheet with key design points. It also explains the difference between concurrency and parallelism in system design. Additionally, it mentions the pillars of system design, such as scalability, availability, reliability, and performance. 101 1 5. 5 [](/posts/the-w-a-p--mgmm1hr2z "The W.A.P.") Article Watercooler · 2y The W.A.P. The post discusses the significance of W.A.P. and its author. 53 10 6. 6 [](/posts/how-to-prevent-web-api-attacks-with-data-validation-web-api-security-guide-wstzs8eew "How to Prevent Web API Attacks with Data Validation – Web API Security Guide") Article freeCodeCamp · 3y How to Prevent Web API Attacks with Data Validation – Web API Security Guide Learn about data validation for web APIs and how to prevent web API attacks using tools like Joi. Understand the importance of data validation and how it can protect against malicious user data. 40 1 7. 7 [](/posts/how-an-empty-s3-bucket-can-make-your-aws-bill-explode-xptawo693 "How an empty S3 bucket can make your AWS bill explode") Article Lobsters · 2y How an empty S3 bucket can make your AWS bill explode Learn how an empty S3 bucket can result in a skyrocketing AWS bill due to unauthorized requests. Find out why a popular open-source tool caused the influx of requests and how you can enhance the security of your S3 bucket. 39 8. 8 [](/posts/my-cat-alerted-me-to-a-ddos-attack-jrv2f6dlw "My Cat Alerted Me to a DDoS Attack") Article Community Picks · 2y My Cat Alerted Me to a DDoS Attack A software engineer recalls how their cat alerted them to a DDoS attack, leading to the implementation of security measures to handle the issue. 39 6 9. 9 [](/posts/javascript-deobfuscation-wdlnck9zf "Javascript Deobfuscation") Article Community Picks · 2y Javascript Deobfuscation Learn about code deobfuscation, its reasons for usage, advantages, and disadvantages. 31 10. 10 [](/posts/how-to-use-json-web-tokens-for-secure-authentication-in-flask-applications-prtnutmop "How to Use JSON Web Tokens for Secure Authentication in Flask Applications") Article freeCodeCamp · 2y How to Use JSON Web Tokens for Secure Authentication in Flask Applications Learn how to use JSON Web Tokens (JWTs) to authenticate Flask applications. Discover the authentication mechanisms available for securing data, understand how JWTs work, and follow a step-by-step process to implement JWT-based authentication. 28 11. 11 [](/posts/ep-57-how-can-you-make-your-password-more-secure--fnagdyhif "EP 57 : How can you make your password more secure?") Article Waseem .NET Newsletter · 2y EP 57 : How can you make your password more secure? The post discusses different approaches to make passwords more secure, including using salt, peeper, and multiple iterations of hashing. 25 12. 12 [](/posts/plandex-ai-plandex-an-ai-coding-engine-for-complex-tasks-sfmmgt1am "plandex-ai/plandex: An AI coding engine for complex tasks") Article Hacker News · 3y plandex-ai/plandex: An AI coding engine for complex tasks Plandex is an open source AI coding engine for complex tasks. It supports multiple platforms, allows efficient context management, and provides features like version control and branching. Plandex Cloud is free for now and offers additional features. The tool relies on the OpenAI API. 25 2 13. 13 [](/posts/webauth-unlocked-an-in-depth-exploration-of-advanced-authentication-solutions-uvuawizvd "Webauth Unlocked: An In-Depth Exploration of Advanced Authentication Solutions") Article DEV · 2y Webauth Unlocked: An In-Depth Exploration of Advanced Authentication Solutions WebAuthn is an open web authentication standard that allows users to log on to websites and applications without using passwords. It uses biometric data, hardware security keys, or PIN codes for authentication. The registration process involves creating a pair of public and private keys, while authentication requires user confirmation and signature verification. WebAuthn provides a high level of security and prevents unauthorized use of keys. The formats for registration and authorization include various fields such as challenge, rp, user, pubKeyCredParams, timeout, excludeCredentials, authenticatorSelection, attestation, and attestationFormats. 22 2 14. 14 [](/posts/implementing-passwordless-authentication-with-next-js-and-react-q43izfetw "Implementing Passwordless Authentication with Next.js and React") Article Collections · 3y Implementing Passwordless Authentication with Next.js and React Implement passwordless authentication in Next.js using the MojoAuth library for improved security and convenience. Explore the benefits and discover companies already using it. 24 15. 15 [](/posts/authorization-vs-authentication-xgeiwdspz "Authorization vs authentication") Article Cerbos · 3y Authorization vs authentication Learn about the difference between authorization and authentication and how they work together to grant access to digital resources. 23 16. 16 [](/posts/announcing-data-preservation-service-kihl5pe5j "Announcing Data Preservation Service") Article Supabase · 3y Announcing Data Preservation Service Supabase announces pg\_paper\_dump, a groundbreaking service that uses physical paper for data preservation. It provides security beyond digital vulnerabilities, is eco-conscious, and offers a simple restoration process. 22 2 17. 17 [](/posts/how-to-implement-json-web-tokens-jwts-in-php-php-authentication-guide-lcbmwlkqe "How to Implement JSON Web Tokens (JWTs) in PHP – PHP Authentication Guide") Article freeCodeCamp · 2y How to Implement JSON Web Tokens (JWTs) in PHP – PHP Authentication Guide Learn how to implement JSON Web Tokens (JWTs) in PHP to enhance authentication and data protection. 21 1 18. 18 [](/posts/all-php-applications-are-vulnerable-fnr8la1v3 "All PHP Applications are Vulnerable") Video Mental Outlaw · 2y All PHP Applications are Vulnerable A 24-year-old bug in the GBC library can be exploited to take over virtually any PHP application. 21 3 19. 19 [](/posts/12-security-tips-for-golang-apps---validation-sanitization-auth-csrf-attacks-hashing--yml4heypl "12 Security Tips for Golang Apps - validation, sanitization, auth, CSRF attacks, hashing ++") Article Awesome Go · 2y 12 Security Tips for Golang Apps - validation, sanitization, auth, CSRF attacks, hashing ++ This post provides 12 security tips for building Golang apps, covering topics such as validating and sanitizing input, authentication, authorization, HTTPS encryption, CSRF protection, dependency management, password hashing, secure configuration, session management, error handling, security audits and penetration testing, and secure deployment. 20 2 20. 20 [](/posts/revolutionize-your-authorization-with-cerbos-a-comprehensive-video-demo-ipj6ciufl "Revolutionize your authorization with Cerbos: A comprehensive video demo") Article Cerbos · 3y Revolutionize your authorization with Cerbos: A comprehensive video demo Cerbos is a solution for managing complex authorization schemes, streamlining authorization logic, and securing applications. The video demo showcases how Cerbos Hub handles authorization and offers valuable insights into modern authorization practices. 20 21. 21 [](/posts/battle-of-the-http-protocols--gqg4rypjq "Battle of the HTTP Protocols!") Article asayer · 2y Battle of the HTTP Protocols! This post explores the different versions of HTTP protocols, including HTTP/1.1, HTTP/2, and HTTP/3, highlighting their strengths and limitations. It also addresses frequently asked questions about HTTP and provides real-world examples of websites using different protocols. Overall, HTTP/2 and HTTP/3 offer significant improvements in terms of speed, efficiency, and lower latency compared to HTTP/1.1. 18 22. 22 [](/posts/this-ai-tool-can-auto-hack-websites-kinda--m49gvzukh "This AI Tool can Auto-Hack Websites (kinda)") Video Seytonic · 2y This AI Tool can Auto-Hack Websites (kinda) Researchers have developed an AI tool that can autonomously hack into websites using vulnerabilities. The tool achieved a high success rate, but there are complicating factors such as cost and limited vulnerabilities. In other news, a hacked North Korean server reveals their involvement in animation work, and ring security cameras were exploited by employees to spy on customers. The Federal Trade Commission has ordered ring to pay $5.6 million in compensation to affected customers. 16 1 23. 23 [](/posts/built-in-rate-limiting-in-asp-net-core-web-api-hq6qrt4xc "Built-In Rate Limiting in ASP.NET Core Web API") Article Code Maze · 2y Built-In Rate Limiting in ASP.NET Core Web API This post discusses rate limiting in ASP.NET Core Web API, including its importance in online systems and its implementation using built-in middleware. It covers different rate-limiting strategies such as fixed window limiter, sliding window limiter, token bucket limiter, and concurrency limiter. It also explores how rate limiting can be enabled or disabled for specific controllers or actions. 16 1 24. 24 [](/posts/the-security-repo-podcast-why-authorization-matters-more-than-you-may-think-q9itpl6ae "The Security Repo podcast: Why authorization matters more than you may think") Article Cerbos · 2y The Security Repo podcast: Why authorization matters more than you may think The podcast episode discusses the importance of authorization in software development and the challenges it poses. It emphasizes the need to consider authorization as a fundamental component during the development process. It also introduces the concept of Zero Standing Privileges and highlights the benefits of using off-the-shelf solutions like Cerbos to improve security and reduce development time. 15 25. 25 [](/posts/defang-an-ip-address-with-javascript-1iyccqcxb "Defang an IP Address with JavaScript") Article Community Picks · 3y Defang an IP Address with JavaScript Learn how to defang an IP address using JavaScript. Defanging an IP address is commonly done to prevent them from being rendered as clickable links, protect privacy, and avoid exposing network infrastructure details. The article offers both an iterative solution and a simpler solution using Regular Expressions. 15 2 [See all Security archives](/tags/security/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/security/best-of/2024/04#page","url":"https://daily.dev/tags/security/best-of/2024/04","name":"Best Security Posts — April 2024","description":"The most upvoted Security posts from April 2024, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/security/best-of/2024/04#items","numberOfItems":25,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/the-2024-software-architect-or-solution-architect-roadmap-cpmrpvsh3","name":"The 2024 Software Architect or Solution Architect RoadMap"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/help-us-to-take-down-the-parasite-website-5o4j5h60n","name":"Help us to take down the parasite website"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/top-5-underutilized-javascript-features-edat31htq","name":"Top 5 Underutilized JavaScript Features"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/ep108-how-do-we-design-a-secure-system--hvf94j1s3","name":"EP108: How do we design a secure system?"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/the-w-a-p--mgmm1hr2z","name":"The W.A.P."},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/how-to-prevent-web-api-attacks-with-data-validation-web-api-security-guide-wstzs8eew","name":"How to Prevent Web API Attacks with Data Validation – Web API Security Guide"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/how-an-empty-s3-bucket-can-make-your-aws-bill-explode-xptawo693","name":"How an empty S3 bucket can make your AWS bill explode"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/my-cat-alerted-me-to-a-ddos-attack-jrv2f6dlw","name":"My Cat Alerted Me to a DDoS Attack"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/javascript-deobfuscation-wdlnck9zf","name":"Javascript Deobfuscation"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/how-to-use-json-web-tokens-for-secure-authentication-in-flask-applications-prtnutmop","name":"How to Use JSON Web Tokens for Secure Authentication in Flask Applications"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/ep-57-how-can-you-make-your-password-more-secure--fnagdyhif","name":"EP 57 : How can you make your password more secure?"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/plandex-ai-plandex-an-ai-coding-engine-for-complex-tasks-sfmmgt1am","name":"plandex-ai/plandex: An AI coding engine for complex tasks"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/webauth-unlocked-an-in-depth-exploration-of-advanced-authentication-solutions-uvuawizvd","name":"Webauth Unlocked: An In-Depth Exploration of Advanced Authentication Solutions"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/implementing-passwordless-authentication-with-next-js-and-react-q43izfetw","name":"Implementing Passwordless Authentication with Next.js and React"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/authorization-vs-authentication-xgeiwdspz","name":"Authorization vs authentication"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/announcing-data-preservation-service-kihl5pe5j","name":"Announcing Data Preservation Service"},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/how-to-implement-json-web-tokens-jwts-in-php-php-authentication-guide-lcbmwlkqe","name":"How to Implement JSON Web Tokens (JWTs) in PHP – PHP Authentication Guide"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/all-php-applications-are-vulnerable-fnr8la1v3","name":"All PHP Applications are Vulnerable"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/12-security-tips-for-golang-apps---validation-sanitization-auth-csrf-attacks-hashing--yml4heypl","name":"12 Security Tips for Golang Apps - validation, sanitization, auth, CSRF attacks, hashing ++"},{"@type":"ListItem","position":20,"url":"https://daily.dev/posts/revolutionize-your-authorization-with-cerbos-a-comprehensive-video-demo-ipj6ciufl","name":"Revolutionize your authorization with Cerbos: A comprehensive video demo"},{"@type":"ListItem","position":21,"url":"https://daily.dev/posts/battle-of-the-http-protocols--gqg4rypjq","name":"Battle of the HTTP Protocols!"},{"@type":"ListItem","position":22,"url":"https://daily.dev/posts/this-ai-tool-can-auto-hack-websites-kinda--m49gvzukh","name":"This AI Tool can Auto-Hack Websites (kinda)"},{"@type":"ListItem","position":23,"url":"https://daily.dev/posts/built-in-rate-limiting-in-asp-net-core-web-api-hq6qrt4xc","name":"Built-In Rate Limiting in ASP.NET Core Web API"},{"@type":"ListItem","position":24,"url":"https://daily.dev/posts/the-security-repo-podcast-why-authorization-matters-more-than-you-may-think-q9itpl6ae","name":"The Security Repo podcast: Why authorization matters more than you may think"},{"@type":"ListItem","position":25,"url":"https://daily.dev/posts/defang-an-ip-address-with-javascript-1iyccqcxb","name":"Defang an IP Address with JavaScript"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Security","item":"https://daily.dev/tags/security"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/security/best-of"},{"@type":"ListItem","position":5,"name":"April 2024"}]}]} ```