Best match

Most recent

Loginno - Loginno partners with shipping companies to convert container fleets into IoT-enabled fleets that mine cargo and voyage data using a patented low-cost device. Information access is ...

Smart Logistics Technologies from Israel

LinkedIn

💖Casino Online slot game💥 Event Deposit 💯%💥 Event FreeSpin 45%💥 Event Joker's Jewels 💯%slot empire no deposit bonusgoldfish casino slots free coinslucky hits slotsbest slots on betonlinelive slot machine playjackpot city slots free ...

Welcome to the websitearistocrat slot finder

NAMI

Get the most recent info and news about Loginno on HackerNoon, where 10k+ technologists publish stories for 4M+ monthly readers.

Loginno

HackerNoon Reporter: Please tell us briefly about your background. My background is in maritime shipping and marketing. My first job was as a strategic marketing consultant in Israel’s first management consulting firm, and when I felt I wanted to do rather than give advice, I moved to Zim lines. I fell in love with those huge boxes and ships and still to this day I am very poetic about the huge impact that these simple-looking boxes have on our lives. What's your startup called? And in a sentence or two, what does it do? Loginno, short for Logistic Innovation, is an industrial IoT pioneer, providing innovative solutions for the logistics industry. Our mission is to enable shipping companies to become digital with a 100% smart container fleet. Using standard installation, our patented device permanently converts a regular shipping container into a data mining powerhouse.
Loginno is creating Contopia, a global internet-of-shipping container infrastructure utopia, the values of which go well beyond RoI for the shipping company, but an actual digital transformation of the container industry, with a potentially disruptive effect. What is the origin story? It all began when I was working at Zim Lines as a global business development manager and experienced a severe lack of data in shipping containers. I tried to issue a tender for existing solutions, but none fit the requirements. After a while, a Zim co-worker who knew Amit Aflalo (my business partner) came to me and told me: “if there is one person in the whole world that I know of, who has even a remote chance to answer your crazy requirements, it’s me.”.
At first, Amit offered a partnership to Zim lines but when Zim was not interested, I left the company to pursue the idea. That’s when Loginno was formed. What do you love about your team, and why are you the ones to solve this problem? The team behind this project used to develop electronic “spies” for Israeli defense giant IAI. We are global experts at security applications, with decades of hands-on experience with big-scale cutting-edge technology projects. What’s great about our team is that it is very diverse. Even as a relatively small team, we have representations of all ages, genders, and global locations. A bunch of seemingly different people scattered around the world but united with a common goal. Shows you how powerful mission statements can be. If you weren’t building your startup, what would you be doing? Another startup… probably in the education or VR space. The tech is not as relevant as the mission. If it’s a big enough and hard enough goal - I’m there. At the moment, how do you measure success? What are your core metrics? We’re still focusing on the soft metrics. “Will this thing work?”, “How well will this feature be perceived?”. We’re at the point where all of the soft metrics are aligned, and it’s time to deliver on the hard metrics: i.e. growth. What’s most exciting about your traction to date? The fact that we are building the world’s first digital shipping company with a 100% smart container fleet. Never achieved on any scale, big or small, and this really unlocks the values of Contopia, which we have been talking about for years. What technologies are you currently most excited about, and most worried about? And why? Basically, any technology can be used for good and otherwise. It’s the people that make tech great and not the other way around. So I’m not worried or excited about any technology, to be honest, we just have to make sure that it’s in the people’s best intentions to grow as a global community and not fight each other. What drew you to get published on HackerNoon? What do you like most about our platform? Your email seemed inviting enough. Have to say that I did not get into the details. If it’s a chance to talk about what we do and show the world what we achieved - we’re taking every opportunity with both hands. What advice would you give to the 21-year-old version of yourself? No advice. Who knows what I would have missed by altering my past self. Better play it safe and let the kid figure out stuff on his own. Did I understand from the question that you have a time machine to borrow? What is something surprising you've learned this year that your contemporaries would benefit from knowing? Yes. If you find out through trial and error that you are an annoying guy who is usually right and has many occasions of saying “I told you so”, then you’re probably just one of those people who are able to analyze situations better than most and make good decisions. If that is the case - just go with your feeling and don’t let anything sway you from your path. You will succeed. Vote for Loginno as . the startup of the year, Modi'in

Startup Interview with Shachar Tal, Loginno Co-Founder

In 2021, hosted the first-ever awards!! HackerNoon Startup of the Year The goal of this campaign was to give recognition to the hardworking startups who pulled through the pandemic -- growing and thriving (despite all of the challenges). More than 44,000 startups were nominated all across the globe! They were selected from over 4,553 cities, with a total number of * cough * “4 billion” votes. Insane, right? To see who is a winner in each respective city, visit and pick a city. The name at the top of the list is the winner. (Compromised awards are under review. Cities with tie votes will be updated to have two winners!) startups.hackernoon.com The will announce the winners per region in their respective cities. Startups Winners Announcement series Here are the winners in the : Asia region Top Startup Cities in East Asia Seoul The Startup of the Year in is with 377 votes! Seoul dable Central is the Startup of the Year! It came out ahead with 121 votes. UpNow Central Sheung Wan came out as the Startup of the Year in with 154 votes. Votee Sheung Wan Tokyo The Startup of the Year in is with 41 votes! Tokyo ACES Wan Chai The Startup of the Year in is with 54 votes! Wan Chai Zetl Osaka, Japan In , is the winner! Osaka Nanophoton Taiwan came out as the Startup of the Year in ! Tico Taiwan Dongcheng, China In , is declared the Startup of the Year! Dongcheng Waiju Taipei came out as the Startup of the Year in ! Tico Taipei Akasaka In , is the winner! Akasaka WAKUWAKU Chuo In , is declared the Startup of the Year! Chuo GO-NET Ginza came out as the Startup of the Year in ! Netyear Ginza Kanazawa In , is the winner! Kanazawa Granzella Minami-aoyama In , is declared the Startup of the Year! Minami-aoyama Tokyo6 Entertainment Shibuya came out as the Startup of the Year in ! Hupro Japan Shibuya Toranomon In , is the winner! Toranomon Small Worlds Toshima In , is declared the Startup of the Year! Toshima Altplus Guangzhou, China came out as the Startup of the Year in ! Leyaoyao Guangzhou Hong Kong, Hong Kong In , is declared the Startup of the Year! Hong Kong Episode Six Kunming In , is the winner! Kunming Green A Sapporo In , is declared the Startup of the Year! Sapporo Polar Star Space Shirokanedai came out as the Startup of the Year in ! Nupp1 Shirokanedai Wuhan In , is the winner! Wuhan CSICEE Baoan, China In , is declared the Startup of the Year! Baoan Jumper Baoshan, China In , is declared the Startup of the Year! Baoshan Renren Games Chengdu, China came out as the Startup of the Year in ! Ju You Xi Chengdu Fujisawa, Japan In , is the winner! Fujisawa Scohia Pharma Fukuoka, Japan In , is declared the Startup of the Year! Fukuoka Kyulux Haidian, China came out as the Startup of the Year in ! 51vv Haidian Hongkou, China In , is the winner! Hongkou Kidstone Jiading, China In , is declared the Startup of the Year! Jiading IMRobotic Kawasaki, Japan came out as the Startup of the Year in ! QD Laser, Inc. Kawasaki Kyoto, Japan In , is declared the Startup of the Year! Kyoto Hacarus Minato, Japan In , is the winner! Minato Visionary Fun Nagoya, Japan came out as the Startup of the Year in ! Prodrone Nagoya Ningbo, China The winner in is . Ningbo OlymTech Corporation Aomori In , is declared the Startup of the Year! Aomori Forte Japan Bandai-cho In , is the winner. Bandai-cho Delta-Fly Pharm Changchun In , the Startup of the Year is . Changchun Kaidi Animation Fuchu In , is declared the Startup of the Year! Fuchu TMS Fukuoka-shi The winner in is . Fukuoka-shi SkyDisc Fukushima In , the Startup of the Year is . Fukushima Matsuri Technologies Gotanda In , is the winner. Gotanda Basset Hachioji In , is declared the Startup of the Year! Hachioji Adriakaim Harbin The winner in is J . Harbin oining Technology Iwaki In , is the winner. Iwaki Tao Engineering Izumo In , the Startup of the Year is . Izumo PuREC Kagoshima In , is declared the Startup of the Year! Kagoshima Farmers Support Kamakura In , the Startup of the Year is . Kamakura KAYAC Kami-meguro The winner in is . Kami-meguro Buzzreach Kanagawa In , is the winner. Kanagawa LoiLo Kashiwa In , the Startup of the Year is . Kashiwa Intelligent Surfaces Kita In , is declared the Startup of the Year! Kita Ax Robotix Kobe The winner in is . Kobe Coconomi Koriyama In , the Startup of the Year is . Koriyama Tocoton Kumamoto In , is the winner. Kumamoto Bloom Technology Kunitachi In , is declared the Startup of the Year! Kunitachi Trys Liaocheng The winner in is . Liaocheng Jinzheng Animation Minami In , is declared the Startup of the Year! Minami ATLAB Miyazaki In , is the winner. Miyazaki Caster Nagano In , is declared the Startup of the Year! Nagano Precision Forestry Nagaoka The winner in is . Nagaoka Plant Form Nihombashi-hamacho In , the Startup of the Year is . Nihombashi-hamacho Shizen Energy Niigata In , is declared the Startup of the Year! Niigata UniBio Japan Nishi-shinagawa In , is the winner. Nishi-shinagawa Play Heart Okayama In , is the winner! Okayama Arch Farm Okinawa In , is declared the Startup of the Year! Okinawa BlogNinja Otemachi In , the Startup of the Year is . Otemachi beBit, Inc Qingdao Shi In , is the winner! Qingdao Shi Manyoubang Quanzhou In , is declared the Startup of the Year! Quanzhou KungFu Animation Group Roppongi The winner in is . Roppongi Holo-X Saitama In , the Startup of the Year is . Saitama GameTector Sendai In , is the winner! Sendai Sendai Smart Machines Setagaya In , is declared the Startup of the Year! Setagaya Skyestate Shenzhen In , the Startup of the Year is . Shenzhen Aiator Shinjuku In , is declared the Startup of the Year! Shinjuku Scalar Shizuoka In , is the winner! Shizuoka PiPhotonics Sumida The winner in is . Sumida Holotch Tachikawa In , the Startup of the Year is . Tachikawa PlusOne Takamatsu In , is declared the Startup of the Year! Takamatsu Ken Robotec Tokushima In , is the winner! Tokushima DennoKotsu Toyonaka In , the Startup of the Year is . Toyonaka FISH BIOTECH Tsukuba In , is declared the Startup of the Year! Tsukuba WARPSPACE Wakayama In , the Startup of the Year is . Wakayama 4D Sensor Xiangzhou In , is the winner! Xiangzhou ALLiN Edutech Group Xianyang The winner in is . Xianyang TONLY Xiaoshan In , is declared the Startup of the Year! Xiaoshan GONGHUI Yamaguchi In , the Startup of the Year is . Yamaguchi Archis Yangpu The winner in is . Yangpu Tmxmall Yau Tsim Mong In , is the winner! Yau Tsim Mong Airnugget Yeoksamdong In , the Startup of the Year is . Yeoksamdong WizSchool Yichang In , is declared the Startup of the Year! Yichang Hubei Kento Electronic Yokohama In , is the winner! Yokohama Next Innovation Yubei In , the Startup of the Year is . Yubei Ophiux Network Yueqing The winner in is . Yueqing Yueqing Easythink Media Zhuhai In , is the winner! Zhuhai Aijuba Hongo In , the Startup of the Year is . Hongo Smile Robotics, Inc Admiralty In , is declared the Startup of the Year! Admiralty BUNCH Southern In , the Startup of the Year is . Southern Retykle Yongdungpo In , is the winner! Yongdungpo Push News Taichung In , is declared the Startup of the Year! Taichung Wondercise Cyberport, Hong Kong In , the Startup of the Year is . Cyberport Animoca Brands Hefei, China In , is the winner! Hefei Tsinglink New Territories, Hong Kong The winner in is . New Territories, Hong Kong Zeek Dezhou In , the Startup of the Year is . Dezhou Dezhou Baji Kitakyushu In , is declared the Startup of the Year! Kitakyushu Reif Seongnam In , is the winner! Seongnam EOFlow Yanshi In , the Startup of the Year is . Yanshi CASI Vision Top Startup Cities in South Asia Hyderabad, India The Startup of the Year in is with 962 votes Hyderabad Quixy Lahore, Pakistan is the Startup of the Year! It came out ahead with 186 votes. SmartWindows Lahore Bangalore, India When it comes to , is the Startup of the Year with 210 votes! Bangalore vBridge Hub Pune, India couldn’t be beaten for Startup of the Year in , it won with 129 votes! InfraCloud Pune Jaipur, India The Startup of the Year in is with 166 votes Jaipur Emizen Tech Lucknow, India is the Startup of the Year! It came out ahead with 279 votes. Keeros Superfoods Lucknow Noida, India came out as the Startup of the Year in with 156 votes! Bagisto Noida Mumbai, India When it comes to , is the Startup of the Year with 96 votes! Mumbai Sequretek Sylhet couldn’t be beaten for Startup of the Year in , it won with 122 votes! DataXpie Sylhet Mylapore, India In , is the winner! Mylapore Yalimart Goa, India In , the Startup of the Year is Goa Filter Coffee Delhi, India In , is declared the Startup of the Year! Delhi EkAnek Networks Karachi, Pakistan The winner in is Karachi Bykea Ahmedabad, India In , is the winner Ahmedabad MageComp Dhaka, Bangladesh The winner in is Dhaka SOLshare Islamabad, Pakistan In Islamabad, is declared the Startup of the Year! TAG Gurgaon, India In , the Startup of the Year is Gurgaon ixigo Bengaluru, India In , is the winner! Bengaluru Prakshep Private Limited Haryana, India couldn’t be beaten for Startup of the Year in ! Footprints Childcare Haryana Kolkata, India In , is the winner! Kolkata Wow! Momo New Delhi, India In , is declared the Startup of the Year! New Delhi Rusk Media Indore, India The winner in is Indore Chattar Patar Kormangala In , is the winner Kormangala Sanctum Technologies Ghaziabad came out as the Startup of the Year in Craftfurnish.com Ghaziabad! Mohali In , the Startup of the Year is Mohali DataKund Mysore The Startup of the Year in is Mysore Excelsoft Karnal came out as the Startup of the Year in ! Dunar Karnal Kolhapur In , is the winner! Kolhapur Zanvar Group Patiya In , the Startup of the Year is Patiya Kloud Project Kathmandu In , is declared the Startup of the Year! Kathmandu Vairav Technology Bangalore City, India In is the winner! Bangalore City, PagarBook Ernakulam The winner in is Ernakulam Epixel Solutions Colombo, Sri Lanka couldn’t be beaten for Startup in the Year in MAs Foods Colombo Andheri, India When it comes to , is the Startup of the Year! Andheri DoorMint Kanpur, India came out as the Startup of the Year in ! ServiceWalaa Kanpur Faisalabad In , is the winner! Faisalabad DigiKhata Nasik The Startup of the Year in is Nasik Sahyadri Farms Patna came out as the Startup of the Year in ! Asvin Tech Patna Chennai, India In , is the winner! Chennai Agnikul Cosmos Faridabad, India In , is declared the Startup of the Year! Faridabad UClean Panjim, India The winner in is Panjim TempoGO Ranchi, India In , is the winner Ranchi Osam Dairy Surat, India In , is declared the Startup of the Year! Surat Wishbook Thane, India In , is the winner! Thane Delight Foods Trivandrum, India came out as the Startup of the Year in ! GenRobotic Trivandrum Vijayawada, India In , the Startup of the Year is Vijayawada Eruvaka Technologies Visakhapatnam, India In , Ltd is declared the Startup of the Year! Visakhapatnam Greenline Labs Pvt Ahmadabad In , is the winner! Ahmadabad KiwiQA Services Bandra came out as the Startup of the Year in ! Car Club Bandra Bombay In , is the winner! Bombay Locobuddy Mobile Technology (Sportobuddy) Cochin In , the Startup of the Year is Cochin Tuttifrutti Interactive Gandhinagar In , is declared the Startup of the Year! Gandhinagar Kroop AI Guwahati In , the Startup of the Year is Guwahati GNRC Hospitals Jamshedpur In , is declared the Startup of the Year! Jamshedpur Intelliber Kabul The winner in is Kabul Miracle Shop (Vocinno Technology) Karur In , is the winner Karur Karur Vysya Bank Kochi The winner in is Kochi BestDoc Kozhikode In , is declared the Startup of the Year! Kozhikode OfficeKit HR Ludhiana In , the Startup of the Year is Ludhiana Trendy Beat Network Madhapur In , is the winner! Madhapur Head Digital Works Mangalore When it comes to , is the Startup of the Year Mangalore Hangyo Nagpur came out as the Startup of the Year in ! UPrudence Agro Nagpur Rawalpindi The Startup of the Year in is Rawalpindi Pro Options Marketing Rishikesh came out as the Startup of the Year in ! Descatuk Rishikesh Secunderabad couldn’t be beaten for Startup of the Year in Prakriti Biosystems Engineering Secunderabad Tirupur In , is the winner! Tirupur Tubeknit Fashions Udupi The winner in is Udupi Krishitantra Top Startup Cities in Southeast Asia Singapore, Singapore The Startup of the Year in is with 6556 votes! Singapore Cake DeFi Hanoi, Vietnam is the Startup of the Year! It came out ahead with 683 votes. DeFi For You Hanoi Kuala Lumpur, Malaysia came out as the Startup of the Year in with 109 votes! Trambellir Kuala Lumpur Pasig, Philippines When it comes to , . is the Startup of the Year with 110 votes! Pasig Quickreach Inc Bangkok, Thailand couldn’t be beaten for Startup in the Year in , it won with 60 votes! Perception Codes Bangkok Johor Bahru In , the Startup of the Year is . Johor Bahru AGR1 Bandung, Indonesia In , is declared the Startup of the Year! Bandung Prosa Portugal The winner in is . Portugal SCEMAI Tangerang, Indonesia In , is the winner Tangerang Yummy Corp Jakarta, Indonesia In , is the winner! Jakarta Tokocrypto Dki Jakarta, Indonesia In , is declared the Startup of the Year! Dki Jakarta Limakilo Bangkok Metropolis In , is the winner! Bangkok Meticuly Medan The winner in is ! Medan DIKA Manila, Philippines In , is declared the Startup of the Year! Manila PawnHero Phnom Penh, Cambodia In , the Startup of the Year is Phnom Penh vKirirom Bali In , is the winner! Bali Radius App Penang When it comes to , is the Startup of the Year Penang EasyParcel Surabaya came out as the Startup of the Year in ! Super Surabaya Setiabudi, Indonesia The Startup of the Year in is Setiabudi Chilibeli Cebu City came out as the Startup of the Year in MiCab Cebu City! Jawa couldn’t be beaten for Startup in the Year in DAUR Jawa Ho Chi Minh City, Vietnam In , is the winner! Ho Chi Minh City Pharmacity Selangor, Malaysia is the Startup of the Year! BabyDash Selangor Jakarta Pusat, Indonesia In , is the winner! Jakarta Pusat StickEarn Semarang When it comes to , is the Startup of the Year! Semarang Food Bear Petaling Jaya, Malaysia The winner in is . Petaling Jaya Deemples Kebayoran Baru, Indonesia couldn’t be beaten for Startup in the Year in ! Yogrt Kebayoran Baru Kuningan The winner in is . Kuningan Prinzio Bukit Merah came out as the Startup of the Year in ! DC Alliance Bukit Merah Huai Khwang In , the Startup of the Year is . Huai Khwang AppMan Co.,Ltd Kuta In , is declared the Startup of the Year! Kuta Gringgo Mandaluyong came out ahead as the Startup of the Year! Work Inspire Mandaluyong Midview City In , is the winner! Midview City BioMers Phuket The Startup of the Year in is ! Phuket Sapahn Yangon, Myanmar The winner in is . Yangon Wave Money Denpasar When it comes to , is the Startup of the Year! Denpasar Revasi Nakhon Ratchasima, Thailand The winner in is . Nakhon Ratchasima Siam Lottery co., Ltd Taguig, Philippines In , is the winner! Taguig PayMongo Bogor came out as the Startup of the Year in ! TIRANYX Bogor Senai, Malaysia won as the Startup of the Year. Nutrition Technologies Senai Bekasi Kota couldn’t be beaten for Startup in the Year in ! 8villages Bekasi Kota Top Startup Cities in Middle East Tel Aviv, Israel The Startup of the Year in is with 1,065 votes! Tel Aviv hyro Beirut, Lebanon is the Startup of the Year! It came out ahead with 1,276 votes. Hovi Digital Lab Beirut Riyadh, Saudi Arabia With 350 votes, came out as the Startup of the Year in ! Flicron Riyadh Tel Aviv-yafo, Israel When it comes to , is the Startup of the Year with 167 votes! Tel Aviv-yafo Cymbio Haifa, Israel couldn’t be beaten for Startup in the Year in , it won with 183 votes! Pico Haifa Amman, Jordan In , with 141 votes, is the winner! Amman Edexy Dubai, United Arab Emirates In , the Startup of the Year is with 74 votes. Dubai Ziina Doha, Qatar In , is declared the Startup of the Year! Doha SkipCash Tehran, Iran The winner in is . BeyondBoard AR Tehran Jerusalem, Israel In , is the winner! Jerusalem SolidBlock Rishon Le Zion The Startup of the Year in is ! Rishon Le Zion Passparto Ness Ziona, Israel is the Startup of the Year! Soapy Ness Ziona Kuwait, Kuwait came out as the Startup of the Year in ! Brapper Shop Kuwait Manama, Bahrain couldn’t be beaten for Startup in the Year in ! Doctori Manama Lod, Israel is the winner in ! Phinergy Lod Agudat Israel, Israel When it comes to is the Startup of the Year with [vote ] votes! Agudat Israel, Aqaurius Engines Beersheba, Israel In , the Startup of the Year is . Beersheba Visual Estate Ltd Giv'atayim, Israel In , is declared the Startup of the Year! Giv'atayim WSC Sports Modi'in, Israel The winner in is . Modi'in Loginno Nazareth, Israel In , is the winner! Nazareth AR Guide In Medical Ramat Gan, Israel The Startup of the Year in is . Ramat Gan Datos Health Baghdad When it comes to , is the Startup of the Year! Baghdad Mishwar Khobar In , the Startup of the Year is . Khobar Garage Misgav couldn’t be beaten for Startup in the Year in ! Eden Shield Misgav Sharjah came out as the Startup of the Year in ! Bookends Sharjah Affula In , the Startup of the Year is . Affula eMotion Technologies Bene Beraq, Israel In , is the winner Bene Beraq Reflectiz Caesarea, Israel In , the Startup of the Year is . Caesarea CardiacSense Dubayy In , is declared the Startup of the Year! Dubayy North Ladder Muscat couldn’t be beaten for Startup in the Year in ! iLab Marine Muscat Tirat Carmel In , the Startup of the Year is . Tirat Carmel PassCall Advanced Technologies Hod Hasharon, Israel The winner in is . Hod Hasharon Idomoo Holon, Israel came out ahead as the Startup of the Year! OptimalPlus Holon Jeddah, Saudi Arabia When it comes to , is the Startup of the Year! Jeddah Arabian Combustion Technologies Ramat Hasharon, Israel is the Startup of the Year! Lumen Ramat Hasharon Al Khobar came out as the Startup of the Year in ! Swyft Al Khobar Bet Shemesh In , is the winner! Bet Shemesh Degania Medical Binyamina When it comes to , is the Startup of the Year! Binyamina OncoHost Makkah In , the Startup of the Year is Makkah Scimagine Or Akiva Last but not least, couldn’t be beaten for Startup in the Year in the city of ! WMT Or Akiva More Information: If you’re a winner, please answer ! If you’re a reader, participant, just a curious individual, consider answering one of our interviews . this interview here Read the FAQs about or . Startups here here To see all of the winners you may visit , pick any city and view the name that appears at the top. this site If you’re interested in partnering with us, we invite you to look through some of these or reach out to our business department. unique sponsorship options Perhaps creating your very own tickles your fancy or maybe you have a whole new idea for how we can partner! writing contest Thank you to all of our sponsors! We truly appreciate your contribution to the tech world and thus the future! The Startups Awards are sponsored by: , , , , , , , , , , Blockster Brex FreeCodeCamp LaunchDarkly Coil Udacity Udemy Vercel Asia Pacific Transgender Network Bybit Everscale Network The post was written by Kushal Tamrakar and Valerie Ejegi, edited by Hang Ngo. If you have any questions or concerns or would like to report a discrepancy please email ellen@hackernoon.com.

Meet the Winners of Startups in Asia

Introduction Docker allows developers to package applications in containers - standardized executable components that combine application source code with the operating system (OS) libraries and dependencies needed to run that code in any environment. Amazon also has container launch and storage solutions - Elastic Container Registry (ECR). In this article, I will show you how to create your own container, upload it to the repository. Create a Docker Image First, let's create our own container. For the demonstration, I'll be using an EC2 instance on Ubuntu. The instance must have Docker installed and run the command: nano DockerFile For our example, we use the approach httpd on amazon linux. Next, write code (Image 1): FROM amazonlinux

RUN yum -y update

RUN yum -y install httpd

RUN echo 'Hello World from ECR! This is version 1' > /var/www/html/index.html

CMD ["/usr/sbin/httpd","-D","FOREGROUND"]

EXPOSE 80 Next, let's compile the image and run the command: docker build -t hello-world-app . Do not forget to write dot after -app. And then check that it is present in our images, run the docker images command (Image 2). As we can see, you have two new images created. This completes the first step. Creating a repository The second, let's open the AWS Management Console and then to the ECR service, then go to the Repositories tab and click Create a repository (Image 3). Here we need to enter the name of the repository and create a private one. I want to note that Amazon has restrictions on private, public repositories and be careful not to exceed the limit. Next, we will go to the repository, and as we see that it is impossible to upload our image to the repository. Moreover, we do not even have a button. Next, click the View push commands button and see Amazon's commands (Image 4). These commands are for the old version of the CLI, but I will show you how to use a much simpler command. Next, we need to rename our image to the name that AWS suggests to us. Let's copy this freak name (Image 5). Next, go to our terminal and run the command: docker tag hello-world-app:latest  977701475595.dkr.ecr.us-east-1.amazonaws.com/app1:v1 You can see the result in image 6. Next, as I described earlier, we will run a command to send our image to the repository. To do this, run the command and enter the id and . Next, we will install the region in which you have deployed the repository (Image 7). aws configure Access key Secret access key To push the image, you need to log in by entering the command: aws ecr get-login --no-include-email --region us-east-1 Then we receive an unusual answer (Image 8). So let's copy it and run it (Image 9). Using the command from View push command: docker push 977701475595.dkr.ecr.us-east-1.amazonaws.com/app1:v1 Let's send our image to the repository. After that, we can open AWS Management Console and see our container in the ECR service (Image 10). Conclusion In conclusion, I showed how to create your own Docker container, then place your own container in the Elastic Container Registry. As you can see, this is not as complicated as it might seem at first glance, and now everyone, after reading this article, can do the same.

Creating an AWS Elastic Container Registry (ECR) Using an EC2 Instance on Ubuntu

As an avid internet consumer professionally and personally this means spending a lot of time in front of the computer. Even if I'm doing something else for a while, I just like to listen to the chirping of my favorite podcast in the background. This was a no-brainer at the moment, at least until I got hooked to waiting for all the next episodes on multiple platforms with different accounts, limitations, and requirements. I don't like installing 10 apps for one purpose. This should be easier! Soon I got cluttered with too many apps, accounts, and useless spam. It was getting harder and harder to follow and discover new interesting podcasts in the wild that talk about subjects that are close to me. At some point I got fed up with mainstream platforms and decided to check out good old RSS as a way to aggregate all my favorite audio shows. This has led me to an uncanny valley of creating my own podcast aggregator and player app. Can I do it better? (read Joe Rogan switched to Spotify) After initial excitement and planning, I got more and more with the idea of building a normal client-server stack with the database and all that shenanigans. I have enough on my cloud hosting bill already. Can this been done for... well free? not ok Ahh, a dreamer may dream you may say! After I let the idea spin in my mind for a while I thought I came up with a viable solution. For this experimental side-project to be considered a success there are some criteria we must hit first! The Non-Negotiable Requirements It must be free for the user (and me hopefully) It must be anonymous It must be serverless It must be databaseless !? It must be secure This is NOT an easy task list, so I will let the reader be the judge of my success. The Plan Let's start with the networking and communication part. is a well-supported library for cross-platform peer-to-peer communication and it has good vanilla javascript support. WebRTC Secure (WSS) can provide us with a safe channel to connect peers together. We are missing just one more element which is a signaling server, or a way for peers to discover each other. Hmm, this means hosting a server that is not free. WebSockets Enter , another amazing library with good browser support. So, now we can have in one HTML page full support for and . This is the serverless part, done. Now onto avoiding hosting a database! WebTorrent WebTorrent WebRTC Well, it happens that we also have this ingredient ready for us with IPFS and the way it stores objects on the decentralized network. Technically we could have a JSON file representing all the globally submitted podcasts somewhere on the IPFS, and fetch/add to it on demand. The Stack JavaScript, , Polyfill, libs included via CDN. Front-end: RSS-Parser SweetAlert using , communicating over WebRTC, and storing/retrieving JSON data on IPFS using . Back-end: P2P Swarm WebTorrent Pinata Some functional requirements It should offer organic feed for all users (like trending or top feed) Every user must have his own personally curated feed Users should be able to exchange podcasts or whole feeds between each other privately Users should able to manually add podcasts and remove them as they wish Users should be able to  listen and control the audio It should work in all major browsers including mobile It is now a time to share my little experiment with you. is a single-page app that uses RSS (Really Simple Syndication) and peer-to-peer communication together with decentralized storage to serve as a podcast player, aggregator, and discovery app. TailoredFlow It utilizes and in the browser for peer discovery, and IPFS to store top trending podcasts. Your personal feed is stored directly in your browser. WebTorrent WebRTC and only You can click and add any podcast from the trending feed or add your own via the regular RSS link you can find on any other podcast search engine. Every time you add a podcast via the button, it will appear in your personal feed ready to play - other users will be able to see it in the trending feed unless it's already submitted. Add RSS URL Every user has his own unique peer #ID that he can copy and privately share with any other user to send him a particular podcast or the whole feed! The sharing feature is , which means - . session-based to directly share a feed or a podcast to someone, you both have to be online at the same time Every time you refresh a page a new ID is generated for you, to protect your privacy and avoid tracking. Trending feed is auto-updated by other peers in real-time. Not only is TailoredFlow a single page app, but at that! This means you can download it and use it locally (it does not require hosting). a single HTML file No login, no database, no server. And I happen to like it! The app has received a couple of updates after it underwent quality control by my loving wife as a prime beta tester. If you find the app usable and cute, you can thank her :) If you value your privacy, don't like ads, tedious subscription models, bad privacy practices, or lack of support, then this is for you. The main challenge is not only making one of a kind P2P platform but also a scalable and independent one also. This was initially made for myself and close friends that share the same passion for the world of podcasts. I hope you can enjoy it too! Feel free to reach out for any suggestions, ideas, improvements, or critique over at . Twitter

How I Built a Complete P2P RSS Podcast App in a Single HTML File

For my next project, I decided to create a todo list app using Svelte and Meteor. I initially got the motivation to do this through Meteor's documentation site. On their site, they have a on how to create a svelte app with a meteor back end (and ). Which is exactly what I was looking for! In this article, I'll take you through my experience of the tutorial and a couple of extra things that I added. tutorial lots of other great tutorials Before I start, I want to share a great quote I heard about Meteor from Scott Tolinski on the Syntax podcast: Meteor is a back end tool that allows you to "Bring your own front end". I couldn't agree more, and Meteor shows this off with all of the different front end frameworks you can use with their platform. This is comparable to how Next.js operates. Next allows you to bring in whatever back end platform you want to hook up to your Next front end. Setup The setup for Meteor was weird to me. First, I had to install some software called . I'm not sure if this a popular software among the dev community, but I had definitely never heard of it. Chocolatey Once I had that installed, I was able to run the command to actually get Meteor on my machine. After that, it was a pretty straightforward setup process. Running was all I needed to do to get going. choco install meteor meteor create <name of project> There were a couple of odd/cool things during this setup process that I want to note. Meteor forces you to run their commands in Powershell. Which is another practice that I had never experienced before. I'd be curious to know why that is. Also, while in a Meteor project, Meteor replaces npm in a lot of ways. For example, instead of using you would use . Lastly, I was super stoked to find out that Meteor automatically hooks up your project to a MongoDB back end! Right out of the box! npm install <package> meteor add <package> Cool things I learned Here are a couple of things that I learned or thought were cool about Svelte and Meteor. Meteor Meteor offers a lot of really cool features (on top of the automatic MongoDB hook up) that I haven't really encountered with other projects I've done. I'm still very new to development so these might not be too special but they stood out to me. Running your app with Meteor makes it extremely easy to develop for mobile environments. In this tutorial, they actually go over how to run your app on iOS and Android emulators. They explain the steps very well, and it's a nice added functionality bonus. Meteor has built-in account login. No need for additional setup. I thought that was really handy. Other cloud-based platforms have made hooking up logins from other accounts pretty easy nowadays, but what made Meteor stand out to me was their default username and password login functionality. It was very straightforward and easy to understand. Other login accounts you could hook up in your Meteor project included: Google, GitHub, and Facebook. Because Meteor is such a focused back end solution they include a great security section in their tutorial. In this section, Meteor goes over how to set up your data calls correctly. This covers how you submit, update, and delete data. Really beneficial especially in times like these where hacking is a huge problem in the tech world. Last but certainly not least, testing. Every developer loves writing tests! (subtle sarcasm) In this Meteor tutorial, they walk you through writing some tests. It was actually pretty easy and helped me understand writing tests better overall. Side note: One of my tests didn't work but that's not the point! The point is, I wrote my own tests. Svelte The main reason I did this tutorial was to get more exposure to Svelte so I thought I should share something I learned about that framework as well. The way Svelte uses reactivity was very confusing for me at first, but this tutorial helped me understand it a little better. I also looked at some to help guide me as well. Long story short, the is awesome! Svelte documentation $ This doesn't really have to do with Svelte, but I'm going to add it in here anyway. I had never used the double bang syntax until this tutorial. What does the double bang syntax do? It casts a javascript variable to a boolean. Pretty cool, huh? If you're still confused here's a that helped me grasp the concept. Running the author's example in the web console dev tools helped me visualize it even better. !! great article Not so great things There were a couple of hiccups during this tutorial. Luckily only one code hiccup which is always nice. Code Error When I finished the project my to-do list wasn't functioning correctly. The checkboxes weren't checking and the delete button wasn't deleting. Here is what I had to change in my code. This change occurred in the file: api/tasks.js (taskId) {
        check(taskId, ); task = Tasks.findOne(taskId); (task.private && task.owner === .userId) { Tasks.remove(taskId);
        } 
    }, (taskId, setChecked) {
        check(taskId, );
        check(setChecked, ); task = Tasks.findOne(taskId); (task.owner === .userId) { Tasks.update(taskId, { : { : setChecked } });
        } 
    }, // Lines 35-53 in my tasks.js file 'tasks.remove' String const if this // If the task is private, make sure only the owner can delete it 'tasks.setChecked' String Boolean const if this // If the task is private, make sure only the owner can delete it $set checked Deployment The last downside for me was deploying this Meteor app. Meteor provides a wonderful service called . It looks like it handles all of your Meteor deployment needs. What's the downside? There isn't a free tier. The cheapest you can get is 7 dollars a month. Which, for me, is too expensive to host a tutorial project. Galaxy So naturally, I looked into other ways of deploying this out to the public. The next best resource seemed to be Heroku. There are a couple of GitHub repos and articles that explain how to get this deployed onto the web. The major hurdle that I ran into was the recent discontinuation of the mongoLab Heroku add-on. Since Meteor uses a mongo database under the hood a lot of the ways to deploy this via Heroku involved using this recently non-existent Heroku add-on. So that was a bummer. I'm sure there's still a way to deploy this thing, but there was no easy way. The easy way was what I was looking for. Conclusion Meteor seems like a really great platform. I like how structured it is, and how it does all the complicated back end work for you while allowing you to use whatever front end framework you want. I can definitely see why many companies rely on Meteor for their web needs. However, the lack of easy deployment puts a wrench in the possibility of casual devs latching onto this. Unless I'm really dedicated to a project I'm working on, I'm not shelling out 7 bucks a month to host my fun web project. Especially when there are so many awesome free tools out there. I rate this dev experience a 3.4 out of 5. That's all folks! Happy coding! Also published at https://dev.to/tyry327/creating-a-todo-app-with-svelte-and-meteor-5f09

How To Build a Todo List App by Using Svelte and Meteor

For the past few hours, I've been working on dockerizing a Nuxt.js server-side rendering app to be deployed to AWS Elastic Container Service (ECS). I hit a stone wall when environment variables are not properly injected on runtime on ECS. In this post, I will walk us through steps to properly dockerize Nuxt.js SSR apps and share some of the lessons I learnt. There are 2 major ways to dockerize Nuxt.js apps, and each of them has its shortcomings: 1. : The Nuxt app is built after Docker image is built, when the container is spawned. The downside of this is the container boot time takes significantly longer as it involves building the artifacts on run. This also violates the principle of a 12-factor app. Nuxt build on run build/release/run 2. : For this, sensitive environment variables are injected during stage. The upside is the boot time is much shorter now, hence, quicker revert time in case you need to revert to an older version. However, the downside is the sensitive variables are now bundled into our Docker image and it requires a rebuild every time a variable is updated. Nuxt build on Docker build docker build For this post, I will be using the first method, "Nuxt build on run". How environment variables works in Nuxt.js apps? Let's revisit how environment variables work in Nuxt apps. Some of us may already be familiar with the property in , which allows us to inject sensitive values from your terminal environment to the app on  runtime. env nuxt.config.js { : { dbUri: process.env.DB_URI  
  }
} // in nuxt.config.js export default env /**
      * dbUri is accessible from both client and server side.
      */ From the snippet above, is read and injected to when we run the app for any purpose. ( , or ) When serving a production build, our environment variables are most likely different from environment to environment. Thus, if we build our app ( ) as part of the building steps of our Docker image, any sensitive environment variables that is injected when we run our Docker image ( ) will not work as the artifact has been built before these variables are injected. DB_URI dbUri nuxt start nuxt build nuxt nuxt build docker run ... How to safely inject environment variables into Dockerized Nuxt.js on runtime? By adopting " ", we adhere to: Nuxt build on run Principle 1: Build and serve on runtime! Principle 2: Never embed any sensitive value in Dockerfile {
  ... : {
    ... : , : , : ...
  }
  ...
} "scripts" "build" "nuxt build --modern=server" "start" "nuxt start" "prod" "yarn build && yarn start" To serve a production build, all we need to do is to run . yarn prod In my : Dockerfile node: . APP_DIR /app/ HOST . FROM 10.16 3 ENV WORKDIR ${APP_DIR} COPY . ./ RUN yarn install ENV 0.0 0.0 # Insensitive environment variable EXPOSE 3000 CMD [ , ] "yarn" "prod" Here we go! Our dockerized Nuxt app is ready. We can run our Docker image using or alternatively with Docker Compose. I personally use Docker Compose a lot. In my case, I created a that inject environment variables from the file in same directory. docker run docker-compose.production.yml .env My : docker-compose.production.yml version: "3" services: web: build: . restart: always env_file: - .env ports: - "3000:3000" Once ready, we run to bring up our containerized Nuxt app. docker-compose -f docker-compose.production.yml up -d How to safely inject environment variable for dockerized Nuxt.js on AWS ECS This section is only applicable if you choose ECS as your deployment platform of choice. In this section, I will walk us through: storing sensitive values using AWS SSM Parameter Store building and pushing image to image registry creating an ECS task Step 1: Storing Sensitive Environment Variables in Parameter Store AWS provides several products for the purpose of storing sensitive configurations, namely AWS SSM Parameter Store and AWS Secrets Manager. I use Parameter Store because of its' free 10,000 Standard tier parameters. To add a parameter, click "Create Parameter" in the Parameter Store Management Console: Fill up the form, then submit: We should see the parameters created: We will leave the parameters created for now. These will be consumed in a latter step. Step 2: Building and Pushing Image to Image Registry To deploy our Nuxt.js app to AWS ECS, we first require a repository to store our Docker image. For the sake of simplicity, I use AWS Elastic Container Registry (ECR). The provides a comprehensive list of steps to create a repository on AWS ECR. official guide Once the image repository is created, we can then build and push our image: docker build -t <image_name> . 

docker tag <image_name>:latest <remote_repository_url>

docker push <remote_repository_url> $ (aws ecr get-login --no-include-email --region <region>) Navigating to our repository with AWS Management Console, we should see our image pushed: Step 3: Create an ECS Task This details the steps to create a Task definition in ECS. It is highly suggested to read if you are not familiar with the concepts of Task and Service in ECS before moving forward. guide this While creating an ECS Task with the Management Console, you can now reference to parameters created in SSM Parameter Store by using the ARN of the parameters. Once the Task is created, we can then run it on ECS. Navigating the the endpoint of your Task, you should be able to see your app is up and running. Voila! Now we have a dockerized Nuxt.js SSR app that is running on ECS with sensitive environment variables stored on SSM Parameter Store. Have fun hacking around! This was first published on melvinkoh.me

Dockerizing and Deploying Nuxt.js SSR Apps To AWS ECS

No matter if you are a startup company or a big enterprise, your app needs to be intuitive and customer-facing to win many hearts. However, designing a user-friendly web app for your business is not so easy. You need to be aware of the complete rules. In our quest for finding the best technology stacks and web app development trends, we have discovered a few golden rules of the industry. These rules we’ve found are universal and they are useful for both an enterprise and startup. And, every business should be aware of these rules. To help you out, here’s a list of 5 golden rules for developing modern web applications. 1. Plan Your Project Before you start coding, take your app into a planning mode. And, when laying out a new web app, who’s going to be using your app should be a priority before everything else starts. And, then comes the , etc. Go step-by-step to the end result and get it arranged in a perfect way with all the features. Like, design your web application UX with the least resistance possible. UX needs, design needs, coding, APIs There are some more rules to consider for planning your web app development. For instance, How tech-savvy is your user base who will use your app? How long will your user want to spend on your app? In what environment will people be using your app? Decide Your Patterns When developing your web app, or trying to write a query on your app database, you need to apply the concept of - don’t reinvent the patterns. The reason is all the new and latest mobile operating systems use icons to let users access their apps. And, they can’t be swapped with a different UI element because every time users need to learn a new pattern whenever they switch a device. In the end, this would mean lots of unhappy users. Instead of this, use the same patterns you see in all the popular apps. This will help people to use your app interface easily. Your preference for patterns should be: Icons (For e.g. envelope is a symbol for messages) Colors (Red is for denoting errors) Placing (Forward arrows & buttons are always on the right-hand side) Measure Everything “Talking to your users is important before you start app development but once you understand what they actually want, you need to measure the exact usability standards for your web app.” You need to do more than simply asking your users what they want. You must also understand how they use your app in every way as this way, you will understand and can measure the improvement and modification points of your app. For analyzing your users' needs you can use analytics to know if their app usage behavior matches their words. There are many analytics tools and solutions available today that can be configured into your app in a matter of minutes. The benefit of measuring user behavior is that it will give you clear data on whether your app will be successful or not. 2. Decide on Your APIs Application Programming Interfaces (APIs) are the most important part of your web app development, as they let you build smart applications by manipulating data from the other web applications. That’s why APIs must be used wisely because a developer may be using the over a couple of years and changes in API are sudden and can impact the performance of your web app. Facebook API With API’s becoming popular in the developers' community, more and more enterprises and startups started building apps using APIs for front-end usage of data pipelines. And finally, these APIs allow for a more cohesive experience for the end users as web applications become more flexible in terms of user interfaces and experience. Overall, the APIs is a win-win strategy for developers and for the end users. For instance, Bring better functionality to your web app by integrating many other third-party applications. You can build apps for real-time updates on customer behavior, order cancellations, and new signups Provides different ways to enhance your digital asset management. Using WebDam APIs you can create front-end plug-ins and extensions for your specific needs. Slack’s API WebDam API With API like Developers can build speech-to-text web applications with voice-enabled and conversational interfaces. There are other interesting options to check out for APIs in 2019 --- Chute API, Lusha API, and Nasa API. Houndify Brands like have been using APIs for developing their web apps and creating a loyal fan base by giving their user with a more intuitive and engaging experience. Amazon, Salesforce, and Flickr 3. Go With the Widely Accepted Technologies It’s true when it comes to web apps, we all love trying new things. However, trying new frameworks, languages, libraries, tools, etc. can becomes a problem when you need to carry that over into your business. If you develop a new business web app using a newly launched language, you take a big risk. Suppose what if that language never takes off in the market, you’ll be stuck with your application. However, it is fine to experiment with the latest technology, but when it’s about building business web applications, we suggest you go with the established frameworks and technologies such as ------ , and more. Ruby on Rails , Angular JS , Laravel , Express , WordPress , Django In a nutshell, it is always important to select a technology that is widely used and not “popular ones” or “upcoming.”  Also you can contact or hire web app developers to get your app ready on any one of the latest technologies. 4. Check Your Coding Convention Coding guidelines play an important role in the programming of rules and standards for your web app. You have to follow guidelines such as . coding logic, formatting, indentation, folder structure, file names, file organization, file statements, functions, and naming conventions The steps for the coding procedure are: Step 1 Start coding your web app with HTML, CSS, and JavaScript . Step 2 Add more functionality to your web app with Python, PHP, and Ruby. Step 3 Align your UI planning with options: Click-to-edit Drag and drop Two-click delete Automatic saving (after any action) Step 4 Design your “Screens” Homepage Logged out = Intro/Sales Page Logged in = Your list Login page Settings page Lost password page Account activation page Emails Step 5 Now you have the idea in place of what you want to code and how you want to build your web app. Organizing your code effectively is the key to the success of your web app. 5. Test Your Ideas There is so much in our list of rules. Every user is different — you should ask them what they want and also test your ideas of web app development with the online surveys, A/B testing, testing for usability standards, UX, APIs, and other aspects of web app development. Or, you can test your idea of the web app with tools like ------ . Zephyr , Testpad , Testlink , PractiTest , TestComplete , and Selenium Final Thoughts That’s the process. I have given here enough information to help you with your web app development. What do you think? If you have any suggestion or questions, post in the comment section. I am always looking to improve my processes and practices. Businesses must follow these guidelines listed above to reduce the risk of falling out in the competitive business space. If you are looking to hire web app developers, I suggest you should start searching on the internet. For any queries or questions on web application development or hiring web app developers, you can post your comments in the below-given section. I will provide you with the best answers of your queries. Finally, these 5 rules are great to start but applying them requires considerable knowledge and skill to stay ahead of your competitors.

Never Make Assumptions: 5 Golden Rules for Web App Development

You’ve probably heard of , , , , etc, and wondered how those platforms work ? 0xgame Cryptokitties MLB Crypto Baseball Decentraland Cryptocorals Maybe you have a great idea and want to develop your own platform but do not know where to start? Or you’re just curious and want to understand the potential of decentralized application (dapp) on the blockchain? We’ve been there at and and I want share with you what we’ve learned and answer some of your questions. cryptocorals.co frenchbureau.co This article is dedicated to developers who have experience in web development and understand how smart contracts basically work. My primary focus is the architecture needed for an Ethereum Crypto Collectibles Marketplace. My example will be a Pokemon marketplace where you can buy and sell Pokemons from the Ethereum blockchain. The goal is to have a web interface where you can see the different pokemon and buy/sell them. I won’t be covering the ERC721 non-fungible token standard implementation needed to build a Crypto Collectibles Marketplace in this article but may do so in future publications. Create, publish and interact with your smart contracts So what you need to do is to create your smart contracts, in . solidity I highly encourage you to use . framework truffle https://truffleframework.com/docs/truffle/overview With truffle, you put all your .sol smart contracts in the folder and use: /contract to arrange them into a JSON file that contains the contract ABI and a bunch of other data truffle compile to publish your contract into the blockchain. truffle migrate Here is a very short and dirty non real solidity overview of what your contract might looks like. Where can I publish my smart contracts on ? : It’s a private blockchain for your local machine, you use it for local development purposes. Ganache , and more are test networks: it’s like your private test environment for your team or a staging environment. You use fake ether so it doesn’t cost you anything. Rinkeby Ropsten : It’s real ether, real money, it’s production baby ! Ethereum Mainnet In the truffle config file , you can set your different environments. truffle-config.js Then you can do something like to publish your contracts on Ropsten. truffle migrate —network ropsten How can I interact with my smart contract ? Before you begin, you’ll need to add the web3.js library to you script. (If you use react, Drizzle is an excellent option). When you want to talk to the blockchain you need to talk to one node. All the blockchain data is stored in every individual node, so you just need to interact with one. You can use to talk to a node and do stuff like web3.js web3.myPokemonContract.getPokemon(1) In dev environment you can easily host your blockchain and Ganache and it will provide everything you need to interact with the blockchain. With Rinkeby, Ropsten or Ethereum it’s a bit different because you’re not part of the blockchain network. If you do not own a node you have 2 options: Either you create your own node with geth for instance and connect it to the network of your choice (ropsten, mainnet, …). You’ll then have to install, configure and make it accessible from outside, manage the security stuff and that’s a lot of work, especially if you just want to launch your product as fast as possible. Or you can use an Infrastructure-as-a-Service (IaaS) like . They maintain their own nodes and provide you with everything you need, such as an api, to easily interact with the blockchain. Infura There are many detailed tutorials that’ll help you create a web page that can extensively interact with the blockchain so I won’t cover those details here. Create your web app ! Keep in mind that you can essentially do two things with a smart contract and the blockchain: : Get a pokemon by Id, get the number of pokemon you own, etc. Read : Create a pokemon → Write the new pokemon into your smart contract, Transfer a pokemon to another address→ Write the new owner on the smart contract, etc. Write In this example, we want to call the and the functions. getPokemon() buy() In our Pokemon marketplace we now have a single page that collects the pokemon XXX information from your smart contract, display the data and allows the end user to buy this pokemon (assuming he is buyable). The architecture will basically looks like this. Their are also pros and cons to consider when using a blockchain. The blockchain is slow While using a blockchain is simple, there are fundamental challenges to consider. As you already know, the blockchain is frustratingly slow! It can take a few seconds to get Pokemon 001’s information. So if you want to get the first 25th, then from the 25th to 50th, it is challenging to build a nice user experience. And with every refresh of your time is wasted on loading. Reading the blockchain is free It is fundamentally free. You can read the blockchain from the javascript thanks to web3.js and call the function but is does not include any additional updates. getPokemon() Writing, updating your smart contract data has a cost You will have to pay a gas fee in ether according to the computation needed by your action to update the blockchain. If you purchase an item, you will also pay the item price in Ether. To send Ether and to pay the fees, you need to own Ether and therefore have a wallet with Ether. You don’t have credit card linked to your Ether wallet but you can pay with Metamask! How can someone pay ether to your smart contract from your website ? Metamask is a chrome extension that safely manages Ethereum wallets. With web3.js, you can ask Metamask to send 0.0004 ether from your wallet to buy a Pokemon, Metamask will then ask for user approval and complete the transaction. Metamask can also be used for a one-click, cryptographically-secure login flow (like social login). There is nice tutorial from Toptal about it . here But do users really need Metamask to pay transaction from your website ? Yes! But keep in mind Metamask is not a guaranteed system. Your end users we’ll have to get, understand, and trust Metamask as a system; which has created caution amongst crypto enthusiasts who own ethers or bitcoins who have no previous experience with Metamask. Centralize a decentralize app Like we’ve just seen, the end users will need Metamask to perform writing actions on the blockchain but reading is free. So one solution is to centralize a decentralized application (crazy talk, I know) that will read and save your smart contract data into a database. You’ll get the data (slowly) from the blockchain to serve it (quickly) to your users through your scaled API. The benefits of using a Smart contracts is that it can , like: or . emit event emit Pokemon Transfer({ from: 0XO67465, to: 0x43546}) emit Pokemon Birth({name: Nidoran }) So when you receive a event (means someone called the function), you can add a new Pokemon to your database to better serve your users. Birth createPokemon() And when you receive a event, (means someone called the function) you can update the owner of the given Pokemon in your database. And you can listen to this events with web3.js ! Transfert buy() To do that you will need a dedicated server to listen to your smart contract. It can be a CRON job, hosted on a google cloud function, an AWS lambda or even your own server, coded in Node.js, Go or Python, it’s up to you. Make sure your transactions are confirmed When you receive an event, you will get the block number of the transaction. The block number refers to the block associated with the transactions that have been added to the blockchain. As you know, with blockchain, your transactions can still be reverted so you need to wait at least 12 blocks to ensure that the transaction won’t be reverted. (More info ) here In the meantime you will want to set the transaction as ‘pending’ until you are sure that the transaction is confirmed. For instance, when a Pokemon is created, you can set it to the database with a pending status so your visitors will be able to see it but not buy it. On when a Pokemon is being added you can display the card with an overlay to tell your users that it’s coming. Server architecture Now that you centralized your application, you can serve your dapp data to your users more quickly with an API. Your database is like a mirror of your smart contract. Conclusion If you want to create a crypto collectible market place on Ethereum you need to know that: The blockchain is slow and you can’t ask your front-end app to fetch and cook the data for every single request. One solution is to create an event processor to listen to your smart contract events and populate data into a database that would be a mirror of the blockchain. You’ll then be able to serve the data through an API. Metamask is mandatory and it can be scary for your users. Make sure to provide a good user experience and introduce Metamask usages to your users.

Ethereum Crypto Collectibles Marketplace Architecture

Image taken from Unsplash Content Writing as a business is there for almost 2 decades now. But still, we see businesses struggling to create quality content! This is what I realized after working with 37 writers at my first media platform FadBulletin. I thought of creating a solution for the problem of content creation at scale. The thing is, people don’t always need to raise eyebrows after hearing your idea and the problem you wish to solve. startup And let me be frank — Ours was Boring! Customers already knew about content writing for long, they tried it at a point or the other, of their business , but it remained a problem! growth I started working on in late 2015, and met a number of writers and businesses to understand more about these problems in the content industry. WittyPen When talking to Writers in India: was the first response, followed by “We don’t get paid well” “Content usually gets rejected and we never get paid for that!”. But was it the fault of customers only? I found businesses saying, another being Adding to the list, next response is, “We are unable to check the credibility of a freelancer. Will they be able to understand our business?” “What they submit, often, is very different from what we ask.” “We do not have the bandwidth to manage multiple freelancers at the same time”. India has , but the content industry is highly unstructured to meet the requirement. largest number of freelancers That’s what made me more confident to pursue WittyPen. As a business, your ideal way to grow is to reach out and engage with your users. For that you need content. Content that builds thought leadership, informs the user about the product, industry, etc., and educates them about it. Even though we see a huge growth in videos and images bringing the major traction, they still are backed by text and storytelling. Putting all of this in one place, I found these to be the key barriers: 1. Bridge the communication gap between Customers and Writers 2. Standard process to analyze writer credibility and fix payments as per the skills 3. Process to ensure content quality is maintained as per the customer 4. To do all of this at scale! The problem statements were simple to hear, but not so easy to solve. How did We Solve? We haven’t done that completely yet, but we are at a better stage. Solution is an iterative process, and we are getting stronger each day. Like a lot of startups, we thought to be lean, we didn’t start building a platform on day 1, but had to wait for 8–10 months before we began to code. It was one of the best things we did, but before the launch of the platform, did we sit with the problem all the time? No, we already started working with customers and writers. Here’s what we did: 1. A single page website, which spoke directly to the customers, about the problems they faced, and the solutions we offered. Created a Website: 2. No login, no signup, fill up the form to place an order. Use Typeform: 3. Since our customers were Businesses, we didn’t have a huge flow of customers initially which gave enough bandwidth to call each customer and understand the content required. And after the call, the customers could realize the credibility to pay us through an Instamojo link. This saved a lot of cost and time for us. Payment When Convinced: 4. This is one thing you should not compromise on, the company email adds credibility and our complete business model relied on the way we used Google Docs and Google Sheets. Gmail is one of the best for email, and we relied on it for our communication. Since we knew how to use GDrive well, we created calendars, content, revisions, everything on Gdrive and collaborated with the concerned teams. Gsuite to the Rescue: Why We Thought Not to Copy? As humans, sometimes we forget that we are close relatives to monkeys — it is our nature to copy from something superior and behave accordingly. But to succeed what we should keep in mind is the possibility to Adapt! We have global competitors, funded and doing well, but what worked for them in western countries was nowhere close to be working India. If you have ever worked in a services company/agency in India, you understand that the customers want you to do everything. The DIY culture is far to reach, and we were fortunate enough to realize this in early days. To keep up with this, we created a hybrid model which includes the human intervention as per the customer’s need but also relies on technology which helps us scale. We built a combination of Marketplace and SAAS product and supported it with human intervention to assist customers at initial levels to place an order, help them pitch ideas, create projects for multiple orders, etc. The Way Ahead! What we have now at WittyPen is what we learned from our customers in early days, and now we are building products on top of it. Building a startup is not easy. Reaching a product market fit is one of the early milestones to success, and we are reaching ours. But if you are planning to start up, focus on the value you want to deliver to your customers, build a prototype and talk to a lot of your potential buyers before getting to the actual product. Going lean is the right way to grow and also to save enough time, money and bandwidth. Learn from customers and build your path to success!

How We Built a Product in Core Services Industry

Last summer I started learning about information security and hacking. Over the last year I’ve played in various wargames, capture the flag and penetration testing simulations, continuously improving my hacking skills and learning new things about ‘how to make computers deviate from their expected behavior’. Long story short, my experience was always limited to simulated environments, and since I consider myself a white-hat hacker (aka one of the good guys) I never stuck my nose into other peoples’ businesses — quite literally. Until now. This will be a detailed story about how I hacked into a server which hosted 40 (this is an exact number) websites and my findings. Some prerequisite CS knowledge is needed to follow through the technical parts of the article. Note: A friend messaged me that an was found in his website and that he wants me to take a further look. This is an important stage, as I am inclined to ask for him to formally express that I have his permission to perform a full test on his web application and on the server hosting it. The answer was XSS vulnerability positive. In the rest of the post I’ll be refering to my friend’s site as http://example.com The first move is always to enumerate and find as much information as you can about your enemy — while trying to alarm them as little as possible. At this stage we trigger our timer and start scanning. $ nmap --top-ports 1000 -T4 -sC Nmap scan report for example.com {redacted}Host is up (0.077s latency).rDNS record for {redacted}: {redacted}Not shown: 972 filtered portsPORT      STATE  SERVICE21/tcp    open   ftp22/tcp    open   ssh| ssh-hostkey:|   {redacted}80/tcp    open   http| http-methods:|_  Potentially risky methods: TRACE|_http-title: Victim Site139/tcp   open   netbios-ssn443/tcp   open   https| http-methods:|_  Potentially risky methods: TRACE|_http-title: Site doesn't have a title (text/html; charset=UTF-8).|_{redacted}445/tcp   open   microsoft-ds5901/tcp  open   vnc-1| vnc-info:|   Protocol version: 3.8|   Security types:|_    VNC Authentication (2)8080/tcp  open   http-proxy|_http-title: 400 Bad Request8081/tcp  open   blackice-icecap http://example.com The scan completed in about 2 minutes. That’s a lot of open ports! By observing that the (port 21) and SMB (ports 139/445) ports are open we can guess that the server is used for file hosting and for file sharing, along with it being a webserver (ports 80/443 and proxies at 8080/8081). FTP From The Art of War. Enumerating is key. Doing a UDP port scan and scanning more than the top 1000 ports would be considered if the above scan’s information was not enough. The only port we are allowed to interact with (without credentials) is port 80/443. Without wasting any time, I launch to enumerate for any interesting files on the webserver while I’ll be digging for information manually. gobuster $ gobuster -u http://example.com -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -t 100 /admin/login Turns out the /admin path was an “admin tool” which allowed authenticated users to modify stuff on the webserver. It required credentials and since we have neither a username nor a password we move on. (spoiler: gobuster did not find anything of value) So far we are about 3 minutes in. Nothing useful, yet. Browsing to the website we see that it asks us to login. No problem, we create an account with a , click the confirmation e-mail and log-in after few seconds. dummy e-mail The website welcomes us and prompts us to navigate to our profile and update our profile picture. How kind. Seeing that the website looks custom built, I am inclined to test for an vulnerability. On my terminal I execute: Unrestricted File Upload echo "<?php system(\$_GET['cmd']); ?>" > exploit.php I try uploading the “image”, and bingo! The uploader allows the file to get uploaded. Of course it has no thumbnail, but that means my file got uploaded somewhere. exploit.php Get the exploit’s location Here we would expect that the uploader does some sort of processing on the uploaded file, checks its file extension and replaces with the accepted file extension like .jpeg, .jpg in order to avoid remote code execution by an attacker uploading malicious code, like yours truly. People care about security after all. right? Right? …RIGHT? `Copy image address` results in the following url being copied to our clipboard:http://www.example.com/admin/ftp/objects/XXXXXXXXXXXX.php So it seems we have our webshell ready and functioning: Seeing that the webserver runs scripts (really, perl?) we grab a perl reverse shell from our favorite , set the IP/Port and we are rewarded with a low-privileged shell — sorry, no screenshot. perl cheatsheet ~5 minutes in the assessment, and we already have a low-privilege shell. To my huge surprise, the server was not hosting only 1 website, but . Sadly I haven’t kept screenshots of every single detail but the output was along the lines of: 40 different ones $ ls /var/www access.log site1/ site2/ site3/ {... the list goes on} You get the point. Surprisingly, read access to the hosted websites was available, which meant I could read all the sites’ backend code. I limited myself to example.com’s code. ALL Notably, inside the directory, all the perl scripts were connecting to a mysql database . The credentials for the database were there in cleartext. Let these be cgi-admin/pages as root root:pwned42 Sure enough, the server was running MariaDB and I had to resort to this before being able to access the database. Afterwards we execute: issue mysql -u root -p -h localhost victimdbnamePassword: pwned42 And we’re in the database with root privileges. “use databasename;” allows us to access any of the 35 databases and view & modify their contents After just 7 minutes, we have full read/write access to the contents of 35(!) databases Here I am morally obligated to stop, and disclose my findings so far. The potential damage is already huge. What an attacker could do: Dump the contents of all the databases, as described , resulting in the data of all 35 companies to be leaked in the public domain. here Drop all the databases, effectively deleting the data of the 35 compaines Leave a backdoor for persistent access as apache with a cronjob, as described , in case they want a return trip. here I should note here that the mysql process was running as root so I figured I’d try executing in hopes of getting root. Unfortunately I was still apache. \! whoami Time to take a break. Stop the timer. What can further go wrong? After disclosing my findings, I get further permission to dig deeper. Before looking in ways to escalate my privileges to root and be able to cause massive potential damage, I was looking at what other interesting files I could read with my limited user. At that point, I remembered about the open SMB ports. That meant that there should be some folder somewhere that is being shared in the system among users. After a little enumeration, the following appears at the directory (please excuse me for the mass censorship): /home/samba/secured Inside all of these directories, there were files of each user of the That included all kinds of sensitive data, amongst others: hosting company. .psd/.ai files (Designers know how important it is to keep these private, it is their work and their techniques after all) Cookie sqlite files Invoices Pirated e-books (chuckled when I saw this) Credentials to their WiFi SSIDS What an attacker could do: Camp outside the company’s offices, login to their intranet and perform all kinds of fun attacks you can do on local networks Dump all the sensitive data listed above to the public domain It took some time to go through the folders and realize how serious this issue is.One more break. The final blow After looking around for a little longer as I decide it is time to go for the big fish, alas get root access. I refer to a popular and start enumerating the system for interesting files. apache cheatsheet Due to my digging so far I had already gone through most of these techniques already and did not seem to be able to find something that would increase my foothold. That’s when it hit me. In the Capture the Flag challenges that I am used to playing, the operating system is usually patched and it is some intentionally misconfigured service that eventually gives you the sought-after root privilege. In the real world however, people do not patch. I mean, look at Equifax (couldn’t resist). What kind of Linux is the server running? $ cat /etc/issueCentOS Linux release 7.2.1511 (Core) What version is the kernel? This looks like an old Kernel version. Does this remind you of something? If not, have a read (hint: it is VERY serious) here I found blogpost which pointed me to test if the Kernel was vulnerable with the script found here. this Timestamps & Firefox restored sites redacted Followed by: Game over. I instantly wrote an e-mail fully disclosing the details and potential impact of every step as described above, and wrapped the night. Whew. What an attacker could do: Read/modify ALL files on the server Leave a persistent backdoor (as done with apache) Install and potentially spread malware into the server’s intranet Install ransomware (taking the databases of 35 companies and all the hosting company’s data hostage is no small thing) Use the server as a cryptocurrency miner Use the server as a proxy Use the server as a C2C server Use the server as a part of a botnet … (use your imagination) (not even joking) rm -rf / The next day, I got contacted by my friend (who came in contact with the company operating the server) and was informed that the bug in the file uploader was fixed. tl;dr Summarizing,we found: A web application with an Unrestricted File Upload vulnerability, which led into a low privilege shell. Credentials to mysql database, which led to read/write access to 35 databases Lots of readable sensitive files Finally, we abused an unpatched kernel to obtain root access. Mitigations — Suggestions Let’s start by the uploader which gave us our inital foothold. Since the whole web application’s backend was written in perl — and as I do not speak perl — I cannot really suggest fixes on that. One fix I would suggest would be not to use perl in 2017 but that is just my opinion, feel free to prove me wrong. Regarding the filesystem, I recommend taking great care in assigning proper file permissions for users, according to the . That way, even if a low privileged user like apache gets access, they are not able to read any sensitive files. principle of least privilege Running all websites in the same server is a bad idea, I’m not sure if a dockerized approach would solve the issue. Having the same credentials for all databases is for sure a bad idea. Single points of failure are generally not good to have. Finally, . It’s literally 1 command: (CentOS specific) PATCH EVERYTHING **su -c 'yum update'** Thanks for reading and for making it until here, sorry for the long post. I wanted to be thorough, this was one serious situation 😄 Smash that clap button 50 times if you liked it! Shameless plug I am a 5th year Electrical & Computer Engineering student from Greece. I am interested in infosec, blockchain research & applications in modern businesses, and autonomous vehicles. Learn more about what I do at gakonst.com If you liked the content of this post and want to be updated about my work, follow me on and on Medium Twitter

How I Hacked 40 Websites in 7 minutes

© Unsplash | Jonathan Simcoe Shifting your focus to Jobs To Be Done can unlock high-growth opportunities and guarantee you consistently meet customers’ expectations. No one buys your product. No, I mean literally; customers don’t want or need , what they want is products to get a job done. This distinction might seem obvious, but when you think that about 95 percent of new products fail, that’s a lot of product managers segmenting their market the wrong way (no offense). Technology is changing too quickly to be a reliable differentiator. Meanwhile, the job that the customer is hiring your product to do doesn’t change, which makes it a stable target. As Theodore Levitt famously said in the sixties_: “customers don’t want a quarter-inch drill, they want a quarter-inch hole”_. Whether your drill connects to the Internet doesn’t matter if it can’t make a decent hole. And this applies to everything: A surgeon doesn’t want a VR headset, she wants to be trained enough to avoid making mistakes and risking a patient’s life . And Your retention team doesn’t want CRM software, they want to prevent churn. In this post, I will explain how to find out. If you know what job customers would hire your product to do, you don’t need to guess how to bring it to market or how to innovate in your category. To become a purpose brand commanding a premium price, first you must become a master at identifying what those jobs are, then how to help your customers get them done with an added value. Agreeing On Customers Needs I often discuss marketing strategy with friends who also work in the industry. One of them (we’ll call him Jordan) manages all retention efforts for an online gambling group. When he started there, he was completely oblivious of office politics and had never heard of Peter’s Principle. Jordan was a seasoned marketer and had done very well for himself in the past, but he had done so as an entrepreneur, and this was his first role as an employee. Most of Jordan’s colleagues had been promoted from customer services over the years, and his first months in his new role were spent trying to get used to his colleagues’ mentality and speak the same language. One of the biggest struggle, it seemed, was to agree on the definition of a customer need. Customer requests, sales requests, game or feature “ideas”, new technologies… Anything could be called “a need” (especially bonuses). Another worrying observation was that the culture seemed to prioritize guessing, testing and “failing fast” instead of taking the time to come up with a strategy and stick to it. This reactionary mode, combined with siloed departments and poor communications nearly made him lose his mind. It was a flawed and inefficient process. The problem with these definitions is that they are and as such, they change over time. . variables To stay ahead of competition, there must be a focus on needs stable Causation, Not Correlation Humans are formidable hackers, they constantly adapt their environment to fit their needs, often without even thinking about it. This is often where clever product managers can find the biggest growth opportunities, because customers don’t want to stitch lots of incompatible solutions together to get the entire job done. Rather than defining markets according to product categories or segmenting your customer base into target demographics, put your ethnographer’s hat on and ask yourself why your customers do what they do (or why anyone would). Because let’s face it: defining your market based to your product category doesn’t work. It’s like driving looking only at your rear mirror, or basing your acquisition strategy solely on customers you already have. Being 18 to 34 years old or being married with kids doesn’t cause anyone to buy specific products, they’re merely correlations. As a product manager, what you want to uncover is the root cause. Going back to Jordan, correlations could indicate that giving free money to customers increases conversion in the short term, but over time, those new customers are very likely to churn. Probably even faster than the guys who did not receive a bonus. Why? Because studies show that most players aren’t hiring online gambling to “win money”, they are hiring gambling to , ). “be entertained” (“get my mind off something or someone” “pass the time while waiting for something” The moment Jordan stopped focusing on money to focus on time spent playing (the real currency), the results proved him right; The user experience onsite had a lot more to do with retention than limited time offers. On the organizational side, having a separate team thinking about retention without linking their efforts to acquisition prevented progress on both sides. Identifying Jobs The Jobs To Be Done theory was first introduced by Clayton Christensen and “focuses on deeply understanding your customers’ struggle for progress and then creating the right solution.” In that sense, it is similar to design thinking in that it’s a human-centered approach. Both believe that the degree to which you understand the users’ motivations can make the difference between successful and unsuccessful innovation. It might seem rather simple at this point, but jobs are actually complex and have functional dimensions, but also social and emotional ones. Notice how is Netflix, walking the dog or hitting the gym could also be hired for this job. Because the need for distraction has been around forever, it is indeed a stable need worth focusing on. “get my mind off something” solution independent. A gambler who wants to showcase his skills and thinks he can beat the system might be more tempted to play poker or bet on sports to , boasting about his prowess on social media on his good days, while another who lives in a country where gambling is considered shameful might prefer to keep her slot machines habit to herself. And these are just examples of recreational gamblers. “be entertained” Start With Why The main reason why so many companies struggle to work with these metrics is that we live in a world where has become a synonym of , meaning focusing on the meta, the quantifiable . “business intelligence” “Big Data analysis” and the past Meanwhile, innovation and product planning should focus on the future, which makes the market terribly hard to define. A lot of people end up going back to old habits, because traditionally, their company’s data has been organized by product category or customer demographic, so they feel they must work within the same segment to get conclusive data. Getting data about a job requires commitment and to get out of your comfort zone. While you investigate, use these four techniques to get it right: In focus groups, surveys, prototyping interviews, ask customers why they use a certain product. It can be yours or your competition, but the answer should give you a good idea of the stable need hidden behind the hire. 1. Always ask why. 2. When your ideal customers wake up, what do they think about? Do you wake up wondering which software development firm to hire, or do you wonder what your customers want the most? Was this question on people’s mind 100 years ago? If not, your job statement might be too specific or include a solution, in which case you don’t have a stable target. “When I wake up in the morning, I think about…” 3. Good job verbs are action verbs and define the goal the customer is trying to reach. Define, understand, acquire, diagnose and teach are just a few examples of verbs you might use. Use goal-driven verbs. 4. To provide a better solution for your customers’ job, you must also identify the emotions surrounding the job. Use your empathy to think about what feelings could be linked with a job and how your customers want to be perceived (or not). Don’t forget the social and emotional aspects. You’re Never Done Even though jobs represent stable needs, it doesn’t mean you can move on to something else once you’ve determined which ones you should be focusing on. Think about job: getting hired was just the beginning. Now you must go to work everyday, and if you don’t do what your boss expects you to do, you could get fired. your Customers are very much like your boss. Even if they made the of purchasing your solution (product, software-as-a-service, consulting…), it doesn’t guarantee that you will live happily ever after. “big hire” as just as important, if not more. That is when customers unpack your product after leaving the store, when users login to their account and interact with your software, when they make a call to customer service or when they read your email. “Small hires” If you don’t consistently delight them by providing the most efficient, painless solution to help them make the progress they’re trying to make, they will fire you. Measuring Progress By reviewing your metrics to align them with the job to be done, you can increase the likelihood of getting hired repeatedly. Measure the speed and accuracy with which your solution is performing the job and make sure to get behavioural data to identify the social and emotional components of the job. In , Christensen describes Southern New Hampshire University’s job as Competing Against Luck “providing adult learners with credentials that will improve their professional prospects as quickly and efficiently as possible.” One of the metrics they used to improve their performance was the time between inquiries about financial aid and responses by the admissions team. By bringing it down to 10 minutes instead of 24 hours, SNHU’s conversion rates exploded. Use this formula to define which metrics to measure: (e.g. “reduce”) + (e.g. “time”) + (e.g. “obtain financial aid”) Direction metric goal Back to our slot machines, one of the metrics could be Since the job to be done, at its simplest, is entertain, the more time customers get to play for their money, the better. “increase play time per dollar spent”. Conclusion Turning your mindset, data and processes around Jobs To Be Done helps identify unmet needs, broaden your view of competition and identify other solutions’ weaknesses, generate the most relevant product ideas, and mitigate risk in your product road map. Adopt a human centric approach by constantly asking why and show empathy by weighing in the social and emotional components associated with the job.

How To Beat Your Competition and Dramatically Increase Your Customer Base

The Perfect React Modal Implementation for 2023

The 10 Best Node.js Logging Libraries

Las 10 mejores bibliotecas de registro de Node.js

Les 10 meilleures bibliothèques de journalisation Node.js

10 सर्वश्रेष्ठ नोड.जेएस लॉगिंग लाइब्रेरी

10 の最高の Node.js ロギング ライブラリ

As 10 melhores bibliotecas de registro Node.js

10 thư viện ghi nhật ký Node.js tốt nhất

10 个最好的 Node.js 日志库

https://www.youtube.com/shorts/9700RsFxMBc?embedable=true is an open-source API for building, storing & retrieving embeddings. Embedbase Today we will build a search engine for Paul Graham’s essays that we will use with Apple Siri Shortcuts, e.g. asking Siri questions about these essays. “Embeddings” are a concept in machine learning that allows you to compare data. We will not dive into the technical topic of embeddings today. A way to think about "embeddings" is like putting similar things together in a bag. So if you have a bag of toys, and you want to find a certain toy, you look in the bag and see what other toys are near it to figure out which one you want. A computer can do the same thing with words, putting similar words together in a bag, and then finding the word it wants based on the other words near it. When you want to use embeddings in your production software, you need to be able to store and access them easily. There are many vector databases and NLP models for storing and calculating embeddings. There are also some additional tricks to dealing with embeddings. For example, it can become to recompute when it is not necessary, e.g., if the note contains “dog” and then “dog,” you don’t necessarily want to recompute because the changed information might not be useful. costly and inefficient In addition, these vector databases require a steep learning curve and the need to understand machine learning. allows you to synchronize and semantically search data without knowing anything about machine learning, vector databases, and optimizing calculations in a few lines of code. Embedbase Searching Paul Graham essays with Siri In order, we will: Deploy Embedbase locally or on Google Cloud Run Build a crawler for Paul Graham essays using that ingest data into Embedbase Crawlee Build an Apple Siri Shortcut that lets you search Paul Graham essays’ through Embedbase with voice & natural language Build time! Tech stack Embedbase Typescript Crawlee + Playwright crawler for deployment Google Cloud Run for querying the index Apple Siri Shortcuts Cloning the repo git clone https://github.com/another-ai/embedbase
cd embedbase Setting up Pinecone Head to , login and create an index: Pinecone website We will name it “paul” and use dimension “1536” ( , under the hood, it is the “size” of OpenAI data structure “embeddings”), the other settings are less important. important to get this number right You need to get your Pinecone API key that will let Embedbase communicate with Pinecone: Configuring OpenAI Now you need to get your OpenAI configuration at (create an account if needed). https://platform.openai.com/account/api-keys Press “Create a new key”: Also, get your organization ID here: Creating your config Embedbase Now write and fill the values in the file “config.yaml” ( ): in embedbase directory # embedbase/config.yaml
# https://app.pinecone.io/
pinecone_index: "my index name"
# replace this with your environment
pinecone_environment: "us-east1-gcp"
pinecone_api_key: ""

# https://platform.openai.com/account/api-keys
openai_api_key: "sk-xxxxxxx"
# https://platform.openai.com/account/org-settings
openai_organization: "org-xxxxx" Running Embedbase 🎉 You can run now! Embedbase Start Docker, if you don’t have it, please install it by . following the instructions on the official website Now run Embedbase: docker-compose up (Optional) Cloud deployment This is optional, feel free to skip to the next part! Don’t want to handle infra? We’re launching a hosted version soon. Just click here to be first to know when it comes out If you are motivated, you can deploy to Google Cloud Run. Make sure to have a Google Cloud project and have installed the command line “gcloud” through . Embedbase official documentation # login to gcloud
gcloud auth login

# Get your Google Cloud project ID
PROJECT_ID=$(gcloud config get-value project)

# Enable container registry
gcloud services enable containerregistry.googleapis.com

# Enable Cloud Run
gcloud services enable run.googleapis.com

# Enable Secret Manager
gcloud services enable secretmanager.googleapis.com

# create a secret for the config
gcloud secrets create EMBEDBASE_PAUL_GRAHAM --replication-policy=automatic

# add a secret version based on your yaml config
gcloud secrets versions add EMBEDBASE_PAUL_GRAHAM --data-file=config.yaml

# Set your Docker image URL
IMAGE_URL="gcr.io/${PROJECT_ID}/embedbase-paul-graham:0.0.1"

# Build the Docker image for cloud deployment
docker buildx build . --platform linux/amd64 -t ${IMAGE_URL} -f ./search/Dockerfile

# Push the docker image to Google Cloud Docker registries
# Make sure to be authenticated https://cloud.google.com/container-registry/docs/advanced-authentication
docker push ${IMAGE_URL}

# Deploy Embedbase to Google Cloud Run
gcloud run deploy embedbase-paul-graham \
  --image ${IMAGE_URL} \
  --region us-central1 \
  --allow-unauthenticated \
  --set-secrets /secrets/config.yaml=EMBEDBASE_PAUL_GRAHAM:1 Building the Paul Graham essays’ crawler Web crawlers allow you to download all the pages of a website, it is the underlying algorithm used by Google. Clone the repository and install the dependencies: git clone https://github.com/another-ai/embedbase-paul-graham
cd embedbase-paul-graham
npm i Let’s look at the code, if you are overwhelmed with all the files necessary for a Typescript project, don’t worry & ignore them. // src/main.ts

// Here we want to start from the page that list all Paul's essays
const startUrls = ['http://www.paulgraham.com/articles.html'];

const crawler = new PlaywrightCrawler({
    requestHandler: router,
});

await crawler.run(startUrls); You can see that the crawler is initialized with “routes”, what are these mysterious routes? // src/routes.ts
router.addDefaultHandler(async ({ enqueueLinks, log }) => {
    log.info(`enqueueing new URLs`);
    await enqueueLinks({
        // Here we tell the crawler to only accept pages that are under
        // "http://www.paulgraham.com/" domain name,
        // for example if we find a link on Paul's website to an url
        // like "https://ycombinator.com/startups" if it will ignored
        globs: ['http://www.paulgraham.com/**'],
        label: 'detail',
    });
});

router.addHandler('detail', async ({ request, page, log }) => {
    // Here we will do some logic on all pages under
    // "http://www.paulgraham.com/" domain name

    // for example, collecting the page title
    const title = await page.title();

    // getting the essays' content
    const blogPost = await page.locator('body > table > tbody > tr > td:nth-child(3)').textContent();
    if (!blogPost) {
        log.info(`no blog post found for ${title}, skipping`);
        return;
    }
    log.info(`${title}`, { url: request.loadedUrl });
    
    // Remember that usually AI models and databases have some limits in input size
    // and thus we will split essays in chunks of paragraphs
    // split blog post in chunks on the \n\n
    const chunks = blogPost.split(/\n\n/);
    if (!chunks) {
        log.info(`no blog post found for ${title}, skipping`);
        return;
    }
    // If you are not familiar with Promises, don't worry for now
    // it's just a mean to do things faster
    await Promise.all(chunks.flatMap((chunk) => {
        const d = {
            url: request.loadedUrl,
            title: title,
            blogPost: chunk,
        };
        // Here we just want to send the page interesting
        // content into Embedbase (don't mind Dataset, it's optional local storage)
        return Promise.all([Dataset.pushData(d), add(title, chunk)]);
    }));
}); What is ? add() const add = (title: string, blogPost: string) => {
    // note "paul" in the URL, it can be anything you want
    // that will help you segment your data in
    // isolated parts
    const url = `${baseUrl}/v1/paul`;
    const data = {
        documents: [{
            data: blogPost,
        }],
    };
    // send the data to Embedbase using "node-fetch" library
    fetch(url, {
        method: 'POST',
        headers: {
            'Content-Type': 'application/json',
        },
        body: JSON.stringify(data),
    }).then((response) => {
        return response.json();
    }).then((data) => {
        console.log('Success:', data);
    }).catch((error) => {
        console.error('Error:', error);
    });
}; Now you can run the crawler, it should take less than a minute to download & ingest everything in Embedbase. OpenAI credits will be used, for less than <$1 npm start If you deployed Embedbase to the cloud, please use # you can get your cloud run URL like this:
CLOUD_RUN_URL=$(gcloud run services list --platform managed --region us-central1 --format="value(status.url)" --filter="metadata.name=embedbase-paul-graham")
npm run playground ${CLOUD_RUN_URL} You should see some activity in your terminal (both Embedbase Docker container & the node process) without errors ( ). feel free to reach out for help otherwise (Optional) Searching through Embedbase in your terminal In the example repository you can notice “ ” which is a simple script that lets you interact with Embedbase in your terminal, the code is straightforward: src/playground.ts // src/playground.ts
const search = async (query: string) => {
    const url = `${baseUrl}/v1/paul/search`;
    const data = {
        query,
    };
    return fetch(url, {
        method: 'POST',
        headers: {
            'Content-Type': 'application/json',
        },
        body: JSON.stringify(data),
    }).then((response) => {
        return response.json();
    }).then((data) => {
        console.log('Success:', data);
    }).catch((error) => {
        console.error('Error:', error);
    });
};

const p = prompt();

// this is an interactive terminal that let you search in paul graham
// blog posts using semantic search
// It is an infinite loop that will ask you for a query
// and show you the results
const start = async () => {
    console.log('Welcome to the Embedbase playground!');
    console.log('This playground is a simple example of how to use Embedbase');
    console.log('Currently using Embedbase server at', baseUrl);
    console.log('This is an interactive terminal that let you search in paul graham blog posts using semantic search');
    console.log('Try to run some queries such as "how to get rich"');
    console.log('or "how to pitch investor"');
    while (true) {
        const query = p('Enter a semantic query:');
        if (!query) {
            console.log('Bye!');
            return;
        }
        await search(query);
    }
};

start(); You can run it like this if you are running Embedbase locally: npm run playground Or, like this, if you deployed Embedbase to the cloud: npm run playground ${CLOUD_RUN_URL} Results: (Optional) Building Apple Siri Shortcut Fun time! Let’s build an Apple Siri Shortcut to be able to ask Siri questions about Paul Graham essays 😜 First, let’s start Apple Shortcuts: Create a new shortcut: We will name this shortcut “Search Paul” (be aware that it will be how you ask Siri to start the Shortcut, so pick something easy) In plain English, this shortcut asks the user a query and calls Embedbase with it, and tells Siri to pronounce out loud the essays it found. “Dictate text” let you ask your search query with voice (choose English language) We store the endpoint of in a “Text” for clarity, change according to your setup ("https://localhost:8000/v1/search” if you run locally) Embedbase Embedbase We set the endpoint in a variable again for clarity Same for the dictated text Now “Get contents of” will do an HTTP POST request to Embedbase using our previously defined during the crawling “vault_id” as “paul” and use the variable “query” for the “query” property “Get for in” will extract the property “similarities” from the Embedbase response “Repeat with each item in” will, for each similarity: Get the “document_path” property Add to a variable “paths” (a list) “Combine” will “join” the results with a new line (Optional, will show how below) This is a fun trick you can add to the shortcut for spiciness, using OpenAI GPT3 to transform a bit of the result text to sound better when Siri pronounces it We assemble the result into a “Text” to be voice-friendly Ask Siri to speak it https://www.youtube.com/shorts/9700RsFxMBc?embedable=true You can transform the results into nicer text using this functional GPT3 shortcut (fill “Authorization” value with “Bearer [YOUR OPENAI KEY]”) With Embedbase, you can build a semantic-powered product in no time without having the headache of building, storing & retrieving embeddings while keeping the cost low. Conclusion Please try Embedbase, drop an issue, and if you don’t mind supporting this effort & starring the repository ❤️ Don’t want to handle infra? We’re launching a hosted version soon. Just click here to be first to know when it comes out https://github.com/another-ai/embedbase-paul-graham?embedable=true https://www.youtube.com/shorts/9700RsFxMBc?embedable=true

Building an Embeddings Powered Product to Search Paul Graham Essays Using Siri

Creación de un producto con tecnología de incrustaciones para buscar ensayos de Paul Graham con Siri

Création d'un produit alimenté par intégrations pour rechercher des essais de Paul Graham à l'aide de Siri

सिरी का उपयोग करके पॉल ग्राहम निबंध खोजने के लिए एक एंबेडिंग संचालित उत्पाद का निर्माण

Siri を使用して Paul Graham のエッセイを検索する埋め込み機能を備えた製品の構築

Construindo um produto baseado em incorporações para pesquisar ensaios de Paul Graham usando a Siri

Xây dựng một sản phẩm hỗ trợ nhúng để tìm kiếm các bài luận của Paul Graham bằng Siri

构建嵌入驱动的产品以使用 Siri 搜索 Paul Graham 的散文

Keycloak and Kafka are two popular technologies that are widely used in modern microservice architectures. Keycloak provides a centralized solution for authentication and authorization, while Kafka is a scalable and high-throughput message queue system. In this article, we will look at how to execute a scheduled task in Keycloak on startup using a Kafka consumer as an example. By combining these two technologies, you can build a secure and scalable microservice architecture that can handle a large volume of data. One of Keycloak's capabilities is running scheduled tasks, which can perform various actions such as synchronization of data, maintenance tasks, and many others. Keycloak allows you to create custom providers to extend its functionality. In our case, we will create a custom provider to run the Kafka consumer as a scheduled task. ProviderEvents and PostMigrationEvent The Keycloak API provides events that can be used to trigger a scheduled task. is a general-purpose event that can be triggered at various points in the Keycloak lifecycle, such as on startup, after authentication, and after authorization. However, it is important to note that is not supported by , which is a Keycloak component used to listen to events. ProviderEvents ProviderEvents EventListenerProvider is an extension of . is triggered after Keycloak has completed a database migration. This event can be used to perform any necessary post-migration tasks, such as cleaning up old data or updating indexes.
By using either of these events, you can schedule tasks to run automatically at specific points in the Keycloak lifecycle, allowing you to perform actions that are required for your application. PostMigrationEvent ProviderEvents PostMigrationEvent Steps to Execute Scheduled Task in Keycloak on Startup Create a mock EventListenerProvider This class will just be a stub because the does not allow you to subscribe to . EventListenerProvider ProviderEvents public class KeycloakConsumerEventListener implements EventListenerProvider {

    private static final Logger log = Logger.getLogger(KeycloakConsumerEventListener.class);


    public KeycloakConsumerEventListener(String topicKafka, Properties props) {
        log.info("init custom event listener consumer");
    }



    @Override
    public void onEvent(Event event) {

    }

    @Override
    public void onEvent(AdminEvent adminEvent, boolean b) {
    }

    @Override
    public void close() {

    }
} Create an EventListenerProviderFactory This class will be responsible for creating instances of the and starting the scheduled tasks. In the init method, we will define configs for our consumer. EventListenerProvider public class KeycloakConsumerEventListenerFactory implements EventListenerProviderFactory {
    private KeycloakConsumerEventListener keycloakConsumerEventListener;

    private static final Logger log = Logger.getLogger(KeycloakConsumerEventListenerFactory.class);

    private String topicKafka;
    private String bootstrapServers;
    
    private Properties properties;

    private Consumer<String, String> consumer;

    @Override
    public EventListenerProvider create(KeycloakSession keycloakSession) {
        if (keycloakConsumerEventListener == null) {
            keycloakConsumerEventListener = new KeycloakConsumerEventListener(topicKafka, properties);
        }
        return keycloakConsumerEventListener;
    }

    @Override
    public void init(Config.Scope scope) {
        log.info("Init kafka consumer");


        bootstrapServers = System.getenv("KAFKA_BOOTSTRAP_SERVERS");
        

        topicKafka = System.getenv("KAFKA_TOPIC");

        if (topicKafka == null || topicKafka.isEmpty()) {
            throw new NullPointerException("topic is required.");
        }
        if (bootstrapServers == null || bootstrapServers.isEmpty()) {
            throw new NullPointerException("bootstrapServers are required");
        }
        
        properties = getProperties();

    }

    @Override
    public void postInit(KeycloakSessionFactory keycloakSessionFactory) {
        // define latter
    }

    @Override
    public void close() {

    }

    @Override
    public String getId() {
        return "kafka-event-consumer";
    }

    private Properties getProperties() {
        Properties propsKafka = new Properties();
        propsKafka.put(ProducerConfig.BOOTSTRAP_SERVERS_CONFIG, bootstrapServers);
        propsKafka.put(ProducerConfig.KEY_SERIALIZER_CLASS_CONFIG, StringSerializer.class.getName());
        propsKafka.put(ProducerConfig.VALUE_SERIALIZER_CLASS_CONFIG, StringSerializer.class.getName());
        propsKafka.put(ConsumerConfig.KEY_DESERIALIZER_CLASS_CONFIG, StringDeserializer.class);
        propsKafka.put(ConsumerConfig.VALUE_DESERIALIZER_CLASS_CONFIG, StringDeserializer.class);
        propsKafka.put(ConsumerConfig.GROUP_ID_CONFIG, "KeycloakKafkaExampleConsumer");

        
        return propsKafka;
    }
} Override the postInit method of the Factory In the postInit method, initialize the Kafka consumer and start the scheduled task by using the . This will ensure that the scheduled task is executed on startup after Keycloak has completed its database migration. PostMigrationEvent @Override
    public void postInit(KeycloakSessionFactory keycloakSessionFactory) {
        keycloakSessionFactory.register(event -> {
            if (event instanceof PostMigrationEvent) {
                log.info("Init kafka consumer task");
  
                if (consumer == null) {
                    consumer = new KafkaConsumer<>(properties);

                    consumer.subscribe(Collections.singletonList(topicKafka));
                }

                KeycloakSession keycloakSession = keycloakSessionFactory.create();

                TimerProviderFactory timerProviderFactory = (TimerProviderFactory) keycloakSessionFactory.getProviderFactory(TimerProvider.class);
                //execute task every 10 seconds
                timerProviderFactory.create(keycloakSession)
                        .scheduleTask(this::processRecords, 10000, "kafka-consumer");
            }
        });
    }

    private void processRecords(KeycloakSession session) {
        log.debug("task execute");
        final ConsumerRecords<String, String> consumerRecords =
                this.consumer.poll(1000);

        try {
            consumerRecords.forEach(record -> {
                System.out.printf("Consumer Record:(%s, %s, %d, %d)\n",
                        record.key(), record.value(),
                        record.partition(), record.offset());
            });
        } finally {
            consumer.commitAsync();
        }
    } Conclusion Keycloak provides a powerful and flexible way to run scheduled tasks that can perform various actions such as synchronization of data, maintenance tasks, and many others. By combining it with Kafka, you can build a secure and scalable microservice architecture that can handle a large volume of data. By following the steps outlined in this article, you can execute a scheduled task in Keycloak on startup using a Kafka consumer as an example. This is just one example of how you can extend Keycloak's functionality, and the same steps can be applied to implement other scheduled tasks as well.

How to Execute a Scheduled Task in Keycloak on Startup

As programmers, we have probably needed to implement social media login at some point and, this is an increasingly common functionality in today’s applications and websites. Social login allows users to log in to applications or websites using their accounts such as Facebook, Google, Twitter, etc. This saves users time by not having to create an additional account and password and taking advantage of the social network’s security measures. For example, if a user has enabled two-step authentication on their Google account, this security will also apply to the application or website they are using. In this tutorial, we will implement Github and login in a React application with TypeScript. We will use Vite to create our application and pnpm as package manager. Google Login with RRSS’s first steps First of all, to use the authentication services of any platform, we need to create an OAuth application and obtain the necessary keys. For GiHub follow these steps. For Google follow these steps Make sure to keep the keys in a safe place. After this, we are going to start the development of our application. Since in this application we will make use of sensitive and private data such as client secret keys, it is necessary to create a backend and use it on the server side for security reasons. So we will have two applications, backend and client, each in its directory. Setting up Backend We create our application with the following command: pnpm init -y We install the dependencies that we will need in the project: pnpm install express axios cors dotenv tsc ts-node pnpm install @types/cors @types/express @types/node ts-node-dev typescript -D After that, we create the following structure for the project: ├── src/
│   ├── routes/
│   │   ├── github-routes.ts
│   │   └── google-routes.ts
│   ├── controllers/
│   │   ├── github-controller.ts
│   │   └── google-controller.ts
│   └── server.ts
├── .env
├── .env-example Setting up Client We install the dependencies that we will need in the project: pnpm install @octokit/auth @react-oauth/google @nextui-org/react axios react-router-dom After that, we create the following structure for the project: ├── src/
│   ├── assets/
│   │   ├── icons/
│   │   │   ├── Github.tsx
│   │   │   ├── Google.tsx
│   │   │   ├── Logout.tsx
│   │   │   └── index.ts
│   ├── pages/
│   │   ├── home/
│   │   │   ├── services/
│   │   │   │   └── home-services.ts
│   │   │   └── HomePage.tsx
│   │   └── login/
│   │       └── LoginPage.tsx
│   ├── index.tsx
│   ├── App.tsx
│   └── main.tsx
├── .env
├── .env-example GitHub Login Backend File : server.ts import express from 'express';
import cors from 'cors';

import githubRoutes from './routes/github-routes';
import googleRoutes from './routes/google-routes';

const PORT = process.env.PORT || 3001

const app = express();

app.use(
  cors({
    origin: ['http://localhost:5173'],
    methods: 'GET,POST',
  }),
);

app.use(express.json());

app.use('/api/github', githubRoutes);
app.use('/api/google', googleRoutes);

app.listen(PORT, () => console.log('Server on port', PORT)); This code creates a server application with Express. The application uses the cors library to enable cross-origin access (CORS) and sets the origin and allowed methods. The application also uses the function to enable the use of JSON in requests and to define routes for the GitHub service and the Google service. app.use() Finally, the application listens on the port specified in the constant, or on port 3001 if no port is specified. PORT File : github-routes.ts import express, { Request, Response, Router } from 'express';
import { getAccessToken, getUserData } from '../controllers/github-controller';

const router: Router = express.Router();

router.get('/accessToken', (req: Request, res: Response) => {
  const code = req.query.code;
  getAccessToken(code as string).then((resp) => res.json(resp));
});

router.get('/userData', (req: Request, res: Response) => {
  const accessToken = req.query.accessToken;
  getUserData(accessToken as string).then((resp) => res.json(resp));
});

export default router; This code creates an Express router which defines two routes y . /accessToken /userData The route s a GET route that takes a parameter from the query and calls the function of the GitHub service. /accessToken code getAccessToken The rute is a GET route that takes an parameter from the query and calls the function of the GitHub service. /userData accessToken getUserData File : google-routes.ts import express, { Request, Response, Router } from 'express';
import { getUserData } from '../controllers/google-controller';

const router: Router = express.Router();

router.get('/userData', (req: Request, res: Response) => {
  const accessToken = req.query.accessToken;
  getUserData(accessToken as string).then((resp) => res.json(resp));
});

export default router; This code creates an Express router that defines a GET route called . The route takes an parameter from the query and calls the function of the Google service. /userData accessToken getUserData File : github-controller.ts import * as dotenv from 'dotenv';
import axios from 'axios';

dotenv.config();

type AccessTokenData = {
  access_token: string;
  token_type: string;
  scope: string;
} | null;

export const getAccessToken = async (
  code: string,
): Promise<AccessTokenData> => {
  try {
    const params = `?client_id=${process.env.GITHUB_CLIENT_ID}&client_secret=${process.env.GITHUB_CLIENT_SECRET}&code=${code}`;

    const { data } = await axios.post(
      `https://github.com/login/oauth/access_token${params}`,
      {},
      {
        headers: {
          Accept: 'application/json',
        },
      },
    );

    return data;
  } catch (error) {
    console.log(error);
    return null;
  }
};

export const getUserData = async (accessToken: string) => {
  try {
    const { data } = await axios.get('https://api.github.com/user', {
      headers: {
        Authorization: `Bearer ${accessToken}`,
      },
    });

    return data;
  } catch (error) {
    return null;
  }
}; The function receives the parameter makes a POST request to the GitHub API to obtain an access token using the provided , and . getAccessToken code client_id client_secret code The function receives the parameter and returns the user information from the GitHub API using the access token provided in the request. getUserData accessToken File : google-controller.ts import axios from 'axios';

export const getUserData = async (accessToken: string) => {
  try {
    const { data } = await axios.get(
      'https://www.googleapis.com/oauth2/v3/userinfo',
      {
        headers: {
          Authorization: `Bearer ${accessToken}`,
        },
      },
    );

    return data;
  } catch (error) {
    return null;
  }
}; The function receives the parameter and performs a GET request to the Google OAuth user information API using the access token provided in the authorization header of the request and returns the user information. getUserData accessToken Now we already have our backend created with the minimum we need, now let’s go for the frontend. Client File : main.tsx import { GoogleOAuthProvider } from "@react-oauth/google"

import ReactDOM from "react-dom/client"

import { NextUIProvider } from "@nextui-org/react"
import { darkTheme } from "./themes/darktheme"

const GOOGLE_CLIENT_ID = import.meta.env.VITE_GOOGLE_CLIENT_ID

import App from "./App"

ReactDOM.createRoot(document.getElementById("root") as HTMLElement).render(
 <NextUIProvider theme={darkTheme}>
  <GoogleOAuthProvider clientId={GOOGLE_CLIENT_ID}>
   <App />
  </GoogleOAuthProvider>
 </NextUIProvider>
) In this application we will use for the styles, you can use any UI library you want. Next UI The component provides the dark theme to all the components of the application. NextUIProvider The component provides the Google login to the application using the provided . GoogleOAuthProvider clientId Component : App.tsx import { BrowserRouter as Router, Route, Routes } from 'react-router-dom';
import { LoginPage, HomePage } from './pages';

const App = () => {
  return (
    <Router>
      <Routes>
        <Route path="/home" element={<HomePage />}></Route>
        <Route path="/" element={<LoginPage />}></Route>
      </Routes>
    </Router>
  );
};

export default App; In the App component, we will create the routes of the pages that we will use and we will assign the corresponding component. Component LoginPage.tsx import { useGoogleLogin } from "@react-oauth/google"
import { useNavigate } from "react-router-dom"

import { Card, Spacer, Button, Text, Container } from "@nextui-org/react"

import { IconGitHub, IconGoogle } from "../../assets/icons"

const GITHUB_CLIENT_ID = import.meta.env.VITE_GITHUB_CLIENT_ID

const LoginPage = () => {
 const navigate = useNavigate()

 const loginToGithub = () => {
  localStorage.setItem("loginWith", "GitHub")
  window.location.assign(`https://github.com/login/oauth/authorize?client_id=${GITHUB_CLIENT_ID}`)
 }

 const loginToGoogle = useGoogleLogin({
  onSuccess: tokenResponse => {
   localStorage.setItem("loginWith", "Google")
   localStorage.setItem("accessToken", tokenResponse.access_token)
   navigate("/home")
  },
 })

 return (
  <Container display='flex' alignItems='center' justify='center' css={{ minHeight: "100vh" }}>
   <Card css={{ mw: "420px", p: "20px" }}>
    <Text
     size={24}
     weight='bold'
     css={{
      as: "center",
      mb: "20px",
     }}
    >
     Login with
    </Text>
    <Spacer y={1} />
    <Button color='gradient' auto ghost onClick={() => loginToGithub()}>
     <IconGitHub />
     <Spacer x={0.5} />
     GitHub
    </Button>
    <Spacer y={1} />

    <Button color='gradient' auto ghost onClick={() => loginToGoogle()}>
     <IconGoogle />
     <Spacer x={0.5} />
     Google
    </Button>
   </Card>
  </Container>
 )
}

export default LoginPage When the user clicks the GitHub login button, the user is redirected to the GitHub login page and a key is stored in the browser’s local storage indicating that the user is logging in with GitHub. When the user clicks the Google login button, the function of is used to log in with Google. If the login is successful, a key is stored in the browser’s local storage indicating that the user is signing in with Google. useGoogleLogin @react-oauth/google Component : HomePage.tsx import { useEffect, useRef, useState } from "react"
import { useNavigate } from "react-router-dom"
import { Button, Col, Container, Navbar, Row, Text, User } from "@nextui-org/react"

import { getAccessTokenGithub, getUserDataGithub, getUserDataGoogle } from "./services/home-services"

import { LogOutIcon } from "../../assets/icons"

interface UserDataGithub {
 avatar_url: string
 login: string
 bio: string
}

interface UserdataGoogle {
 name: string
 picture: string
 email: string
}

const HomePage = () => {
 const [userDataGithub, setUserDataGithub] = useState<null | UserDataGithub>(null)
 const [userDataGoogle, setUserDataGoogle] = useState<null | UserdataGoogle>(null)

 const loginWith = useRef(localStorage.getItem("loginWith"))

 const navigate = useNavigate()

 useEffect(() => {
  const queryString = window.location.search
  const urlParams = new URLSearchParams(queryString)
  const codeParam = urlParams.get("code")

  const accessToken = localStorage.getItem("accessToken")

  if (codeParam && !accessToken && loginWith.current === "GitHub") {
   getAccessTokenGithub(codeParam).then(resp => {
    localStorage.setItem("accessToken", resp.access_token)
    getUserDataGithub(resp.access_token).then((resp: UserDataGithub) => {
     setUserDataGithub(resp)
    })
   })
  } else if (codeParam && accessToken && loginWith.current === "GitHub") {
   getUserDataGithub(accessToken).then((resp: UserDataGithub) => {
    localStorage.setItem("accessToken", accessToken)
    setUserDataGithub(resp)
   })
  }
 }, [loginWith])

 useEffect(() => {
  const accessToken = localStorage.getItem("accessToken")

  if (accessToken && loginWith.current === "Google") {
   getUserDataGoogle(accessToken).then(resp => {
    setUserDataGoogle(resp)
   })
  }
 }, [loginWith])

 const setLogOut = () => {
  localStorage.removeItem("accessToken")
  localStorage.removeItem("loginWith")
  navigate("/")
 }

 if (!userDataGithub && !userDataGoogle) return null

 return (
  <>
   <Navbar isBordered variant='sticky'>
    <Navbar.Brand>
     <User
      bordered
      color='primary'
      size='lg'
      src={loginWith.current === "GitHub" ? userDataGithub?.avatar_url : userDataGoogle?.picture}
      name={loginWith.current === "GitHub" ? userDataGithub?.login : userDataGoogle?.name}
      description={loginWith.current === "GitHub" ? userDataGithub?.bio : userDataGoogle?.email}
     />
    </Navbar.Brand>
    <Navbar.Content>
     <Navbar.Item>
      <Button
       auto
       flat
       size='sm'
       icon={<LogOutIcon fill='currentColor' />}
       color='primary'
       onClick={() => setLogOut()}
      >
       Log out
      </Button>
     </Navbar.Item>
    </Navbar.Content>
   </Navbar>
   <Container gap={0}>
    <Row gap={1}>
     <Col>
      <Text h2>Login with {loginWith.current}</Text>
     </Col>
    </Row>
   </Container>
  </>
 )
}

export default HomePage After the user has logged in and is redirected to Home, we will use the hook to perform a series of actions when the page loads. useEffect First, we get the authorization code from the page URL and, if the user has logged in with GitHub, we get an access token and then we get the user’s data from GitHub. If the user has logged in with Google, we simply get the Google user data. In addition, we have a “Logout” button that removes the access token and login from local storage and redirects the user to the application’s home page. That’s it! Now we can log in to GitHub or Google. The next steps are to register the user and save the user information in a database or whatever suits you. The application looks something like this: Repo here. Conclusion Social login is a feature that offers many advantages for both users and developers. It is simple to integrate and can improve the user experience and security of the application or website. Therefore, it is a good idea to consider using it in your projects. Also published here.

Implementing Social Login for a React and Backend App

Often, developers create technical solutions using whatever is available to get the functionality up and running. Especially when it is necessary to test some product hypothesis and it doesn't make much sence to spend a lot of time and resources on it. After the hypothesis is confirmed, an even more interesting time begins - the search for tradeoffs: you need to release features quickly, adapting to the users number growth. It is very handy to be able to change the behavior of the service at any time without restarting the servers, or to turn off a broken functionality or to conduct AB-testing. To do this, developers usually use . If your startup has not a giant, but a small group of enthusiasts - you will have to solve this problem using available tools. In this article, I will show you a simple way of how to implement Feature Toggle using a shared SQL database. Feature Toggles Description of a typical system No matter how much effort is put into the development of fault-tolerant self-sustainable systems, manual interventions are inevitable: fixing data inconsistencies, triggering tasks, recovering data after an outage, backfilling or migrations, displaying business operations and related data. If a problem could be fixed easily, a developer can adjust data directly in the database, or write a bash/python/whatever script. We usually avoid direct accessing the data, but circumstances could make you do it. But there is a more reliable way - an application with internal use - Administration Panel. Benefits of having Admin Panel: authorized access; logging and auditing all the actions done by a user; its code usually reviewed and tested; accessible not only by users, but by tech support. Often admin panel is designed to access database of business-logic servers. This approach has some disadvantages, but is a good tradeoff: providing an acceptable level of security through simple implementation. Thus, most probably, you can use the main database to store the settings, including the feature-toggle and access them from your servers. Get your hands dirty with code Simple toggle The simplest use case is a two position toggle - either enable for all or disable for all. private final FeatureToggleService featureToggleService;

public void businessLogic() {
   if (featureToggleService.isFeatureEnabled(IMPORTANT_FEATURE)) {
       doImportantFeatureStuff();
   } else {
       log.info("Feature disabled {}", IMPORTANT_FEATURE);
   }
} If I implemented it in memory, I'd check if there is a key in a hash set. If there is one - feature is enabled, otherwise - disabled. In an SQL database there could be a table, which contains the names of the features - that's all what we need here. We can query the keys and that's how it could look like: public class FeatureToggleService {

   private static final String STATE_QUERY = "SELECT id FROM features WHERE name = (?)";

   private final JdbcOperations jdbcOperations;

   private final LoadingCache<String, Boolean> toggleStateCache = CacheBuilder.newBuilder()
           .expireAfterWrite(60, TimeUnit.SECONDS)
           .build(new CacheLoader<>() {
               public Boolean load(String featureName) {
                   return jdbcOperations.queryForList(STATE_QUERY, String.class, featureName)
                              .size() > 0;
               }
           });

   public boolean isFeatureEnabled(String featureName) {
       boolean state = toggleStateCache.getUnchecked(featureName);
       return Boolean.TRUE.equals(state);
   }
} In the example above, I used a cache from Google Guava. It’s a simple local cache, but in 99% of cases it will probably meet your requirements. Feature are toggled infrequently, there is no point in making requests often. I chose 60 seconds as an example - but it’s a good trade off, not too many requests and not too long switching. User specific toggle A slightly more complicated case. You want to test functionality in production, but you don't want it to be available to all users. Instead, you want to enable the feature only for a set of users, who are considered to be testers. private final FeatureToggleService featureToggleService;

public void businessLogic(LoggedUser loggedUser) {
   if (featureToggleService.isFeatureEnabled(IMPORTANT_FEATURE, loggedUser.id())) {
       doImportantFeatureStuff();
   } else {
       log.info("Feature disabled {}", IMPORTANT_FEATURE);
   }
} The third state of the feature has appeared - testing. So states are: Enabled for all Disabled for all Enabled for testers If feature is enabled for testing - you should check if current user is a tester. In other words whether user is in a list of persons who should have access to the feature. The database will require a second column that will store the state of the feature (it could be a number or a meaningful name). And you will also need to store a list of testers somewhere, for example, it could be another table in the database. And the implementation could be: public class FeatureToggleService {

   private static final String STATE_QUERY =
            "SELECT enabled_for FROM features WHERE name = (?)";
   private static final String TESTERS_QUERY = "SELECT id FROM test_users";
   private final JdbcOperations jdbcOperations;

   private final Supplier<Set<Long>> testUsersSupplier =
           memoizeWithExpiration(this::extractTesters, 60, TimeUnit.SECONDS);

   private final LoadingCache<String, String> toggleStateCache = CacheBuilder.newBuilder()
           .expireAfterWrite(60, TimeUnit.SECONDS)
           .build(new CacheLoader<>() {
               public String load(String featureName) {
                   return jdbcOperations.queryForList(STATE_QUERY, String.class, featureName)
                           .stream().findFirst().orElse("NONE");
               }
           });

   public boolean isFeatureEnabled(String featureName, long userId) {
       String state = toggleStateCache.getUnchecked(featureName);
       return "ALL".equals(state) ||
               ("TEST".equals(state) && testUsersSupplier.get().contains(userId));
   }

   private Set<Long> extractTesters() {
       return Set.copyOf(jdbcOperations.queryForList(TESTERS_QUERY, Long.class));
   }
} First we fetch state of the feature by it’s name (either from database or cache), then if it’s consider it enabled for all, or if it’s - consider it only enabled for testers. If so we fetch list of testers (either from database or from cache) and check if current user is in the list. If none of above - consider feature disabled for all. ALL TEST What could go wrong with the implementations above There is one un-obvious problem with local cache which you should be aware of: you’re setting feature enabled for all 09:45:27 request 1 has come to server 1 and feature worked as enabled 09:45:47 request 2 has come to server 2 and feature didn’t work as disabled 09:45:51 Why is that so? Local caches don’t know anything about other ot servers, in most cases it could not be a problem at all. Otherwise, you should do one of following: continue using local cache but evict it by a notification (using a pub sub system or broadcast messages); use a distributed cache (eCache or similar) and evict it on each change; use an in-memory databases (Redis, Zookeeper or similar) to store features and provide low-cost access to it; use a paid service which provides this functionality (there are a number of them, no adds and preferences here); come up with your own brilliant idea, there could be a plenty of them :) Conclusion Many developers think that it’s cool to use a fancy framework, but you need to assess if it's really justified. It's often easier to write a simple module that satisfies specific needs of your application, develop it your own way. But here you need to feel the boundary - writing your own HashMap from scratch does not make any sense.

Use Feature Toggle to Safely Release Updates On Your Server

WebSockets are mainly used to create real-time applications, such as chat apps, collaboration platforms and streaming dashboards. These applications take advantage of two-way/bidirectional communication between a server and users’ browsers. Serverless is usually associated with FaaS, an isolated stateless function that is triggered by another service. Creating a Serverless Websocket application would require you to use AWS Lambda with WebSockets in API Gateway and DynamoDB to store connections. This is overly complicated. We’ll show you how to create something faster. Serverless iFaaS platforms don’t require initialization before the function executes so you don’t pay a price for waking up a container once it has been deployed. It’s technically always live. You also have access to a baked-in key/value store which means that you don’t end up losing state between subsequent invocations. I.e. you don’t have to start from a blank slate on every invocation. Hence the lack of need for an external database such as DynamoDB. The Plan We’ll demonstrate something very simple here by using a pre-made Websocket Trigger to connect and broadcast all messages to all connected clients. See the visual workflow below. You’ll need a free to set this up yourself. Lolo account If you want to get started right away you can simply copy the contents of and paste it into a new application in a blank graph in Lolo. Save and Run the application to deploy it. That’s 1 minute of work. this document Do follow along though if you want to understand how to use it or if you want to set this up from scratch. Create an Application and add a Trigger To begin, we need to set up a new WebSocket server that can handle inbound WebSocket requests from clients. We do this by first creating a new application in your and then adding the Trigger from the Functions Gallery on the left of the graph. Add in a path name, such as . You can also rename it. Lolo account Lolo/Websocket /socket Process the Incoming Request When you add this you get three output ports in the node called , and so you need to set up ways to process these requests. Add another inline Function (i.e. a custom function) and name it Remove the in port and instead add in three in ports called , and . WebSocket Trigger req message close ‘Process Request.’ req msg close Link the ports to the right in and out ports with the nodes, look below for an illustration on how to do this. We need a bit of code to do something here with the WebSocket connection. Copy and paste in the code from below. Open up the Process Request node and paste in the code below in the handler. const connections = {};

exports.handler = async (ev, ctx) => {
  const { route, input, inputs, log, emit } = ctx;
  const { sessionId } = ev;

  // check incoming port (i.e. req, message or close)
  switch (input) {

    // on first connection
    case inputs.req:
      connections[sessionId] = {
        send: body => emit('response', { body }),
        end: () => emit('response', { end: true }),
        info: ev.headers
      }
      ev.body = { connected: true, yourConnectionId: sessionId };
      // re-route data to 'req' output port
      route(ev, 'req');
      break;

    // on subsequent messages 
    case inputs.msg:
      // re-route data to 'msg' output port
      route({ connections, message: ev.message, sessionId }, 'msg')
      break;

    // when client disconnects 
    case inputs.close:
      log.info("client has disconnected");
      delete connections[sessionId];
      break;
  }
}; The code above is checking what ports the incoming data is routed through, giving us a way to handle a new connection by adding it to connections. We are also setting up how we want to handle subsequent messages and a disconnecting client by using the in ports, msg and close. This code above though is re-routing to other nodes via the route() method as well. As you can see we have two output routes here to ‘req’ and ‘msg.’ We thus need to add those two output ports as well. Send back a response Now we have two outports in the Function that needs to go somewhere, so we create another inline Function called and paste the code below. Process Request Affirm Connection All this does is signal the listener within the WebSocket Trigger to send a response to the client. We will route the req route to this node. exports.handler = async(ev, ctx) => {
  const { emit, log } = ctx;
  // Log to the console that a client has connected
  log.info("client has connected");
  // send response to the client
  emit('response', ev);
}; Along with this we also need a way to handle subsequent messages. In this case, we said we would broadcast all messages to all clients when someone sends something. So, create another inline Function (i.e. a custom function) and call it . Paste in the code below, and see the comments to understand what it does. Handle Messages exports.handler = async (ev, ctx) => {
  // extract connections, and current session id from the event data
  const { connections, sessionId } = ev;
  // send messages
  await broadcastToAll(ctx, connections, sessionId, ev);
};

const broadcastToAll = async ({ log }, connections, currentSessionId, ev) => {

  // loop through connections
  Object.keys(connections).forEach(sessionId => {
    try {
        // send message to everyone but the current sessionId
        if (currentSessionId !== sessionId) {
        connections[sessionId].send(`${sessionId} says: ${ev.message}`)
        } 
    } catch (e) {
      log.error(e)
    }
  });
}; You can remove the out ports for both of these new Functions. Now we also have to route the data visually from the Process Request node to the other two nodes we’ve created. See these steps in action below. Save and Deploy Alright, that was it. You can save and deploy. Look in the Logs for the message to see if it is ready to use. This may take a while. We are not using any NPM modules here so should be faster but if we did we would have to wait about a minute. ‘Listening to port 4000’ Now go into the WebSocket Trigger to collect the External URL. We are going to use it to connect to this Websocket. Open two terminals on your computer and then connect via wscat on both. wscat -c wss://eu-1.lolo.co/:appId/socket Remember to NPM install wscat -g (via your terminal) first if you don’t already have wscat installed. Now you should be able to talk via the different terminals. Say hi and what’s up in either terminal and see the response broadcasted to all connected clients. You can ask a friend to connect on a different computer and talk that way. It goes without saying that you can connect this via a frontend to build a quick chat app. Remember if you are having issues, just copy the contents of and paste it into an empty graph in a Lolo application to get the entire app set up for you. this document Your Lolo app in free tier should be able to handle a few thousand of events per second. If you need more than that you simply add replicas when you configure your deployment to handle the increased load. Let us know if you have any feedback. We’re keen to create better Serverless experiences. Also published . here

Loginno News on
HackerNoon and Around the Web

Winner for Best Startup in Modi'In, Israel!

loginno.com

-- employees

Since n.d.

Loginno Story Mentions

Articles Around the Web

Read More Tech Stories Related to #Loginno

Loginno News on HackerNoon and Around the Web