Awesome List Updates on Aug 17 - Aug 23, 2015
30 awesome lists updated this week.
🏠 Home · 🔍 Search · 🔥 Feed · 📮 Subscribe · ❤️ Sponsor
1. Awesome Linux Containers
Foundations
- OPEN CONTAINER INITIATIVE
The Open Container Initiative is a lightweight, open governance structure, to be formed under the auspices of the Linux Foundation, for the express purpose of creating open industry standards around container formats and runtime.
- Cloud Native Computing Foundation
The Cloud Native Computing Foundation will create and drive the adoption of a new set of common container technologies informed by technical merit and end user value, and inspired by Internet-scale computing.
Specifications
- Open Container Specifications (⭐2.9k)
This project is where the Open Container Initiative Specifications are written. This is a work in progress.
- App Container basics (⭐8.8k)
App Container (appc) is an open specification that defines several aspects of how to run applications in containers: an image format, runtime environment, and discovery protocol.
Clouds
- Google Cloud Platform
Run Docker containers on Google Cloud Platform, powered by Kubernetes. Google Container Engine actively schedules your containers, based on declared needs, on a managed cluster of virtual machines.
Hypervisors
- LXD (⭐4k)
Daemon based on liblxc offering a REST API to manage LXC containers.
- OpenVZ
OpenVZ is container-based virtualization for Linux. OpenVZ creates multiple secure, isolated Linux containers (otherwise known as VEs or VPSs) on a single physical server enabling better server utilization and ensuring that applications do not conflict.
Containers
- runc (⭐11k)
runc is a CLI tool for spawning and running containers according to the OCS specification.
- Rocket (⭐8.8k)
rkt (pronounced "rock-it") is a CLI for running app containers on Linux. rkt is designed to be composable, secure, and fast. Based on AppC specification.
- LXC (⭐4.1k)
LXC is the well known set of tools, templates, library and language bindings. It's pretty low level, very flexible and covers just about every containment feature supported by the upstream kernel.
- Vagga (⭐1.8k)
Vagga is a fully-userspace container engine inspired by Vagrant and Docker, specialized for development environments.
- libct (⭐101)
Libct is a containers management library which provides convenient API for frontend programs to rule a container during its whole lifetime.
- libvirt
A big toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes).
Sandboxes
- Firejail
Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces, seccomp-bpf and Linux capabilities.
- Subuser (⭐881)
Securing the Linux desktop with Docker.
- Snappy
Snappy Ubuntu Core is a new rendition of Ubuntu with transactional updates - a minimal server image with the same libraries as today’s Ubuntu, but applications are provided through a simpler mechanism.
- xdg-app
xdg-app is a system for building, distributing and running sandboxed desktop applications on Linux.
Partial Access
- nsenter
Run program with namespaces of other processes. Part of the util-linux.
- ip-netns
Process network namespace management. Part of the iproute2.
- unshare
Run program with some namespaces unshared from parent. Part of the util-linux.
- python-nsenter (⭐136)
This Python package allows entering Linux kernel namespaces (mount, IPC, net, PID, user and UTS) by doing the "setns" syscall.
- butter
Python library to interface to low level linux features (inotify, fanotify, timerfd, signalfd, eventfd, containers) with asyncio support.
- pyspaces (⭐87)
Works with Linux namespaces through glibc with pure python.
Security / Links
Security / Levels of security problems
- regular application
- always untrusted -> know it
- suid bit -> mount with nosuid
- limit available syscall -> seccomp-bpf, grsec
- system services like cron, ssh
- run as root -> isolate via bastion host or vm
- using /dev -> "devices" control group
The following device nodes are created in the container by default.
The Docker images are also mounted with nodev, which means that even if a device node was pre-created in the image, it could not be used by processes within the container to talk to the kernel.
/dev/console,/dev/null,/dev/zero,/dev/full,/dev/tty*,/dev/urandom,/dev/random,/dev/fuse
- root calls -> capabilities (cap_sys_admin warning!)
Here is the current list of capabilities that Docker uses: chown, dac_override, fowner, kill, setgid, setuid, setpcap, net_bind_service, net_raw, sys_chroot, mknod, setfcap, and audit_write.
Docker removes several of these capabilities including the following:
CAP_SETPCAP Modify process capabilities
CAP_SYS_MODULE Insert/Remove kernel modules
CAP_SYS_RAWIO Modify Kernel Memory
CAP_SYS_PACCT Configure process accounting
CAP_SYS_NICE Modify Priority of processes
CAP_SYS_RESOURCE Override Resource Limits
CAP_SYS_TIME Modify the system clock
CAP_SYS_TTY_CONFIG Configure tty devices
CAP_AUDIT_WRITE Write the audit log
CAP_AUDIT_CONTROL Configure Audit Subsystem
CAP_MAC_OVERRIDE Ignore Kernel MAC Policy
CAP_MAC_ADMIN Configure MAC Configuration
CAP_SYSLOG Modify Kernel printk behavior
CAP_NET_ADMIN Configure the network
CAP_SYS_ADMIN Catch all
uses /proc, /sys -> remount ro, drop cap_sys_admin; security modules like selinux or apparmor; some part of this fs are "namespace-aware"
Docker mounts these file systems into the container as "read-only" mount points.
. /sys
. /proc/sys
. /proc/sysrq-trigger
. /proc/irq
. /proc/bus
Copy-on-write file systems
Docker uses copy-on-write file systems. This means containers can use the same file system image as the base for the container. When a container writes content to the image, it gets written to a container specific file system. This prevents one container from seeing the changes of another container even if they wrote to the same file system image. Just as important, one container can not change the image content to effect the processes in another container.
- uid 0 -> user namespaces, uid 0 mappet to random uid outside
- system services like devices, network, filesystems
- kernel drivers, network stack, security policies
- general like immutable infrastructure
- container is ro
- write to small separate rw nosuid part
Security / Technologies for security
- SELinux
- Cgroups
- file systems under /sys
- /proc/sys, /proc/sysrq-trigger, /proc/irq, /proc/bus
- /dev/mem
- /dev/sd* file system devices
- kernel modules
2. Awesome Erlang
Miscellaneous
- erld (⭐194) - erld is a small program designed to solve the problem of running Erlang programs as a UNIX daemon.
3. Awesome Typescript
Offline / Other (Plugins || Cross-platform || OSS || Free)
- 🐙 Typescript addin for (⭐29) MonoDevelop, SharpDevelop and Xamarin Studio; a short review article
💵 Paid Courses / Chrome Extensions
- Angular with TypeScript (Pluralsight)
4. Engineering Blogs
Companies / L companies
5. Awesome Influxdb
Projects / Dedicated
- Charmander (⭐63) - Charmander is a lab environment for measuring and analyzing resource-scheduling algorithms
- sysinfo_influxdb - Collect and send system (linux) info to InfluxDB
Libraries / Non-dedicated
- metrics (⭐313) - (PHP) Simple library that abstracts different metrics collectors. "I find this necessary to have a consistent and simple metrics (functional) API that doesn't cause vendor lock-in"
6. Awesome Salesforce
Mobile Development with Salesforce / Mobile SDK
- Salesfoce MobileSDK for Windows (⭐11)-Build the project normally in Visual Studio; everything should build fine. If you wish to create a new project and not use the NuGet versions of the core libraries, simply create a new project with the template, remove the NuGet reference and add references to Salesforce.SDK.Core, Salesforce.SDK.Store (for windows projects) or Salesforce.SDK.Phone for phone projects.
Troubleshooting and queries / Official Salesforce Twitter Accounts
Troubleshooting and queries / Technical Blogs
- Salesforce Engineering Blog - Covers latest update from engineering team, you will find updates about core engineering and product releated post and some awesome people to follow
7. Awesome Elixir
Framework Components
- phoenix_html_sanitizer (⭐27) - HTML Sanitizer integration for Phoenix.
Text and Numbers
- haikunator (⭐27) - Generate Heroku-like memorable random names to use in your apps or anywhere else.
8. Awesome Sketch
Videos / Tutorial-only
Videos / Process of designing dashboards, mobile apps
Videos / General screencasts
- SketchCasts (paid mostly)
Community / Tutorials
- Designer News (people talk a lot about Sketch there!)
Plugins / Must-have ❤️
Plugins / Nice-to-have 👍
- Easier.cc (Files up to 5 MB)
Other / Nice-to-have 👍
- (Newsletter) Sketch official newsletter
- (Newsletter) Sketch tricks
- (Resources) SketchApp Resources
- (Resources) SketchLand
- (Resources) SketchResources
- (Resources) Sketchapp TV
- SketchTips, a blog about Sketch
9. Awesome Python
HTML Manipulation
- html5lib (⭐1.1k) - A standards-compliant library for parsing and serializing HTML documents and fragments.
- lxml - A very fast, easy-to-use and versatile library for handling HTML and XML.
- pyquery (⭐2.3k) - A jQuery-like library for parsing HTML.
- xmltodict (⭐5.4k) - Working with XML feel like you are working with JSON.
Processes
- sh (⭐6.9k) - A full-fledged subprocess replacement for Python.
Science
- astropy - A community Python library for Astronomy.
- bccb (⭐598) - Collection of useful code related to biological analysis.
- Biopython - Biopython is a set of freely available tools for biological computation.
- cclib - A library for parsing and interpreting the results of computational chemistry packages.
- NumPy - A fundamental package for scientific computing with Python.
- PyMC (⭐8.5k) - Markov Chain Monte Carlo sampling toolkit.
- statsmodels (⭐9.7k) - Statistical modeling and econometrics in Python.
- SymPy (⭐13k) - A Python library for symbolic mathematics.
Third-party APIs
- google-api-python-client (⭐7.6k) - Google APIs Client Library for Python.
- gspread (⭐7k) - Google Spreadsheets Python API.
- twython (⭐1.9k) - A Python wrapper for the Twitter API.
10. Awesome Answers
Programming Languages / JavaScript
Programming Languages / Python
11. Awesome Polymer
Tutorials/Guides
Directories
- open-elements Open for all elements working with polymer ^1.1
12. Awesome Dotnet
Machine Learning and Data Science
- numl (⭐430) - Designed to include the most popular supervised and unsupervised learning algorithms while minimizing the friction involved with creating the predictive models.
SDK and API Clients
- Azure PowerShell (⭐4.2k) - A set of PowerShell cmdlets for developers and administrators to develop, deploy and manage Microsoft Azure applications
13. Awesome Jvm
Garbage collectors
- G1 - The Garbage-First Garbage Collector.
Languages
- Ceylon - Object-oriented, strong and static programming language with an emphasis on immutability, created by Red Hat.
- Clojure - Dialect of Lisp created by Rich Hickey. Dynamically typed with emphasis on functional programming.
- Erjang - A JVM-based Erlang VM.
- Frege (⭐3.6k) - Pure functional programming language in the spirit of Haskell.
- Groovy - Optionally typed and dynamic language, with static-typing and static compilation capabilities.
- Java - General-purpose, concurrent, strongly typed, class-based object-oriented language.
- JRuby - Implementation of the Ruby language on the JVM.
- Jython - Python for the Java Platform.
- Kawa - Extension of the Scheme language, which is in the Lisp family of programming languages.
- Kotlin - Statically typed programming language for the JVM, Android and the browser.
- Nashorn - Lightweight high-performance JavaScript runtime in Java with a native JVM.
- Renjin - JVM-based interpreter for the R language for the statistical analysis
- Scala - Strong and static programming language that combine object-oriented and functional programming ideas.
Nix tools
- atoptool - Logging of system and process activity for long-term analysis, highlighting overloaded system.
- javap - Disassembles class files into code that reflects the java bytecode.
- jhat - Java Heap Analysis Tool
- jinfo - Prints configuration information for a given process.
- jstack - Prints stack traces of threads for a given Java process.
- perf - Linux profiling with performance counters.
- sysstat - Performance monitoring tools for Linux.
Profilers
- BTrace (⭐5.2k) - a safe, dynamic tracing tool for the Java platform.
- Chronon - Record your entire java program. Replay on any machine.
- GCViewer (⭐4.1k) - GCViewer is a tool that visualizes verbose GC output.
- JProfiler - Helps resolve performance bottlenecks, pin down memory leaks and understand threading issues.
- JVMTI - Provide a native API to inspect the state and to control the execution of applications running in the JVM.
- Riemann JVM Profiler (⭐288) - JVM agent which sends function-level profiler telemetry to a Riemann server for analysis, visualization, and storage.
- Swiss Java Knife (⭐3.1k) - Small set of tools for JVM troublshooting, monitoring and profiling.
- Takipi - Tells you when and why code breaks in production.
- Zipkin (⭐16k) - A distributed tracing system gather timing data for disparate services developed by Twitter.
Runtimes
- CRaSH - The shell for the Java Platform.
- Drip (⭐1.5k) - Fast JVM launching without the hassle of persistent JVMs.
Virtual Machines
- Dalvik - Android runtime (ART) is the managed runtime used by applications and some system services on Android.
- HotSpot - HotSpot virtual machine maintained and distributed by Oracle Corporation.
- IBM J9 - JVM developed by IBM.
Documentation
- The JVM specification - The Java Virtual Machine Specification Java SE 8 Edition.
- The Java Memory Model - Starting point for discussions of and information concerning the Java Memory Model.
- The JSR-133 Cookbook for Compiler Writers - Unofficial guide to implementing the new Java Memory Model (JMM) specified by JSR-133.
- Garbage Collection Tuning Guide - HotSpot Virtual Machine Garbage Collection Tuning Guide.
Communities
- concurrency-interest - Discussion list for JSR-166.
- hotspot-compiler-dev - Technical discussion about the development of the HotSpot bytecode compilers.
- hotspot-dev - HotSpot development mailing list.
- hotspot-gc-dev - Technical discussion about the development of the HotSpot garbage collectors.
- mechanical-sympathy - Discussing how to code sympathetically to and measure the underlying stack/platform so good performance can be extracted.
Media
- JVM Language Summit 2015 - JVM Language Summit 2015.
- Bits of advice for VM writers - Cliff Click.
- Understanding Java garbage collection ... - Gil Tene.
- Faster Object Arrays - Gil Tene at GOTO Conferences.
- Java Memory Model Pragmatics - Aleksey Shipilev.
People
- Aleksey Shipilëv - Developing Oracle/Open JDK/Hotspot and other Java-related technologies.
- Brian Goetz - Java Language Architect at Oracle.
- Cliff Click - Creator of the HotSpot Server Compiler.
- Dave Dice - Senior research scientist in the Scalable Synchronization Research Group within Oracle.
- Doug Lea - Author of the Java memory model.
- Gil Tene - Azul Systems.
- John Rose - HotSpot developer.
- Martin Thompson - Pasty faced performance gangster.
- Nitsan Wakart - Azul Systems.
14. Awesome Html5
Development APIs / Permissions
Web Workers / WebRTC
15. Awesome Transit
Software for Creating APIs
- OneBusAway - A Java app that consumes GTFS and GTFS-Realtime (along with other formats (⭐200)) and turns them into an easy to use REST API.
Web Apps (open source)
- Instabus - Realtime map of Austin's (CapMetro) public transit. Has no server/backend dependency at all and runs completely on GitHub pages.
- OpenTripPlanner Client GWT (⭐9) - A Google Web Toolkit-based web interface for OpenTripPlanner
- HRT BUS Web app (⭐17) - HRT Bus API publishes real time bus data from Hampton Roads Transit through an application programming interface for developers to make apps from it.
- Transit-Map (⭐356) - Web app that animates vehicles (markers) on a map using the public transport timetables to interpolate their positions along the routes (polylines).
GTFS Realtime Libraries & Demo Apps / Ruby
- GTFS-realtime Alerts Producer Web Application (⭐1) - A Java-based web application for producing GTFS-realtime Service Alerts.
- GTFS-realtime Exporter (⭐15) - A Java-based tool that assists in producing and sharing a GTFS-relatime feed.
- GTFS-realtime Alerts Producer Demo (⭐8) - A Java-based demo project for producing GTFS-realtime Service Alerts.
- GTFS-realtime TripUpdates & VehiclePositions Producer Demo (⭐10) - A Java-based demo project for producing GTFS-realtime TripUpdates (estimated arrivals) and Vehicle Positions.
GTFS Libraries / Java
- OneBusAway GTFS Modules (⭐122) - A Java-based library for reading, writing, and transforming public transit data in the GTFS format, including database support.
GTFS Converters / Ruby
- Chouette - Converts French-Transmodel, SIRI, NETeX. See Chouette.mobi website for more info.
GTFS Realtime Convertors / Ruby
- Syncromatics API to GTFS-realtime (⭐2) - A Java-based command-line utility to convert from the Syncromatics API format to GTFS-realtime TripUpdates and VehiclePositons.
- KV6,15,17, and ARNU to GTFS-realtime (⭐1) - Java-based tool to process incoming KV6,15,17 and ARNU and match them to static transit data present in a RID integration database. It then proceeds to export this data as ARNU RITinfo, GTFS(realtime) and KV78turbo
- WMATA BusPositions API to GTFS-realtime (⭐12) - Java-based tool to convert from WMATA's BusPositions API and Alert RSS feeds from MetroAlerts to GTFS-realtime TripUpdates, VehiclePositions, and Alerts feeds.
- SEPTA API to GTFS-realtime (⭐2) - Java-based tool to convert SEPTA's real-time bus and rail data to GTFS-realtime
- CTA API to GTFS-realtime (⭐4) - Java-based tool to convert CTA's Train Tracker data to GTFS-realtime.
- Detroit DOT to GTFS-realtime (⭐2) - Extract real-time info from DDOT's TransitMaster installation (database) and convert to GTFS-realtime
- Live Transit Event Trigger (⭐4) - Extracts data from Ride On's OrbCAD database and export as GTFS-realtime.
- SoundTransit to GTFS-realtime (⭐3) - Convert text file feed from Sound Transit to GTFS-realtime
- Civic Transit (⭐4) - Screen-scrapes KCATA’s TransitMaster WebWatch installation to produce a GTFS-realtime feed.
GTFS Realtime Utilities / Ruby
- GTFS-realtime Munin Plugin (⭐1) - Provides a Munin plugin for logging information about a GTFS-realtime feed.
16. Awesome Android
GUI / Animations
- Android-View-Actions (⭐138) - Makes creating complex animations for views easy.
17. Awesome Microservices
REST / Scala
- API Blueprint - Tools for your whole API lifecycle. Use it to discuss your API with others. Generate documentation automatically. Or a test suite. Or even some code.
- RAML - RESTful API Modeling Language, a simple and succinct way of describing practically-RESTful APIs.
World Wide Web / Scala
- W3C.REC-Webarch - Architecture of the World Wide Web, Volume One.
- RFC3986 - Uniform Resource Identifier (URI): Generic Syntax.
- RFC6570 - URI Template.
- RFC7320 - URI Design and Ownership.
HTTP/1.1 / Scala
- RFC7230 - Message Syntax and Routing.
- RFC7231 - Semantics and Content.
- RFC7232 - Conditional Requests.
- RFC7233 - Range Requests.
- RFC7234 - Caching.
- RFC7235 - Authentication.
HTTP/2 / Scala
- RFC7540 - Hypertext Transfer Protocol Version 2.
Unicode / Scala
- UNIV8 - The Unicode Consortium. The Unicode Standard, Version 8.0.0, (Mountain View, CA: The Unicode Consortium, 2015. ISBN 978-1-936213-10-8).
- RFC3629 - UTF-8, a transformation format of ISO 10646.
18. BEM Resources
Articles
19. Toolsforactivism
Open-source host-it-yourself:
- Twilio.org's Rapid Response Kit (⭐304) - Collection phone-related tools using Twilio's service. Kit includes: Auto-Respond (inbound voice/sms responder), Broadcast (simple way to broadcast texts/calls to a list), Conference Line, Forwarder, Ringdown (call down a list of people, if 1st person doesn't answer go on to the next), Help Line (Press 1 for..., Press 2 for...)
- Crowdring (⭐16) - web app where people around the world can place a free missed call to sign a petition
- Self Starter (⭐3.2k) - roll your own crowdfunding site
Software as a service:
- Contact Congress (FFTF) - Used to send emails to members of the US Congress. This is Fight for the Future's hosted-version of the open sources Contact Congress. Ideal for organizations that send a lot of emails to congress, but who don't have tech staff who can install and maintain their own version of the open source software.
How do I contribute to this list
- Familiar with github? Send a pull request with your suggestions. If you're not sure how to do that don't sweat it. See below.
- Not familiar with github? You can leave a comment on this page by clicking on the
Issuestab on the right and adding a New Issue (that's just like a comment). FYI you'll need to create a github account.
20. Awesome Cpp
CLI
- gflags - Commandline flags module for C++. [BSD]
Containers
- LSHBOX (⭐286) - A c++ toolbox of locality-sensitive hashing (LSH), provides several popular LSH algorithms, also support Python and MATLAB. [GPL]
Physics
- Box2D (⭐8k) - A 2D physics engine for games. [BSD-like]
21. Awesome Javascript
MVC Frameworks and Libraries / Runner
- react-native (⭐117k) - A framework for building native apps with React.
22. Awesome Canvas
Canvas / Examples
- 30.000 particles [show me the code] • A result of a study creating performant particles with Canvas 2D.
- Canvas Colour Cycling [show me the code] • This demo is an implementation of a full 8-bit color cycling engine, rendered into an HTML5 Canvas in real-time.
- Canvas Loader [show me the code] • Reference to make loaders using canvas.
- Circular Rings [show me the code] • A great example about how to create circular rings using canvas.
- Cloth 3D Effect (Google Chrome strongly recommended) • Thid demo renders a 3d model of Apple iPod with sphere environmental mapping technique.
- Distance Field Waves [show me the code (⭐207)] • A example about GPU rendering shader experiments with procedural 3D scene generation using ray marching and distance field (also known as 'sphere tracing') rendering techniques.
- Fibrous Texture [show me the code] • Simple canvas based animation; draws random lines across the field. Makes an interesting papery pattern that becomes increasingly detailed with each iteration.
- Image Nodes [show me the code] • Interactive nodes built from image data. Use the mouse to play.
- JS Metaballs [show me the code] • Experiment for Chrome. Mix of webkit-filter and canvas for a metaballs effect.
- Linjer • Amazing experiment about nodes effects in addition with cloth and animation effect.
- Liquid Particles • A good example about Liquid Particles.
- LucidChart • A complete tool to draw diagrams and other geometric forms, made in canvas.
- L-System Turtle Fractal Renderer • A example about fractal renderer using canvas.
- Motion Graphic Typeface [show me the code] • A example about typeface animation.
- Neatnait Canvas Rain [show me the code] • A reference to create rain particles.
- Particles [show me the code] • Reference to create astonishing particles.
- Ping Pong Game [show me the code] • Besides being a good example, it also is a tutorial about game made with canvas.
- Pirates Love Daisies • A entire game created using canvas
- Tree in the Breeze [show me the code] • Demo about generating 2D trees in canvas.
- Video Destruction • Block based destruction of HTML5 video, best viewed in webkit based browsers.
- Wipers [show me the code] • Wipers receiving life with canvas.
- 3D Lorenz Atractor [show me the code] • A simple canvas example showing a Lorenz atractor
- 3D Movement in HTML5 Canvas [show me the code] • Excelent example about vector postion and movement.
- 3D Space Craft • A Space Craft made and rotating with canvas.
- Wormz • Particles experiment.
Resources / Twitter
- @jeresig - Creator of Processing.js (⭐1.7k)
- @mrdoob - Creator of three.js (⭐97k)
- @soulwire - Creator of sketch.js (⭐4.1k) and actively creating and sharing canvas/WebGL experiments
- @spielzeugz - Actively creating and sharing canvas experiments
- @paul_irish - Active contributor and write a reference post about requestAnimationFrame
23. Awesome Standard
forks
- jsw - "the spec doesnt care about semicolons and neither should you"
- obama - Move forward and standardize with Obama
24. Amas
Ask these organizations anything!
- Edenspiekermann - Design agency based in Berlin and around the world.
25. Awesome Appsec
Articles
Why Invest in Application Security? (2015)
Released: June 21, 2015
Running a business requires being cost-conscious and minimizing unnecessary spending. The benefits of ensuring in the security of your application are invisible to most companies, so often times they neglect to invest in secure software development as a cost-saving measure. What these companies don't realize is the potential cost (both financial and to brand reputation) a preventable data compromise can incur.
The average data breach costs millions of dollars in damage.
Investing more time and personnel to develop secure software is, for most companies, worth it to minimize this unnecessary risk to their bottom line.
A Guide to Secure Data Encryption in PHP Applications (2015)
Released: August 2, 2015
Discusses the importance of end-to-end network-layer encryption (HTTPS) as well as secure encryption for data at rest, then introduces the specific cryptography tools that developers should use for specific use cases, whether they use libsodium, Defuse Security's secure PHP encryption library (⭐3.5k), or OpenSSL.
Books and ebooks
SEI CERT Android Secure Coding Standard (2015)
Released: February 24, 2015
A community-maintained Wiki detailing secure coding standards for Android development.
SEI CERT C Coding Standard (2006)
Released: May 24, 2006
A community-maintained Wiki detailing secure coding standards for C programming.
SEI CERT Java Coding Standard (2007)
Released: January 12, 2007
A community-maintained Wiki detailing secure coding standards for Java programming.
Useful libraries
paragonie/random_compat (⭐8k)
PHP 7 offers a new set of CSPRNG functions: random_bytes() and random_int(). This is a community effort to expose the same API in PHP 5 projects (forward compatibility layer). Permissively MIT licensed.
psecio/gatekeeper (⭐365)
A secure authentication and authorization library that implements Role-Based Access Controls and Paragon Initiative Enterprises' recommendaitons for secure "remember me" checkboxes.
26. Tips
Before deleting untracked files/directory, do a dry run to get the list of these files/directories
git clean -nForcefully remove untracked files
git clean -fForcefully remove untracked directory
git clean -f -dShow all commits in the current branch yet to be merged to master
git cherry -v masterAlternatives:
git cherry -v master <branch-to-be-merged>27. Awesome Json Datasets
GitHub API
More Awesome Lists
- Awesome (⭐312k) (The OG List)
- WPO (⭐8.3k) (Web Performance Optimization)
- Shell (⭐32k) (CLI Frameworks, Toolkits and Guides)
28. Awesome Ruby
Code Analysis and Metrics
- Fasterer (⭐1.8k) - Make your Rubies go faster with this command line tool highly inspired by fast-ruby and Sferik's talk at Baruco Conf.
29. Awesome Electron
Articles / Other
30. Awesome Bigdata
Distributed Filesystem
- Seaweed-FS (⭐17k) - simple and highly scalable distributed file system.
- Prev: Aug 24 - Aug 30, 2015
- Next: Aug 10 - Aug 16, 2015