Are you in a situation where you have a Laravel application that is of an older version and you need to upgrade it? Here is a step-by-step guide of how I go about upgrading a Laravel application to the latest version. Please note this guide is written when laravel is of version 8.33 and php is of version 8.0. Laravel framework is divided into two. the core framework code which is maintained under this repository https://github.com/laravel/framework The skeleton framework that utilizes the core framework maintained under this repository https://github.com/laravel/laravel Both usually get updated from time to time and hence it's important to check on both of them when trying to make an upgrade. So how is this done? Step 1 First of all, check your composer.json file on the required section as seen below "require": {
"php": "^7.2",
"epmnzava/bongolivesms-laravel": "^1.4",
"epmnzava/income-expense": "^1.0",
"laravel/framework": "^5.6",
"laravel/tinker": "^2.0",
"laravel/ui": "^2.1",
} Let's say my current application runs on PHP 7.2 and laravel version 5.6 as seen above, but the current Laravel is 8.0 and PHP version is 8.0 as well what I will first do is change the section to below: New dependencies "require": {
"php": "^7.2|^8.0",
"epmnzava/bongolivesms-laravel": "^1.4",
"epmnzava/income-expense": "^1.0",
"laravel/framework": "^8.0",
"laravel/tinker": "^2.0",
"laravel/ui": "^2.1",
} The above dependency changes will allow my application to run on both PHP version 7.2 and 8.0 but also utilize the core code framework of Laravel 8.0. Step 2 You then need to delete the composer.lock file and run composer update The above command will download and update your current Laravel core framework into the latest with all its dependencies but also update all other packages to the latest version. However, some of these packages, are not well maintained. I will cover how to use the packages of older versions in a separate article for now let's assume all is well. What's next? Step 3 After you have finished step 2 go to the and read about some high-impact changes that you need to make. Depending on which version you’re upgrading, there will be a few differences in the skeleton framework that you need to make. The most common one is on the following files: following page boostrap/app.php public/index.php app/Exceptions/Handler.php To quickly update these changes, I suggest you create a different starter application of the current version then copy and paste the latest files of the code. By following the above steps your application should be updated but notice this guide is to help you quickly update your application there may be a few files that need to be updated that have not been listed on this guide. Please do not forget to read the that is available on the official laravel website. upgrade documentation Thanks for reading the article! If you enjoyed it, please don’t forget to show your appreciation by clicking 👏 below! Before you go… Any questions or comments hit me up on Mail: epmnzava@gmail.com Twitter: https://twitter.com/epmnzava Github: https://github.com/dbrax

Twitter

2022 - HackerNoon Contributor of the Year - Laravel

2022 - HackerNoon Contributor of the Year - Open Source

2022 - HackerNoon Contributor of the Year - Php

2022 - HackerNoon Contributor of the Year - Software Engineering

2022 - Software Developer of the Year

Nominated for 2022 - HackerNoon Contributor of the Year - Laravel

Nominated for 2022 - HackerNoon Contributor of the Year - Php

Nominated for 2022 - HackerNoon Contributor of the Year - Software Engineering

Nominated for 2022 - Software Developer of the Year

Nominated for 2022 - HackerNoon Contributor of the Year - Open Source

How to Upgrade a Laravel App to the Latest Version

Are you planning on learning Data Science?🤩 But have no idea where to and how to learn?😫Don't worry because I got you covered😎. In this article, I am going to be sharing with you the resources that you will be needing for learning Data Science along with a roadmap for you to follow. Don't forget to leave thoughts after reading the article😁 Before getting into the resources I want to mention that you will have to buy their subscription. I know😅, but this is about your career, so a little investment is good😄. Also by paying you will be at least motivated so that it doesn't go to waste. But for your sake, I am going to present you with one resource which has free content. Now that's out of the box let's get into knowing the resources. (This article is not sponsored by anyone, this is just my findings. Click on the resource title to get to their website) 1. DataQuest Dataquest is along with the others that are going to be mentioned in this article are mainly focused on Data Science. Along with Data Science, they also have some related courses like Data Analysis, Data Engineer etc., you can look it up yourself on the website. Coming to how you learn. You have text on the left and the editor on the right. You read the text which has the lesson and you perform the task given at the end of the lesson. You will be learning and practicing at the same time. It saves a lot of time. Think of it as a blog but you actually learn Data Science by reading that blog. For a better idea look at the image I got from FreeCodeCamp: Dataquest looks similar to this one. I think if you like reading blogs then this will be your cup of tea. 2. DataCamp In this, we have video lectures. The videos last up to a max of 5 min. Right after the video, you get to practise what you learnt. They also provide you with assessments, projects, competitions where if you win you will have prizes. If you are not into reading, then I would suggest you go with this. I personally use this myself and you won't be disappointed. They also have a very great certification system. Where you have to go through a series of tests before getting the certificate. 3. iNeuron INeuron is similar to Udemy, but instead of dealing with everything, they only deal with data science and related things. One problem for me with ineuron is that they provide video lectures but we have to practice on our own device on our own (unlike in Datacamp and Dataquest). Apart from that everything else is very good. They also make you do projects and the cool part is that they also provide you with an internship, which you can complete at your own pace. Once you finish your internship you will receive a certificate as well. 4. 365DataScience This platform same as iNeuron, provides you with video lectures. I just found this recently so I don't have much of an idea on this, but I did hear good things about this, so I decided to mention it here. If you are using this then please let me know in the comment section if it is worth it or not? It will be helpful for others as well. I have mentioned only these, even though there are plenty of others because these 4 only focus on Data Science and related things. As I've promised I am going to be sharing with you the roadmap which you can follow to learn DataScience. This is also the same one that provides free resource links. Let me explain. 5. DataScienceMaster.org This website is a gem. They provide you with a plan to follow. From math to Machine Learning. The cool part is that they also provide you with the link from where you can learn for free and for Coursera courses you can audit them. Let's say that you want to learn math, which is very important when it comes to ML. You want to learn Linear algebra, you can click on the link right next to it and start learning. It is the same with everything. You click on the link and start learning, easy as that. Now you have everything to learn. Let's say that you are finished with your learning and are egarly looking for places to work on projects. Well, I got that covered as well. 6. ProjectPro You can be sure that this is the place for you to do projects, along with the option of deploying them. You can learn a lot, with 250+ projects in your arsenal. They also provide you with tips to increase your performance as well. They also have 2000+ free code recipes and 120+ reusable project solutions. What better way to learn and develop your skills. I suggest that you take a look and give this one a try!! I hope you found this article helpful. Also, it would be really helpful if you follow me on . I have a channel as well, feel free to visit. I post related to programming, self-development and Progression. LinkedIn YouTube First published here

YouTube

2022 - HackerNoon Contributor of the Year - Career Development

2022 - HackerNoon Contributor of the Year - Developer

2022 - HackerNoon Contributor of the Year - Engineering

2022 - HackerNoon Contributor of the Year - Golang

2022 - HackerNoon Contributor of the Year - Hacking

2022 - HackerNoon Contributor of the Year - Jobs

Nominated for 2022 - HackerNoon Contributor of the Year - Career Development

Nominated for 2022 - HackerNoon Contributor of the Year - Developer

Nominated for 2022 - HackerNoon Contributor of the Year - Golang

Nominated for 2022 - HackerNoon Contributor of the Year - Jobs

Nominated for 2022 - HackerNoon Contributor of the Year - Hacking

Nominated for 2022 - HackerNoon Contributor of the Year - Engineering

6 Places to Start a Career in Data Science in 2022

CQRS stands for Command Query Responsibility Segregation and is an evolution of the CQS, Command Query Separation from Bertrand Meyer. CQRS seems to have been started by . Greg Young CQS The meaning of CQS is basically that a method should be either a command or a query; in other words, it should change or return something, but not both things. Asking a question should not change the answer. Let's see an example, in PHP: public function getCounter(): int
{
    $this->counter++;
    return $this->counter;
} This method increases the counter and then returns the new value. But, what we just want to know the value, without changing it? This method is both changing something and returning a value, so it violates CQS. How should we proceed? public function getCounter(): int
{
    return $this->counter;
}

public function increaseCounter(): void
{
    $this->counter++;
} Now, we can call each method when needed, without side effects on the getter. Let's look at another example: public function createUser(array $userData): int {
    $id = $this->userRepository->create($userData);
    
    return $id;
} This one is very common when identifiers are generated in database engines, like using an autoincrement in a database server. In this situation, we should use previously generated id's. The most common ones are UUID. So we could replace the method like this: public function createUser(UUID $id, array $userData): int {
    $this->userRepository->create($id, $userData);
} Now, our method only changes something -adding a new user- but doesn't answer anything. CQRS So, where is the evolutionary part of CQRS? CQRS goes beyond and aims to separate the read model from the write model. That means we use a different model in order to create/update information than for reading it. The reason to do this is that many times there are different needs for reading than for writing, so having a different model makes it easier to reason about the system. Also, because of scalability reasons: having a different model, even a different storage system, make it easier to optimize both models properly; you can even have different hardware power for each model. Now I have to stop here and remind you that CQRS does not necessarily imply Event Sourcing. You can build a written model without basing the persistence in storing domain events of aggregates to reconstitute them later. You can save the current state in relational tables in boring database storage systems like o o and still do CQRS. MySQL MariaDB PostgreSQL So, how should we optimize the write model? The Write Model When we think about the write model the first we should be conscious of is that it needs to be reliable. This is where we are going to do domain validations, transactionality, and any other measure we need to apply to ensure the domain will remain valid and consistent. Here we have the command concept. A command is an action or a group of actions applied to the write model; it needs to be transactional, so if more than one action is applied, then all the actions should succeed or fail. And it needs to be valid, so it does not break any domain rule. Usually, these commands are executed through a command bus, so we have a pair command/command handler. Let's see an example in PHP: class CreateUserCommand {
    private UUID $id;
    private string $email;
    private string $password;
    
    public function __construct(UUID $id, string $email, string $password) {
        // Validation
        if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
            throw new \InvalidArgumentException("Email $email is not valid");
        }
        if(!strlen($password) >= 8) {
            throw new \InvalidArgumentException("Password should be longer or equal than 8 characters.");
        }
    
        $this->id = $id;
        $this->email = $email;
        $this->password = $password;
    }
}

class CreateUserCommandHandler {
    private UserRepository $userRepository;
    
    public function __construct(UserRepository $userRepository) {
        $this->userRepository = $userRepository;
    }
    
    public function handle(CreateUserCommand $command): void
    {
        // More validation
        if($this->userRepository->has($command->id()) {
            throw new \InvalidArgumentException("A user with the provided id already exists.");
        }
    
        $this->userRepository->save($command->id(), $command->email, $command->password);
    }
} In this situation, the command would be run like this: $this->commandBus->handle($command); The Command Bus could know what handler to execute using a naming or whatever strategy and would open a transaction before and commit it on success after the handling. In case of error, it would rollback. So we have transactionality because of the command bus and validation because of the command and the handler validations. You may notice I prescinded of the domain part. This is because this is an example, but we should have an aggregate User with all the needed validations inside (additionally to the application command part, both layers should be consistent). Now, where is this data stored? Well, it depends on your persistent decisions. If you were practicing , you should probably use a solution like ; if you just store the last state of the aggregates in a relational way, a storage system like MySQL should work for you. event sourcing EventStore The Read Model Now, let's think about the read model. The read model doesn't need all of these validations and transactionality of the write one, because we have done all of this when writing, so we only need to copy the information to the read model. In order to copy the information, there are several approaches; if you are under event sourcing, you probably should listen to the events, synchronously or asynchronously, and then update the read model. If not, you could do it in the command handler, using synchronous listeners, or even sending messages to queues in order to do this asynchronously; the latter is not common because to do that you could be doing event sourcing. And what should be the structure of the information? If you want to really optimize... then the one you need to read, exactly that. So you just need to query and show, without joins or transformations in the middle. This uses to be done through a document-based database system, so... Where should I store the information? If you use a document-based storage system, MongoDB or Elastic could be a very good option. You still can use a relational database such as MySQL or PostgreSQL and use the JSON field types. Advantages of Using CQRS You can configure different hardware and scalability in general for each model, so you can put more power on writing or on reading depending on the nature of the project. Having concerns separated means each model is easier than the merging of both. Easy to reason, easy to maintain. Security: only domain entities are changing the source of truth -the write model. Conclusion Applying CQRS is not an easy thing. Any good practice is, actually. But advantages tend to overcome disadvantages. This post was originally published . here

2022 - HackerNoon Contributor of the Year - Docker

2022 - HackerNoon Contributor of the Year - Linux

2022 - HackerNoon Contributor of the Year - Software Architecture

Get more articles on alexhernandez.info

Nominated for 2022 - HackerNoon Contributor of the Year - Software Architecture

Nominated for 2022 - HackerNoon Contributor of the Year - Linux

Nominated for 2022 - HackerNoon Contributor of the Year - Infrastructure

Nominated for 2022 - HackerNoon Contributor of the Year - Docker

Understanding the Command Query Responsibility Segregation Pattern

Software development is a dynamic and competitive space. Change impacts the viability of a project, market assumptions need validation, and the project progress requires to be in continuous sync with evolving business objectives. Moreover, the time taken up in project completion can further add to the variables, making a case for a faster development time frame. “Evolution is the only constant.” ― Vikram Verma, author of Agile Able Agile software development, when done right, addresses the aforementioned issues. It can deliver the project faster, with an incremental deliverable. It entails a cross-team effort, and encourages client involvement, resulting in robust and purpose-driven development. In this article let’s understand how Agile Software Development can help power successful products and fulfill evolving business objectives. What is Agile Methodology? Agile is an iterative approach to software development. The following are its integral components. : Unlike top-down traditional organizational hierarchies, Agile development defines a cross-team effort wherein each team member contributes. Cross Team effort Agile software development companies encourage clients’ involvement during the development process itself. A collaborative effort with the client. Each iteration is a milestone in Agile. The development teams look to add value at each iteration. Moving forward, one step at a time: Agile emphasizes continuous learning and testing. Continues learning: Benefits of Agile Software Development Agile has been conceived as an evolutionary approach to software development, to make better products 一 faster. It acknowledges the unknown variables that are part of a development process and the unpredictability of a final outcome that does not factor in these changing scenarios. The Agile development process is the answer to address the challenge of unpredictability. Tangible benefits received by implementing agile methodologies have seen its application across other industries as well. Saab Aeronautics, for instance, has been implementing agile methodologies to develop its multi-role fighter 一 Gripen E. Agile Methodologies offer the following key advantages: : Each iteration within Agile is treated as a milestone. There are team meetings, and analyses to make changes in the project development if needed. The backlogs are taken into account as well. This brings versatility to the development process. Dyamanism Agile is team-centric, wherein each team member adds value to the project. At each step feedback from all stakeholders is received. Encourages Innovation: Moreover, the process lays emphasis on keeping an open mindset and focusing on the immediate deliverable via sprints. Retrospective meetings are held which helps development teams to analyze what problems have been faced during the past sprints. Agile development allows transparency in the development process and encourages client involvement as a stakeholder during project development. Client involvement and transparency: With a focus on developing part of the project that is high on priority, Agile development lets the team deliver value early in the project. The product can have an early impact. Clear priorities: : The development process allows the client to pivot, if necessary before the completion of the project. If the variables change and the final outcome does not hold relevance as planned earlier, a mutually agreed-upon termination can be achieved as well. Option to pivot Agile brings agility in the development process and fastens deliverables, shortening the time to market. Agility: Forms of Agile There has been significant innovation in Agile since it has been implemented in development. There are multiple forms in which Agile is used in an organization. Some significant versions are mentioned hereunder. **Differentiator/** Version Principal directive Key Advantage Scrum Scrum prioritizes innovation by teamwork to solve complexities in the project. Eases innovation while delivering significant deliverables earlier. Retains the working of the organization. Kanban In Kanban, the focus is on workflow management. Depending upon the work, lead times are reduced. Flexible team structures and work time frames facilitate maximum involvement of each team member. Lean Development In Lean development, the focus is on development practices sans wastage. There is a continual effort to avoid all practices that lead to wastage. Optimizes the workflow, involving the entire management, and facilitates flexibility in tailoring practics. Trends In Agile Agile is constantly evolving as development teams try to better their deliverables by innovating on working processes. Let’s have a look at the latest trends in : Agile development methodologies Design Thinking Design thinking lays emphasis on the user, challenging assumptions in an attempt to develop products that empathize with the user. The underlying endeavor of this process is to identify strategies to come up with a solution with a fresh perspective, unrealized with the previous approach. Design thinking strives to develop products for the end-users, with a deeper understanding of their needs and requirements. Agile at scale The Agile advantage has been acknowledged and established over the years. Agile has been implemented over the individual level or team level. At this level, it is relatively easy. But given the benefits, Agile is increasingly being implemented pan organization, across multiple teams’ 一 Agile at scale. One of the most popular scaled agile delivery platforms is Scaled Agile Framework**.** is a collection of workflow patterns to implement Agile across an enterprise. It has gained traction, with corporates pushing to achieve greater resilience of workforce 一 by implementing short-term objectives. It lays down principles for a culture to be adopted pan organization. SAFe Machine learning and AI in Agile methodologies Artificial intelligence and Machine Learning are increasingly gaining traction as tools to gather data during requirement analysis. They provide greater accuracy and automation to fuel a data-driven approach. Increased significance of VSM Value Stream Management or VSM is gaining significance as a critical parameter to gauge deliverables. It intends to measure the value delivered to the end customer. Value streams are everything in software development that can deliver value to the customer. A focus on value streams can result in customer satisfaction and drive growth of the organization. Agile teams are increasingly focusing on managing value streams to deliver better value to the customers. Combining DevOps and Agile Development teams aim at building feature-rich solutions. As the project development moves forward, so do the complexities, increasing chances for unintended, unforeseen, and unfavorable outcomes. The way around this is testing the software during pre-release stages and managing collaborative workflow during development that fast tracks mean time to development. DevOps are practices that enable this collaborative work and pretesting, by implementing Agile. DevOps also shortens development timeframes and aims to deliver software faster. With tangible benefits, combining DevOps and Agile is gaining traction to deliver quality software. To Sum It Up Agile methodologies have been the answer to the dynamism and complexities of software development. It entails a cross-team collaborative approach working towards iterative, incremental, and consumable deliverables that add value to the client at each step. In this way, Agile Software Development fosters client collaboration with the Agile Software development company with the client’s involvement at each iteration, resulting in a more customer-centric and purpose-driven development. The process also provides an option to pivot, if necessary. Agile is evolving, with new trends emerging to make it even better. The future holds even more promise for its integration across industries.

2022 - HackerNoon Contributor of the Year - Agile Software Development

2022 - HackerNoon Contributor of the Year - Mvp

MVP Software Development Services

Nominated for 2022 - HackerNoon Contributor of the Year - Mvp

Nominated for 2022 - HackerNoon Contributor of the Year - Agile Software Development

Nominated for 2022 - HackerNoon Contributor of the Year - Project Management

All the Coolest Trends Coming to the Agile Methodology in 2022

We’ve built a tool enabling everyone to understand and speak without any language barriers within just one app. I am a native speaker in just language. I also run IT businesses that require communication with people raised and living in countries other than mine. One more thing I’ve learnt about myself recently is that I don’t like all the compromises and limitations placed on me by the necessity to hire interpreters for online meetings. I no less dislike the fact that I can’t talk with ease to my friends, who speak in foreign languages, in audio and video chats, even simply during phone calls or messages. In such situations, I constantly have to rely on some intermediary translation tool. one So I thought: living in the globalized and digitalized world of today, why do we still have problems with speaking to other humans and understanding them even online? Coming up with this idea was just the first step of a whole journey. The second step was to team up with my tech-brained friend, Vadim, to develop the solution. He suggested using the existing AI technologies to build a convenient and consistent app available for everyone that would enable people to talk to those who don’t speak their native language and understand them. We named our web app YOUS because it unites people. Now individuals worldwide can easily switch between chatting, audio or video calls in any language pair, be it Japanese-Italian or German-Hindi. It works just as easily as it sounds: if we are talking voice translation, the tool recognizes speech, interprets it, and speaks in a synthesized voice in the interlocutor's language. Additionally, the whole conversation is duplicated in text chat format. That is the story of how we had made the core of the language barrier problem disappear, but we went further. Another issue with interpreters is privacy and safety. When translation services are hired in the corporate world, data confidentiality is granted by legal tools, like NDAs. It doesn’t work in our personal lives though, because many people, myself included, are not comfortable with speaking on private and intimate matters with a third party involved. On top of that, we really are at the point when we discuss online all kinds of things with people who don’t speak our native language. It means that I don’t want any second of my talk to be traceable. Ever. So there we were, ensuring data tracking was impossible in our app. Altogether with the AI-powered concept, it allows users not only to eliminate disclosing sensitive information to simultaneous interpreters but also to avoid any storage of their personal data. It is a very practical tool to solve an ever-present problem that somehow hadn’t been tackled yet. It is quite surprising that our current product is based on a body of present technologies merged in a hybrid system because it means that the solution has been right out there for some time. Actually, due to this availability of technologies, we achieved another key strength of our tool and made it affordable. Just like primary communication apps but with a completely new quality of breaking down language barriers. What we see in it all is clearly a massive shift in the communications landscape. We all are used to assorted machine translation tools and features that really do help us understand each other no matter the language, but there is immense room to improve, quicken, and sharpen what we have now. Our web app is just the beginning, and we know that the capacity ahead is boundless. We also have an app that enables calling mobile and landline numbers with a built-in AI translator, and at the moment we are working on developing the know-how for automated recognition of gender and language by voice, as well as voice cloning for cross-language synthesis. Envision a world where individuals, enterprises, institutions, and other communication parties can finally chat one-on-one independently of their language. Thousands of doors would get opened immediately. It is exactly the world we’re heading to when introducing a new AI-powered communication tool to the market. Whether you ever wished to understand and be understood immediately while chatting with your foreign friends or business partners online, or whether you never thought of this idea, the new era had arrived. We think the time has come to change international communications by the adoption of AI into the everyday processes of our lives.

A New Communication Tool Starts the Next Chapter for The Global Telecom

Imagine you’re going to purchase a SaaS product for your business. Would you trust online reviews from strangers on review sites like Trustradius and G2 or a referral from someone you know? Most people would trust the opinion of someone they know personally over any other form of marketing. When prospects learn about your product from someone who has already used it, their perception of your product shoots high because of the pre-established trust. While online reviews may be a way to create this perception of value in solving your prospects’ problems, word of mouth is more powerful especially if it is done voluntarily. According to , 92% of people who receive referrals from friends and family are likely to trust a brand compared to only 72% who may trust consumer opinions posted online. This statistic reveals that you should prioritize creating as many customer evangelists as possible because they are the most effective way to acquire loyal customers. Nielsen Who are customer evangelists? These are customers who are so passionate about your product that they voluntarily share their experience with others both online and offline. In this where prospects want to experience your product before they even sign up, customer evangelists are critical to get ahead of your competitors. They provide the assurance that your product will help your potential customers solve their problems more effectively than any other form of marketing ever will. end user era So how do you create customer evangelists for your SaaS product? In this article, you’re going to learn: - Why customer evangelism is important for your SaaS growth. - How to get customer evangelists for your product. Why customer evangelism is important for your SaaS growth Regardless of the stage of growth of your SaaS, user acquisition and retention are critical for your survival. Both user acquisition and retention are primarily driven by the perception your prospects and existing users have of your product. If prospects think your product is valuable, they will sign up for a trial or become an outright customer. And if they don’t understand your product messaging or think poorly of your product, they will move to your competitor. If your existing customers are having a bad experience while using your product, they will ditch the product and may even discourage prospects from trying it. But if their problems go away after using the product and the experience is amazing, they may voluntarily convince their peers to try and buy your product. These are the reasons why you should prioritize customer evangelism: Reduced customer acquisition cost There are various ways to acquire customers, but most of them come at a cost. Customer acquisition cost (CAC) is the amount of money you spend to make someone new use your product. Customer acquisition cost is an important metric that you should track and control to avoid losing money for every new customer you acquire. Your aim should be to minimize customer acquisition cost as much as possible. Your CAC largely depends on the type of marketing channel you use to acquire customers. Examples of marketing channels include cold calling, cold emailing, social media marketing, paid advertising, SEO and many others. If two marketing channels bring in a relatively same number of customers but have different CACs, you should drop the one with a higher CAC and focus on the cheaper one. And customer evangelism has the least CAC because it relies on your customers to convince prospects to buy your SaaS. I may argue that customer evangelism has zero CAC because your existing customer is so impressed by the product that they voluntarily try to make their peers use your product. Increased customer lifetime value Customer lifetime value (CLV) refers to the amount of money you can make off each customer during their entire relationship with you. If you want to drive growth and sustainability for your SaaS, your CLV should be higher than your customer acquisition cost. The bigger the difference between your CLV and CAC, the faster you grow. According to this by Wharton School of Business referred customers are more valuable than non-referred customers. It revealed that the CLV of a referred customer is 16% higher than non-referred customers due to high profit margins and reduced churn. study Referred customers are more profitable because they are a great match for your product. Your evangelists know that your product can solve the problem their peers are having and recommended it to them. These referred customers are in turn willing to pay for your product for as long as it makes their lives easy. You can see that customer evangelists bring in power users for your product at zero cost who in turn supercharge your SaaS growth. How to get customer referrals for your SaaS for free Word of mouth marketing is the most effective way to drive B2B purchasing decisions today according to . A B2B buyer would trust a recommendation from peers who have already experienced your product and got great outcomes. BigCommerce These buyers know that their peers are putting their reputation and relationships in line when they recommend your product to them. So, they wouldn’t encourage their friends to purchase your SaaS product if it wasn’t the right fit because doing that would only weaken their trust. Here are the ways you can create customer evangelists who will freely try to convince their peers to use your product: #1 Product/customer success This is the obvious one that most companies recognize and do. Most SaaS companies already understand that they are in the end-user era where growth is primarily determined by the experience users have with your product. This type of growth is known as product-led growth. And in a product-led growth business, all your activities revolve around your product. Your marketing team may create awareness, but excellent product experience is how you acquire new users. If your users are impressed by how effectively your product solves their problem, they may tell their peers about it and encourage them to try it too. So, your main aim should be to get new users to meaningful value points faster. This way, they will upgrade, expand accounts and maybe even become your evangelists. How do you create excellent product experience? By aligning your team to focus on a single point of truth which is product-user interaction. When your team understands the needs of your ICPs, you will be able to improve the product features to create a better experience. #2 Product-led Content Even though almost every SaaS company produces content as part of their marketing strategy, most of them are doing it the wrong way and getting dismal results. To be successful in content marketing in this end-user era, produce content that shows how your product can solve your prospects' problems such that by the time they are done reading the article they become users. This type of content marketing is known as product-led storytelling. It involves creating sales pages that are disguised as long-form blog posts. So, each long-form blog post shows how a specific ICP can solve a specific problem using your product. When prospects who are having this problem consume the piece of content, they may sign up as trial users because they are experiencing your product solving their problem as they are reading. Product-led content is what has enabled Ahrefs to acquire an average of 2000 users every week. Their blog posts are so helpful that their readers convert into users after completing them. Source. You should invest in product-led storytelling if you want your users to tell their peers about your product for free. Creating content that shows how your product can solve your prospect’s problems is the first step to having a content strategy that drives word of mouth marketing. The next step is having a distribution strategy that effectively reaches your target readers in the channels where they hang out. These channels can be social platforms such as LinkedIn, Twitter, Slack communities and sub-reddits. The final step is consistent execution for a sustained period of time. You never stop creating quality pieces of content and distributing them where your target readers socialize for as long as the internet exists! Most SaaS companies miss one if not all the three of these steps to successful product-led content strategy that results in massive word of mouth marketing for your product. #3 Events How can you make people talk about an event before attending it, then also talk about it and share their experience with friends after coming from that event? By creating a strong experience before and during the event. Doing that begins by changing your mindset about events. Most companies approach events to get leads. They are interested in the lead list of the registrants so that they can go sell them products. But if they think in a different way such as how they can create an incredible experience that people talk about with other people or share what they learned with other people, they may produce a great event. To generate word of mouth marketing using events, focus on how you do them instead of just doing them for the sake. #4 Community Whether you participate in the community or you own it, to generate customer evangelists you should be active, visible and help people within those communities to solve their problems in real time. Let’s say your product is an email marketing software that helps content marketers do effective email outreach to their customers. You can be in Slack channels and Facebook groups where content marketers hang out and share insights whenever they need a solution that matches your product. Identify communities where your buyers hang out and focus on building brand visibility and connecting with them by providing something valuable for free. Creating a community for your prospects and existing buyers from scratch is a better way to produce customer evangelists because you have more control. #5 VIP Customer Evangelist Program Few SaaS companies are already using this idea to supercharge their word of mouth marketing and acquire more loyal customers. It involves identifying power users who are already promoting your product without even asking them. Then doing a lot of great stuff for them such that it fuels their desire to continue telling others about your brand. Power users are individuals who interact with your product the most when compared to other customers. These are the users who are probably enjoying your product and can voluntarily try to convince their peers to also try your product. When you build a VIP program for this category of customers, you will power their urge to convince their peers to buy your product. Wondering what you can do for your power users? Identify their goals and provide things that can help them get there. Let’s say your buyers are content marketers. One of the goals of any content marketer is to build a brand and get recognized as a subject matter expert in their industry. You can organize an expense-paid event where content marketers come and network with their peers. In the process, they give keynote speeches that improve their perception in the industry. Final thoughts Getting new users without even spending a dime on acquisition costs should be your goal as a SaaS company. Referred customers are likely to use your product longer than non-referred customers because they are good product-fit. This in turn results in increased revenue and boosted SaaS growth. To get more referred customers, you need to focus on producing as many customer evangelists as possible. Customer evangelists are those users who are impressed by your product that they voluntarily try to convince their peers to also buy your product. You can generate more customer evangelists by doing the following: - Creating product/ customer success by making your product-user interaction the single point of truth. - Crafting product-led content strategy that aims to create content users love, then distributing it to places where they hang out while being consistent. - Hosting events with the aim of creating strong experiences that drive people to share what they learnt with their peers. - Being active, visible and providing helpful information in communities where your ICPs hang out. - Creating a VIP customer evangelist program that aims to do great stuff for your power users who in turn become more willing to tell their peers about your product. When you have many customer evangelists, your SaaS company grows quickly because you acquire users who actually need your product to solve their problems. Also published here.

Internet Computer

Facebook

Slack

Target

Let me help you craft stories that convert readers into clients

Read My Stories

Get Referrals for your SaaS Product Easily by Following this Guide

Technology has an impact in many fields. In this thread, we approached this impact in the theme of shopping and discussed how it can be advantageous for us. We talked about which technology is already available on this topic, and what we would like to see to make the experience easier. slogging This Slogging thread by Sara Pinto, Limarc Ambalina, Mónica Freitas and Jack Boreham occurred in slogging's official #technology channel, and has been edited for readability. Sara Pinto Nov 29, 2021, 10:58 PM What features would you like to see to make our shopping experience easier? Sara Pinto Nov 29, 2021, 10:59 PM I've come upon the Amazon Go shop, which is basically a store with no checkout. So, you go into the store, enter the app to scan a QR code, you pick up whatever you wish, and when you are done, just walk away. They will later send the receipt and take the money from the Amazon account. What do you think? https://www.amazon.com/b?ie=UTF8&node=16008589011 🔥 1 Sara Pinto Nov 29, 2021, 11:08 PM Limarc Ambalina Mónica Freitas Jack Boreham Favour Amadi Ellen Stevens Abeer Limarc Ambalina Nov 30, 2021, 8:10 AM Personally,  I would like a universal carbon footprint tracker like this one: https://ecocart.io/extension/ Mónica Freitas Nov 30, 2021, 12:31 PM Sara Pinto For me, it would be something like an app that, upon identifying the supermarket you're in, gives you a list of products according to your preferences. For example, imagine you want to buy only vegan products or fair trade or sustainable brands; that app could let you know which brands math you're criteria, and you wouldn't have to spend hours online researching each brand. Another example could be something like you being allergic to some ingredient, and the app would let you know which items in that store are safe. A bit out there, but I can see good uses for it. :woman-shrugging: Mónica Freitas Nov 30, 2021, 12:33 PM Sara Pinto Oh, your amazon idea is also great! It would be a time saver since we spend a lot of time at checkouts. I wish this idea spread to other stores as well. It would make shopping a less draining task 😅 Mónica Freitas Nov 30, 2021, 12:36 PM Limarc Ambalina I love this!! How does it work? Does it measure according to product type, its packaging waste, and how it was produced? Where did you first hear about this extension? Limarc Ambalina Nov 30, 2021, 12:38 PM I'm not 100% sure and actually the first one I ever tried was this one: https://shopneutral.io/index.html Limarc Ambalina Nov 30, 2021, 12:39 PM For Neutral, they state, "Neutral calculates the carbon footprint of your product by accounting for **entire lifecycle** of your product. This calculation factors in all material and energy inputs consumed, material and energy outputs generated, transport, storage, and waste outputs generated throughout the life of a good" https://www.notion.so/Our-Methodology-81b3a89154d94ea5bca41374bf8680d7 🔥 2 Sara Pinto Nov 30, 2021, 7:42 PM Limarc Ambalina That's amazing! Neutral seems quite detailed and complete! I might start using it, I think it's a good way to bring awareness to our impact on the environment, something that we often need. Which one do you prefer? Sara Pinto Nov 30, 2021, 8:02 PM Mónica Freitas That would be so useful, especially for people who have restrictions, as you said. They could save a lot of time instead of having to read every label and check every ingredient. If it doesn't exist already, you should trademark it. If you don't, I will! The closest I got to find something like that was a page on Instagram that disclosed vegan products, where you could find them and at what prices and they also update if the products remain vegan or their ingredients have been changed 💛 1 Sara Pinto Nov 30, 2021, 8:13 PM Mónica Freitas I got quite excited about the project. It would be simple and dynamic, just going in and out, no trouble! This kind of store could have saved me in a lot of situations haha 💛 1 Jack Boreham Dec 1, 2021, 7:22 AM Sara Pinto, I love all of these ideas! I want something along the lines as to what Mónica Freitas is talking about.  An app that tells me what ingredients to buy for a certain recipe and where it's located in store. I'm terrible at gathering ingredients, so this would be a game -changer 😂. Mónica Freitas Dec 1, 2021, 12:44 PM Sara Pinto Maybe we'll get a few programmers and kick this idea off! Not we start seeing particular supermarket alleys for bio food and healthy food, but if you're vegan, you won't find everything you need there. Or if you're allergic to something, there's nothing to make shopping easy. And I bet that for some people, groceries shopping can be really overwhelming for this exact reason. Mónica Freitas Dec 1, 2021, 12:46 PM Sara Pinto Especially when you have to sprint to a store for a particular ingredient and then there's a massive queue 😂 Mónica Freitas Dec 1, 2021, 12:51 PM Jack Boreham I got you! There was one app I discovered while I was living in London, Mealime. It gives you recipes ideas, minding your dietary restrictions, and gives you a shopping list for each meal and portion you choose. So if you make up your meal plan for the week and add those meals to the "shopping cart," the app will give you a detailed list of everything you'll need to buy for that week - ingredient by ingredient. Jack Boreham Dec 1, 2021, 4:57 PM Mónica Freitas  😱😱😱, you might have just changed my life. I'm downloading this! 💚 1 Sara Pinto Dec 1, 2021, 5:41 PM Jack Boreham I think you are all set up haha. Please tell us how that experience went on, if it actually helped. Me and Mónica Freitas might want to bring that to Portugal haha 💚 1 Sara Pinto Dec 1, 2021, 5:48 PM Mónica Freitas Exactly! Bio and healthy doesn't translate literally to vegan or vegetarian. There are tons of more common foods that might be vegan, but having to read all through the label of each product... Oof. An app would definitely solve this! We should get going on this hahaha Jack Boreham Dec 2, 2021, 10:16 AM Mónica Freitas will do😂 Mónica Freitas Dec 2, 2021, 11:19 AM Jack Boreham let me know your thoughts on it 🙌 Mónica Freitas Dec 2, 2021, 11:20 AM Sara Pinto So true! Let's get this idea to Shark Tank 😂 🤑 1

Amazon

Instagram

2022 - HackerNoon Contributor of the Year - Climate Change

Nominated for 2022 - HackerNoon Contributor of the Year - Climate Change

How to Improve Online Shopping (Slogging Insights)

In an ideal world, the feedback you receive would come with an action plan. In reality, it is up to you to translate constructive criticism into an action and improve. Actionable Feedback Getting feedback can be a drag when it’s not positive. Yet, without it, we can’t improve. In fact, it’s not only you who is not enjoying the situation. Managers hate giving critical feedback too. As illustrated in study, the feedback managers were providing naturally without too much thought was often not actionable and, at times, led to defensive reactions and hard feelings. An example of this would be a statement such as “you should be more professional” or “you are a poor communicator”. this Actionable feedback leads to learning and performance improvement. I have received some feedback after I finished an internship, and I was lucky because it was actionable in this sense. It wasn’t a personal attack, and I understood the skill I should work on is communicating with a non-technical audience. Rumour has it that this is often an issue for engineers and scientists, and I think it is something we don’t take too personally in general. I had that conversation so many times: “I should improve how I talk to non-experts”; “Yeah, me too”. It tends to end there. On the other hand, if someone had told me that my technical skills were an issue, I would make plans to improve immediately. Translating feedback into actions is not rocket science. Still, it can be challenging for those intangible “soft” skills. Therefore, I would like to take the notion of actionable feedback further and go through what you as a receiver can do to improve. Here is the process I followed Dissect the Skill Brainstorm Activities Plan Improvements Execution I will stick to communication, but you can do this with any skill. Dissect the Skill As with any problem, the first step in solving it is to think about how you can dissect it into smaller pieces. For example, my feedback was about communicating with non-expert audiences. Are there any types or more specific contexts? Another question I asked myself was whether I needed to improve my communication in general. As mentioned above, it’s better to receive specific feedback “improve communication with non-experts” versus general “improve your communication”. On the other hand, I understand that this is done more so that I don’t feel too bad about myself. Hence, when I start to think about how to improve, it can be helpful to go one level up and start dissecting “communication” instead of “communication with non-experts”. If nothing else, it can help you come up with more activities you could do. It can be helpful to create a mind map with all the initial categories like this one: Brainstorm Activities Next, expand on your initial ideas and associations - brainstorm all possible activities that you associate with the skill you need to develop. You can think of it as potential . For instance, you can ask yourself, where do people speak publicly? Brands and organisations look for content all the time; maybe you could give a talk at a local event or a meet-up. What about written communication? Write a white paper or a blog for general audiences. Write down everything that comes to mind. micro-habits You can keep perfecting the categories and new clusters as you think about it more, but a perfect structure is not the most critical part. Here is what I ended up with: As you can see, there are some overlaps, and that’s fine. Once you feel like you can’t think of any associations or find more activities online, start choosing what to do and when. Plan Improvements How do you start implementing your ideas into your life? First of all, set up a calendar reminder to review your progress regularly, e.g. every two weeks or once a month. Regular review will help you assess whether you need to put more effort and give you a chance to celebrate your progress. Then, think about all of those activities and be honest with yourself about how many you can start doing at the start. For me, I started with the easy ones. What’s easy depends on your personal preferences, where you live, and what you have access to. Another aspect is to think about how you can measure it. Now, that doesn’t mean you need to put a number on it. It could be qualitative. For example, when something is difficult for us, we tend to procrastinate on such a task more. You could use your feeling as an indicator. I would recommend you put your map somewhere where you can see it. Whether it’s in an application online or in a physical notebook, make sure you can keep adding notes and capture any data. Execution The last point I want to make is that you shouldn’t be afraid to make a bold move and maybe join a new community. Whether you are improving on a technical or a soft skill, a community provides a level of accountability and keeps you on track. Going through this process, I ended up applying to , and I continue to work on my communication skills. Hackernoon Blogging Fellowship I translated my actionable feedback into an even more actionable one, and you can do it too.

Keep

Mind

2022 - HackerNoon Contributor of the Year - Communication

2022 - HackerNoon Contributor of the Year - Data Science

2022 - HackerNoon Contributor of the Year - Design

2022 - HackerNoon Contributor of the Year - Learning

2022 - HackerNoon Contributor of the Year - Science Fiction

2022 - HackerNoon Contributor of the Year - Self Improvement

Super Career Strategist of 2022

Research Papers

Researcher, Data Scientist and Writer

How to Translate Feedback to Actionable Plan (with Examples)

Every day, we use and generate huge amounts of data. And this data is used by different sectors like healthcare, finance, marketing, and others. However, data breaches are these days. That’s why such sensitive information should be safeguarded. increasingly rampant This is where penetration hacking comes in handy. Penetration testing or ethical hacking is used to get access to resources. Hackers carry out attacks to uncover security vulnerabilities and assess their strengths. In this article, you’ll learn what penetration testing is and why it is used. It also highlights the different types and approaches to penetration testing. Lastly, the article listed some of the most popular tools used by pen testers. What Is Penetration Testing? Penetration testing (pen testing) includes evaluating an application or infrastructure for vulnerabilities. Pen testing identifies numerous vulnerabilities inside the system. In addition to this, it also determines what causes these vulnerabilities. After identifying system flaws, the process directs you on how you can find and fix them. In essence, each detected vulnerability is assigned a specific grade. And this is based on which of these companies should prioritize fixing first. Penetration testing is usually required by companies to check their systems for any vulnerabilities. In most cases, there isn’t any need for obfuscation. However, there are times where black box pen testing is required. This is a type of testing where security specialists deal with things like firewalls. This interferes with testers while they run checks. They can block them, but it gets time-consuming. To get around these restrictions the IP address should be changed. A proxy server establishes a TCP connection on behalf of the server. It then exchanges network packets with that server. You will be able to use your local DNS server at the same time and be given a name for each request. The site, then, will remember the address where the DNS requests came from. Why is Penetration Testing Used? Penetration testing is used to verify vulnerabilities. Also, testers use this to evaluate how secured the system is. Today’s technology is advancing. However, human error still accounts for . Modern hackers target security misconfigurations that occur at any level of an application stack. To know if your security system can handle such attacks, you need to put them to the test. 88% of data breaches Here is a list of how companies benefit from penetration testing: The test identifies weaknesses in an organization’s hardware, software, or human assets to establish controls. The test makes sure that the three most important aspects of cybersecurity are maintained. These three aspects include confidentiality, integrity, and availability. The test assures that the controls put in place are adequate. The test provides insight into a company’s established security measures. This is done by determining how it will be attacked, as well as the steps needed to secure it. The test improves a company’s overall security posture. Types of Penetration Testing 1.   Network Penetration Testing The physical structure of the system is examined to discover dangers in the organization’s network. The penetration tester conducts tests in the network. This is so they can identify faults in its architecture, operation, or implementation. The tester checks various components of the business, like computers and devices, for possible flaws. 2.   Physical Penetration Testing This type of penetration testing imitates real-world risks. The pen tester takes on the role of a cyber-attacker, attempting to breach the physical security barrier. This test is used to look for flaws in physical controls such as security cameras, lockers, obstacles, and sensors. 3.   Web Application Penetration Testing In this type, testers look for flaws in web-based systems. identifies possible vulnerabilities within websites and apps. It also searches for security issues that can occur as a result of unsecured development. Web application penetration testing Websites and apps that have transaction pages need this type of pen testing. Examples are online shopping websites, banking apps, and other eCommerce websites. 4.   Wireless Network Penetration Testing This type of pen testing examines the connectivity of all devices connected to the company’s internet. The purpose is to avoid data leakage that can occur when data is shared between devices over a wireless network. 3 Approaches to Penetration Testing There are three ways how testers perform penetration testing. All of these depend on the sort of information available at hand. 1.   Black Box Penetration Testing In the black box or external penetration testing, the tester has no knowledge of the company’s IT architecture. This procedure is like a simulation of a real-world cyber-attack, and usually takes longer to complete. 2.   Grey Box Penetration Testing In this approach, the testers have some information about the company’s structure. This includes IP addresses, operating systems, email addresses, locations, and network maps. It’s a more targeted method since the pen tester only has limited access to the internal network. This, then, allows them to concentrate their efforts on exploiting potential vulnerabilities. As a result, this saves them more time and money. 3.   White Box Penetration Testing White box penetration testing is also termed internal or clear box penetration testing. The pen tester has complete information like the IT infrastructure, source code, and environment. It is a more extensive and in-depth pen test where every aspect of the application is tested. This usually includes the quality of the code and the basic design. Furthermore, pen-testing of this nature normally takes two to three weeks to complete. Tools Used in Penetration Testing Penetration testing relies heavily on tools. These tools aid in the detection of security flaws in the network, server, hardware, and software. Penetration tools are software applications that are created to check for gaps that are exploited by actual hackers. To execute different penetration testing procedures, there are hundreds of tools accessible on the market. Here are some of the most popular penetration testing tools useful for common testing aspects. 1.   SQL Map SQL map is a program that automates the discovery and exploitation of SQL injection problems. It includes a robust detection engine that works with any database management system. It supports all . With suitable authentication, IP address, port, and database name, you can connect to the database without using SQL injection. SQL injection techniques 2.   W3af To discover any vulnerabilities, the web application attack and audit framework (W3af) is employed. It gets rid of things like DNS, cache poisoning, cookie management, and proxy support. 3.   Wireshark Wireshark is the most used network protocol analyzer in the world. This tool allows testers to examine network activity at a tiny level. It also allows for a thorough examination of hundreds of protocols, as well as live captures and offline analysis. Wireshark is compatible with all major operating systems like Windows, Linux, MacOS, and Solaris. 4.   Metasploit Metasploit is a popular tool for penetration testing. Testing teams use it to check and manage security assessments, keeping white hat hackers at bay. Metasploit includes a command line as well as a user-friendly GUI interface. It runs on all operating systems, including Mac OS, Linux, and Windows. While that is the case, Linux is the most popular. The tool allows penetration testers to break into a system and find serious weaknesses. With this tool, testers can exploit weaknesses and carry out genuine attacks. 5.   NMAP Nmap is free, versatile, powerful, portable, and simple to use. It is used in different ways, such as: Examining and managing service upgrade schedules Monitoring host and running services for uptime, and Managing network inventory It determines whether or not hosts are available by analyzing raw IP packets. Nmap is also used to see what services are running on a host. Additionally, it can also check the application name, version, and operating system information. Testers are able to see what sort of packet filters are used. Nmap can scan anything from a single computer to massive networks. It is compatible with nearly all operating systems. 6.   Nessus Many companies all over the world use Nessus as one of their most trusted pen-testing tools. It is used to scan IP addresses, websites, and sensitive data searches. Nessus can assist in identifying missing patches, malware, and mobile scanning. Additionally, it has a fully-featured dashboard, broad range scanning capabilities, and a multi-format report facility. To Summarize Penetration testing is important to identify key security flaws in a system. It is also essential to determine vulnerabilities in an IT infrastructure or web app. As cyberattacks become more prevalent, it is becoming increasingly important to detect threats and vulnerabilities. That’s why penetration testing is a must. There are many tools and approaches to pen testing that differ from one company to another. However, the goal still remains the same: to secure a business’s assets from outside intruders. Penetration testers with advanced skills can uncover an increasing number of flaws. This can then be patched to make systems safer. Penetration testing is now being expanded to include mobile devices and cloud security. As a penetration tester, you need to be prepared and knowledgeable about vulnerabilities. It’s also important to know how to conduct testing in these areas. Remember, a penetration tester must always be one step ahead of a black hat hacker. There can only be one victor in this game, and it should be the company you’re working for. Also published . here

Discovery

2022 - HackerNoon Contributor of the Year - Security

Visit Testhouse

Nominated for 2022 - HackerNoon Contributor of the Year - Security

Ethical Hacking for Beginners: Penetration Testing 101

“If an attacker was able to infiltrate a popular library like log4j, they would very quickly be running with privilege inside most data centers in the world.” — Jeff Williams, Contrast Security (2018) Why Today's Cybersecurity Threats Are More Threatening and How They May Differ From the Hurdles We Met in the Past Over the past two years, the rise of ransomware that goes It's the Tip of The Iceberg. The front-page headlines and revelations of harmful software supply chain attacks have raised cybersecurity to the top of many governments' and organizations' agendas. Meanwhile, even the general public has awakened to the new array of cyber-threats posed by nation-state actors and criminal organizations. By the time I was writing this article, Log4Shell had happened. So that becomes the best example of what I will share — why cyber-threats nowadays are more threatening. I need to tell you the nature of cybersecurity threats is different from the challenges we faced in the Past — from technological complexity to the growing interdependence. Attackers, therefore, seized opportunities faster, much faster than our mitigation. But first, let's talk about what is Log4Shell. Log4j 0-day RCE Vulnerability aka "Log4Shell" (CVE-2021–44228 & CVE-2021–45046) Companies worldwide are racing to limit the damage from discovered in years. A flaw in a program called Log4j, , forced nearly every company to investigate their software to determine if they were vulnerable. one of the most significant open-source software security vulnerabilities used in countless numbers of Java applications built over the last two decades A zero-day vulnerability ( ), publicly released on 9th December 2021 and known as Log4j or Log4Shell, is vigorously being targeted in the wild. As a result, CVE-2021–44228 CVE-2021–44228 has been assigned the highest "critical" severity rating with a risk score of 10/10. As I wrote the article, a second vulnerability was uncovered, logged as CVE-2021–45046. According to MITRE, the description of the new vulnerability, , says the fix to address in Apache Log4j 2.15.0 was "incomplete in certain non-default configurations." CVE 2021–45046 CVE-2021–44228 Updated Log4j CVEs Summary (CVSS score: 10.0) — A remote code execution vulnerability affecting Log4j versions from 2.0-beta9 to 2.14.1 (Fixed in version 2.15.0) CVE-2021–44228 (CVSS score: 9.0) — An information leak and remote code execution vulnerability affecting Log4j versions from 2.0-beta9 to 2.15.0, excluding 2.12.2 (Fixed in version 2.16.0) CVE-2021–45046 (CVSS score: 7.5) — A denial-of-service vulnerability affecting Log4j versions from 2.0-beta9 to 2.16.0 (Fixed in version 2.17.0) CVE-2021–45105 (CVSS score: 8.1) — An untrusted deserialization flaw affecting Log4j version 1.2 (No fix available; Upgrade to version 2.17.0) CVE-2021–4104 Why is this Vulnerability So Destructive? Most security holes require a certain degree of expertise to exploit. However, the effort required with this one, called "Log4Shell," is slight. Most software (and indeed all commercial software) maintains a log of all activity while the software is running, allowing developers and operators to review and figure out what went wrong when users are having trouble. That activity includes keystrokes from user input into web forms on a site. The Log4Shell bug allows an attacker to enter a carefully crafted string of characters in a web form that, once logged, controls the computer on which it is running to download malicious code. Depending on what data the application decides to log, this malicious string could be found in various areas, from an HTTP User-Agent against a web server to a chat room message in . Minecraft At that point, that computer was "hijacked." Malware designed to exploit the vulnerability . was starting to spread Sunday night Adversaries then further exploit affected systems, such as installing crypto-mining software, ransomware, and much more. The result of the exploitation can allow for complete control of the infected system. Additionally, this , thus increasing the overall severity, scale, and impact potential, hence the unusually high CVSS score. vulnerability is exploitable with or without authentication So far, according to and , attackers have exploited the flaw to: MITRE ZDNet Install crypto-miners on vulnerable systems; Steal system credentials (Credential theft); Deploy ransomware; Hide deeper within compromised networks (Persistance), and; Steal data. Recommendations At this time, the vulnerable versions of Log4j range from version 2.0 to 2.14.1. Additionally, there remain potential vulnerabilities in the deprecated 1. x versions. The reasonable solution is implementing the currently available patched version of Log4j that resolves this vulnerability, publicly known as . Log4j version 2.16.0 Also, cybersecurity solutions like , are trying to mitigate the problem by providing “virtual patches.” Endpoint Detection and Response (EDR) Web Application Firewall (WAF), and Intrusion Detection System (IPS) UPDATED — 20th Dec 2021 (CVE-2021–45105) Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j and . 2.17.0 2.12.3 Nature of Cybercrime When we looked at the cyber-criminals 20 years ago, they had to be very technical — the "real hackers" we saw in the movies wearing hoods and typing fast on the keyboards. Now the barriers to cybercrime entry are low, and . cybercrime is becoming a service Today's most lucrative cybercrime activity is ransomware, which fosters more dangerous threats and the need for more innovative cyber defenses. For example, (RaaS) gives non-technical criminals the to tap into cyber-extortion. However, given all the rapid changes in the threat landscape, the real challenge is understanding the risk. Ransomware-as-a-Service Another way hackers can profit from more sophisticated cybercrime is by providing Those in this field provide the services and infrastructure — including — which other bad actors leverage to do their dirty work. cybercrime "infrastructure-as-a-service." bulletproof hosting and botnet rentals Bulletproof hosting helps cybercriminals put web pages and servers on the Internet without worrying about takedowns by law enforcement. And cybercriminals can pay for botnet rentals that give them temporary access to a network of infected computers they can use for spam distribution or DDoS attacks, and much more. Complexity & Interdependency To be clear, it is not the first time we faced such a holiday-breaker. The last time we faced such a crisis was when the Shouldn't we learn from our mistakes? Heartbleed vulnerability was discovered in OpenSSL in 2014. Almost all the major enterprise tech companies and other key open-source projects. However, agreed to contribute to a fund that would maintain the security of OpenSSL there are two further compounding problems: Java has been one of the most famous enterprise software programming languages for a long time, and used in Java applications. Scale: Log4j is one of the most popular logging tools Log4j has also been used in various open-source software programs that often How software is built: serve as a foundation for other software. Open-source software has led to an explosion in enterprise software innovation over the last two decades. Still, there's an open secret in this world: Scores of famous and prominent open-source projects are maintained by a handful of people who aren't necessarily paid to do that work. The problem, however, is not a lack of money: There are so many open-source projects that have been used to build some of the most critical software in the world that is simply determining the ones that need support is an enormous challenge. More Attack Surface — IoT (Example) Even if some major tech players such as Microsoft have improved their security postures, . One particular contributor to this cause is Internet-of-Things (IoT) devices. today's attack surface is far more extensive than it was before One of the things that hackers can do to take devices offline is send malicious packets that crash the machine. Another thing is when they can execute code on the device, which opens up the to other kinds of targets. possibility of persistence on the network or moving laterally Unlike mainframe servers, desktop computers, laptops, and mobile devices, IoT are difficult to update from a security perspective. It is not a simple "to do or not to do" ideology, but limitations lead to challenges of securing IoT. Many IoT devices are designed to be small and have just enough power for a specific function. Thus, there is n As a result, patching is impossible for most IoT operating in the wild. ot enough memory, storage, or CPU capabilities to accommodate security updates. In August, Realtek has warned of four vulnerabilities in . According to the advisory, , including possibly any WiFi-connected devices with that chip design. three SDKs in its WiFi modules almost a million vulnerable devices may be in use VoIP devices, wireless routers, repeaters, IP cameras, smart lighting controls, As in the example of Realtek, the fix involves updating the firmware of the related products in which introduced multiple difficulties: Finding if the IoT devices in use contain the chipset Seeing if the device is under a vulnerable version Updating the firmware Updating firmware involves typically direct access to the devices. That is another challenge in most cases in which those IoT devices may locate in hard-to-reach locations (ceiling, inside the oil tank, inside another machine…). It's perhaps worth adding that , which means hackers can do the same. In other words, that's the scary monster under the bed. everyone can find affected hardware using the Shodan vulnerability search engine Back into BlackHat 2016, Log4Shell was Found. Lastly, there's also the reminder that we should pay more attention to security research. For example, in Black Hat USA 2016, Alvaro Muñoz and Oleksandr Mirosh . researched issues with JNDI Although not naming Log4j specifically, it is the flaw in the underlying interface that Log4j uses. Knowing that Log4Shell is an "I told you so" is, of course, little comfort now to all security professionals who are working at 110% looking to address the problem. However, knowing that it was found in 2016 highlights the importance of giving security teams access to relevant information from the research and the resources — time, money, and more — required to apply these lessons to an organization's own infrastructure and practices. Recommendation — Again, Zero Trust & Defence-in-Depth Proven security principles, such as , also have a substantial role to play. Many security teams understand these concepts well and wish to apply them to their organizations' software and solution deployments. defense-in-depth and Zero Trust Framework However, they are often met with resistance from other stakeholders or lack the resources to deploy them. As I mentioned previously, we are still on the journey of getting there. Hopefully, the increased adoption of automation— such as , mainly when used in modern pipelines built around CI/CD — makes it possible for security teams to cooperate with developers to build more secure solutions from the beginning and across multiple systems. infrastructure as code The Zero Trust principle also plays a vital role at the host, application, and network levels. For example, what actual privileges and capabilities do the process leveraging Log4j need at the host level. Increasingly, can act as a powerful combination to mitigate the impact of an exploited system. behavior monitoring (EDR, NDR, and XDR) alongside runtime protection Notably, at the network level. With Log4Shell being a two-stage attack — where the payload has to be downloaded from an attacker-controlled system — the ability to isolate the infected system is advantageous. Zero Trust access exemplifies itself via micro-segmentation Final Words — Time Bombs Inside Software Those early days when worms and viruses were poised to cripple significant portions of the web, we didn't do anything as an industry: We didn't implement better technologies, reduce our attack surface, or work on memory corruption issues in the codebase. No matter Log4j or Realtek Vulnerability — It's the Tip of The Iceberg. Much work is left to understand the real dangers behind the foundations of IT/OT/IoT connectivity. However, the more parties we can get involved in finding vulnerabilities, fixing them, and providing higher-level solutions, the faster we can transition to a more secure world. Please visit the link below for the most updated guidance on Log4j vulnerability mitigation: https://www.cisa.gov/uscert/apache-log4j-vulnerability-guidance Also published behind a paywall here .

Chain

Alongside

Apache

Microsoft

Interested in Infosec & Biohacking. Security Architect by profession. Love reading and running.

2021 - HackerNoon Contributor of the Year - CULTURE

2022 - HackerNoon Contributor of the Year - Beginners Guide

2022 - HackerNoon Contributor of the Year - Containers

2022 - HackerNoon Contributor of the Year - Cybersecurity

2022 - HackerNoon Contributor of the Year - Data Privacy

2022 - HackerNoon Contributor of the Year - Privacy

Visit my Blog on Medium!

Support Me on Coil

2021 - HackerNoon Contributor of the Year - PERSONAL-DATA

Nominated for 2022 - HackerNoon Contributor of the Year - Cybersecurity

Nominated for 2022 - HackerNoon Contributor of the Year - Privacy

Nominated for 2022 - HackerNoon Contributor of the Year - Beginners Guide

Nominated for 2022 - HackerNoon Contributor of the Year - Containers

Nominated for 2022 - HackerNoon Contributor of the Year - Data Privacy

Time Bombs Inside Software: 0-Day Log4Shell is Just the Tip of The Iceberg

We are embarking on a bold mission for Cosmos to become the leading blockchain ecosystem for sustainable and regenerative digital finance. The Mission “Cosmos will become the leading sustainable and regenerative digital finance ecosystem” The future of humanity is being decided by the actions we are taking today and by our impacts on the ecological state of the planet. The believes that open-source, cryptographic, consensus-driven economic networks hold the key to an anti-fragile global economic system and to creating equal opportunities for all. Interchain Foundation Cosmos is arguably the best-positioned blockchain ecosystem to build the trusted technologies, sovereign networks and financial innovations which are needed to create a prosperous and sustainable future for humanity. We must now consciously and intentionally use the Internet of Blockchains to achieve this ultimate purpose. The and have been pioneering this path for Cosmos to become an ecosystem which is consciously purposed towards sustainability and ecological regeneraton. Now it is time for all Cosmos stakeholders to join forces in leading and growing the gravitas of this mission, by creating meaningful exchanges with other ecosystems, and by building bridges between networks of people, as well as blockchains. ixo Internet of Impact Regen Network To achieve this bold Interchain Sustainability mission, the Interchain Foundation has signed an MoU with to implement a multi-year program of R&D, advocacy and strategic collaborations, together with partners , , , and . We are now extending an open invitation to all Cosmos stakeholders and leaders from across the interchain universe, to align with this mission and join as collaborators in this program. ixo — The Internet of Impact Informal Systems Regen Network BlockScience , Grassroots Economics The Commons Stack The Call to Action Digital disruption provides the historic opportunity for us to fundamentally reshape the purpose of finance in ways that will have transformative impacts on people and the planet. We can empower ordinary people as consumers, savers, lenders, borrowers, investors, and taxpayers, to be at the centre of this economic regeneration. Digitalization can create citizen-centric financial systems that support people’s real priorities, which are collectively represented by the to create a better world by 2030, by ending all forms of poverty, fighting inequalities and urgently responding to the climate crisis. Global Goals In August 2020, the published its report , which concludes that: UN Digital Financing Taskforce People’s Money : Harnessing digitalisation to finance a sustainable future “Historic opportunity, combined with unprecedented crisis, provides a unique moment and imperative to act in harnessing digitalization to accelerate financing of the Sustainable Development Goals ( SDGs ). Failure to act would be a wasted opportunity and risks finance diverging from the needs of citizens for inclusive sustainable development”. defines the moral imperative for building citizen-centric financial systems and demonstrates a broad political mandate for this change. It also makes and identifies catalytic opportunities to immediately start making progress. People’s Money specific calls to action Most relevant to the Interchain Foundation is the action agenda on . The principles provide a lens through which we can better understand the real-world user requirements for Interchain standards and Cosmos technologies to be accessible, inclusive, useful and sustainable for all people, in all contexts. building sustainable digital financing ecosystems People’s Money Cosmos as a Sustainable Digital Finance Ecosystem We have the opportunity to align all Cosmos projects and stakeholders with the Interchain Sustainability mission, to collectively build and grow Cosmos to become the leading sustainable and regenerative digital finance ecosystem. Every team working in this ecosystem is already doing something which can be oriented towards this mission. We have the potential to amplify and connect our work and core capabilities, in ways that will accelerate the positive impacts of our ecosystem, by making the following explicit commitments: through which significant flows of people’s money can be mobilised towards sustainability and ecological regeneration, in ways that trigger broader, systemic changes: Incentivising people to use their domestic savings for sustainable and regenerative economic activities; Enhancing the accountability of public financing; Making sustainability and ecological regeneration count in global financial markets; Financing small and medium enterprises which create meaningful employment and produce sustainable, regenerative goods and services; and Enabling consumer spending which promotes sustainability and ecological regeneration. We will research and develop catalytic technology protocols and systems which enables: Community currencies and local exchange trading systems; Financing, tokenisation and decentralised exchange of verified outcome states; Zero-emission blockchain network infrastructure; Self-sovereign digital identity; Privacy-enhancing data markets; Effective governance systems; and safe scaling of crypto-economic systems. We will build the technology foundations of a sustainable digital finance ecosystem to become more inclusive and participatory in the ways that proposals and decisions relating to sustainability and ecological regeneration are made. We will also ensure that our initiatives are informed by the regulations and standards governing digital financing and will advocate for public policies which enable blockchain technologies and tokenisation to be used for sustainability and ecological regeneration purposes. We will strengthen the ecosystem governance and advocacy ….liftoff! We recently held a truly for the Community Currencies workstream of the program. inspiring inaugural call I’m so excited to finally see a group like this coming together and to be able to put this blockchain tech to its real ultimate intended use case, which I think is local currencies –Ethan Buchman (Co-founder, Cosmos) The Program We will be launching with a process of consensus-building, to articulate a bold shared vision for how the Interchain Foundation and Cosmos ecosystem will contribute towards a sustainable future for humanity. We invite all stakeholders to participate in the consultations and conversations which will inform this vision, to identify how we can collectively build on what is already being done, create new opportunities, and hyperdrive to imagine where we want to be by the watershed year 2030. The program team will be reaching out to Cosmos projects and strategic partners, over the coming weeks. We are looking for flagship projects which can demonstrate how Cosmos technologies can be used in real-world sustainable digital finance applications. An open, decentralised governance mechanism will be put in place for soliciting community proposals (RFC’s) and to build consensus on Sustainability Decision Records (like the ). Through this, we intend building the frameworks, protocols, and engineering requirements for a Sustainable and Regenerative Digital Finance Stack. Cosmos SDK ADR process Development of this technology stack will progress the R&D work which is already underway to develop protocols and open-source software implementations for non-fungible impact tokens, digital identity, governance, sustainable and regenerative DeFi mechanisms, zero-emission validator infrastructure, data verification protocols, and regulatory compliance. Previously published here .

Cosmos

Visit us

What The Interchain Sustainability Mission is About

Earlier this year, a surprisingly good feta pasta dish went viral on TikTok. It wasn’t the first viral recipe on TikTok, and it certainly wasn’t the last. Now TikTok is going to do something that no other company like it has done before: start a restaurant. Well, a virtual restaurant. Just like MrBeast Burger, it will be delivery-only, with an assortment of restaurant kitchens doing the actual cooking. The menu will feature TikTok dishes like feta pasta, pasta chips, smash burgers, and corn ribs, with a menu that rotates every quarter. It’s a marketing thing TikTok Kitchen is more about promoting the platform than starting a restaurant company. And the food will be very different from normal restaurants, featuring the trendiest dishes instead of long-time favorites like burgers and fries. The restaurant will begin serving in 2022 with 300 locations, with over 1,000 locations by the end of the year.  It’s unclear how long this campaign will last; it’ll probably depend on how well it does and how much profit it makes. This may or may not become a permanent restaurant. How does it work? TikTok will be running this as a “virtual restaurant” in partnership with Grubhub and Virtual Dining Concepts. Virtual Dining Concepts uses the concept of “ghost kitchens” or “cloud kitchens.” The ghost kitchens prepare food under different brand names in a single kitchen and distribute it nearby via Grubhub. It’s a sort of “Uber for restaurants,” where restaurants that are struggling financially or want to maximize profits can sign up to start preparing food for other brands, such as MrBeast Burger, in the same kitchen. Any restaurant can fill out a if they want to start serving TikTok food. form Virtual Dining Concepts has partnered with many restaurants and has worked with Guy Fieri, Steve Harvey, Mariah Carey, Tyga, MrBeast, NASCAR, and others. On the one hand, they help small businesses by giving them an alternative income source. On the other hand, they promote monopolies because small restaurants become reliant on a big company to give them business. Small Businesses don’t get all the profits from their sales, because a significant portion goes to Virtual Dining Concepts, TikTok, and Grubhub. Stealing from creators? Is it ethical for TikTok to profit off other people’s work on their platform? TikTok says that they will be giving users credit for their creations and even giving them a cut of the sales. But many questions still remain unanswered. How much will users be paid? How will TikTok determine the original creator of the recipe? For instance, the feta pasta was originally created and promoted by Jenni Häyrinen before being posted to TikTok. And what happens if the original creator doesn’t want their dish being used in TikTok Kitchen? I haven’t read the terms and conditions, but it’s likely that users give TikTok the legal rights to distribute and profit off of their content. While there are some ethical questions, I think this new restaurant is a really great idea. Because they are such a big company, and because this is such an unusual concept, they automatically get publicity - like this article! I think a lot of people will be interested and will check it out, but it will only be successful long-term if it can actually provide value to people. It’s easy to make a virtual restaurant, but it’s harder to make one that feels real; one that people want to keep coming back to. Check out the related and reports, and follow my new , where I’ll post more great stories about tech and programming. TechCrunch Bloomberg Twitter account

Techcrunch

Uber

2022 - HackerNoon Contributor of the Year - Business

Follow Me on Twitter!

Nominated for 2022 - HackerNoon Contributor of the Year - Business

What is TikTok Kitchen and How Does it Work?

The three key positions in a software development team are developer, tester, and operations. Required tasks among these positions are continuously reinvented. To speed up the development process, development and operations were integrated, which is now referred to as DevOps. Unfortunately, a critical layer between Dev and Ops was overlooked: the fixed cycle of testing. To ensure swift turnaround, improve overall efficiency, and maintain the continuous status for testing in the DevOps cycle, a new methodology has evolved: . DevTestOps What is DevTestOps? In essence, is a combination of and . Testing early, regularly, and across the software delivery pipeline are all methods that are used during the software testing process. DevTestOps DevOps continuous testing According to DevTestOps, a should be included in the continuous testing architecture. This practice emphasizes the importance of providing continuous testing feedback to developers throughout the stages of product development, reducing business risk and the possibility of discovering defects later on. Using DevTestOps across the stages of product development helps to mitigate business risk and decrease the chance of faults appearing in later stages. CI/CD pipeline DevTestOps – A New Manifesto for Agile DevTestOps technology has officially ushered in a new era of development, upending the practice of carrying out testing only after code is complete. Continuous testing has revolutionized the market since it aids early product feedback and allows for early problem detection, which ultimately helps to reduce the costs associated with fixing issues after the fact. In the typical (SDLC), testing is done at the end of the development cycle when the entire product is complete. There is a time delay when testing and fixing errors. Exposing new vulnerabilities is much harder, more time-consuming, and more costly when the already incorporated new code is factored in. software development life cycle However, over the last year, many firms have begun to “shift left,” testing software development much earlier in the process. Professionals in testing and QA emphasize that testing should be included in each debate and discussion, from developing a common understanding of new features, to the planning of the delivery pipeline, to monitoring and monitoring the production use. Conducting the testing process as early as possible in agile teams is crucial to move into the fast lane, and to do so requires DevTestOps. From DevTestOops to DevTestOps | Accelerating Your Agility Spotify provides a real-life example that showcases what it’s like to implement an effective DevTestOps approach to scaling an agile team. With an estimated 286 billion users, Spotify is the world’s largest and most popular audio streaming service. A contributing factor to Spotify’s success is its unique approach to increasing team agility, or more specifically, its DevTestOps approach. is well-established and people-driven, emphasizes the importance of the internal network, communications, and most importantly, quality responsibility across all teams – from developers to testers, and operations. With testing present in all stages of the DevTestOps cycle as a must-do process in all departments, Spotify team members are equally accountable for the end-to-end product. Spotify’s model In Spotify’s model, developers code new product features, such as adding playlist personalization or song shuffle. Integrating CI tools into the workflow helps to easily test every new code iteration and reduces the opportunity of adding errors. As a result, if the test fails, developers can directly change the artifacts on the build before they go into deployment. This practice boosts the confidence of developers by reducing the odds of rewriting the entire test, as the defects are fixed ahead of time. Moreover, QAs/testers perform testing and design test scenarios to detect any errors that need to be addressed, such as a non-clickable button on the website or if the music abruptly stops playing. With major code bugs fixed in the earlier stage, QAs can now focus on other parts of the code that are naturally isolated and have their own internal complexity. Additionally, with continuous testing, QAs can monitor and handle a larger volume of data, thanks to automated log parsing. Subsequently, Continuous Integration (CI) build log files are parsed automatically to provide fast and accurate feedback, from application requests to error messages. Think of (CT) as a good habit in your daily routine. Similar to how drinking enough water daily makes you healthier, continuous testing makes your workflow more agile as it sets the routine for bug detection, thus triggering faster product development and informing up-to-date data to both Devs and Ops. Adding continuous testing in your DevOps cycle (DevTestOps) ensures that the appropriate test infrastructure, platforms, and frameworks are available and configured before testing begins. Some of the benefits are: continuous testing Defects are identified early, thus be easily rectified and delivered Automatically shortens the regression cycle from weeks to hours Developers and testers work together more regularly to enhance the quality of the product Automated construction and deployment prevents human error and dependence Nevertheless, adopting DevTestOps to the fullest is not an easy task. Developers need to adjust to a new method of working, in which code testing is also their responsibility. QAs/testers are more involved and provide their knowledge, which helps teams create appropriate tests and makes the process more efficient. The operations team must now ensure that there are no mismatches between development and staging environments. To kick-start DevTestOps, everyone on the team must be on the same page and understand that testing occurs throughout the entire workflow, and why you should with Katalon! invest in DevOps Orchestration Next Step | How Katalon Can Help To fast-track your DevTestOps approach, and – the bundle adopted by enterprise ecosystems – is the ultimate solution for you to consider. Here’s a sneak peek of how this bundle can aid your teams: Katalon Studio Katalon TestOps over 100,000 Studio: Effortless application via the most compatible Selenium alternative, low-code approach Streamline automation testing and orchestration through keyword-driven testing, self-healing mechanisms TestOps: Shift-left testing through a centralized, collaborative dashboard for all teams to participate in the early testing cycle to speed up debugging and trigger bug alerts Integrations to mainstream testing environments and platforms you love (Jenkins, Azure DevOps, CircleCI) While there may be a great solution for one company, it doesn’t mean it will be a good fit for your organization. With using Katalon to personalize their test strategies, we’re here to help you start your DevTestOps journey with confidence, assisted by Studio and TestOps. over 100,000 companies and teams

Routine

Learn more

How to Make DevTestOps Orchestration for Agile Teams Work

HackerNoon Tech Stories Archive December 27th, 2021

How to Upgrade a Laravel App to the Latest Version

@epmnzava
epmnzava

6 Places to Start a Career in Data Science in 2022

@karthikbhandary2
Karthik Bhandary

Understanding the Command Query Responsibility Segregation Pattern

@stratdes
Alex Hernández

All the Coolest Trends Coming to the Agile Methodology in 2022

@rajneeshkumar
Rajneesh Kumar

A New Communication Tool Starts the Next Chapter for The Global Telecom

@yousai
Petr Malyukov

Get Referrals for your SaaS Product Easily by Following this Guide

@vincentotieno
Vincent Otieno

How to Improve Online Shopping (Slogging Insights)

@saragpinto
Sara Pinto

How to Translate Feedback to Actionable Plan (with Examples)

@nikolao
Nikola O.

Ethical Hacking for Beginners: Penetration Testing 101

@testhouse
Testhouse Ltd

Time Bombs Inside Software: 0-Day Log4Shell is Just the Tip of The Iceberg

@z3nch4n
Zen Chan

What The Interchain Sustainability Mission is About

@cosmosnetwork
Cosmos - Internet of Blockchains

What is TikTok Kitchen and How Does it Work?

@ian101
Ian

How to Make DevTestOps Orchestration for Agile Teams Work

@katalon
Katalon

HackerNoon Tech Stories Archive December 27th, 2021

@epmnzavaepmnzava

@karthikbhandary2Karthik Bhandary

@stratdesAlex Hernández

@rajneeshkumarRajneesh Kumar

@yousaiPetr Malyukov

@vincentotienoVincent Otieno

@saragpintoSara Pinto

@nikolaoNikola O.

@testhouseTesthouse Ltd

@z3nch4nZen Chan

@cosmosnetworkCosmos - Internet of Blockchains

@ian101Ian

@katalonKatalon