Blake 2B and Blake3 are slightly different algorithms. A while ago, I came up with the question of whether or not Siacoin should migrate to Blake3. This question was posted on . Reddit This question has intrigued me, but what intrigued me more or less was the answer. It would need to be a hardfork, and although Blake3 is considered multiple times faster by others, there are debates in regards to HAIFA construction vs. traditional Merkle trees and so forth. That said, a hardfork of Siacoin would likely be easy given the code is standardized, but according to devs on Reddit, a Blake3 upgrade is the wrong thing to be worried about. I do agree. Is Blake a good choice? However, I still had a curiosity in exploring Blake3. In one of my own projects, I have decided to let the founder integrate Blake3 as its core hashing mechanism. That project is (2nd version), and I think Blake3 would work as the hashing algo of choice for BitBadges. The whitepaper can be seen .  It is worth a read. BitBadges here Another fact I found interesting, is that besides Siacoin, another Blake2b adaptor was . Nano Nano utilizes Blake2b in regards to the digested seed hashing. In regards to Blake3 adaption, Nano and most of these other cryptos would likely need a hard fork over soft fork. Interestingly enough about Blake3, is there have been many adaptations. This includes a PHP Hash Blake3 , and Blake3 itself has a Rust and C implementation. class Blake3 is said to be a merkle tree on the inside, and the speed itself is substantially higher then Blake2b in regards to the they gave. benchmark test Conclusion Blake3 is utilized more towards CPU multithreading, and likely if a cryptocurrency wants the benefit of hashing, but aren't too focused on multithreading or parallelization, then Blake2b is still a decent choice. For me, as a person liking grid and verifiable forms of computing, I had the preference of Blake3. That said, it is nice that it was already available at the time starting development.

Different

I might not be that important

Read My Stories

2B or to B3? That Is The Question... Blake 2B vs 3 for Siacoin

The Graph

Super

Target

Yellow

2022 - HackerNoon Contributor of the Year - Data Analysis

2022 - HackerNoon Contributor of the Year - Database

Nominated for 2022 - HackerNoon Contributor of the Year - Database

Nominated for 2022 - HackerNoon Contributor of the Year - Data Analysis

Percentile Approximation Vs. Averages

In this article, I would like to talk about how to make debugging faster and more efficient. Because that process usually takes a great part of app development and sometimes can turn into a nightmare. Especially it will be useful for those who just started to use the Angular framework. There are several approaches that can be used for debugging an Angular application, but I would like to highlight one of them, which is one of my favorites. My top instrument in this case is the newly released Angular DevTools. And here I will explain why it's so good. But first, briefly about tools. It was released this year and it supports angular application from the 9th version. To get started, we just need to find that extension in the browser store and then add it. New developer tools will appear in extensions as well as an additional tab in browser dev tools. For demo purposes, I made a simple angular application. Based on that let's overview key features of Angular DevTools: Components Tree Structure This is a great visualization of all app components. It is very convenient to navigate through all of them. Filter helps to reach specific parts very fast, highly helpful in case if we are dealing with a huge app. Furthermore, next to the tree structure section, we can find all properties of selected elements. It allows to change values of them and immediately see the response of an application. Fast access to source code Angular DevTools provides an easy way to access component source code with one click. This is very useful in case we need to set breakpoints in some part of a code and check how it's executing. Profiler This is another key feature, which was made for testing the performance of an app. It has a nice visualization of change detection events fired during the interaction with an application. It helps to find unnecessary change detection or slow computation. Let's overview it in detail. To run the profiler we need to press the record button. After interacting with the application, a bar char appears, which contains all events that have happened. Bars represented at the timeline have a different height which means an amount of time spent for a specific change detection cycle. It is possible to inspect each of them by clicking on the bar. It shows extra information like the source of an event and time spent. Below the timeline, there are vertical bars that indicate components affected by the selected change detection cycle. Once we click on that bars, we get components details. All these functionalities make profiling much more convenient and easier. Disadvantages Besides the great features mentioned above, Angular DevTools also have some disadvantages comparing to other tools. For example, there is no visualization of dependency injections and routing, like it is made in Augury (another tool for debugging angular apps). But I hope it will be added in the next updates of Angular DevTools. Wrapping up Despite some disadvantages, Angular DevTools is a great instrument to make debugging fast, convenient and efficient. Moreover, you can combine all features it has with other tools, like the ones that browsers have already built it. In the end, we have a powerful set of instruments to make our applications reliable and bug-less. Thanks for reading, I hope it was useful!

2022 - HackerNoon Contributor of the Year - Angular

2022 - HackerNoon Contributor of the Year - Data Visualization

2022 - HackerNoon Contributor of the Year - Frontend

Nominated for 2022 - HackerNoon Contributor of the Year - Angular

Nominated for 2022 - HackerNoon Contributor of the Year - Data Visualization

Nominated for 2022 - HackerNoon Contributor of the Year - Frontend

Debugging Angular Applications: The Tool You Need to Know

The Sandbox

Chain

Coalesce

phantasee.io

Tavern Lecture One: A Fantastical Discourse on Blockchain, Metaverses and NFTs

The WebRTC technology, provided by Google for general use in 2011, has found wide application in video communication systems, video broadcasting, for creating group chats, video conferences and telepresence robots. Its main advantage is the implementation of basic methods and classes directly in the browser, which provides the widest compatibility with various OS and hardware platforms. The below article describes the method of video scaling implemented in the BotEyes telepresence robot, using Javascript and HTML5. One of the WebRTC features is the automatic adaptation of the transmitted video resolution to the communication channel bandwidth. The bandwidth depends not only on Internet speed but on processor performance and RAM capacity on the receiving and transmitting side. Therefore, it is impossible to transmit video with a resolution of more than 0.5-1 MP when using gadgets of the lower price range and the Internet with a bandwidth of fewer than 5 Mbit/s. Therefore, if we want to transmit small image details via WebRTC with a low bandwidth of the communication channel, it is not enough to increase the camera resolution. This is because the WebRTC algorithm will compress the video anyway, automatically adjusting it to the bandwidth of the communication channel to transmit it without delay. Video transmission without delay is the main purpose of WebRTC, where "RT" means "Real-Time." The only way out is to scale the image before it is transmitted over the Internet. Let's look at how you can do this. Three Ways of Video Scaling There are three main ways of zooming: optical magnification and software (digital), which is divided into a built-in camera and implemented by a separate program. is performed using a system of lenses, the distance between which varies mechanically, using micromotors. It is most effective because the enlarged image is sampled using the full resolution of the optical matrix of the image sensor. Optical magnification The disadvantage is the high price of such a camera, from $200 to $700, and often the lack of software support for common tablets, as well as the need to use USB-OTG, which does not allow charging the tablet with the camera connected at the same time. Before considering the principle of digital magnification, let us recall that the main limitation of the resolution of video transmitted over the Internet is the bandwidth of the Internet communication channel. In addition, the real-time requirement in WebRTC prohibits the use of a buffer to compensate for sudden delays in the communication channel, i.e., the video must be transmitted in real-time. Therefore, if, for example, the video sensor matrix has a size of 8 MP, and the bandwidth of the communication channel allows you to transmit video with a resolution of only 1 MP, then for video transmission, its size is reduced to 1 MP to prevent the occurrence of delays of unacceptable magnitude. In this case, small details of the image become indistinguishable. in such conditions may consist in cutting out the necessary 1 MP fragment from the full-scale video (which will have the maximum resolution for this matrix) before reducing the resolution from 8 MP to 1 MP, and only after that transmit it through the communication channel, see Fig.1. Digital image scaling Reducing the resolution is not required since the cut-out fragment has a size of 1 MP allowed for the communication channel. The described procedure can be performed in two ways: by setting the camera parameter: var constraints = { advanced: [{ zoom: 1 }] } (see ) - this if the first way, and using HTML5, with method https://w3c.github.io/mediacapture-image/#zoom CanvasRenderingContext2D.drawImage() from - this is the second way. Canvas 2D API The first way implies that camera manufacturers for a tablet (or computer) implement scaling firmware (we will call it native) directly in the camera processor and provide the operating system with an interface for controlling the "zoom" parameter. Unfortunately, not all tablets perform scaling in the same way: some enlarge the image while increasing the camera resolution, others do scaling without changing the resolution, and others do not support this parameter at all. In the second case, scaling can increase the number of pixels by interpolation without changing the amount of information in the video. At the same time, the image increases, but its clarity decreases; it becomes more blurry. . Such software can be written, for example, in Java, Javascript, or Objective-C. The second way is implemented not in the camera but in the software that is executed in the tablet processor The scaling algorithm consists of two stages: increasing the camera resolution by a specified number of times and then cutting out the desired video fragment to keep the same image size in pixels. At the same time, the value of the video stream remains the same, and it can be transmitted without delay through a communication channel with the same bandwidth as before scaling. Digital Scaling Native digital scaling is not supported by all tablets, and if it is supported by a tablet, it may not be supported by a browser. For example, native scaling in the Samsung Galaxy Tab S7+ tablet is supported in the Google Chrome browser but is not supported in Microsoft Edge. Unfortunately, when using the software method, you have to operate with a large image in the tablet's memory, and this sometimes (quite rarely) leads to the well-known error "AW, Snap!" in the Google Chrome browser if the maximum resolution is selected. A similar error does not appear in the Microsoft Edge browser; at least, we were not able to detect it experimentally. We have implemented both scaling methods, and Figure 2 shows the result. Text that is completely illegible before scaling becomes readable after it. To reduce the load on the processor and reduce the likelihood of an error "AW, Snap!", we made it possible to reduce the frame rate of the video after the increase. This does not significantly reduce the convenience of using WebRTC in video chats since the described method of magnification does not affect the pace of speech and magnification is usually used to examine stationary objects (a blackboard, a sheet on a table, equipment parts) and is rarely used for dynamic scenes. At the same time, the frame rate can be increased if the user has a gadget with a large RAM and a powerful processor. Since the video magnification factor depends on the resolution of the camera, and the rear camera of most tablets has a resolution almost 2 times greater than the front, we made it possible to switch cameras quickly. To get the maximum magnification, you can use the rear camera. Another problem associated with programmatic magnification is automatic focus guidance. The fact is that with the software method of scaling, the focus criterion uses the entire field of the matrix, while only part of it increases. Therefore, it may turn out that the focus is not set to the part of the image that we have enlarged, and it turns out to be blurry. In Fig. 2, as well as in , you can see the result of such an algorithm when using an inexpensive Huawei Mediapad T5 tablet and using a rear camera. You can also view the operation of the algorithm on a real WebRTC application . this video at this link

Google

Huawei

Microsoft

Mozilla

Samsung

BotEyes Telepresence Robot website

Zoom in to WebRTC

The effects of climate change are no longer confined to the distant future. They are a present danger set to become more apparent as time progresses. As such, it’s come time for businesses to see the future of their operations as contingent on the future of the planet.  Firms that want to be profitable in the future should take steps today to ensure there will be a suitable environment in which to make profits for future generations. eBay is one such company that has embraced this view. Their plan for sustainable commerce is one that will allow the digital shopping platform to serve customers for decades to come.  As a company, eBay supports the United Nations Sustainable Development Goals (SDGs) through its platform, initiatives, and business operations. They specifically focus on 6 SDGs that reflect material issues and enable eBay to responsibly grow its business. For example, eBay wants its operations to be powered by 100% renewable energy by 2025. This goal is in accordance with SDG #7: clean and affordable energy. Recently, eBay has joined McDonalds in agreeing to purchase power from Louisiana's largest solar project, pushing the company closer to its ambitious goal. Another SDG that eBay embodies particularly well is #12, the goal related to responsible consumption and production. eBay’s entire platform is one where products can continuously find renewed life and value. Using innovative technologies, they endlessly pursue new ways to advance circular commerce.  In a specific case, Samsung products like the Galaxy S20 Ultra are now part of eBay’s Certified Refurbished program, encouraging people to buy their electronics used. These efforts have a notable ecological impact; in 2020 alone, sales of pre-owned electronics and apparel on . eBay conserved 720,000 metric tons of carbon emissions Recommerce isn’t just a sustainable way to shop. It’s eBay’s main business model. eBay understands that company growth and climate consciousness are not competing goals.  If companies want to be able to sell their products 50 years from now, there needs to be a world able to both create and buy said products. Sustainability initiatives are a matter of practicality.

eBay

Founder & President of NowSourcing, a leading infographic design agency

Founder @ NowSourcing. Contributor @ Hackernoon, Advisor @GoogleSmallBiz, Podcaster, infographics

2021 - HackerNoon Contributor of the Year - STORYTELLING

2022 - HackerNoon Contributor of the Year - Business

2022 - HackerNoon Contributor of the Year - Education

2022 - HackerNoon Contributor of the Year - Finance

2022 - HackerNoon Contributor of the Year - Health

2022 - HackerNoon Contributor of the Year - Healthcare

2022 - HackerNoon Contributor of the Year - Healthtech

2022 - HackerNoon Contributor of the Year - Law

Founder & President of NowSourcing, a leading content marketing agency

Nominated for 2022 - HackerNoon Contributor of the Year - Healthcare

Nominated for 2022 - HackerNoon Contributor of the Year - Finance

Nominated for 2022 - HackerNoon Contributor of the Year - Law

Nominated for 2022 - HackerNoon Contributor of the Year - Business

Nominated for 2022 - HackerNoon Contributor of the Year - Health

Nominated for 2022 - HackerNoon Contributor of the Year - Healthtech

Nominated for 2022 - HackerNoon Contributor of the Year - Education

Hacking a Sustainable Future [Infographic]

You've probably heard about Web3 unless you've been living under a rock. Web 3.0 is the next step in the web's growth, and it aims to make the internet more intelligent. Before learning more about Web3, let's understand the evolution of the web first. Over the last few years, the World Wide Web has developed, bringing with it new tools and strategies. Web 1.0, 2.0, and 3.0 are typical names for these stages. Now let's understand each of their stages. Web 1.0 It is the first stage in the evolution of the web, which is also referred to as the read-only web. Web 1.0 websites were not as dynamic and interactive as it is now. The primary goal of the websites was to make the information available to the general public. As servers were improved, average connection speeds rose, and developers gained new skills and techniques, the shift from Web 1.0 to 2.0 took occurred over time. Web 2.0 It is the second stage in the evolution of the web, which is also referred to as the read-write web. It's just a better version of the first worldwide web, marked by the shift from static to dynamic or user-generated content, as well as the rise of social media. Web 2.0 is the business revolution in the computer industry caused by the move to the internet as a platform, and any attempt to understand the rules for success on that new platform. – Tim O’Reilly. Some of the famous Web 2.0 applications are Google Maps, Facebook, Twitter, YouTube, WordPress and etc. Web technologies such as HTML5, CSS3, and Javascript frameworks such as ReactJs, AngularJs, VueJs, and others enable users to come up with new concepts, allowing users to contribute more to this Social Web. Now that you have a good understanding of the evolution of the web and its old stages, Let's understand what the hell Web 3.0 is. Web 3.0 It is the third stage in the evolution of the web, which is also referred to as the read-write-execute which refers to the future of the web.  In this era, artificial Intelligence and Machine Learning enable computers to understand data in the same way that people do. Web3 applications or DApps, are developed on decentralized peer-to-peer networks like Ethereum and IPFS. These networks are developed, operated, and maintained by their users, rather than by a business. They self-organize and don't have a single point of failure. You'll notice that when you hear about Web3, cryptocurrencies are frequently mentioned. This is due to the fact that many of these protocols include cryptocurrencies. Anyone who wishes to help create, control, or improve one of the projects is given a cash incentive (tokens). These protocols frequently provide a wide range of services, including computation, storage, bandwidth, identification, hosting, and other online services previously supplied by cloud providers. What makes Web 3.0 so unique? Web 3's major benefit is that it seeks to solve the most serious issue that has arisen as a result of Web 2: the gathering of personal data by private networks, which is subsequently sold to marketers or potentially stolen by hackers. Web 3's network is decentralized, meaning it is not controlled by a single organization, and the decentralized applications (apps) created on top of it are open. Properties of Web 3.0 The following are three key characteristics that can help us define Web 3.0: Semantic Web One of the key elements of Web 3.0 is “semantic web.”. The semantic web enhances online technologies by allowing users to create, share, and connect content via search and analysis based on the ability to understand the meaning of words rather than keywords or numbers. 3D Graphics 3D Graphics are being used widely in websites and services in Web 3.0 such as online games, e-commerce, and portfolio website. is the best example of a 3d website by Bruno Simon. Here Artificial Intelligence Semantic Web and Artificial Intelligence are the two cornerstones of web 3.0. By combining this capacity with natural language processing, Web 3.0 allows computers to comprehend material in the same way that people do, resulting in quicker and more relevant results. To meet the demands of users, they grow increasingly intelligent. What is Web3.js The Web3.js library is the primary JavaScript library you'll use while creating Web3 applications. web3.js is a set of libraries that let you use an HTTP or IPC connection to communicate with a local or distant ethereum node. The Ethereum blockchain is accessed with the web3 JavaScript library. It can access user accounts, send transactions, and communicate with smart contracts, among other things. In fact, Web3.js is one of the main frameworks used in designing dApps. Conclusion That is it for this article. I hope you found this article useful and if you need any help please let me know. Would you like to buy me a coffee, You can do it . here Let's connect on and . Twitter LinkedIn 👋 Thanks for reading, See you next time

Facebook

Twitter

YouTube

Full stack developer with hands on experience of designing, developing and maintaining web.

2021 - HackerNoon Contributor of the Year - WEBSITE

2022 - HackerNoon Contributor of the Year - Git

2022 - HackerNoon Contributor of the Year - Github

2022 - HackerNoon Contributor of the Year - Internet

2022 - HackerNoon Contributor of the Year - Solidity

2021 - HackerNoon Contributor of the Year - FIREBASE

Nominated for 2022 - HackerNoon Contributor of the Year - Git

Nominated for 2022 - HackerNoon Contributor of the Year - Github

Nominated for 2022 - HackerNoon Contributor of the Year - Internet

Nominated for 2022 - HackerNoon Contributor of the Year - Solidity

The Ultimate Guide to Web 3.0 - The History and Future of the Web

GraphQL is currently one of the most frequently mentioned technologies when it comes to innovation in the API economy. Adopters enjoy the ease of use and tooling, for example, GraphiQL -- the browser-based user interface to try out any GraphQL API. The whole experience of GraphQL is exactly what frontend developers need to build amazing interactive web applications. However, with the rise of adoption, I’m starting to get more and more concerned about the way people understand GraphQL and use it. In this post, I’d like to share my unpopular opinion on what GraphQL is really meant to be and why you should be concerned if you’re using it the popular-but-risky way. API Styles Let’s take a step back and discuss APIs and API styles in general before answering the main question of why you’re probably using GraphQL the wrong way. APIs offer a way to hide the complexity of the implementation behind a user-friendly interface. For example, a shopping basket can have methods to add and delete items or to move forward to the checkout. As a user of this shopping cart API, you don’t have to think about how the data gets stored or what exactly happens when you add or remove an item. Over the last few decades various styles of APIs have emerged, all with different implementations, depending on the use cases. You Probably Don’t Need GraphQL If you’d like to choose the right API style for a problem, you also have to consider how the API gets published and used. Do you know all your users and use cases? Are these users part of your own organization? Are they partners? The answers will most probably influence your choice of the API style and implementation, doesn’t it? The last sentence is where I think we get it wrong a lot of the time. I see people all over the place choose the API style and implementation long before the important questions were answered. Do you Have Facebook-Scale Problems? The current most popular example of this behavior is GraphQL. Are you building a modern single-page application with React? Awesome, use GraphQL! Facebook, Airbnb, Paypal, Netflix, they all do it so it must be a good fit. Why don’t we see more discussions around choosing the right technology for a given problem? I assume it’s a lack of education, but I’m not sure about this one. If you have any relevant degree, you might respond to this with your experience of education on APIs. Always keep in mind, if you use Facebook-Scale tooling without having Facebook-Scale organization and Facebook-Scale problems, you might realize painfully that you’re using a sledgehammer to crack a nut. It’s the same reason why Chaos Monkey makes sense for Netflix while it doesn’t for your two docker containers running on a 5$ machine DigitalOcean. Why is GraphQL Getting so Popular? GraphQL simplifies the communication between API developers and API consumers. API consumers, often frontend developers, get lots of change requests from product owners which lead to changing requirements on the API. With GraphQL, you have a good chance of not being forced to talk to the developer of the API. You change the Query and can get back to CSS and Javascript. I assume this was one of the main drivers at GitHub to choose GraphQL as an implementation of the query-based API style for their new API. Their API is publicly available. They have big numbers of API consumers, all with different requirements. They can’t build resource-based APIs that satisfy all of their users. In this particular use-case, GraphQL might actually be a good choice. Instead of trying to solve each problem, they rather offer a generic GraphQL API. You’re Probably not GitHub, are you? What are the trade-offs that GitHub is willing to accept when publicly exposing a GraphQL API? They have a whole team behind their GraphQL API, making sure you, the user, does not accidentally or intentionally break their systems. You can watch videos of them talking at conferences about the complex systems they built to secure their API and keep it stable. They’ve built tooling for GraphQL specific analytics to get better insights into API usage. Do you Fully Understand the Risks? I assume that many developers with a focus outside of security have little experience on what it takes to secure a REST API exposed on the internet. Most of us have little experience implementing authentication, authorization, rate limiting etc. However, I think securing a is rather simple, compared to a GraphQL API. Any HTTP-based API framework lets you define your routes and attach standardized middlewares to solve the problems listed above. A single HTTP call always corresponds to a single call on the controller of an API. RESTful API With GraphQL on the other hand, a single Query might result in thousands of calls on the controllers (resolvers) of the API. There is no simple way to solve this problem. Depending on the language you use, various libraries are trying to help you with the issue. How trustful are these libraries? Do you fully understand how they work? Are there edge cases we’re not yet fully aware of? Will you Benefit as Much as GitHub does? Are you a single developer working on a side project? Do you benefit as much as you’re expecting from using GraphQL? Are you using many different clients with different data needs? Do you really need a query-based API? What’s your strategy to combat the problems listed above? “But I’m NOT Exposing my GraphQL API” Sure. You might be thinking that your GraphQL API is not really exposed. It’s used on your website, but you don’t show the playground anywhere. If you’re using a GraphQL client in the frontend that directly talks to your GraphQL API, this API is exposed, even if not visually exposed with a GraphQL playground. Leaking Sensitive Information Do you allow any client to invoke the introspection Query? Are you leaking sensitive information through the introspection Query? Are you planning a new feature on the UI which will be made public in a few weeks or months? Is this feature already visible to your competition if they look at your schema? What if someone scrapes your schema every day to track changes and try attacks whenever you update your schema? Schema Traversal Attacks Are you aware of schema traversal attacks? A user might be allowed to see his own account balance, but how about his/her friends? Is it possible to traverse the schema in a way you didn’t anticipate which leaks data? How do you test for this kind of behavior and ensure it’s not possible for your own schema? Bug Bounties Everywhere Is there a reason why companies like Shopify participate in bug bounty programs? They seem to be aware of the complexity of securing a GraphQL API. They invite security experts to help them make their publicly available GraphQL API more secure. Do you realize that your GraphQL API is as vulnerable as Shopify’s? The Most Secure GraphQL Server How to make a system 100% secure to any kind of remote attack? If you want to be 100% safe, you should consider unplugging the network cable. However, this comes with some inconvenient drawbacks. You probably don’t want to store your GraphQL query on a USB dongle, walk to the remote computer and execute it manually, then copy the response back on the dongle and walk back to your own computer. What’s in between an unplugged network cable and exposing GraphQL? How about reducing the complexity to the level of a REST or RPC-based API while keeping the advantages of a query-based API? GraphQL as a Server-Side language If we primarily use GraphQL on the server to define JSON-RPC APIs, we get the best of both worlds.  The flexibility of GraphQL combined with the security and predictable performance of an RPC-based API. GraphQL Specification is Designed for This The GraphQL spec allows us to define multiple Operations (Queries, Mutations, Subscriptions) in a single GraphQL document. In addition to this, the validation rules of the spec require all Operations in a GraphQL document to be named. There’s just one exception that allows a single anonymous Query. But in case the number of operations in a document are above 1 we’re already forced to name our Operations. Another important requirement is that all Operation names must be unique. That is, there shall be no two Operations with the same name. A set of GraphQL Operations is a JSON-RPC API The design of the GraphQL specification alongside with the validation rules builds a perfect foundation for what we’re trying to achieve here. If we want to define a new JSON-RPC API, all we have to do is create a new file containing a set of GraphQL Operations. Each Operation has a unique name. This name becomes the function name of the JSON-RPC. The Operation variables become the input of the RPC call. Next, we can “deploy” all Operations on our API backend and prepare the RPC Endpoints. Finally, based on the Operations and the known RPC-Endpoints we’re able to generate a client that knows about the schema as well as all RPC endpoints. JSON-RPC-GraphQL compared to exposed GraphQL. Conclusion Using GraphQL as a framework for building JSON-RPC APIs is not a solution to every problem. There are situations where it’s not feasible or simply technically impossible. However, a lot of GraphQL users can benefit from this approach, as it increases security and performance at marginal costs. This article was written by Wundergraph’s CEO / CTO Jens Neuse. Originally published here.

AirBnB

Alongside

Netflix

Automate 80% of your API related tasks. Show me how!

2022 - HackerNoon Contributor of the Year - Api

2022 - HackerNoon Contributor of the Year - Graphql

2022 - HackerNoon Contributor of the Year - Rest Api

2022 - HackerNoon Contributor of the Year - Typescript

Open Source and Production Ready. Give it a try 🚀

Nominated for 2022 - HackerNoon Contributor of the Year - Rest Api

Nominated for 2022 - HackerNoon Contributor of the Year - Graphql

Nominated for 2022 - HackerNoon Contributor of the Year - Typescript

Nominated for 2022 - HackerNoon Contributor of the Year - Api

Do NOT Leave GraphQL Exposed Online

What does release management make you think of? Do some of these thoughts include overnight deployments, exhausted developers, bug-filled releases, downtimes, and infuriated users? If so, you may need to adjust your perspective on the release management process. In today’s ever-changing business environment, there’s no margin for error. Unfortunately, a staggering number of issues still stem from or their environment. changes in the software Therefore, to save your money and get a good night’s sleep, you should invest in a robust . release management process We recommend using our tips to implement this change. But first, let’s get familiar with the basics. What is it? For those not in-the-know, release management is a high-impact process that includes the planning, controlling, and scheduling involved in software building. This process spans across every from the 'discovery and development' phase to the ' and release' phase of the software. development phase, deployment Genius! Why use it? The following red flags might mean that you need a better release management plan: Everyone involved feels jittery. Your process includes inefficient manual steps that are deeply ingrained into the workflow.
There’s only one team member who really knows how to get the code deployed. The ‘Big Bang Release’ is a common thing in your system. Your plan is: To go live and pray for the best. (Yiykes) Not all Feature Flags Wear Capes Faster, safer, and continuous delivery is no longer a far-fetched dream. Everyone can enjoy this peace of mind by performing gradual feature rollouts and fixing bugs without redeploying. The shortcut to achieving this version of heaven is . feature flagging Once a new product feature is uploaded to the actual server, your can make the new feature visible to only a small percentage of users, and then scale up as needed. development team Structure To enjoy a safe and quick delivery, you need to establish a regular release cycle and create a routine. Feature Workflows help organizations secure a custom, standardized release workflow template and ensure that release activities stay consistent across all participating teams. Fast Results Technology performing at human speed is no longer an option. In today’s intense , timely releases are like oxygen for companies. tech rivalry This need for speedy results amounts to the current automation craze which allows organizations to keep up with the fast-changing pace. of release processes improves accelerated releases and progressive delivery strategies.  It also reduces cycle times and provides rapid feedback on deployments and releases. Automation So… it’s a like a total prerequisite. State Your Desires, Clearly Set up clear requirements for the ' ' in order to keep your team motivated. configuration plan It will keep your developers updated on the development process while decreasing the risk of bugs that slow down feature deployments. We also recommend monitoring your success with . Examples of KPIs include a specific error rate and/or the total amount of user downloads. KPI Protect the Users The ultimate goal of any release manager is to roll out new features quickly while reducing downtime or impact to an application's users. If something goes wrong in production, feature flags will help developers to respond to incidents quickly and minimize the blast radius of the error. stru Subscribe to ’s newsletters via our subscribe form in the footer. HackerNoon

Discovery

Progressive

Routine

Timely

Subscribe to Newsletters by signing up via our footer subscription form. 

Feel the Release

What’s more frightening than Halloween? Data migration. processes can be terrifying, and rightfully so. Data migration Whether you’re a company owner, manager, or developer, moving from an database to a database (or vice versa) is quite the undertaking. SQL NoSQL That being considered, modern technology is dictating its terms. Thus, the fear of data migration is simply not a good enough reason for holding on to something which you’ve outgrown. Is Ditching SQL for NoSQL Worth it? Usually, you don’t decide to dump your in the spur of the moment. In most cases, your application and use cases naturally bring you to this point. relational DB The need for greater flexibility — both in the scaling model and the data model— usually serves as motivation for this changeover. Therefore, it’s not a matter of worthiness, it’s more about keeping up with current needs. RDBMS are not Enough Typical web apps are built on a three-tier architecture that includes data, logic, and presentation. If you want to scale the application, you simply add commodity to support more users. However, that’s where there is a catch. web servers Relational databases don’t have a . This means that you won’t get away with using commodity hardware in your scaling initiative. flexible data model Instead, you’ll have to draw on immensely complex, big servers that guzzle up monstrous fees. Seems pretty bleak. Doesn’t it? It's Time Below is some literature for how you decide on whether to free yourself from the shackles (or not): Identify the key requirements for your application: You will hit the jackpot with your NoSQL transitioning when: A. You need due to the shifting market or data needs.
B. You need scalability under notable user demand.
C. You need constant performance with low response time and high throughput.
D. You need operational reliability to handle failures. rapid app development 2.Study the various types of NoSQL offerings: Document databases are not created equal. In some cases, Couchbase might be the database you use to build a responsive and flexible cloud, mobile, and applications that scale with ease. edge computing 3.Make the Tough call: The main difficulty is in understanding the vastness of NoSQL databases. While each record in a SQL database complies with a schema, NoSQL DBs can have each document be composed with a unique structure. Don’t worry, you don’t need any extra management tools to handle those changes to document . schemas Besides, some NoSQL databases have added more structural features to bring the familiar tables and schema format to a NoSQL database. Translation difficulties may include: Denormalization (repetition of data is acceptable in NoSQL).
Sacrificing to achieve scalability. ACID No relationship between the tables (although some of the NoSQL DBs allow relationships between entities). There are a lot of different ways to ETL aka transform data from a SQL database to a NoSQL database, hence you’ll face some dilemmas when deciding on data import as well. Don't Leave Me With all that rambling on about how difficult it is to migrate your data, consider one important point. There may be many situations where you want to leave behind your SQL server and go to a new one. However, there are still lots of use cases where a migration doesn't mean you abandon the old database. You can use multiple database systems to separate data belonging to different applications. Migration is not the only option. You can abandon one or the other, or build a bridge between the two. This is the part when you break free (from the dilemma). Subscribe to ’s newsletters via our subscribe form in the footer. HackerNoon

fees

Ghost in Your Machine

There’s an astronomical difference between simply writing code and being a great developer. Anyone can pick up the basics of syntax and formatting. But what actually takes someone from being simply ‘capable’ to being ‘great’? The ability to learn. The secret sauce to a developer’s excellence can be found in the ability to harness an effective learning process, thus, moving past being a shell of static, safe mediocrity. Learning through more systematic resources like books, courses, and tutorials can help you unfold your coding journey and pick up the basics . no problem However, just like making a complex cooking recipe, becoming a better developer means that you need to diversify the techniques that you use and make sure to alternate between various learning resources. With that said, below are our tidbits of wisdom to propel you forwards to a brighter coding future. Be Teachable Too many computer science graduates exude the “I know everything” bravado. Let's get it straight: you don’t. And that’s okay. Your curiosity and self-doubt can sometimes program you into the mood for breaking new grounds. Don’t Spread Yourself too Thin Don’t get overwhelmed with the media headlines that declare a new movement with every new function or technology. You won’t see most new frameworks or features catching fire, hence, there’s no real need to learn all of them all at once. We recommend focusing your energy on the following three pillars: Living and breathing the basics of the tech stack you use. Being familiar with the latest version of your go-to stack Being well versed in technology that is secured by market titans. In case you have a hard time understanding the fundamentals, create a list of go-to topics that is easy to maneuver and access. Your Work is Never Done We’re fully aware that your main objective is to write high-quality code that meets the specs. However, making the code work is actually just your starting point. Granted, that’s what makes a huge difference between an average performance and an outstanding performance. However, now that you acknowledge that your code works, make it even better. It’s useful to accept the fact that you’ll have to iterate your creation. Only then will you be able to distill even the smallest pieces of the problem and brew up a robust solution. Read Lots of Code, Write Lots of Code, Repeat In your daily work, learning to read code will turn out to be more important than writing it. That’s because a big part of your tasks still boils down to debugging and cleaning up other people's coding attempts or performing code reviews. Tech reading skills can narrow the learning curve and help your literacy of the programming languages. Whether it’s writing large programs, supportable code, or software architecture, you’ll perform more confidently with some code-reading skills under your belt. Ergo, once you’ve found a great project (preferably, an open-source one), sink your teeth into it. You should be thinking about things like: What type of architecture does this project leverage? Why did they opt for a particular pattern? Keep Calm, and Carry on Coding Your code will never seem perfect - just deal with it. There will always be some parts of it that just don't seem good enough. That being said, that’s another differentiator between great and mediocre programmers – the great ones are always moving forward. So, to all the coders out there: Keep calm, and carry on coding. You’ll pick up your greatness down the road. Just embarking on the coding journey is extremely admirable!

Keep

Activate: Beast Mode

Buckle up folks, Hacktoberfest is round the corner and registrations are now open. Hacktoberfest will be hosted by Digital Ocean for the 8th year in a row in partnership with GitHub and other companies, yes you read it right. In this article, I will share, how to participate in Hacktoberfest 2021 and other important details that you must know before you start contributing. You can refer to my to see a working tutorial for better understanding and a step-by-step guide of the same. YouTube video Tutorial https://www.youtube.com/watch?v=xBPFzXa9Fio What will be covered in this Blog 1. What is Hacktoberfest?
2. How does it work? 
3. How can you Join?
4. When can you join
5. How to earn a Swag kit?
6. Rules
7. What not to do!
8. FAQs Let's get started! What is Hacktoberfest ? Hacktoberfest is a month-long challenge. It happens every year in the month of October. Hacktoberfest is open to everyone and it marks the celebration of Open Source. It's the biggest Open Source event that encourages newbies to participate in Open Source and create their 1st meaningful PR. If you wish to know about it in detail, you can refer to this video, where I have covered everything. https://www.youtube.com/watch?v=N7mCkGjX6vk How does it work? Maintainers determine if their open-source projects participate. submitted on GitHub and GitLab are rewarded. Quality pull requests of Hacktoberfest tagged repositories are rewarded. Engaged maintenance How can you Join? Step - 1: Create a GitHub account, if you don't already have one. Need help? Here are some resources to help you set up your GitHub account: https://ayushirawat.com/what-is-git-and-github-or-git-vs-github https://www.youtube.com/playlist?list=PLjaO05BrsbIPUT76gpBmUxV7YSPWFephT https://www.youtube.com/playlist?list=PLseEp7p6EwiZgLPknY4ITJxfoo75wqxph Step - 2: : Navigate to and follow the instructions. But, read the rules carefully before you do and then Sign In using your GitHub credentials. Register for Hacktoberfest the Hacktoberfest registration page Step - 3: Find good projects worth contributing on the GitHub page. You can type label:hactoberfest is:issue is:open You can add a language label of your choice to filter open issues. If you are a beginner and can’t find good issues then there’s tag label:good first issue which filters out issues for beginners who want to contribute. Here's something beginner-friendly for you: https://www.firsttimersonly.com/ https://github.com/mungell/awesome-for-beginners Step - 4: Try and submit at least 4 PRs and wait for them to be verified. Make sure to submit quality PRs. Submit PRs: When can you join Registrations are now open but you can sign up anytime between October 1 and October 31 in any time zone. Just be sure to sign up on the official Hacktoberfest website for your pull requests to count. How to earn a Swag kit: For your PR to count it must be: Submitted in a public repo, AND the PR is labelled as by a maintainer. or hacktoberfest-accepted Submitted in a repo labelled 'hacktoberfest' , AND Merged, OR Approved Also, You can opt not to receive a t-shirt and stickers and you can choose to have a tree planted in your name and help make Hacktoberfest 2021 more carbon neutral. Let's have a look at my swag kit from Hacktoberfest 2020. you get some awesome goodies which include A limited-edition T-shirt for * and some stickers. FREE!* T-shirts are awarded on a first-come, first-serve basis to the first 55,000 participants who successfully completed the Hacktoberfest challenge. You will be receiving mail when you have completed the challenge. Further details will be provided with the mail itself. In past years, shirts have arrived in December or January, depending on how far you live from San Francisco. The Digital Ocean team should eventually contact you asking for your shirt size and shipping address. (Keep in mind they are shipping thousands of shirts so this process will take a while.) Don’t miss this opportunity. Start contributing to open source and get a limited edition T-shirt for Free! Refer Hackoberfest website for more Got anything to add? mention in the comment box below and I will update the list. Rules Pull requests can be submitted to any opted-in repository on GitHub or GitLab. The pull request must contain commits you made yourself. If a maintainer reports your pull request as 'spam' or 'invalid', it will not be counted toward your participation in Hacktoberfest. If a maintainer reports behaviour that’s not in line with the project’s code of conduct, you will be ineligible to participate. To get a shirt, you must make four approved pull requests (PRs) on opted-in projects between October 1-31 in any time zone. This year, the first 55,000 participants can earn a T-shirt. What not to do! In line with Hacktoberfest value “quantity is fun, quality is key”, here are examples of the PRs that we consider to be low-quality contributions (which are discouraged): PRs that are automated (e.g. scripted opening PRs to remove whitespace/optimize images) PRs that are disruptive (e.g. taking someone else’s branch/commits and making a PR) PRs that are regarded by a project maintainer as a hindrance vs. helping Something that’s clearly an attempt to simply +1 your PR count for October Last but not least, one PR to fix a typo is fine. 5 PRs to remove stray whitespace… it’s not. Pro tip: You can join the Hacktoberfest discord server to connect with the community and network with other open-source enthusiasts, ask questions and find projects. to the server. Click the link to navigate FAQs Let's look at some FAQs: Q.*What if my pull requests aren’t accepted* ? A: Even if your pull requests aren’t accepted, as long as you open at least 4 pull requests, you’ll earn the shirt. Have more FAQs unanswered, . FAQs are divided into 6 categories: check the FAQ section for the same General Rules Events Maintainers Swag & Shipping Troubleshooting You can also check out . the list of ongoing events of Hacktoberfest 2021 Interested to hear about my Hacktoberfest experience of 2020? You wouldn't wanna miss it, so. stay tuned for my upcoming blog. That's all for this article and with that, it's a wrap! I hope you found the article useful. Thank you for reading, If you have reached so far, please like the article, It will encourage me to write more such articles. Do share your valuable suggestions, I appreciate your honest feedback! I create content about , If this is something that interests you, please share the article with your friends and connections. You can also subscribe to my newsletter to get updates every time I write something! Career, Blogging, Programming, and Productivity I would strongly recommend you to Check out the of the same and . I would love to connect with you at | . YouTube video don't forget to subscribe to my Channel Twitter LinkedIn You should definitely check out my other Blogs: Python 3.9: All You need to know GitHub CLI 1.0: All you need to know How to make your own Google Chrome Extension Run Javascript from Python Automate WhatsApp using Python Automate Cowin Vaccine slots Availability using Python What is Competitive Programming Resources & Credits: https://hacktoberfest.digitalocean.com/ https://hacktoberfestswaglist.com/ https://hacktoberfest.digitalocean.com/events https://tree-nation.com/profile/digitalocean Happy Contributing, See you in my next Blog article, Take care!!

2022 - HackerNoon Contributor of the Year - Microsoft

Nominated for 2022 - HackerNoon Contributor of the Year - Microsoft

How to Participate in Hacktoberfest 2021: Ultimate Beginner's Guide

Image by: Sébastien Thibault Data brokers’ millions of dollars in lobbying spending in 2020 rivaled that of some Big Tech firms By Alfred Ng and Maddy Varner The data brokers who’ve made fortunes from collecting and sharing millions of people’s personal information tend to fly under the radar. Names like LiveRamp or RELX might not be familiar to most Americans, but they’re making themselves known on Capitol Hill. Collectively, data broker spending on lobbying in 2020 rivaled the spending of individual Big Tech firms like Facebook and Google. The Markup searched lobbying disclosures in the U.S. Senate’s database and the watchdog Center for Responsive Politics’ tool for the names of companies that registered as data brokers in or . Those states are the only two that require companies to annually disclose that they collect, sell, or share people’s personal information without having a direct relationship to them. Lobbying Disclosure Act OpenSecrets Vermont California All in all, we found 25 companies whose combined spending on federal lobbying totaled $29 million in 2020. Many of the top spenders were not pure data brokers but companies that nonetheless have massive data operations. Oracle, which has spent the past decade acquiring companies that collect data, spent the most by far, with disclosure documents showing $9,570,000 spent on federal lobbying. For comparison, of the Big Tech firms with heavy lobbying presences, Facebook spent $19,680,000, Amazon $18,725,000, and Google $8,850,000 in the same period, according to the Center for Responsive Politics. Public Citizen, a consumer advocacy group, found that Big Tech spent . $108 million collectively on lobbying in 2020 Oracle has its own data collection arm but has also built its portfolio by buying up companies like , Compendium, and Crosswise. The companies, which were acquired in 2012, 2013, and 2016, respectively, take data from a variety of sources. DataRaker gets data from millions of smart meters and sensors for utilities companies, while Compendium delivers targeted ads. Crosswise allows Oracle to track people across devices, claiming to process data from billions of devices every month. DataRaker Oracle also acquired , in 2014, which connected offline purchases to online profiles. Additionally, Oracle combines datasets from more than 75 other data brokers, which it calls “the world’s largest collection of third-party data.” Datalogix Our report comes as the data broker industry is not only growing but also facing scrutiny for the first time. California recently passed a statewide privacy law that establishes an agency focused on regulating data privacy issues. Virginia and Maine have also passed regulations to protect people’s online information. California’s and Virginia’s privacy laws hit at the core of what data brokers do by requiring companies to delete data collected about people upon request and allowing people to prevent their personal information from being used for targeted advertising. Maine’s privacy law prevents internet service providers from sharing personal information with data brokers until people give “express, affirmative consent.” And the past year also saw concerns raised about how well these brokers protect their massive troves of data—Oracle, for instance, after security researchers found were left exposed on a server. suffered a data breach billions of records from its BlueKai data collection The Markup contacted all 25 companies for comment on their lobbying activities. Several companies, like Inmar Intelligence and LiveRamp denied being data brokers, though they had self-identified as such to California and/or Vermont regulators. “Inmar Intelligence does not generally consider itself a data broker though one of our entities, Inmar-OIQ, LLC, is registered as such in a couple of states,” Holly Pavlika, a corporate marketing senior vice president for Inmar Intelligence, said. The industry itself is hard to define—many companies, including tech giants, make money off of personal data, though the technical details of how they use that data vary. So The Markup relied on companies that self-reported to and as members of the industry. The list, 480 companies long, shows just how pervasive it has become for companies to traffic in personal information. Vermont California The list includes businesses that are primarily data brokers, like CoreLogic, which claims to have collected data on 99 percent of property and homeowners in the U.S. and spent $215,000 on lobbying in 2020; and Acxiom, which spent $360,000 on lobbying in 2020 for issues related to data security and privacy. Acxiom’s InfoBase boasts of datasets on more than 250 million people and collects information including location data, purchases, interests, life events, and behaviors, according to its marketing material. Our list also includes credit monitoring services like TransUnion, Equifax, and Experian, which each spent about $1.4 million lobbying in 2020 on issues related to credit score reform, like the of 2020, the Credit Access and Inclusion Act of 2019, and the of 2019. TransUnion also owns subsidiaries like Callcredit, Iovation, and Signal, which has been used for collecting and profiling users for gambling apps, . Protecting Your Credit Score Act Clarity in Credit Score Formation Act according to The New York Times Notably, our tally also does not include lobbying by trade associations that data brokers are a part of, such as the Interactive Advertising Bureau and the Digital Advertising Alliance. Of the data brokers who spent the most on lobbying, Oracle far outspent its peers Oracle, the biggest spender, used lobbyists to advocate on issues like annual defense and intelligence budgets and “competition and antitrust in the mobile telecommunications and digital advertising industries,” according to . public records The company didn’t respond to requests for comment. The second largest spender was Accenture—a technology and consulting company that boasts a marketing and analytics branch called . According to its , the company can combine datasets from sources including people’s purchase history and location to help its clients build customer profiles for advertising. Accenture Interactive marketing materials In 2020, the company spent $3,250,000 lobbying on issues like artificial intelligence, the , and COVID-19 contact tracing, according to public records. Digital Dollar When The Markup reached out to Accenture, the company pointed us to two statements CEO Julie Sweet made on data privacy legislation in 2018. The statements called for a federal privacy law that would preempt state laws. PricewaterhouseCoopers, a major accounting firm, spent $2,820,000 lobbying the federal government in 2020, third most among registered data brokers. The total amount 25 data brokers spent on federal lobbying in 2020. $29M PWC collects data from advertising networks and data analytics partners including personal information like names and addresses, which it uses to help clients personalize advertising campaigns, . according to the company’s privacy statement Spending went to monitoring privacy legislation and accounting and auditing issues. PWC didn’t respond to a request for comment. Other big spenders included Deloitte, which was awarded a $106 million contract to build a development environment for the Joint Artificial Intelligence Center this summer. The company spent $2,400,000 on federal lobbying in 2020, including on bills like the and the . Department of Defense Artificial Intelligence in Government Act Artificial Intelligence Initiative Act Deloitte is an auditing and advisory company but provides services like , which uses information including people’s hobbies, interests, and financial data to generate a health risk prediction score and help life insurance companies figure out how likely people are to buy their products. PredictRisk provided by data brokers And RELX, which spent $2,375,000 on federal lobbying in 2020, including on data privacy bills like the , the , and the ; and on bills related to data privacy and COVID-19, including the and the . Data Accountability and Trust Act Information Transparency & Personal Data Control Act Data Broker Accountability and Transparency Act Covid-19 Consumer Data Protection Act Exposure Notification Privacy Act RELX is a major data broker that owns companies like LexisNexis and ThreatMetrix, which has customers in law enforcement, insurance, and financial services. ThreatMetrix alone boasts tracking on 4.5 billion devices, from RELX in 2018. according to a statement Deloitte and RELX didn’t respond to a request for comment. In addition, many other data brokers spent lower amounts on lobbying efforts An Industry Increasingly Under Fire Some of the bills targeted by lobbyists would have regulated the data broker industry, though disclosures do not specify whether they lobbied for or against the bills. The Data Accountability and Trust Act looked to establish security standards and require postbreach audits for data brokers and also prohibit collecting information under false pretenses. The Information Transparency & Personal Data Control Act would have required data brokers to get consent to collect sensitive data and go through an annual privacy audit. The Data Broker Accountability and Transparency Act of 2020 wanted to mandate opt-outs from data brokers and for the FTC to create a national list of data brokers. While lobbying records don’t always list specific bills, filings show that RELX paid lobbyists to address all three bills. Deloitte records show that some of its lobbying efforts went toward addressing the Data Accountability and Trust Act. Both COVID-19 data privacy bills looked to provide stronger controls over data related to contact tracing. None of the bills named in this story passed Congress, except for the National Defense Authorization Act, which was enacted. Some of the companies that showed up in lobbying records faced other sorts of pressure during 2020. For instance, Apple and Google from their app stores last December following a series of reports from on how the location data broker was providing information to contractors who passed that information to the U.S. military. X-Mode spent $30,000 on lobbying in the last quarter of 2020, during the height of the public pressure. banned X-Mode’s trackers Motherboard Both and , another location data broker, which spent $160,000 on lobbying, are facing scrutiny from Congress over their location data sales. Sen. Ron Wyden, a Democrat from Oregon who signed on to , called the data broker industry “out of control,” in a statement to The Markup. X-Mode Venntel a letter calling for an investigation on Venntel “Americans are learning more every day about the secretive and shady data broker industry and they’re demanding new laws to protect our privacy,” Wyden said in the email to The Markup. “It’s no surprise data brokers are trying every avenue they can think of to ward off the common sense protections Americans desperately need.” -Sen. Ron Wyden X-Mode and Venntel didn’t respond to a request for comment. Some companies said they were lobbying to have a voice on legislation, including potential federal laws on privacy. “With increased momentum, attention and legislative activity in multiple states, we support a federal data privacy law that can rebalance the system and set standards that rebuild trust with the people providing the data—consumers,” Christine Travis, a senior communications director for LiveRamp, said in an email. “A federal approach to data privacy and security is better than a patchwork of state laws for all stakeholders.” When somebody shows up on the lobbying records, it just tells me they see a real threat to their business model. -Hayley Tsukayama, Electronic Frontier Foundation LiveRamp was the top lobbying spender among companies whose for advertising purposes. The company, which connects people’s activity across the web and from offline purchases for advertisers, spent $630,000 on lobbying in 2020 on issues such as the and Privacy Shield. primary focus is collecting data Augmenting Compatibility and Competition by Enabling Service Switching (ACCESS) Act Privacy Shield was a framework for transferring data between the European Union and the U.S. but was declared . invalid last July for failing to meet the EU’s privacy regulations Travis denied that LiveRamp is a data broker despite being listed on , insisting instead that the company is a “data connectivity platform.” California’s data broker registry Experts said scrutiny and oversight is fairly new to the data broker industry. “When somebody shows up on the lobbying records, or in meetings or in trade associations, it just tells me they’ve probably recently woken up to this issue and they see a real threat to their business model by privacy regulations,” Hayley Tsukayama, a legislative activist for the Electronic Frontier Foundation, said. Others, however, said Congress is not doing nearly enough to regulate the unwieldy industry. “What is widely understood now in Congress and among independent agencies like the FTC are the ways in which large tech companies like Facebook and Google are extracting data from consumers and using that to monopolize markets like the advertising industry,” Jane Chung, a Big Tech accountability advocate at the consumer advocacy group Public Citizen, said. “What a lot of people don’t understand is how data brokers fit into that ecosystem.” Originally published as " “ with the Attribution-NonCommercial-NoDerivatives 4.0 International (CC BY-NC-ND 4.0) license The Little-Known Data Broker Industry Is Spending Big Bucks LobbyingCongress

Acxiom

Amazon

Apple

DataLogix

Oracle

Techcrunch

Every dollar you donate helps support The Markup’s work.

Who are the Data Brokers Spending Big Bucks to Lobby Congress

#Here’s how hackers can compromise your network via routers that aren’t protect with IoT device security Security for the “Internet of Things” (or IoT) is still relatively new to a majority of organizations. Understanding will help protect against device attacks that target weak networked devices like IP cameras, routers, smart meters, medical equipment, and more. For the sake of this blog, we’ll define an IoT device as any piece of hardware that connects to any kind of network. IoT firmware security Currently, there are two approaches to protecting IoT vulnerabilities: Network Security and Device Security. Both approaches provide protection on different levels, while constantly monitors the network and protects against attackers gaining control over the network laterally. Network Security If you would like us to run a free IoT Risk Assessment to expose ALL the inherent security flaws associated with your embedded device firmware, sign up here; and you will receive a comprehensive report with in-depth insights into your IoT environment health. What is IoT Device Security IoT Device Security generally refers to an on-device installation in order to protect the device. Typically, manufacturers install a software package on the device itself which allow the entire security suite to stem from metrics and instrumentation techniques that run on the device. It protects against attacks trying to gain control over the device, and transitively, the network. CP<R> have recently published papers that showcase several vulnerabilities found on IoT devices like a , a , or even an instance where an attack achieved . All of these examples involved deep, intricate exploitation techniques that found vulnerabilities in the device firmware and allowed attackers to gain full control over these devices. hacked fax machine ransomware-infected DSLR camera complete control over a smart lightbulb hub In the video below, you can see a real-world example of Check Point IoT Protect Firmware working with an off-the-shelf router with a zero-day vulnerability in it, leveraging the Check Point Nano-Agent technology. As an organization, security is only as strong as its weakest point. It is important to understand that even an innocent router can be a vulnerable point of access in the network. Leaving network devices unmanaged can compromise the entire network and allow attackers lateral movement within the network. To demonstrate this, we will show how a hacker can infiltrate a commercial off-the-shelf router via an IoT exploit to gain control of a network. Using the control gained over the router, the hacker can gain control over additional assets in the internal network. In this specific case, the hacker obtains the feed from an internal security IP camera. The vulnerability exploited is CVE-2020-10923, reported 28 Jul 2020. It is a stack-based buffer overflow in the software update process. As for security features: ASLR not enabled but stack is not executable. The vulnerable function is . It receives an arbitrarily-sized user input from the network interface. It is pretty easy to see how the parsing logic unpacks the big-endianed (lines 26 – 28 and 32) size field from the user input, finally using it to copy from the user input itself. Unfortunately, there are no size checks prior to the memcpy() call (line 35), resulting in a potential stack-based buffer-overflow for sizes larger than 140 bytes (variables allocated in line 15). abCheckBoardID() A full exploit is easy to find with a simple search: . Although it initially crashed the router for every exploitation attempt, it did not work fully out-of-the box and some modifications were necessary to make the exploit script fully functional. https://github.com/grimm-co/NotQuite0DayFriday/tree/master/2020.06.15-netgear The exploit sends a padded packet with a length of 0x400 and a call to a ROP gadget. A quick lookup for this ROP gadget is revealed to be at 0x3cfb4.: Now, all that’s left is to make sure that an arbitrary command is located at the top of the stack and overflow the return address with the ROP gadget address. Eventually, the exploit packet looks something like this: The first four bytes are the marker, representing the packet start (line 20 in the code above), followed by the big-endian encoding for 0x400 as size. Following this is the buffer content (char s[140] defined at line 15), ending with the content for registers r4-r11 popped from the stack. This is then followed by the rop_gadget, spawning a telnetd instance exposing a shell. After modifications and execution, the exploit grants the attacker root access to the device: Nano-Agent: Install and Protect As seen above, the exploit script is quite simple. Once triggered, it guarantees a 100% success rate. However, we are in the business of protection, not exploitation. So, let’s use the exploit to harden and protect the device against these types of vulnerabilities (and more). The first step is to generate a hardening file for the vulnerable httpd server. This is done using the Infinity Next cloud app: Using the above API, the hardening script sends the httpd binary for scanning in the cloud app and generates a scanId. This scanId can be used to query the scan status as well as download the analysis file. Once scan finishes, download the hardening file using the scanId: Analyzing the assembly with the hardening file reveals that the hardening service detected the potentially vulnerable function abCheckBoardID and decided to harden it, marking several of its instructions as instructions that require hooking and instrumentation: In this case, the prologue hook will record the lr value and safely store it in a per-thread shadow stack. Upon executing the epilogue hook (right before executing the actual instruction in offset 0x1cf18), the Workload Protection will check the current stack value that is going to be popped to pc and verify it matches the value stored in the prologue hook on the shadow stack. On the device, running the nano-agent installer ./install-cp-nano-agent.sh, using a token generated in Infinity Next, initiates the Nano-Agent installation process, which in turn downloads and installs the IoT Workload Protection: Then, running the hardened httpd initiates the hardening process: Now, once again running the exploitation leads to the prologue and epilogue hooks triggering the epilogue hook that detects deviation in the control flow. It is clear to see the Workload Protection detected the exploit’s attempt at branching to 0x3cfb4, to execute rop_gadget like demonstrated before. Finally, the log is detected and sent to Infinity Next where all devices are managed. Conclusion Unfortunately, there is no way around the fact that IoT devices will continue to be inherently vulnerable. This is due to the simple fact that device manufacturers are proficient in making these device work as intended, for convenience. However, their expertise is within their field of work, while security expertise is often a completely orthogonal field. If you build embedded consumer and Internet-of-Things (IoT) devices, the expanding threat landscape requires you to protect your customers from cyber attacks with out-of-the-box firmware security. From IP cameras and smart elevators, to routers, medical devices and industrial controllers, Check Point IoT Protect Firmware provides on-device runtime protection against zero-day cyber attacks – serving as the most powerful line of defense for your IoT devices. If you want to learn more about IoT firmware security and how you can protect your network from IoT device attacks, check out our web page.

Flow

Assembly

Check Point

Visit us

Improving IoT Device Security Prevention from Zero-Day Attacks

In the banking sector, digital transformation is long overdue. It’s the pandemic that caused a rapid spike in customers’ demand for digital channels and effectively forced business leaders to quicken their digitally-oriented initiatives. Cloud-based services, , multichannel distribution, advanced ML-powered analytics tools, and a myriad of other technological trends have become vital for staying relevant in one of the most competitive markets. mobile banking app development Regardless of their size, both mid-cap banks and industry giants have similar investment strategies, allocating up to 10% of their revenue to technology adoption and core banking system (CBS) modernization. However, the massive gap in their size and revenue means that mid-sized banks invest significantly smaller sums in technology. And, while accounting for nearly 30% of the US GDP, mid-cap banks often get ignored when asking for capital from bigger investment banks and other financial institutions. Even if they have the means to pursue digitization, business leaders’ hesitation to do so shouldn’t be surprising since failing modernization efforts often mean going out of business. At the same time, the whole selling point of mid-cap banks is that they trade technology and scale for relationships. Especially when it comes to specific niches like wealth management advisory, technology is of secondary importance. Nevertheless, as the banking landscape is rapidly evolving, mid-sized banks are under significant pressure. Regardless of their unique selling propositions, they need to figure out how to squeeze the most out of their limited budgets and resources and satisfy an increasing demand for functional digital banking solutions. The digitization strategy for mid-cap banks First things first, banks need to understand what exact digitization approach they need to apply. Large established banks with outdated legacy systems and sufficient resources opt for full system replacement. Mid-sized institutions don’t have the means and time to follow this approach; however, they often don’t need to. The majority of mid-cap banks need to either selectively update certain features or build a new platform, which will run in parallel with their core platform. This approach requires much more attainable investments and far less time than full system replacement. Second, it’s critical to align in-house IT efforts with the overall business strategy. Far too often, IT departments work in isolation and are focused on maintenance-level work rather than on strategically important projects. When it comes to big-scale initiatives like CBS modernization, it’s assumed that this work has to be outsourced. While it’s true in the majority of cases, it’s paramount for business leaders to realize full potential of internal resources before going after outside vendors. Third, it’s pivotal to approach vendor selection wisely. Conventionally, bank executives negotiate critical factors that they will base their vendor choice upon, and the selection process looks similar to comparing products online. However, on top of comparing vendors based on costs and project delivery approaches, it’s critical to build prototypes during the pre-sale stage. This will give IT staff and bank employees a much clearer idea of what implications they will face, what additional skills they need to acquire, and what data-related issues should be addressed. Not only will this ensure a smooth project implementation overall but also eliminate costly risks. Fourth, at the project implementation stage, banks need to involve key experts and employees from every department. CBS modernization is not just another IT update but an all-permeating transformation, impacting stakeholders, employees, executives, and customers. Fifth, mid-cap banks need to take advantage of their size. Given that customer demands and tools accessibility change as fast as never before, being nimble and adaptive is an important competitive differentiator. For mid-sized banks, recognizing an opportunity and capitalizing on it in the midst of the project implementation is far more attainable than for their bigger rivals. This takes us back to the importance of vendor selection. It’s important to assess solution providers’ ability to be agile and transform quickly. Sixth, prepare your workforce. Regardless of the updated CBS finesse, it won’t matter if the workforce still has a legacy mindset. Retraining should start from the top, with leaders being hyper-aware and excited about the new system. Collaborate and prosper Unlike their bigger competitors, many midsized banks are threatened by digital transformation rather than thrilled about it. Such mindset often leads to the industry players being reluctant to take a proactive approach. Many of them are planning to wait for their competitors to take these risky decisions and see how it goes. In such a competitive environment, this strategy won’t suffice in the long term. In the past five years, the number of mergers among mid-cap banks has been steadily increasing. While this is a logical solution to the disproportionate advantage that megabanks have, without well-thought-out digitization and modernization plans, acquisitions will lead to bigger banks with the same outdated legacy systems. This is why it’s still critical to collaborate but with the main goal to cover the technological gap. Fruitful partnerships with agile fintech companies will most likely be the critical factor.

How to Navigate Digital Transformation as a Mid-Cap Bank

Instagram's growth has continued to accelerate since 2017. The figure has now risen to 1 billion. After Facebook, Instagram is the most popular conventional social network in terms of active members. Instagram is mostly used by the general public to view the images and videos that friends, celebrities, and companies have posted. The reason companies utilize Instagram is because its consumers interact with their products ten times as often as they do on other social media platforms like Twitter or Facebook. The engagement of your posts will grow no matter what you write on a business account because of the very affordable sponsored marketing you may use to "boost" it. Instagram has unveiled a set of tools to assist businesses to succeed on the platform by helping them become the best at what they do. Showing Instagram's ability to increase followers requires capturing the interest of the intended audience. A large amount of followers that social media marketers have makes it possible for businesses to achieve their goals by following the guidelines listed below. No question, Instagram is a very competitive industry, but there are several methods for increasing your Instagram engagement through tools. Instagram automation Increasing daily engagement with accounts of the same kind Increasing engagement by interacting with others is a fundamental Instagram guideline. It's possible to improve your account's functionality by engaging with the accounts of others. Time spent on comparable accounts has a direct correlation to engagement quality and quantity on Instagram. If you're looking for a comparable account, try these steps to find it: Always take a look at Instagram's suggested content, whether it's based on what you've already liked or what's trending. Search for relevant accounts by entering keywords into the search box. After that, type their names into the search field and then click 'People.' In order to find the most relevant results, focus your search on a few key phrases. Using the search bar, you may find relevant hashtags to look over. Decide on the best time of the day to post Posting on Instagram at the wrong moment will reduce engagement. When you publish on Instagram during peak hours, your . audience becomes more engaged In order to understand the optimum time to publish, you need to invest some time for monitoring and tracking, as well as some Instagram analysis. Because each Instagram account has distinct followers from various time zones, you should always discover your personal optimal time to post on Instagram. As a result, there will be an increase in the number of individuals that follow and participate. Use Instagram Stories Stickers to communicate with your audience Over 500 million people use Instagram Stories every day, according to the company. Multi-filtering, location tagging, and gifs are all available in Instagram Stories. Instagram stories are a venue for influencer marketing. Following is encouraged through the use of Instagram Stories stickers such as the Countdown Sticker and Quiz Sticker. Analyze the New Content This leads to the post showing up in followers' feeds right quickly, which improves interaction in the first hour after posting. This is known as engagement in Instagram parlance. Before and after writing your article, get involved with other people's posts. Increase your number of followers in the first hour after you publish by using this method. By learning from mistakes and experimenting with different types of content, you may improve your approach to gaining followers. Posting Content That Can Be Saved In addition to comments and shares, the Instagram save button boosts engagement. More material that encourages your audience to save should be created all the time. The term "saveable content" refers to content that a user may wish to return to later. Increase the number of saves for carousel posts with some useful advice and information to allow readers a second chance at finding the tips. By publishing mini-blog style and location information, travel content providers, for example, may engage their audience. Use hashtags with long, descriptive phrases With long-tail hashtags, your content will have more context and be found more easily. With the use of hashtags, your material will be seen by more people through likes and comments since it will be related to other posts with the same tags. Every minute, a new post with a related hashtag emerges, further enhancing your post's visibility. Long-tail hashtags refer to those that are as specific as possible. Comment and reply as quickly as possible once you've posted your photo Images with people in them have a 38% higher reactivity rating than photos without. Posting images of individuals with their faces on Instagram increases interaction whether you're selling or promoting items. You may use photographs of your customers and the people your business serves, or models carrying your items, to help market your company's brand. You can humanize your brand, establish a connection with your audience, and increase customer loyalty this way. Engage in social conversation and help your post rise to the top of your followers' news feeds by engaging with your audience. Instagram posts are increasingly recognizing it as an important piece of content. Always respond quickly to all comments with a timely response. Conclusion The next time you post about your business, make sure to include well-behaved hashtag-based Instagram content, and be ready for a flurry of activity from your devoted followers with these pointers.

Instagram

Zones

How to Increase Instagram Engagement Through Meaningful Interaction

HackerNoon Reporter: Please tell us briefly about your background. Hello there! I'm Jennifer! I have been in the blockchain industry for around 4 years, starting off in a blockchain events company, and helped the company pivot to a cryptocurrency exchange. My interest in cryptocurrency started since Bitcoin peaked in 2014. But like many, I'm considered a late joiner as my first foray was in 2017. Honestly, my passion only ignited when I started working in my first blockchain company. It was interesting to see how the scene has developed since then. With enough experience from running ops, marketing, HR, and finance, I got blessing from my ex-boss to start out on my own as a co-founder of Coinstore Exchange. Not gonna lie, it was a journey I would've never expected myself to embark on. But I was glad that I did it! What's your startup called? And in a sentence or two, what does it do? is your first choice for popular crypto. We are a crypto exchange that allows people to trade, buy, and sell cryptocurrencies on our platform. We aim to disrupt the industry by going against the grain and bringing fun into finance. Coinstore What is the origin story? I still remember the good old days of trading cryptocurrencies - download an app, register, transfer in BTC, and you can start collecting coins. The experience was simply magical! I felt like I owned a piece of someone's dream and potential and was immediately drawn to this world of 'digital assets'! However, the itch to build my own product started from wanting to buy a token that wasn't widely available in 2018. I had to download and complete registrations for 6 different apps/platforms before I was able to find/buy the token. There weren't many apps then, and even lesser fiat-to-crypto options. Even today, this problem is far more common than we think. Every month, there are 100s of new projects launching, and a lot of them show much potential. If you look at our UI, it is pretty basic, and we intend to keep it that way - clean and simple. Most apps nowadays are full of "features" that actually complicate that first magical moment. We want to replicate that fun and easy experience for new or seasoned users. In a nutshell, we want to be known for: Practicality, Simplicity, and Variety. What do you love about your team, and why are you the ones to solve this problem? I would say that as a new exchange, we still have much to improve on. We did not anticipate the huge growth in numbers since our soft launch in June 2021. We've added resources to manage our KYC processes, and beefed up our customer service procedures. The biggest challenge we face currently is trust. As a new exchange, there's bound to be skepticism and suspicion. So whenever a withdrawal gets delayed or deposits don't appear immediately, there is panic, and we get bad reviews. It's not a bad thing, we learn to improve and communicate with our users. I feel the phrase "When the going gets tough, the tough keep going" truly describes my team. I've learned that the success and failure of a company depends on the team. I feel lucky to be working among some of the most dedicated people around, from product, operations, security, tech, and marketing. They are the building blocks and foundation of where we are now. If you weren’t building your startup, what would you be doing? This is a really tough question! Right now, Coinstore is like my baby, I don't think I can ever let go of it. But if I am not pouring my heart and soul into Coinstore, I probably would still be in the blockchain industry. I'm also involved in a DeFi project but that's a story for another time. Blockchain is a rapidly growing sector and I fully believe that crypto will become the future of finance. At the moment, how do you measure success? What are your core metrics? Currently, our success metrics are satisfied users and growth. We are currently serving around 200,000+ users in 175 countries. I am really appreciative of our angel investors, who trusted us and allowed us to do things differently. Of course, we still have to meet targets, but their confidence gave us a huge boost during tough times. Our main focus is on building a better product, our core 2 products are now Spot and Futures Trading. We do have new products in the pipeline, but we want to make sure our existing products are ready. We've seen many others languish after pushing out release after release, just because someone else has it. Another focus is acquiring happy, satisfied users. We are heavy on user acquisition through our referral programs and a strong emphasis on community building. Since our launch, we've focused on community activities and rewards. Crypto, is, after all, a community-built and owned idea. We are building communities in several countries at the moment and hope to scale up very soon. What’s most exciting about your traction to date? The moment when we added 40,000+ registered users and hit an ATH of 15,000+ active users in 1 day. That was the day we knew that, hey, maybe our idea can really work! While that was indeed our "Eureka" moment, the team was all invested right from the start. We had an idea, a problem, and a solution. We have stuck together through all the ups and downs, I could never asked for a better team than them. What technologies are you currently most excited about, and most worried about? And why? Most excited: Artificial intelligence. It's not a dream or movie anymore, look at OpenAI's GPT-3! Although it still require initial input to react, the response is amazing. Personally, I feel that the most practical use cases for AI will be in healthcare, imagine a Dr. Shaun Murphy-level diagnostics for every patient! The possibilities are endless! Most worried: Artificial intelligence. Simultaneously, it scares me. The probability of the technology used for wrong purpose is extremely high. Although A.I. will not likely develop their own conscious (at least hopefully not in my lifetime!), there are already too many malicious actors in the tech space, with the aid and advancement of A.I., what will be the fallout? It will be harder for unsuspecting users to guard against actors who use A.I. to gather copious amounts of information and use text, email, and automated calls to predict, impersonate, and swindle. What drew you to get published on HackerNoon? What do you like most about our platform? One of our marketing executives found out about Hackernoon's Startups of the Year, and convinced me to apply as a nominee. I have always been an avid reader of Hackernoon (when stories were more about tech advances) and being able to participate in a Hackernoon event is really exciting. I like that Hackernoon provides a no-nonsense, news-and-stories only platform, that really focuses on quality content, segregated into the different fields of technology. What advice would you give to the 21-year-old version of yourself? We are only human. It's alright with not knowing everything. It's okay to mess up. Life is a constant learning process. What is something surprising you've learned this year that your contemporaries would benefit from knowing? Marketing is not about simply about advertising. Focus on the product, and growing the community. :) Vote for Coinstore as a ! Startup of the year in Singapore

2022 - HackerNoon Contributor of the Year - Founder Stories

Nominated for 2022 - HackerNoon Contributor of the Year - Founder Stories

On Building a Crypto Trading Platform with Jennifer, Co-founder of Coinstore

Suffering from late deliveries! High attrition! Dissatisfied customers! Or stagnant team members? Feedback provided in the right way, with the right intention, leads to outstanding performance. Creating a happy, productive team. Team leaders seek to develop high performance teams to achieve smooth deliveries. Feedback is a very important component to enable a teams members to blossom to their full potential within their position. , and like all skills it takes practice to learn the techniques and to how to apply them. Listening and providing meaningful feedback is a skill Tell employees what they are doing well and how to improve, sparks growth. Deliver feedback frequently to build up the habit of giving and receiving it in a truly effective manner. The receiver has to be willing to listen to your advice and suggestions on ways to up level. This trust is established over time. What is the correct frequency? Gauge how much each individual can handle for each type of feedback. Ask them what their preference is. Too much or too little have their problems. The former can cause shutdown and the latter is ineffective. Strive for balance using the many modes of delivery described below. Begin by asking the person if they are willing to receive feedback. It's imperative to get permission as it clears the communication channel. I currently follow the . I find it to be a very effective formula and it delivers spectacular results. ACE feedback model Appreciation This should be the most common kind of feedback you are providing to your directs. Be Intentional, thank them for their efforts when they have completed a task or achieved a milestone. Utilise several mediums, from a quick thumbs-up icon in instant messenger, verbal praise, formally through a feedback tool, or as a shout-out in a team meeting. Learn to give praise liberally, measure the amount you are giving to your team to really put focus on it. Praise your employees' efforts when talking to people who make decisions on their career progress. Decision makers need upwards feedback to stay in touch with each employee's growth. Decision makers can then align corresponding advancement of an employees career as they grow to their potential. Coaching As a leader your role is to the directs so that you can provide effective coaching feedback. Work with them to identify how they can perform at an even higher level than they currently achieve. It's a collaborative journey with shared goals. observe The key part of coaching is the identification of improvement areas, that you can focus and direct towards higher performance. Ensure to regularly provide evaluations on their current tasks. The gaps between the completed work and your expectations are the areas for . targeted coaching Provide very specific task based coaching and more generic coaching that you link to a career framework that the team member is progressing along.  The leader needs to be aware of the employees' work performance in order to be able to coach them effectively. There is a specific technique to structure feedback known as situation, behaviour and impact (SBI) that can be used to open a discussion on where you have observed a behaviour and the impact it had. This technique is also used to provide praise to or provide . encourage similar behaviour reflection to change behaviour A second technique to discuss behaviour change, is to employ a socratic questioning style. This brings the answers out from the individual, and that is very impactful. Simply asking exploratory questions like the examples below can bring the answer from the individual. "Did you encounter any problems on the task? How did you tackle it? Is there anything you could do differently the next time?" A direct coaching style is to tell what, how and where the change is required. This is effective and should be used in conjunction with the other techniques outlined above. It needs to be a part of your toolbox, not the go-to option. ( ). Especially useful in time critical situations In order to lay the groundwork for change, it is helpful to increase a direct report's knowledge of different theories on the topic to be discussed. It is easier to make them aware that expert models already exist and paths to levelling up are well established. I have found that people accept the message quicker when it's coming from an expert authority. Coaching to a model allows the redirection of the focal point onto the model and off of the direct. It is a much more comfortable way of discussing growth. When an expert model is available I recommend referring to it as a topic of discussion and how that model could be used to improve performance. Examples of expert models for common growth areas: Time Management - Pomodoro, flow etc.. Stress Management - Holmes & Rahe, Albrecht's Four Types of Stress etc... Problem Solving - FOCUS, Hurson's Productive Thinking etc... Decision Making - Six Thinking Hats, RACI, Bezos type 1 and type 2 etc... Evaluation Identify and communicate the expectation for the role, refer to the job role and career frameworks. Evaluate current work tasks against expectations to keep everyone aligned and use their contribution performance to identify areas for feedback to unlock growth. is a great method to get multiple feedback sources from within and outside the current team. There are many examples of 360 feedback questionnaires on the web, look through them and customise as required. 360 feedback One area that is often missing is providing example answers for the questions. For best results, provide some examples that give a format to the answers. e.g. 1-5 ranging from poor, fair, good, v.good, excellent with supporting descriptions. "I liked how X was completed on project Y as it caused/demonstrated Z", "When you did X, it made me feel Y", "Have you thought about X in relation to Y" Soliciting feedback from others to promote self growth It is often uncomfortable to provide feedback to people, so asking directs, peers or seniors doesn't necessarily deliver great results. A technique that works well is . Use this technique by asking for feedback on a piece of work you have just completed or on a particular skill. feedforward For example "How could I improve that presentation I gave last Tuesday", or "what could I have improved in the design of that feature", "Please advise me on how could I have handled situation X more effectively" Anti patterns to avoid: Criticising rather than providing feedback. People are reluctant to provide feedback in case it is perceived as criticism.  What is the ? Criticism focuses on misses and the intention is to reprimand in the form of blame or shaming. Feedback is given with good intention and is focused on improving specific behaviours/skills in an overall growth journey. difference between feedback and criticism Only providing feedback when corrective behaviour is warranted. to provide feedback. Waiting too long Feedback that is not actionable. Feedback Matrix to assess the current feedback situation Using the feedback matrix, aim for the top right, to bring about growth, create opportunities alongside the feedback.  Without a corresponding opportunity, it is ineffective. Conclusion The feedback techniques outlined above act as a powerful tool to enable career growth and build high performing individuals. This in turn makes up a high performing team. I have found the techniques to be powerful and very effective at creating productive teams. . Make feedback normal, not a performance review If you liked this article then please hit the reaction button.

HackerNoon Tech Stories Archive October 2nd, 2021

2B or to B3? That Is The Question... Blake 2B vs 3 for Siacoin

@TheLoneroFoundation
Andrew Magdy Kamal

Percentile Approximation Vs. Averages

@davidkohn
David Kohn

Debugging Angular Applications: The Tool You Need to Know

@maksymmostovyi
Maksym Mostovyi

Tavern Lecture One: A Fantastical Discourse on Blockchain, Metaverses and NFTs

@phantasee
Phantasee

Zoom in to WebRTC

@victor-denisenko
Research Laboratory of Design Automation

Hacking a Sustainable Future [Infographic]

@brianwallace
Brian Wallace

The Ultimate Guide to Web 3.0 - The History and Future of the Web

@suhail
Suhail Kakar

Do NOT Leave GraphQL Exposed Online

@growthatwundergraph
WunderGraph

Feel the Release

@newsletters
newsletters

Ghost in Your Machine

@newsletters
newsletters

Activate: Beast Mode

@newsletters
newsletters

How to Participate in Hacktoberfest 2021: Ultimate Beginner's Guide

@ayushi7rawat
Ayushi Rawat

Who are the Data Brokers Spending Big Bucks to Lobby Congress

@TheMarkup
The Markup

Improving IoT Device Security Prevention from Zero-Day Attacks

@checkpoint
Check Point Software

How to Navigate Digital Transformation as a Mid-Cap Bank

@andrey-koptelov
Andrey Koptelov

How to Increase Instagram Engagement Through Meaningful Interaction

@daniegreen
Danie Green

On Building a Crypto Trading Platform with Jennifer, Co-founder of Coinstore

@coinstoreexchange
coinstoreexchange

How to Effectively Deliver Feedback to Your Team Members

@patrickmccarthy
Patrick McCarthy

Are NFTs Here to Stay?

@podcast
Podcast

HackerNoon Tech Stories Archive October 2nd, 2021

@TheLoneroFoundationAndrew Magdy Kamal

@davidkohnDavid Kohn

@maksymmostovyiMaksym Mostovyi

@phantaseePhantasee

@victor-denisenkoResearch Laboratory of Design Automation

@brianwallaceBrian Wallace

@suhailSuhail Kakar

@growthatwundergraphWunderGraph

@newslettersnewsletters

@newslettersnewsletters

@newslettersnewsletters

@ayushi7rawatAyushi Rawat

@TheMarkupThe Markup

@checkpointCheck Point Software

@andrey-koptelovAndrey Koptelov

@daniegreenDanie Green

@coinstoreexchangecoinstoreexchange

@patrickmccarthyPatrick McCarthy

@podcastPodcast

@TheLoneroFoundation
Andrew Magdy Kamal

@davidkohn
David Kohn

@maksymmostovyi
Maksym Mostovyi

@phantasee
Phantasee

@victor-denisenko
Research Laboratory of Design Automation

@brianwallace
Brian Wallace

@suhail
Suhail Kakar

@growthatwundergraph
WunderGraph

@newsletters
newsletters

@newsletters
newsletters

@newsletters
newsletters

@ayushi7rawat
Ayushi Rawat

@TheMarkup
The Markup

@checkpoint
Check Point Software

@andrey-koptelov
Andrey Koptelov

@daniegreen
Danie Green

@coinstoreexchange
coinstoreexchange

@patrickmccarthy
Patrick McCarthy

@podcast
Podcast