Digital Trons

digitaltrons

Jira – the most popular Collaboration Software Tool, according to the Sentiment Analysis report In April, we published , where we are analyzing the sentiment towards Jira, Asana, Azure DevOps, ServiceNow, Zendesk, Monday, and Clickup. For our research we used Brand24, we gathered data for a whole month to find out which tool has the best positive sentiment. Collaboration Software Tools 2022 Ranking In this blog post, we will focus mainly on Atlassian’s Jira, which is the most popular collaboration software tool of all the ones we researched. Although it is not the one that had the most positive sentiment, it clearly generated the biggest volume of mentions. Jira is the most popular in… US. If we’ll look and the number of mentions per selected country we can see that the US was a country where there were the most mentions regarding Jira. When compared to other strong IT markets like UK, Germany, or Australia the difference is quite impressive. And here is the more detailed preview US: UK: Germany: Australia: The most active Twitter profiles writing about Jira In February 2022, when we were doing our research  the most active profiles on Twitter were: The first one is the official profile of Atlassians’, the second one is the profile of Deiser – Atlassian Platinum Partner from Spain, and we also have Ravi Sagar – Jira Consultant, author of Jira-related book and video training. Ravi was our guest on the first episode of IntegratiON video series on YouTube. Jira related hashtags You may be wondering, what are the most popular hashtags used with the hashtag #jira. Here they are 🙂 Obviously #atlassian, #confluence are high. The third most popular keyword is #agile. #remotework, #digitaltransformation, and #scrum are also mentioned quite often. How does the positive Jira-related mention look like? OK, you might be wondering, what are those mentions we talked about? The mention of positive sentiment means, that overall the posted text had a positive sentiment. It doesn’t mean that Jira is good, or bad – liked or not. What matters is the full context. Here are the examples: Positive mentions And here are the examples of mentions qualified as “negative” Summary I hoped you liked our Jira-related findings. If you’re thinking about integrating Jira with other tools such as Azure DevOps, ServiceNow, Asana, Freshdesk, or others – let us know. We’d be happy to help 😉 This post was originally on getint.io website. published Getint.io is a platform to integrate Jira with Azure DevOps, ServiceNow, and more.

Sentiment Analysis Report Deems Jira the Most Popular Collaboration Software Tool 

[Image Source: TechCrunch] An essential part of any future transition requires both left-brained (analytical) and right-brained (creative) talent and culture. Value creation process from Automation and AI is no different. Both nebulous and complicated by nature, AI and the movements that it’s fueling all require a highly specialized skillset. For it to work, people must connect the dots between the AI and how it can be effectively applied in the private or public sector. That’s not always easy to do — and the very notion of it may be scary to some who think that the day when machines “take over” may be far off. I belive, Automation and AI will allow us to do more meaningful and ‘Human’ work. And to do more ‘Human’ work, we have to double down on our humanity. We must learn: To be mindful, emphatic, and resilient To inspire, influence, and lead To champion creativity, diversity, and cross-border collaboration Value creartion begins with focusing on humanity. This was the topic of my recent keynote at the in Milano, Italy — in collaboration with my partners at : 2018 EU HR Director Summit Altea Federation Related Article: Future Of Work With AI, Machine Learning, and Deep Learning . Copyright © 2018 by Faisal Hoque. All rights reserved. #FutureOfWork #DigitalTransformation #Leadership #Management #HumanCapital #Empathy . . . . . . Founder of and other companies. Shadoka enables aspirations to lead, innovate, and transform. Working with select partners, Shadoka’s accelerators and solutions bring together the management frameworks, digital platforms, and thought leadership to enable innovation, transformation, entrepreneurship, growth and social impact. SHADOKA Author of “ ” and “ ”. Follow me on Twitter . Use the leadership app and resiliancy app for free. Everything Connects — How to Transform and Lead in the Age of Creativity, Innovation and Sustainability Survive to Thrive: 27 Practices of Resilient Entrepreneurs, Innovators, and Leaders Faisal Hoque Everything Connects Suvvive to Thrive

The Promise and The Challenge of Automation and AI In The Workplace

Minimal Knowledge PT-AE Attacks on Black-Box Speaker Recognition Models

In the digital age, where artificial intelligence (AI) shapes many aspects of our lives, the emergence of advanced tools like ChatGPT by OpenAI marks a transformative era. However, beneath the surface of this innovative technology lies a disturbing trend: the intentional misuse of ChatGPT. This article explores the dark facets of how individuals and groups are exploiting this language model, highlighting the urgent need for ethical guidelines and robust security measures. Scams and Deceptive Content: A New Playground for Fraudsters The versatility of ChatGPT, while impressive, has opened doors to nefarious activities. As detailed in , ChatGPT's ability to generate convincing and contextually relevant content makes it a powerful tool in the hands of scammers. From crafting believable phishing emails to creating fake news, the misuse extends to various forms of deception and fraud. Digital Trends Unleashing Chaos: The Propaganda Machine The societal impact of ChatGPT's misuse is far-reaching, particularly in the realm of misinformation and propaganda. According to , the language model's proficiency in mimicking human-like text enables the mass production of misleading information, fueling propaganda, and potentially inciting unrest. Europol Workplace Ethics: Crossing the Line The professional environment is not immune to ChatGPT's exploitation. An insightful piece from discusses the ethical dilemmas posed by ChatGPT in the workplace. The model's use for generating work-related content, while efficient, raises questions about authenticity, intellectual honesty, and the devaluation of human effort. SHRM Security Threats: A New Frontier for Cybercrime The security implications of ChatGPT misuse are alarming. highlights how ChatGPT can be weaponized to bypass security protocols, aiding in sophisticated cyber-attacks. This capability not only threatens individual data security but also poses significant risks at the institutional level. IANS Research In conclusion The misuse of ChatGPT is a stark reminder of the ethical and security challenges that come with advanced AI. While ChatGPT serves as a revolutionary tool for legitimate purposes, its exploitation underscores the critical need for stringent regulations, user awareness, and the development of AI for positive, constructive use. As we tread into this new era of technology, prioritizing the ethical use of AI like ChatGPT becomes not just advisable, but imperative. References: https://www.digitaltrends.com/computing/bad-things-chatgpt-has-been-used-for/ https://www.europol.europa.eu/media-press/newsroom/news/criminal-use-of-chatgpt-cautionary-tale-about-large-language-models https://www.shrm.org/resourcesandtools/hr-topics/global-hr/pages/europe-chatgpt-workplace-use-misuse.aspx https://www.iansresearch.com/resources/all-blogs/post/security-blog/2023/05/11/chatgpt-uncovering-misuse-scenarios-and-ai-security-challenges

The Dark Reality: People Misusing ChatGPT

Companies around the world are embracing the miracle of AI and the many forms in which it is now manifesting. When OpenAI announced its introduction of ChatGPT, it took the world by storm. Now, it has already upgraded to ChatGPT-4 with its new and improved capabilities, and it is exciting to think what the next version of the AI bot will be able to achieve. Many experts believe it will achieve artificial generative intelligence or AGI. What Is AGI and Why Are People Scared? The idea behind AGI is that machines will achieve a level of understanding and expression on par with humans. AGI output is expected to be indistinguishable from human output. Some view this as exciting; others view this as dangerous. Either way you view it, the fact that we are even so close to such an achievement, where computers will now have eyes and ears so to speak and gain the ability to control a certain aspect of the internet is by far the greatest groundbreaking technology since the internet itself was invented. However, this technological advancement is setting off nerves and creating jitters. Privacy regulators in Europe are starting to investigate OpenAI’s practices. Sam Altman, the CEO of OpenAI before members of a Senate subcommittee and largely agreed with them on the need to regulate the powerful AI technology being created inside his company and others like Google and Microsoft. testified However, speaking at a recent MIT event before his testimony to the Senate, Altman said there is no ChatGPT-5 to worry about...yet. But people are indeed worried. AI is already being forecast to replace five million jobs, and concerns abound that AI in general, especially AGI, will completely eradicate the need for human workers in a multitude of industries. Users today would like to see some significant changes that are not necessarily related to AGI. For instance, users want to eliminate the cap of 25 messages every 3 hours and want to see an improvement in the handling of math queries. There are also memory issues that need to be fixed. As in DigitalTrends points out, “the development of GPT-5 is already underway, but there’s already been a move to halt its progress. A petition signed by over a thousand public figures and , requesting a pause in development on anything beyond GPT-4. Significant people involved in the petition include Elon Musk, Steve Wozniak, Andrew Yang, and many more.” this article tech leaders has been published Even Altman agreed that there is substance to the worries and concerns people have about AI and AGI. But it appears the company has already begun planning the publication of ChatGPT-5 later this year perhaps. It is likely that it will have significant improvements and will be able to achieve far more than its predecessors. If the technology is truly as advanced as some believe it is, it will truly be able to change the landscape of the internet and the ability of millions of people to produce remarkable work with it. The technology will directly impact the creative world, whether it’s artists, designers, or architects. It will completely change the music world, the legal world, and even e-commerce. There really is almost no limit to what AGI will help humans achieve and what it may be capable of achieving on its own. Worries aside, it is exciting to see what this technology will bring and what new opportunities it will introduce to our universe. Without a doubt, change is on the way, and AGI will transform our world - hopefully for the better.

How ChatGPT-5 Will Change the World

In this post, our community and staff discuss whether Xbox cloud gaming will be successful in the future and whether it will hit the mainstream. We also discuss games that would work best on the cloud. Slogging This Slogging thread by Jack Boreham, Abeer, Sara Pinto and Mónica Freitas occurred in slogging's official #gaming channel, and has been edited for readability. Jack Boreham Nov 18, 2021, 5:59 PM What do we all think about Xbox cloud gaming? Is it a good idea? Do you think it will be successful? For context, see this article: https://www.theverge.com/platform/amp/2021/11/17/22787396/xbox-cloud-gaming-consoles-series-x-s-one Abeer Nov 18, 2021, 8:46 PM If it’s anything like Shadow or Stadia, where you stream games from powerful cloud servers, I can see it becoming normalized in the next 5-10 years. Many gamers like the idea of having their systems and games offline but especially now that online gaming is so prevalent, it’s just a matter of time until people realize they don’t need high power devices to play compute-heavy games. Sara Pinto Nov 19, 2021, 3:48 PM Jack Boreham, I think this might become an actual big thing. Gaming online is already a reality, and if the goal is to be even more interactive, this could be it. Personally, features such as the possibility to stream the game, as it said in the article, that ables the other gamer to have a preview, are incredible and made me quite curious. Mónica Freitas Nov 19, 2021, 5:07 PM Hey Jack Boreham! I'd say the main pros are that you can play on different devices without losing your progress, and you no longer need to install a game. As for the cons, well, you're always at the mercy of your internet service provider. If your internet is bad, good luck playing 😅 Besides, there is the game ownership issue: you can buy a service and get access to a game, but if there are changes in ownership, you may lose it altogether. I found this great article comparing console gaming and cloud gaming for those wanting to know more: https://www.digitaltrends.com/gaming/cloud-gaming-vs-console-gaming/ Jack Boreham Nov 20, 2021, 8:00 AM Abeer, completely true, but do you think the mainstream public will ever catch on to it? For us gaming folk, we know all the details about Xbox cloud gaming, but it could be far too convoluted for normal folks. In short, can it ever replace core console gaming with massive hardware? Jack Boreham Nov 20, 2021, 8:04 AM Sara Pintois right! It offers huge possibilities; PlayStation has been doing the streaming game preview thing for year's now with PlayStation Now. It seems like Xbox is expanding on this by allowing players to jump in on games that they do not own. Sara Pinto, are you a gamer? Would this get you more into gaming? Jack Boreham Nov 20, 2021, 8:11 AM Mónica Freitas, great article! Ownership is very important, especially online nowadays. For me, the Internet issue is the key problem. Without good internet, Cloud gaming won't work. I've tried cloud gaming before, and it works horrendously when you've got bad latency and poor Internet connectivity. Without worldwide quality internet, cloud gaming will never go mainstream. However, 5G technology might offer hope. Mónica Freitas, do you currently own a console or play games? Sara Pinto Nov 22, 2021, 2:22 PM Jack Boreham, I'm not a gamer (yet, haha), but I would give it a shot! I do think it provides a more dynamic experience. Plus, this feature may appeal to a wider range of people, such as me, who might want to try it out for the sake of curiosity. If nothing else, it will probably increase competition and give Playstation a run for their money! Mónica Freitas Nov 22, 2021, 5:18 PM Jack Boreham, I'm a disgrace. The only console I've ever had was PS2. Now I find myself playing more games on my phone, but I've been thinking about giving gamming a fair shot. Not FIFA or League of Legends, though. 😅 If you have any suggestions for newbies, hit me up. Jack Boreham Nov 23, 2021, 12:29 PM Sara Pinto exactly; I think it will open up the market for others to jump in. After all, using cloud tech, you can play all the latest games from your phone! Mónica Freitas, hahaha well, cloud gaming might bridge that gap for you!! As I said, you can play the latest games on your phone now. It depends on what kind of genres you are into? Abeer Nov 24, 2021, 7:54 PM Jack Boreham, I can see a future where it competes with owning consoles with powerful hardware. For non-tech-savvy folks, I can see simple presets working in their favour. Instead of selecting all the specs one by one, maybe they can have an option to choose a console, and predefined specs for that console will be used. Mónica Freitas Nov 25, 2021, 12:19 PM Jack Boreham, I like strategy games, so if you have a few suggestions top of mind, please, do share. Jack Boreham Nov 25, 2021, 4:21 PM Abeer I love that idea. Kinda full customisation of specs. Similar but an extension of PC settings. Personally, I hope they do this! Jack Boreham Nov 25, 2021, 4:23 PM Mónica Freitas, I would suggest the civilisation games . Also, the Xcom games, oh and of course Clash of Clans on mobile. You will love these. https://civilization.com/en-GB/ 💛 1 Jack Boreham Nov 25, 2021, 4:23 PM Mónica Freitas Nov 26, 2021, 3:46 PM Jack Boreham, I've heard of Clash of Clans. How would you describe the experience? Does it take long to learn the ins and out of the game? Jack Boreham Nov 26, 2021, 3:59 PM Mónica Freitas, not really; it doesn't take long at all. It gives you a short tutorial that will set you up for later missions. It's tower defence; besides strategy, any other mobile games? 😄

Will Xbox Cloud Gaming be Successful?

The , often referred to as "golang", has gained a lot of well-deserved traction in the DevOps community. Many of the most popular tools such as , , and are written in Go, but it can also be a great choice for building web applications and APIs. Go programming language Docker Kubernetes Terraform Go provides you with all the speed and performance of a compiled language, but feels like coding in an interpreted language. This comes down to the great tooling that you get out of the box with a compiler, runner, test suite and code formatter provided by default. Add to that the robust and easily comprehensible approach to concurrency, to take maximum advantage of today's multi-core or multi-cpu execution environments, and it's clear why the Go community has grown so rapidly. Go feels like it was created with specific goals in mind, leading to a deceptively simple language design that's straightforward to learn, without compromising on capabilities. In this post, I'm going to show you how easy it is to develop a simple web application in Go, package it as a lightweight Docker image, and deploy it to . I'll also show a fairly new feature of Go: built-in package management. Heroku Go Modules I'm going to use Go's built-in module support for this article. Go 1.0 was released in March 2012. Up until version 1.11 (released in August 2018), developing Go applications involved for each "workspace", analogous to java's , and all of your Go source code and any third-party libraries were stored below the . managing a GOPATH JAVA_HOME GOPATH I always found this a bit off-putting, compared to developing code in languages like Ruby or Javascript where I could have a simpler directory structure isolating each project. In both of those languages, a single file ( for Ruby, for Javascript) lists all the external libraries, and the package manager keeps track of managing and installing dependencies for me. Gemfile package.json I'm not saying you can't manage the environment variable to isolate projects from one another. I particularly find the package manager approach is easier. GOPATH Thankfully, Go now has excellent package management built in, so this is no longer a problem. However, you might find mentioned in many older blog posts and articles, which can be a little confusing. GOPATH Hello, World! Let's get started on our web application. As usual, this is going to be a very simple "Hello, World!" app, because I want to focus on the development and deployment process, and keep this article to a reasonable length. Pre-requisites You'll need: A recent version of golang (I'm using 1.14.9.) Docker A account (The free account works fine for this example.) Heroku The Heroku command-line client git Go mod init To create our new project, we need to create a directory for it, and use the command to initialize it as a Go module. go mod init mkdir helloworld
cd helloworld
go mod init digitalronin/helloworld It's common practice to use your github username to keep your project names globally unique, and avoid name conflicts with any of your project dependencies, but you can use any name you like. You'll see a file in the directory now. This is where Go will track any project dependencies. If you look at the contents of the file, they should look something like this: go.mod digitalronin/helloworld

go module 1.14 Let's start committing our changes: git init
git add *
git commit -m "Initial commit" gin We're going to use for our web application. Gin is a lightweight web framework, similar to for Ruby, for Javascript, or for Python. gin Sinatra express.js Flask Create a file called containing this code: hello.go package main func main() { := gin.Default()

	r.GET( , func(c *gin.Context) {
		c.String( , )
	})

	r.Run( )
} import "github.com/gin-gonic/gin" r "/hello" 200 "Hello, World!" ":3000" Let's break this down a little: r := gin.Default() This creates a router object, , using the built-in defaults that come with gin. r Then, we assign a handler function to be called for any HTTP GET requests to the path , and to return the string "Hello, World!" and a 200 (HTTP OK) status code: /hello r.GET( , func(c *gin.Context) {
		c.String( , )
	}) "/hello" 200 "Hello, World!" Finally, we start our webserver and tell it to listen on port 3000: r.Run( ) ":3000" To run this code, execute: go run hello.go You should see output like this: go: finding package github.com/gin-gonic/gin
go: found github.com/gin-gonic/gin github.com/gin-gonic/gin v1 [GIN-debug] [WARNING] Creating an Engine instance the Logger and Recovery middleware already attached.

[GIN-debug] [WARNING] Running mode. Switch to mode production.
 - using env: GIN_MODE=release
 - using code:  gin.SetMode(gin.ReleaseMode)

[GIN-debug] GET    /hello                    --> main.main.func1 ( handlers)
[GIN-debug] Listening and serving HTTP on : module for in .6 .3 with in "debug" "release" in export 3 3000 Now if you visit in your web browser, you should see the message "Hello, World!" http://localhost:3000/hello Notice that we didn't have to install gin separately, or even edit our file to declare it as a dependency. Go figures that out and makes the necessary changes for us, which is what's happening when we see these lines in the output: go.mod go: finding package github.com/gin-gonic/gin
go: found github.com/gin-gonic/gin github.com/gin-gonic/gin v1 module for in .6 .3 If you look at the file, you'll see it now contains this: go.mod digitalronin/helloworld

go github.com/gin-gonic/gin v1 module 1.14 require .6 .3 // indirect You will also see a file now. This is a text file containing references to the specific versions of all the package dependencies, and their dependencies, along with a cryptographic hash of the contents of that version of the relevant module. go.sum The file serves a similar function to for a Javascript project, or in a Ruby project, and you should always check it into version control along with your source code. go.sum package-lock.json Gemfile.lock Let's do that now: git add *
git commit -m "Add 'Hello world' web server" Serving HTML and JSON I'm not going very far into what you can build with gin, but I do want to demonstrate a little more of its functionality. In particular, sending JSON responses and serving static files. Let's look at JSON responses first. Add the following code to your file, right after the block: hello.go r.GET api := r.Group( )

api.GET( , func(c *gin.Context) {
  c.JSON( , gin.H{ : ,
  })
}) "/api" "/ping" 200 "message" "pong" Here we're creating a "group" of routes behind the path with a single path which will return a JSON response. /api /ping With this code in place, run the server with and then hit the new API endpoint: go run curl http: //localhost:3000/api/ping You should get the response: { : } "message" "pong" Finally, let's make our webserver serve static files. Gin has an additional library for this. Change the import block at the top of the file to this: hello.go ( ) import "github.com/gin-gonic/contrib/static" "github.com/gin-gonic/gin" The most popular code editors have golang support packages you can install which will take care of the declarations for you automatically, updating them for you whenever you use a new module in your code. import Then, add this line inside the function: main r.Use( .Serve( , .LocalFile( , ))) static "/" static "./views" true The full code for our web application now looks like this: hello.go package main ( )

func main() { := gin.Default()

	r.GET( , func(c *gin.Context) {
		c.String( , )
	})

	api := r.Group( )

	api.GET( , func(c *gin.Context) {
		c.JSON( , gin.H{ : ,
		})
	})

	r.Use( .Serve( , .LocalFile( , )))

	r.Run()
} import "github.com/gin-gonic/contrib/static" "github.com/gin-gonic/gin" r "/hello" 200 "Hello, World!" "/api" "/ping" 200 "message" "pong" static "/" static "./views" true The line enables our webserver to serve any static files from the directory, so let's add a few: r.Use(static.Serve... views mkdir -p views/css views/css/stylesheet.css body {
  font-family: Arial;
}

h1 { : red;
} color views/index.html <html> <link rel="stylesheet" href="/css/stylesheet.css" />
  </head> <body>
    <h1>Hello, World!</h1>
  </body> < > head </ > html Now restart the webserver using and visit and you should see the styled message: go run hello.go http://localhost:3000 Dockerize We've written our go web application, now let's package it up as a Docker image. We could create it as a Heroku buildpack, but one of the nice features of Go is that you can distribute your software as a single binary file. This is an area where Go really shines, and using a Docker-based Heroku deployment lets us take advantage of that. Also, this technique isn't limited to Go applications: You can use Docker-based deployment to Heroku for projects in any language. So, it's a good technique to understand. So far, we've been running our code with the command. To compile it into a single, executable binary, we simply run: go run go build This will compile all our Go source code and create a single file. By default, the output file will be named according to the module name, so in our case it will be called . helloworld We can run this: ./helloworld And we can hit the same HTTP endpoints as before, either with or our web browser. curl The static files are not compiled into the binary, so if you put the file in a different directory, it will not find the directory to serve our HTML and CSS content. helloworld views That's all we need to do to create a binary for whatever platform we're developing on (in my case, my Mac laptop). However, to run inside a Docker container (for eventual deployment to Heroku) we need to compile a binary for whatever architecture our Docker container will run on. I'm going to use , so let's build our binary on that OS. Create a with the following content: alpine linux Dockerfile FROM golang: -alpine
RUN mkdir /build
ADD go.mod go.sum hello.go /build/
WORKDIR /build
RUN go build 1.14 .9 In this image, we start with the base image, add our source code, and run to create our binary. golang go build helloworld We can build our Docker image like this: docker build -t helloworld . Don't forget the trailing at the end of that command. It tells Docker we want to use the current directory as the build context. . This creates a Docker image with our binary in it, but it also contains all the Go tools needed to our code, and we don't want any of that in our final image for deployment, because it makes the image unnecessarily large. It can also be a security risk to install unnecessary executables on your Docker images. helloworld compile We can see the size of our Docker image like this: $ docker images helloworld
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
helloworld          latest ec1ca905 minutes ago MB 9657 4 370 For comparison, the image (a lightweight linux distribution, often used as a base for docker images) is much smaller: alpine $ docker images alpine
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
alpine              latest              caf27325b298 months ago MB 20 5.53 On my Mac, the binary is around 14MB, so the golang image is much bigger than it needs to be. helloworld What we want to do is use this Dockerfile to our helloworld binary to run on alpine linux, then copy the compiled binary into an alpine base image, without all the extra golang tools. build We can do this using a "multistage" Docker build. Change the Dockerfile to look like this: FROM golang: -alpine AS builder
RUN mkdir /build
ADD go.mod go.sum hello.go /build/
WORKDIR /build
RUN go build

FROM alpine
RUN adduser -S -D -H -h /app appuser
USER appuser
COPY -- =builder /build/helloworld /app/
COPY views/ views
WORKDIR /app
CMD [ ] 1.14 .9 from /app/ "./helloworld" On the first line, we label our initial Docker image . AS builder Later, we switch to a different base image and then copy the binary from our builder image like this: FROM alpine helloworld COPY -- =builder /build/helloworld /app/ from Build the new Docker image: docker build -t helloworld . Now, it's the size you would expect for a base alpine image plus our helloworld binary: $ docker images helloworld
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
helloworld          latest d6d9cb64c7e seconds ago MB 1 8 20.7 We can run our webserver from the Docker image like this. (If you have another version running using or , you'll need to stop that one first, to free up port 3000.) go run hello.go ./helloworld docker run --rm -p : helloworld 3000 3000 The dockerized webserver should behave just like the and versions that it has its own copies of the static files. So, if you change any of the files in you won't see the changes until you rebuild the Docker image and restart the container. go run hello.go ./helloworld except views/ Deploy to Heroku Now that we have our dockerized web application, let's deploy it to Heroku. Heroku is a PaaS provider that makes it simple to deploy and host an application. You can set up and deploy your application through the Heroku UI, or through the Heroku CLI. For this example, we'll use the Heroku command-line application. Getting PORT from an environment variable We've hard-coded our webserver to run on port 3000, but that won't work on Heroku. Instead, we need to alter it to run on whichever port number is specified in the environment variable, which Heroku will supply automatically. PORT To do this, alter the line near the bottom of our file, and remove the string value so the line becomes: r.Run hello.go ":3000" r.Run() The default behavior of gin is to run on whatever port is in the environment variable (or port 8080 if nothing is specified). This is exactly the behavior Heroku needs. PORT Setting up our Heroku app First, log into Heroku: heroku login Now, create an app: heroku create Tell Heroku we want to build this project using a Dockerfile, rather than a buildpack: heroku stack:set container To do this, we also need to create a file like this: heroku.yml build:
  docker:
    web: Dockerfile

run:
  web: ./helloworld The file is a manifest that defines our app and allows us to specify add-ons and config vars to use during app provisioning. heroku.yml Next, add git and commit these files, then push to heroku to deploy: git push heroku main My git configuration uses as the default branch. If your default branch is called , then run instead. main master git push heroku master You should see Heroku building the image from your Dockerfile, and pushing it to the Heroku Docker registry. Once the command completes, you can view the deployed application in your browser by running: heroku open Conclusion To recap, here's a summary of what we covered today: Creating a golang web application, using go modules and the gin web framework to serve strings, JSON, and static files Using a multistage Dockerfile to create a lightweight Docker image Deploying a Docker-based application to Heroku using and a file heroku stack:set container heroku.yml I've only scratched the surface in this article on how to use Go to build web applications and APIs. I hope this gives you enough to get started on your own golang web applications. Also published at https://dev.to/heroku/deploying-your-first-golang-webapp-11b3

'Hello, World!' in Golang - How to Develop a Simple Web App in Go

This Slack discussion by , , and occurred in 's official #slogging-beta channel, and has been edited for readability. Arthur Limarc Austin Richard-Kubina Slogging How scared you are of deepfakes? Arthur Nov 6, 2020, 3:23 PM It's tricking my brain Arthur Nov 6, 2020, 3:23 PM I am scared in the sense that I know there are a lot of people who will easily be fooled by them. Many people (Americans) already blindly trust what politicians say without checking the facts. Imagine if disinformation had a very credible deepfake video to go with it? I know we will have deepfake-detector technology in the future made by the likes of Twitch and Youtube to flag videos as fake. But until then, I’m worried people can use them for disinformation campaigns. Limarc Nov 6, 2020, 3:38 PM While YouTube will have anti-deepfake algo soon or later, I think their main goal will be to protect their ad revenue. And it will generate a next level of censorship on this platform. But at least it will reduce some problems. Arthur Nov 6, 2020, 3:46 PM @Limarc From the other side. What if I'll made a deepfake video and will share it without uploading on big platforms? like via AirDrop or Protonmail I mean we still can't figure out how to remove spam calls on our phones... Or how to protect our children from "bad websites" Arthur Nov 6, 2020, 3:46 PM agree with on the above, but also wanted to add: what i also worry about is the eventual cat-and-mouse game with deepfakes, like we have with ads/ad blockers and malware/anti-malware austin Nov 6, 2020, 3:46 PM @Limarc those last examples are great examples of the cat and mouse game we're going to see between deepfakes and the prevention tech austin Nov 6, 2020, 3:47 PM @Arthur eventually cryptographic signing could end it, but...that's assuming we have a good PKI in place, and good software that hides the cryptography. no one gives a shit about a signature, they just want that "verified" checkmark austin Nov 6, 2020, 3:48 PM about cryprographic sign. i think we already must have and use those things. But we still have tons of passwords for different websites. Arthur Nov 6, 2020, 3:52 PM @Austin what i'm describing isn't so much to do with passwords. what i'm describing is a special cryptographic signature on a video, by the creator, that verifies that person made that video and it wasn't tampered with. we have things like sha/md5 hashes, but those are geared more for developers (and say nothing about who authored it, whether the website/source was tampered with, etc) austin Nov 6, 2020, 3:54 PM @Arthur can't really just have a "verified" checkmark though either, right? seems like you'd just be kicking the can down the road.  you'd need to trust your own software to run the verification yourself too. richard-kubina Nov 6, 2020, 3:56 PM well that's what i mean by having a reliable PKI in place. if anyone with the knowhow can verify the signature, and you can get a reliable public key from the internet, then any trickery on the software/website/whatever's showing the checkmark would be discovered very quickly. you could even write software as a sort of "canary in the coalmine", an alert if someone's signature underneath the checkmark doesn't match austin Nov 6, 2020, 3:58 PM I get it. Especially if it will be incorporated into major tools, but controlled by an outside company that will "verify" that everything is protected. Arthur Nov 6, 2020, 3:59 PM @Austin What I mean that while we have power to get rid of login forms - we still using them and exposing everything. Another thing, for protection - it probably will be controlled by some monopoly. Like Alphabet bought ReCaptcha years ago. Arthur Nov 6, 2020, 3:59 PM what i mean to do here is make it less of a cat and mouse game like ad blocking/detection, and more of a cryptography problem that's much harder to crack for the adversary, the person or people doing the tampering right, so i'm picturing more of a distributed PKI infra, but that's probably a pipe dream 😕 a few big companies could do it though. as for logins: biometrics ftw. kill the password, i totally agree austin Nov 6, 2020, 4:00 PM @Richard-Kubina @Arthur yea, the more layers the harder it is to fake.  Just thinking you also need to consider your own machine might not be trust worthy!  Like we saw with the Meltdown and Spectre vulnerability.  :tinfoil-hat:  Might end up seeing a happy green checkmark that shouldn't be there.  I think you will always have this cat and mouse game, it just comes down to how lucrative it is to crack or how high the stakes are to put up the fight.  I am definitely not a cryptography expert though... richard-kubina Nov 6, 2020, 4:10 PM oh damn 😱 you've got me thinking about the "management engine" inside the vast majority of PCs now... :tinfoil-hat: you've got me there, though. ultimately it would take a lot of consensus, on the part of verifiers, and it's still a cat and mouse game...i thought it would be harder to crack, and it is, if and only if the author's machine isn't compromised 🙃 and high profile targets like public figures, would prooobably get hacked. i don't get how people work in computer security without going insane so it's just turtles all the way down, then? can we just throw computers away and start over because i have thoughts on that austin Nov 6, 2020, 4:28 PM @Richard-Kubina haha naw I don't mean to win an argument, I just figure there's always that risk of not being able to trust the handy ✅ .  like with Apple approving malware in their store richard-kubina Nov 6, 2020, 4:33 PM https://techcrunch.com/2020/08/31/apple-notarized-mac-malware/ oh wow @ the malware thing....did not hear about that one 👀 but nah, not arguing here, i'm just genuinely curious! like...is it possible to ensure security, and if so, what's the confidence level? how much consensus is "enough"? austin Nov 6, 2020, 4:34 PM with all the layers of current computers, i'm honestly not sure austin Nov 6, 2020, 4:35 PM yea, there were other ones with microsoft's windows updater that was downloading malware..  I forget which software download site also was compromised and serving up executables with malware.. https looked fine at point.. but it didn't matter richard-kubina Nov 6, 2020, 4:35 PM I do like the idea of 'consensus' though... richard-kubina Nov 6, 2020, 4:38 PM would be nice to have security experts weigh in here! 👋 richard-kubina Nov 6, 2020, 4:38 PM oh god... you're killing me here man 😂 i'm gonna wind up making software for little embedded chips that don't talk to the internet just to be safe... it's a great point though. so how sure can we be that certain systems aren't already compromised?? like...what percentage of consumer PCs are vulnerable to attack if you do something simple like click a link? i'd wager close to 98-99% but not 100% austin Nov 6, 2020, 4:38 PM yeah lots of "what ifs" here haha 😅 would be very nice to get an expert opinion austin Nov 6, 2020, 4:39 PM i guess going back to deep fakes, it's a people problem and not a tech problem, right?  you just gotta double check everything.. if someone emails you or calls you sounding like your boss telling you to send money somewhere, you may wanna verify that on another channel.. sorta like two-factor ...verification.  Get on your landline and call them up ☎ and hope you aren't getting phreaked!!1 😅 richard-kubina Nov 6, 2020, 4:43 PM two factor is a sorta consensus, that not all lines of communication are compromised .. better odds richard-kubina Nov 6, 2020, 4:44 PM Sorry for the off-topic. For two years in our national tech university, I have only two teachers who did something real in terms of our "coding profession". One teacher created cool simulation software for meteorites that falling on earth and breaking down into small pieces. I mean, like real software that was used. The second teacher was the youngest professor in our division. He actually creates some extension to one of the big crypto-algos(like SHA or something). He pissed off old professors because he gets grants money from local coding companies and has a cool separate computer lab. I'm sure it's affected me somehow... Arthur Nov 6, 2020, 4:44 PM richard-kubina Nov 6, 2020, 4:44 PM It's interesting to re-read articles from 2019 about deepfakes technology. like 2 years time-machine https://hackernoon.com/why-do-we-need-a-solution-to-deepfake-b81f3yi7 https://hackernoon.com/the-deepfake-challenge-nyf1k31kn https://hackernoon.com/the-light-side-of-deepfakes-how-the-technology-can-be-used-for-good-4hr32pp https://www.forbes.com/sites/johnkoetsier/2019/07/17/viral-app-faceapp-now-owns-access-to-more-than-150-million-peoples-faces-and-names/amp/ https://www.digitaltrends.com/news/faceapp-photos-privacy-terms-of-service/ Arthur Jan 13, 2021, 10:08 PM Here is a collection of cool deepfakes, that available on YouTube. it's also easy to see how technology evolving: not only editing, capturing, but ML algorithms can do much more work, even with smaller datasets Arthur Jan 13, 2021, 10:14 PM https://www.youtube.com/watch?v=NbjE5wXT3RE Also check our Deepfakes tag page: https://hackernoon.com/tagged/deepfakes

Slogging #26: How Scared You Are Of Deepfakes?

If you’re developing web applications, you’re almost certainly going to be constantly interacting with a database. And when it comes time to select the you’ll interact, the choices can be overwhelming. way In this article, we’re going to look in detail at 5 different ways to interact with your database using JavaScript, and we’ll talk about the pros and cons of each. We’ll start with the lowest-level choice — SQL Commands — then move through to higher-level abstractions. Choosing the right database library for your JavaScript application can have a big impact on the maintainability, scalability, and performance of your code, so it’s worth spending some time to figure out your options. Our Sample Application We’re going to use a trivial Express application hosted on as our example. All the code for this article is in this . Feel free to clone it and follow along. Heroku GitHub repository Pre-requisites To run the sample application, you’ll need the following software on your machine: A unix-like terminal environment (Mac OSX and Linux are fine. If you’re using Windows, you’ll need the ). Windows Subsystem for Linux (and a github account). git (version 6 or later). npm The Heroku . command-line tool If you don’t have a Heroku account already, you’ll need to If you don’t want to sign up for Heroku, you can also run the application locally against a local Postgres instance. If you’re comfortable with that, it should be pretty easy to see what changes you need to make instead of deploying to Heroku. sign up for a free account. Once you’ve installed all the above, run in a terminal, and you're ready to get started. heroku login Build and Deploy the Hello World App To start, we’ll set up the following: A trivial application that just serves a “Hello, World” web page. Express A database. Postgres Two tables, representing “users” and “comments” (a user has many comments). Some sample data (in this case, generated via ). mockaroo.com I’ve created a sample application which will set all this up for you (provided you’ve run as mentioned above). To set it up, please execute the following commands from the command line: heroku login git clone http //github. /digitalronin/query-database-javascript.git query-database-javascript setup s: com cd make This will take a few minutes to complete. While you are waiting, you can view the makefile to see the relevant commands, which carry out the following: Create a new Heroku application. Add a Postgres database instance. Deploy the application to Heroku.Run a command on Heroku to set up the database tables and import the CSV sample data. Open the URL of your Heroku application in a new browser window. At the end of this process, you should see “Hello, World” on a web page. Fetching Data With SQL OK — we’re all set up! We’ve created a database with two tables and some sample data. But we’re not doing anything with it yet. The next step is to enable our web application to retrieve data from the database. Whenever you interact with a relational database, you do so by sending SQL commands to the network socket on which the database is listening. This is true for all the libraries we’re going to look at in this article — at the lowest level, they all send SQL commands to the database and retrieve whatever output comes back. So, the first way we’re going to look at interacting with our database is to do just that — send SQL commands. To do this, we’re going to install the pg JavaScript library, which lets us send SQL to a Postgres database and retrieve the results. To install the pg library, execute the following command: npm pg install This will fetch and install the library, and it will add it to your package.json and package-lock.json files. Let’s commit those changes: git package.json package- .json git -m "Install the pg library" add lock commit To talk to our database, we need some details: The hostname of the machine Postgres is running on. The network port Postgres is listening on. The name of the database our data is in. A username and password with permission to access that data. Most database libraries will let us establish a connection either by supplying an object to the library which has keys and values for all of those details, or by combining them all into a single “database URL”, which is what we’re going to do. When you add a database to a Heroku application, you automatically get an environment variable called DATABASE_URL, containing all the details you need to connect to the database. You can see the value of your DATABASE_URL by running: heroku config This will output all the environment variables your application can use. There should only be one for now, so you should see something like this in the output: DATABASE_URL: : a266c0f5b .compute- .amazonaws. : /dfb3aad8c026in postgres //clqcouauvejtvw:1b079cad50f3ff9b48948f15a7fa52123bc6795b875348d668864 07 @ec2-52-73-247-67 1 com 5432 In the case of our example, that breaks down like this: {
  "hostname": "ec2-52-73-247-67.compute-1.amazonaws.com",
  "port": 5432,
  "database": "dfb3aad8c026in",
  "username": "clqcouauvejtvw",
  "password": "1b079cad50f3ff9b48948f15a7fa52123bc6795b875348d66886407a266c0f5b"
} Your DATABASE_URL value will be different, but the structure will be the same. Now that we have the pg library installed, and we know how to connect to our database, let’s execute our first example of interacting with a database. We’ll simply fetch the list of users and display them on our web page. At the top of our index.js file, we’ll require our pg library, and create a database connection object. { Pool } = ( ); conn = Pool({ : process.env.DATABASE_URL }); const require 'pg' const new connectionString In the block, we'll alter the get line to call a method that displays a list of users from the database: express() .get( , ) '/' ( , ) => req res list Users( , ) req res Finally, we’ll implement the listUsers function: { { db = conn.connect() result = db.query( ); results = { : (result) ? result.rows : };

    res.render( , results );

    db.release();

  } (err) { .error(err);

    res.send( + err);

  }

} async ( ) function listUsers req, res try const await const await 'SELECT * FROM users' const users null 'pages/index' catch console "Error " This code waits until a connection is established to our database, then sends an SQL query using the query function and retrieves the result. Now, this step could fail for lots of different reasons, so in the code we test to ensure we’ve got some data and, if we do, we assign result.rows to the key users of our results object. Next, we pass results to the render function, then release our database connection. In views/pages/index.ejs we have access to the results object, so we can display our user data like this: HTML Users { %> - < > h1 </ > h1 < > ul < (( ) => % users.map user < > li < %> %= user.id < %> %= user.first_name < %> %= user.last_name </ > li < }); %> % </ > ul You can see the code with these changes and are the names of two columns from the users table of our database. here. first_name last_name Let’s deploy these changes so we can see the data in our Heroku application: git .js views/pages/ .ejs
git -m "Display a list of users"
git push heroku master add index index commit This will take a minute or two to deploy. When that command has finished executing, reload your browser and you should see a list of users on the web page. MySQL Example The above example is for Postgres, but the code for other common relational databases will be similar. For example, if you are using : MySQL Instead of use (use mysql2, not mysql - mysql2 is faster and supports async/await) npm install pg npm install mysql2 In index.js you would require mysql like this: = require( ); const mysql 'mysql2/promise' The listUsers function would look like this: { { conn = mysql.createConnection(process.env.DATABASE_URL); [rows, fields] = conn.execute( ); results = { : rows };

   res.render( , results ); conn.end();

 } (err) { .error(err);

   res.send( + err);

 }

} async ( ) function listUsers req, res try const await const await 'SELECT * FROM users' const 'users' 'pages/index' await catch console "Error " views/pages/index.ejs remains the same. You can see the sample project with these changes here. Conclusion We’ve covered a lot of ground here, but this is all fundamental to understanding how all database access works. In the next part, we’ll see how query builder and object-relational modeling libraries build on top of this foundation to allow you to work with database data in your code in a way that feels more like working with JavaScript functions and objects. Previously published at https://dzone.com/articles/the-complete-tutorial-on-the-top-5-ways-to-query-y?fromrel=true

[Tutorial] Top 5 Ways to Query your Relational Database in JavaScript [Part 1]

There are over 250 apps in the Google Play Store that pop up when you search for VPN, but not all of them are worth downloading. Even more - most of them you should stay far away from, and never install on your device. Why? A VPN app is all about security. The main reason you want to use VPN is to hide your online activity from your ISP (Internet Service Provider) and make sure your personal info or your web traffic stats do not fall into the wrong hands. This is why trust and credibility are the most important assets of any VPN provider. You are placing your trust in those apps and want to be sure that your personal data does not get collected, nor does any data get shared with government agencies when asked for. Conducting the research looked at Google Play store and the first 50 search results for “VPN”. They discovered a worrying number of VPN apps that have either a very vague background, link to a Privacy Policy that does not exist, or have suspicious user ratings. VPN Selector The first criteria assessed was company information. The location of the company's headquarters is important as it can place the app in a not-so-ideal jurisdiction. If you haven't heard of the Five-Eyes, Nine-Eyes and 14-Eyes alliances ( )  then these are intelligence alliances between countries to share data and intelligence. The existence of said treaties was kept under wraps and was only revealed to the public in 2005. A country that is part of any of those alliances might not be the best location to headquarter a VPN company. UKUSA Agreement Five Eyes: Australia, Canada, New Zealand, United Kingdom, United States Nine Eyes: Five Eyes + Denmark, France, the Netherlands, and Norway 14 Eyes: Nine Eyes +  Belgium, Germany, Italy, Spain, and Sweden Israel, Singapore, and Japan are also collaborating with Five Eyes and reportedly Japan and Germany started collaborating since 2018. So if the developer behind any of the VPNs is located in one of those intelligence-sharing alliances they might not be the best option if you are into super-shady business. But you might be OK turning the other cheek if the company itself is reputable and you have no plans to engage in illegal activities (which you shouldn’t!). Out of the 50 Apps we investigated 16 belonged in one of the alliances and 5 collaborate with them. For 8 apps we were unable to track the company or a person behind the app so the location remained unknown. What was more alarming though was the huge amount of VPN apps for Android that had very questionable developers behind them. Some had no other info but a Gmail address. And the Privacy Policy was too general in its description of data collection and gave no hints of the company behind the app. In some cases, the Privacy Policy link was broken or led to a Google Doc with Chinese text. For example, Wang VPN that boasts a suspicious average score of 4.9 has no developer info or an English Privacy Policy. The app seems to have been developed in  China, a country that has a very hands-on government when it comes to controlling user info of its citizens. Unlimited Free VPN Monster and Snap VPN have different companies associated with the apps, but digging a bit deeper you can clearly see they have the same people behind them. Take a look at their websites and see if you can spot the differences. The suspicious terms in the Privacy Policy don't exactly paint a pretty picture either. For Example: “We may share information with third-party vendors and service providers that provide services on our behalf, such as helping to provide our Services, for promotional and/or marketing purposes, and to provide you with information relevant to you such as product announcements, software updates, special offers, or other information.” A VPN that shares data with third parties makes you question if you want to trust your data with that company. VPN Russia has this in their Privacy Policy: “Among the types of Personal Data that VPN Russia by tap2free collects, by itself or through third parties, there are: Cookies, Usage Data, unique device identifiers for advertising (Google Advertiser ID or IDFA, for example) and geographic position.” What specifically this Usage Data is and why and with whom exactly your Unique Device Identifiers are shared remains unclear. You would expect that kind of suspect terms from dodgy apps sitting at the bottom of the search results page but this is from the top 50 Apps that mostly have a rating over 4.0. In fact, 48 out of 50 had an average user score of 4.0 or above, 22 of them had scores of 4.5 or over. All of the Apps had install counts over 100,000 and some of the Apps even over 1,000,000. Wang VPN with a record score of 4.9 has 170,478 reviews and over 1 million installs. How many of those installs and reviews are fake, we can not tell. But considering how easy it is to buy Android app installs and user ratings we can only imagine how artificially bloated the scores are. has dug into this topic in depth. Digitaltrends In total, we found 21 out of 50 Apps in our scope had problems with their Privacy policy. Either it was completely missing (broken link), it was unreadable (In Chinese), was extremely vague and superficial or had concerning clauses in it. The good news is that all the “Big Names” in the VPN industry, like ExpressVPN, NordVPN, TunnelBear, HotspotShield etc, had their ducks in a row when it came to Privacy Policy. The only thing that might scare some people off them is the jurisdiction but for the everyday user this can mostly be ignored. For Example, ExpressVPN has its physical address as well as a link to a proper and detailed Privacy policy listed. One thing we also noticed during the research is that there are plenty of VPN apps that try to masquerade themselves and try to copy the big brand VPN. This is not, of course, unusual but users should pay attention and not install a copycat but make sure they pick the correct app. Express VPN for example, has three blatant knockoffs that catch the eye immediately and can be mistaken for the original if not careful. The data from this research shows that there is a reason to be careful when you pick an App that is supposed to protect your privacy. People in general don't have the time to look into each and every app's background - who the developer is, what's their Privacy Policy, or conduct speed tests before they buy or install the app. The VPN testing and review site VPN Selector has a handy guide “ ” that lists the best Android VPN apps that are safe to use and that have passed speed tests, price comparisons and privacy checks. Best VPN for Android 2019 A VPN app is supposed to hide and secure your online activities. If you can't fully trust the app or the company behind it, you might want to reconsider your choices and stick to the ones that have a long reputable history and have been tried and tested by verified VPN sites.

Stories, News & Mentions about DIGITALTRONS

Digitaltrons’s Stories on HackerNoon