Visibuild is a field-first, real-time, Quality focused Project Management platform. It provides complete oversight of project activities, improves productivity, and ensures items captured in the field are actioned. With everything stored and managed within Visibuild’s powerful QA software, you’ll never lose critical information to WhatsApp, email or phone calls again. Stop chasing paperwork, and start getting stuff done. Visibuild is the platform that makes Quality simple, fast and accurate to create complete transparency over a construction project. Start normalising your Quality today by speaking with our team.

Visibuild

Consider the following multi-threaded code, public class NoVisibility {
 private static boolean ready;
 private static int number;
 private static int ITERATION = 1000000;
 private static class ReaderThread extends Thread {
 public void run() {
 while(!ready) {
 Thread.yield();
 }
 if(number != 56) System.out.println("Bug");
 }
 }
 public static void main(String[] args) throws InterruptedException {
 for(int i=1; i<=ITERATION; ++i){
 if(i%(ITERATION/10)==0) System.out.println("Iteration: " + i);
 number = 0;
 ready = false;
 final Thread thread = new ReaderThread();
 thread.start();
 number = 56;
 ready = true;
 thread.join();
 }
 }
} Here is a question to all readers — “ ”. Executing the main method of NoVisibility, would we ever see ‘Bug’ printed on the terminal? Interestingly the answer is YES! Here is the output that I got while running this program — Iteration: 100000
Iteration: 200000
Iteration: 300000
Bug
Iteration: 400000
Bug
Bug
Iteration: 500000
Iteration: 600000
Iteration: 700000
Iteration: 800000
Iteration: 900000
Iteration: 1000000 However counter-intuitive it may feel, this is how thing works in a multi-threaded environment. In this article, we explore this exact weirdness with object visibility in a multi-threaded environment. Object Visibility In a single-threaded environment, any writes made to an object take effect immediately, ensuring that subsequent reads will reflect the updated state of the variable. However, these same guarantees do not extend to a multi-threaded system! In a multi-threaded environment, writes made to shared objects by one thread may not be immediately visible to other threads. Even worse, these writes may not become visible at all! Even more strangely, visibility in a multi-threaded environment is not all or nothing. Other threads may see an updated state for some variables, and, on the other hand, an obsolete value for other variables. To overcome these challenges, proper synchronization must be used every time shared objects are accessed. What went wrong with NoVisibility? Our NoVisibility class is plagued with these same visibility issues. When the main thread writes to shared objects and , these updates might not be visible to the reader thread immediately. number ready This could lead to problems like — Reader thread looping forever Reordering causes changes made to visible before changes are made to are visible ready number Lack of proper synchronization inside the NoVisibility class leads to these race conditions. Synchronisation to ensure Visibility We discussed Java’s blocks in article as a mechanism to ensure atomic operations. blocks serve another purpose — ‘ ’. Intrinsic locking can be used to guarantee that one thread sees the effects of another in a predictable manner! synchronized this synchronized Object Visibility When a thread exits a synchronized block and another thread enters a synchronized block (guarded by the same lock), it ensures that all variables’ values visible to the first thread become visible to the second thread. Importantly, this applies to all variables, regardless of whether they were part of the synchronized block of the first thread. Using locking, we ensure memory visibility. It is thus important for both the reading and writing thread to hold proper locks! Volatile Variables In Java, volatile variables offer a mechanism to ensure variable visibility across threads. By marking a variable as volatile, we instruct the compiler and runtime to refrain from reordering its operations with other memory operations. Additionally, volatile variables are not kept in registers or caches, preventing them from being hidden from other threads. As a result, volatile variables consistently return the latest written value. When a write operation is performed on a volatile variable, its impact extends beyond the variable itself. It guarantees the synchronization of not only the variable’s value but also the values of all other variables that were visible up to that point. Writing to a volatile variable can be likened to exiting a synchronized block, while reading a volatile variable can be likened to entering a synchronized block, all guarded by the same lock. While locking can guarantee both atomicity and visibility, volatile variables only guarantee visibility. Often the things that feel intuitively correct in a single-threaded environment may go very wrong in a multi-threaded environment. Visibility of objects is one such things. They are so counter-intuitive that if you don’t know about them it is hard to find race-conditions arising because of them. I hope you enjoyed reading this blog! Follow for more! Also published here.

Mastering Object Visibility in Java

The competition for real estate space on search engines is high. As of May 2023, there were already 201,045,211 active websites online with this number rising rapidly. In fact, around 175 new websites are created every minute on average. Coupled with over 3.5 billion daily searches, search engines like Google compete to provide fast and accurate results to help their audience find what they are looking for. If you’re wondering how these results are presented, the answer lies in a multitude of search engine results page (SERP) features. What are they, how do they look, and what purpose do they serve? Keep reading to get the answers to these questions! What Are SERP Features? Designed to enhance the online user’s search experience, Google’s SERP features are, in a sense, Google results on steroids. They are specifically tailored to an individual’s search query. Their aim is to present them with the most relevant information by limiting the amount of searching and the number of clicks a user has to make to receive their intended result or answer to a query. All this is achieved through Google’s algorithms, which study what the most relevant answer is and then present it to the user in an enhanced way. Benefits of Appearing in SERP Features There are many good reasons to aim for the covered Google SERP feature spots through solid content optimization. Just a few of the reasons behind this include to: Drive traffic to your website Gain greater visibility Lead to higher engagement Improve your click-through rate Promote your online authority Boost brand awareness A better understanding of user intent Enjoy more flexibility in adjusting your strategy Enhance the user experience The 13 Most Important Google SERP Features Having mentioned some of the benefits of being featured in a Google SERP feature, let’s explore what some of the most important features are by looking at both the organic and paid varieties. Organic SERP Features Featured snippets When a Google user types in a query such as a question that needs to be answered, often, the answer that will appear will be in the form of a featured snippet. This is a box of text, with the answer highlighted, and it appears just underneath the promoted or paid advert space. It therefore occupies what is known as the “zero position” on Google. Although it aims to answer a question directly and immediately, many of these searches have a lower click-through rate. However, businesses can turn this around as an advantage for their website by providing users with accurate and helpful answers. This can ultimately ensure that your website gets the necessary visibility while being positioned as an authority. Video carousels Even though video results appear less frequently, they do have a special spot in the SERP. Usually acquired from YouTube, in the past, they used to be around three but today, there’s a greater variety of these thumbnails, and users can see up to 10 video results for their search queries. There is the option to scroll through various video results at the top of the SERP. Additionally, some videos that aren’t hosted by YouTube (such as a ) can also be pulled into the video carousel. However, you need to indicate to Google through schema markup that you have a video on your page that should be indexed. This requires specific information to be entered, including a video description, title, URL, video duration, etc. video on a business’s website Rich snippets With rich snippets, you get more from a single site link than appears on regular organic search results. For example, apart from the meta title and description, users can also see information and links related to a company’s website or services, how many reviews they’ve acquired, etc. All this is aimed at helping users quickly navigate through a massive webpage instead of having to search through it. Site links Site links are links designed to help users navigate through extensive web pages. For example, a business can have a site link taking a user to a particular page on a website or to a particular section of the same website. The purpose of site links is to help users quickly and easily find what they are looking for when the search could have numerous potential results and involve more extensive searching. People Also Ask boxes Created as a way of being additionally helpful to users, People Also Ask (PAA) boxes are just what the name suggests: a collection of questions that are related to a user’s search term that helps anticipate any requests for information related to the same topic. When clicked upon to expand them, PAA boxes reveal a short answer to a query to help reduce time spent clicking and searching online. Local packs When a user carries out “near me” or location searches, they’re likely to see local results. These results usually feature businesses that are in close physical proximity to the user to help them locate what they are looking for—such as a product or a service. Local packs usually come in a pack of three local search results. They are more dependent on an optimized Google My Business profile, good reviews, and accurate NAP (name, address, phone number) citations as opposed to high-quality backlinks. Often, they are accompanied by the location on a map and images to help users make more informed decisions when choosing to frequent a local business or service provider. **Knowledge Graph panels
\ Another important organic Google search feature is the knowledge panel. This is a box that is displayed on the right-hand side of the SERP and features snippets of valuable information about famous people, companies, events, and more. Unlike a featured snippet, which pulls data to answer a search query from one website, the knowledge panel data is pulled from the Google Knowledge Graph. This Graph gets its information from a wide variety of sources, including websites such as Wikipedia. **Image packs
\ Image packs are a series of images that Google pulls from its extensive database to help a user find visual information related to a search query. Google’s RankBrain algorithm usually determines that, in some cases, images can be more helpful to a search query than information presented as text. That’s why a search for cats, for example, will yield a series of images at the very top of the SERP with visuals that can convey an answer to a response in a way that differs from text or video. Top stories The top stories SERP feature are sourced from top and trending news stories from Google News-approved websites. These can be local, national, or international news stories, and they help users find trending topics and what reporting and coverage they are receiving from different sources online. Job listings Google also pulls job listings from various employers and career sites to display relevant information to search queries related to job searches. Using schema markup is a must in order to ensure that a business’s job posting is found and indexed by Google. Users looking for jobs this way will be able to find information about job openings that includes details such as the hiring company and location, the website where the opening was originally posted, the length of time since posting, whether the job is full-time or part-time, and others. In addition, it’s possible to filter data by category, title, location, date posted, full-time or part-time, industry, and company name. Users can also create bookmarks or use the alert function as an advanced option. Google Flights When Google detects that a user is looking to find or book a flight, the Flights block will appear in the SERP. As is standard practice, paid ads appear at the very top of the SERP, the Flights block appears next, and this is followed by the remaining organic results. The Flights block is interactive, and users can enter details such as date of departure and arrival, desired airport, destination, time, layovers, airlines, flight pricing, etc. Paid SERP Features Top and bottom advert slots Most Google users are familiar with where the search engine positions adverts. These are at the top of the SERP and at the bottom of the SERP, before and after the first and last organic results, respectively. If there are Google Shopping results, ads will appear below these. Previously known as AdWords, today they’re called Google Ads, and they look quite similar to organic results with blue links. However, an “Ad” or “Sponsored” label appears next to the URL. The appearance of Google Ads at the top or bottom of a SERP occurs when advertisers bid on certain keywords, and this works through the pay-per-click model. Google Shopping Formerly known as Google’s Product Search, this is a paid SERP feature that appears as a carousel at the top of the search results or the right-hand side of the SERP. This carousel features products related to a user’s entered keyword. Common information within the carousel includes the product name, price, the website, ratings (if available), and any discounts that may be on offer. When a user clicks on one of these carousel ads, they are taken to the advertiser’s product . landing page In addition to product listings, some advertisers have started utilizing innovative technology such as a to provide immediate customer support and inquiries directly from the search results page, enhancing user engagement and customer service experiences. cloud-based phone system Conclusion Google’s SERP features are an enhanced way to help users find what they are looking for quickly and with greater accuracy. For businesses to achieve these coveted spots is not always easy. However, putting in the effort to maximize your business’s visibility online and build your authority in today’s competitive search landscape is worth it. With a broad range of benefits, businesses can truly stand out from the crowd with optimized organic content and even through paid advertising. Whichever option you choose, or even if you choose a combination of both, always think of your users as you keep their search intent in mind when creating content or ads.

SERP Features Unveiled: Maximizing Visibility in Today's Competitive Search Landscape

In today's competitive startup landscape, gaining visibility and exposure for your business is crucial. One effective way to showcase your startup to a wider audience is by submitting it to reputable resource directories. These directories provide a platform for startups to get seen more widely and connect with potential customers. In this article, we present 10 top resource directories where you can submit your startup for maximum visibility. Let's dive in! 1. Product Hunt Product Hunt is a popular platform where users discover and share new products. Startups can submit their products to gain exposure, receive feedback, and attract early adopters. The platform also features a vibrant community of entrepreneurs and startup founders. 2. Crunchbase Crunchbase is a leading resource directory that provides information on startups, investors, and industry trends. It offers a platform for startups to showcase their products, raise funding, and connect with potential partners and customers. 3. BetaList BetaList is a platform that showcases upcoming startups and their products. It allows startups to submit their beta versions and gain valuable feedback from early adopters. The platform also provides a dedicated audience interested in exploring the latest innovations. 4. Intools.co Intools.co is a comprehensive online platform that offers a curated collection of 900+ handpicked tools and resources for startups. It provides detailed descriptions and features of each tool. They also have a submit button where you can submit your startup to get featured on the platform. 5. Wellfound Wellfound is a comprehensive platform for startups, investors, and job seekers. Startups can create profiles, connect with investors, and promote their products or services. It also features a job board specifically tailored for startups. 6. PitchWall PitchWall is a platform that features upcoming and trending startups. Startups can submit their products, receive feedback from the community, and gain exposure to a tech-savvy audience. The platform also offers a newsletter to keep users updated on the latest startup launches. 7. Startup Ranking Startup Ranking is a directory that ranks startups based on their web presence and social media influence. By submitting your startup, you can gain exposure and increase your visibility within the startup ecosystem. 8. Launching Next Launching Next is a platform that features upcoming startups and their products. It provides a space for startups to gain exposure, connect with potential users and investors, and receive feedback on their products. 9. StartUp Beat StartUp Beat is a platform that features innovative startups and their stories. It provides a space for startups to showcase their products, share their journey, and gain exposure to a global audience of entrepreneurs, investors, and tech enthusiasts. 10. Startupbase Startupbase is a community-driven platform that allows startups to showcase their products and connect with potential users and investors. It provides a curated directory of startups across various industries, making it easier for users to discover new and exciting innovations. Submitting your startup to resource directories can significantly enhance your visibility and connect you with valuable resources. Make sure to explore these directories, leverage their audiences, and boost your startup's visibility in the dynamic startup ecosystem.

10 Resource Directories to Submit Your Startups and Boost Your Visibility 🚀

What does mean in the supply chain context? visibility In a nutshell, it's not only about keeping things running smoothly. Visibility provides companies with the ability to identify and minimize risks, meet customer expectations, and ensure quick deliveries. To create more intelligent supply chains, invest in supply chain visibility, putting themselves in leadership positions. Let’s see what tools and technologies contribute to the success of solving the visibility puzzle. 92% of global companies Why is supply chain visibility important? Supply chain visibility controls every aspect of a supply chain, from strategic planning to delivery and returns, offering a clear view of from raw materials to the customer. , every supply chain element There is no wonder that visibility has rightfully taken a leading role in supply chain management in recent years. According to , visibility lets global supply chain leaders build resilience and minimize the impact of past disruptions. McKinsey considers "end-to-end forward-looking visibility" a rising trend of modern supply chains. KPMG Companies that prioritize end-to-end supply chain visibility benefit from data-driven decision-making, reduced supply chain disruptions, increased operational and business efficiency, and improved customer satisfaction. How to improve supply chain visibility? Implementing visibility in real-world scenarios can demand considerable time and effort. Nevertheless, there are specific essentials that can simplify this process. Let's take a look at that companies can employ to gain full control over their supply chains and logistics operations. 5 technologies Blockchain The decentralized nature of blockchain, along with smart contracts being part of the technology, makes it an ideal solution for invoice management, freight monitoring, product traceability, and information processing. Here is how integrating supply chains with blockchain technology can empower companies and help them establish end-to-end visibility. Blockchain provides an open and secure record of transactions and events, allowing stakeholders to follow the entire supply chain path. Transparency. The technology provides a secure and immutable ledger that lets all involved in supply chain operations verify the origin, authenticity, and condition of goods in real-time. Trust and authentication. Blockchain enables live tracking of goods, letting everyone see the movement and status of products at each stage of the supply chain. Real-time tracking. Blockchain removes the need for intermediaries, lowers administrative costs, and improves efficiency. Efficiency and cost reduction. The technology facilitates secure and direct interaction among supply chain participants, as well as encourages collaboration and data sharing. Collaboration and data sharing. Just like described above, blockchain-driven supply chain transparency builds customer trust, lets businesses authenticate product origin, and monitors goods in real time. Intelligent automation Logistics process automation covers all stages and areas of supply chain management, from document digitization to warehouse stock monitoring, and contributes to supply chain visibility in several ways: Intelligent automation helps organizations integrate data from ERP, WMS, TMS software, and IoT devices into a centralized platform that shows an integrated view of the supply chain and allows them to access all real-time information in one place. Data integration and consolidation. Automation and RPA tools monitor supply chain activities and save data on inventory levels, order status, shipment tracking, and other relevant metrics. Real-time monitoring and alerts. RPA allows companies to automatically generate reports and invoices, minimize errors, and ensure accuracy and consistency in reporting. Streamlined document management and reporting. Intelligent automation makes it possible to process large volumes of supply chain data. It streamlines trend identification, forecasting, and anomaly detection, extracting near real-time insights to identify areas for improvement. Data analysis and insights. Automating repetitive and manual tasks gives supply chain professionals the freedom to focus on strategic activities and dedicate more resources to monitor, analyze, and optimize supply chain processes for better visibility and performance. AI and data analytics AI plays a crucial role in inventory planning, route optimization, demand forecasting, sales and marketing, and fault analysis. In addition, the technology can help to improve visibility in the external aspects of supply chain management. AI algorithms manage large amounts of real-time data from IoT sensors, RFID tags, and social media. They analyze critical supply chain information, offering up-to-date visibility into inventory, demand, and production. Real-time data processing. AI-powered predictive models can project future demand, identify potential disruptions, and optimize inventory levels to avoid shortages or excess inventory. Predictive analytics. Intelligent algorithms assess historical sales data, market trends, weather patterns, and other factors to accurately predict demand and ensure the right products are available when needed. Demand planning. AI analyzes news feeds, social media, and weather updates to notice potential supply chain risks and disruptions. This way, the technology helps companies create risk-minimization strategies for uninterrupted business operations. Improved . risk management ML algorithms monitor transportation routes, warehouse operations, and production schedules to simplify resource allocation, enhance efficiency, and shorten lead times. Supply chain optimization. AI helps supply chain managers make well-informed decisions regarding order fulfillment, inventory replenishment, supplier selection, and demand management. This, in turn, provides companies with a comprehensive and intelligent decision support system. Logistics customer portal software Responding to the increasing demand for service quality from their customers, companies incorporate real-time order tracking features into customer logistics portals. Here's how such software contributes to achieving visibility in the supply chain. Customers can monitor the real-time status and location of their shipments on the portal to get more visibility into the progress and estimated arrival time of their goods. Shipment tracking. The portal gives access to bills of lading, customs clearance data, and invoices, which keeps customers informed about the necessary paperwork related to their shipments. Access to documentation. A logistics portal lets customers submit new orders, modify existing ones, or schedule pick-up and delivery requests. Also, it provides clients with product specifications, quantities, and delivery instructions. Order placement and management. The portal allows customers to submit inquiries, request quotations, and receive responses directly through the portal. This feature simplifies communication and promotes collaboration between stakeholders. Communication and collaboration. In case of delays, damages, or inventory discrepancies, the portal allows customers to report these incidents, track them, and ensure timely resolution. Exception management. Logistics customer portal software increases supply chain visibility through real-time tracking, document access, communication, order management, and exception handling. As a result, it leads to streamlined processes and improved overall visibility throughout the supply chain. Logistics dashboards Logistics offer a visual representation of all the data related to logistics operations and let businesses efficiently track their KPIs. Dashboards play an important role in establishing a direct link between supply chains and visibility. dashboards Logistics dashboards collect data from transportation, warehousing, inventory, and order management systems to provide a comprehensive view of all supply chain levels. Centralized information. Using interactive charts, graphs, and visual representations, logistics dashboards help companies notice trends, patterns, and exceptions to understand the current state of the supply chain and see potential gaps. Data visualization. Dashboards facilitate the real-time tracking of KPIs and metrics for logistics visibility, such as on-time delivery rates, lead times, and transportation costs. Real-time KPI monitoring. Logistics dashboards let users see detailed information at various levels of granularity. This way they can explore specific metrics, transactions, or geographical regions, and understand the root causes of issues. Drill-down capabilities. Users have the freedom to configure their dashboard views, selecting the most relevant KPIs, visualizations, and metrics for their specific responsibilities. Customization and personalization. By delivering centralized, real-time data visualization, performance monitoring, exception management, and collaboration capabilities, logistics dashboards elevate visibility across the supply chain and contribute to operational excellence. In conclusion The diverse set of digital tools and technologies can effectively solve the challenge of limited visibility in the supply chain. Furthermore, using the essential technologies mentioned earlier not only improves operational efficiency but also builds trust with consumers and supports business expansion. However, achieving supply chain visibility is a complex task. That’s why introducing visibility solutions demands a strategic approach and the engagement of highly skilled subject matter experts.

5 Tech Solutions to Boost Supply Chain Visibility

In today's digital landscape, search engine optimization (SEO) plays a crucial role in driving organic traffic to websites. Next.js, a powerful React framework, provides developers with a solid foundation for building performant and SEO-friendly web applications. In this blog post, we will explore advanced techniques for optimizing SEO in Next.js to enhance search engine visibility and attract more organic traffic. Table of Contents: Understanding SEO Basics Next.js and SEO: A Winning Combination Key SEO Factors to Consider in Next.js Meta Tags and Title Optimization Structured Data Markup URL Structure and Canonical URLs Sitemap Generation Responsive and Mobile-Friendly Design Advanced SEO Techniques in Next.js Dynamic Meta Tags and Titles Server-Side Rendering (SSR) for SEO Implementing Open Graph and Twitter Cards Handling Pagination for SEO Optimizing Images for Search Engines Monitoring and Analyzing SEO Performance Integrating Google Analytics Utilizing Search Console for Insights Monitoring SERP Rankings and Click-Through Rates (CTR) Technical SEO Considerations for Next.js Properly Handling Redirects Managing Duplicate Content and Canonicalization Implementing Pagination and Rel="next/prev" Managing 404 Errors and Custom Error Pages Performance Optimization and SEO Fast Page Load Times Lazy Loading and Code Splitting Optimizing HTML and CSS Staying Up-to-Date with SEO Best Practices Keeping Up with Algorithm Updates Engaging in Link Building and Content Marketing Enhancing User Experience (UX) Signals Understanding SEO Basics: Before diving into Next.js-specific techniques, let's quickly review some essential SEO principles. Meta tags, structured data markup, URL structure, and sitemaps are crucial factors for search engines to understand and rank your web pages. Next.js and SEO: A Winning Combination: Next.js is an excellent choice for building SEO-friendly applications due to its server-side rendering (SSR) capabilities, which provide search engines with fully-rendered HTML content. Additionally, Next.js comes with built-in optimizations, such as automatic code splitting and prefetching, that contribute to better SEO performance. Key SEO Factors to Consider in Next.js: To optimize SEO in Next.js, let's dive into specific factors to consider: 1. Meta Tags and Title Optimization: Next.js allows dynamic generation of meta tags and titles for each page. By leveraging the component, you can customize these tags based on the page's content dynamically. Here's an example of how to set dynamic meta tags and titles: next/head import Head from 'next/head';

function MyPage() {
 return (
 <>
 <Head>
 <title>My Page | Next.js SEO</title>
 <meta name="description" content="This is the meta description for My Page" />
 {/* Additional meta tags */}
 </Head>
 {/* Page content */}
 </>
 );
} 2. Structured Data Markup: Structured data helps search engines understand the context of your content. Next.js allows you to add structured data using the package. Refer to the Next.js documentation on . next-seo structured data with next-seo 3. URL Structure and Canonical URLs: Next.js generates clean URLs by default based on the page structure. You can further optimize URLs by customizing them to include relevant keywords. Additionally, you should set canonical URLs to avoid duplicate content issues. The Next.js documentation on can help you structure your URLs effectively. dynamic routes 4. Sitemap Generation: A sitemap helps search engines discover and index your web pages more efficiently. Next.js provides a way to generate a sitemap using the package. Check out the Next.js documentation on for detailed instructions. sitemap sitemap generation 5. Responsive and Mobile-Friendly Design: Having a responsive and mobile-friendly design is crucial for SEO. Next.js, being a React framework, encourages building responsive layouts using CSS frameworks like Tailwind CSS or responsive design principles with CSS media queries. Advanced SEO Techniques in Next.js: Now, let's explore some advanced techniques to further optimize SEO in Next.js: 1. Dynamic Meta Tags and Titles: Next.js allows you to dynamically generate meta tags and titles based on the content of each page. You can utilize server-side data fetching and pass the required information to the component. For example: next/head import Head from 'next/head';

function Article({ article }) {
 return (
 <>
 <Head>
 <title>{article.title} | Next.js SEO</title>
 <meta name="description" content={article.excerpt} />
 {/* Additional meta

 tags */}
 </Head>
 {/* Article content */}
 </>
 );
}

export async function getServerSideProps(context) {
 // Fetch article data based on the context
 const article = await fetchArticle(context.params.slug);
 return {
 props: { article },
 };
} 2. Server-Side Rendering (SSR) for SEO: Next.js's server-side rendering (SSR) capabilities provide search engines with fully-rendered HTML content, improving SEO visibility. By using the function, you can fetch data during the server-side rendering process and pass it as props to your pages. This ensures search engines see the complete content of your pages. Here's an example: getServerSideProps export async function getServerSideProps(context) {
 // Fetch data from an external API
 const res = await fetch('https://api.example.com/data');
 const data = await res.json();

 return {
 props: { data },
 };
} 3. Implementing Open Graph and Twitter Cards: Open Graph and Twitter Cards enhance how your web pages are displayed when shared on social media platforms. Next.js provides an easy way to configure these using the package. Refer to the Next.js documentation on for detailed instructions. next-seo Open Graph and Twitter Cards 4. Handling Pagination for SEO: If your application implements pagination, it's essential to handle it properly for SEO. Next.js provides support for pagination using the component and the attribute. Refer to the Next.js documentation on for more information. next/link rel="next/prev" pagination 5. Optimizing Images for Search Engines: Images can significantly impact SEO. Next.js provides built-in image optimization capabilities. You can optimize images by specifying attributes such as text, dimensions, and file size. Check out the Next.js documentation on for detailed instructions. alt image optimization Monitoring and Analyzing SEO Performance: To monitor and analyze the performance of your application, you can utilize various tools and techniques: SEO Next.js 1. Integrating Google Analytics: Integrate Google Analytics into your Next.js application to track and analyze traffic, user behavior, and conversion rates. The Next.js documentation provides a guide on . integrating Google Analytics 2. Utilizing Google Search Console for Insights: Google Search Console provides valuable insights into your website's organic performance, including search queries, click-through rates, and crawl errors. Verify your Next.js website with Google Search Console and leverage its data for SEO improvements. 3. Monitoring SERP Rankings and Click-Through Rates (CTR): Track your website's rankings in search engine results pages (SERPs) and monitor the click-through rates (CTR) using SEO tools like SEMrush, Ahrefs, or Moz. Analyzing these metrics can help you identify areas for optimization. Technical SEO Considerations for Next.js: To ensure technical SEO best practices in your Next.js application, consider the following: 1. Properly Handling Redirects: Implement proper redirects, such as 301 (permanent) and 302 (temporary) redirects, to avoid broken links and maintain link equity. You can handle redirects in Next.js using server-side logic or frameworks like . next-routes 2. Managing Duplicate Content and Canonicalization: Duplicate content can harm your SEO rankings. Implement canonical tags in your Next.js application to specify the preferred version of a web page when duplicate content exists. 3. Implementing Pagination and : rel="next/prev" For paginated content, use the attribute to signal to search engines the relationship between paginated pages. This helps search engines understand the pagination structure. rel="next/prev" 4. Managing 404 Errors and Custom Error Pages: Properly handle 404 errors by creating custom error pages that provide helpful information to users and search engines. Next.js allows you to create custom 404 error pages by creating a file. pages/404.js Performance Optimization and SEO: Optimizing the performance of your Next.js application directly impacts SEO. Here are some techniques to consider: 1. Fast Page Load Times: Improve page load times by leveraging Next.js's built-in optimizations, such as automatic code splitting and prefetching. Additionally, optimize asset sizes, leverage browser caching, and use CDNs to deliver content efficiently. 2. Lazy Loading and Code Splitting: Lazy load and code split your Next.js application to load only the necessary components and assets when required. This reduces initial load times and improves the user experience. 3. Optimizing HTML and CSS: Minify HTML and CSS files to reduce their sizes. Remove unnecessary code, comments, and whitespace to optimize loading times. Additionally, leverage Next.js's support for CSS frameworks like Tailwind CSS to streamline CSS delivery. Staying Up-to-Date with SEO Best Practices: To ensure ongoing SEO success, keep up with the latest SEO best practices: 1. Keeping Up with Algorithm Updates: Stay informed about major search engine algorithm updates, such as Google's Core Updates, and adapt your SEO strategies accordingly. Follow reputable SEO resources, industry blogs, and official search engine webmaster guidelines. 2. Engaging in Link Building and Content Marketing: Build high-quality backlinks to your Next.js application through content marketing, guest blogging, and influencer collaborations. Quality backlinks from authoritative sources can significantly improve search engine visibility. 3. Enhancing User Experience (UX) Signals: Focus on improving user experience on your Next.js application. Factors such as site speed, mobile-friendliness, intuitive navigation, and engaging content all contribute to positive UX signals that can boost SEO performance. Conclusion: Optimizing SEO in Next.js requires a combination of technical implementation, content optimization, and ongoing monitoring. By leveraging advanced techniques, such as dynamic meta tags, SSR, structured data markup, and performance optimization, you can significantly improve search engine visibility and attract more organic traffic to your Next.js applications. Remember to regularly review and update your SEO strategies as search engine algorithms and best practices evolve. By staying informed, implementing advanced techniques, and consistently monitoring performance, you can maintain a strong SEO presence for your Next.js applications and drive sustainable organic traffic.

Optimizing SEO in Next.js: Techniques for Better Search Engine Visibility

Next.js-এ এসইও অপ্টিমাইজ করা: উন্নত সার্চ ইঞ্জিন দৃশ্যমানতার জন্য কৌশল

Optimierung von SEO in Next.js: Techniken für eine bessere Sichtbarkeit in Suchmaschinen

Optimización de SEO en Next.js: técnicas para una mejor visibilidad en los motores de búsqueda

Optimiser le référencement dans Next.js : techniques pour une meilleure visibilité sur les moteurs de recherche

Next.js में SEO को अनुकूलित करना: बेहतर खोज इंजन दृश्यता के लिए तकनीकें

Next.js での SEO の最適化: 検索エンジンの可視性を高めるテクニック

Next.js에서 SEO 최적화: 더 나은 검색 엔진 가시성을 위한 기술

Otimizando SEO em Next.js: Técnicas para Melhor Visibilidade nos Mecanismos de Busca

Next.js'de SEO'yu Optimize Etme: Daha İyi Arama Motoru Görünürlüğü için Teknikler

Tối ưu hóa SEO trong Next.js: Kỹ thuật để Công cụ Tìm kiếm Hiển thị Tốt hơn

在 Next.js 中优化 SEO：提高搜索引擎可见性的技术

Most startups, especially in Web3, are made by tech guys and extremely fast. There are no brand or marketing experts, but they must start communicating with potential users on social media or at events. If you start your public communications process, you can find that it needs a clear branding, marketing, and communication strategy. My name is I'm a Web3 strategist, brand marketer, and communications expert. In this article, I explain how early-stage Web3 startups can work with a brand strategy and what to do if your budget is limited. . Daria Volkova Brand strategy is closely related to business strategy and affects product and user interaction. Before building a brand, I recommend identifying people's needs for your product. Start selling, evaluate scaling opportunities, and spend money on branding and marketing only in case of success. Otherwise, you will get an attractive picture that will not have a proven business model. This is what the MVP stage exists for. Many startups define it as the prototyping phase. MVP is necessary to understand whether you are selling before spending on expensive branding and launching marketing campaigns. If not only your friends and relatives are ready to pay for a product or service but also many people in the market, it is logical to start building a brand that will add value and recognition to your product. What Do You Need to Know About Brand Strategy? The goal of branding is to highlight the strengths of a product or company and convey them to a potential audience as clearly as possible. I do not separate marketing strategy, brand, and communications because they are all interconnected and never work in isolation. Here also, a sales strategy can be added because branding and marketing are done with one ultimate goal — to increase capitalization and profit by increasing the number of sales and the brand's value. The development of a brand strategy from my side usually consists of the following stages: Audience Analysis and Customer Journey Map Positioning and Value Proposition Vision, Values, and Mission Competitive strategy Naming and headline Logo, colors, fonts, social media design, photo design, icons, and identity guidebook The tone of voice and communication strategy Brand book with strategy, design, basics of sales, and other details In Web3 projects, you should add the following items to this list: Brand identity and tone for the community. These elements may differ slightly from the general identity but must be consistent. Tools and activities for engaging developers and building relationships with them. Look and feel of the brand in the NFT format or metaverse. A list of possible techniques to enhance the WOW effect of your brand. This is an example of a brand page of Celo Foundation: And here are a few pictures from a brand book of downloaded from their website: 1inch How to Start a Brand Building With a Limited Budget? If you are starting and your budget for marketing and brand building is limited, , which does not necessarily have to be measured directly in money. your main task is to get the highest possible ROI It can be new contacts, network expansion, or growth of the company's and the founder's recognition. This principle is suitable for companies with any budget, but it is a matter of survival for early-stage startups. For a start, you can interview early adopters and prospects who haven't used your service or product yet (but have a pain point you can solve). You can learn more about user interviews by reading or learning “The Mom Test” by Rob Fitzpatrick the basics of sociology and product research. It is also worth conducting a — see how your competitors look and position themselves, and formulate your positioning, which will most accurately and accurately present the value of your product. competitive analysis 12 Simple Questions to Create Your Web3 Startup's Brand Strategy I'm sharing a simple but effective hint on fast validating your brand strategy and communication. Work through these questions by imagining you are in a small pub talking to the locals over a glass of beer. Focus on conveying the spirit of the message in a way that resonates with the listener. Vision: What impact do you want to have in the world? How would you like to be remembered? Values: What would you not give up? What does an employee have to believe in for you to think they are the right fit? Attributes: What pain do you solve for clients? How do your products differ from competitors' products? Headline/Slogan: What would you put on the side of your truck to tell people you're selling what they need? What words might someone google if they were looking for your product type? Storytelling: What jokes are told about you? Are there any unexpected challenges that you have overcome? Key Messages: How do you get people to say “yes”? What would you say if you had to describe your products to your mom? After understanding the audience's pain points and formulating your positioning, you should think about You should not go to extremes and take the first best idea from Google or ChatGPT. the image and name that will best convey the essence of your activity. At the same time, there is no need to turn on the perfectionist and devise a name for two months. Remember that the main task of a startup is to scale a tested hypothesis quickly. To create a , decide which elements are most important. For the Web3 project, the most important thing is the website, representation in social networks, and visualization in virtual spaces or application interfaces. corporate style Mug branding and business card design are not worth spending time and money on. A logo and corporate colors will suffice in the first stages, setting the tone of voice and emphasizing your idea. By the way, you can also make a logo in Canva or with the help of an AI tool like Midjourney. How Can You Save Money on Branding in the Beginning? I do not advise you to run to register a trademark immediately and spend several thousand dollars on it. Do this when your product becomes competitive. Some startups register global trademarks to convince investors of their ambitions. Will this work as a compelling argument for investors? No. A proven business model and a working prototype look more convincing. Initially, you can if they have used your product or service. Also, you can ask influencers to make a promo if they like your project and are ready to do it for free or at a minimal cost. ask your friends to become your ambassadors If you plan to conduct , then there is no point in paying for them either. If people don't agree to give feedback on the product for free, they are not interested in your product. user interviews Therefore, look for those who are interested in your product and can provide you with quality feedback. How to Check That Your Web3 Product’s Brand Is Going Well? If you've already started working on your product brand, you may have a logical question about how okay things are moving. Below are some criteria to pay attention to: You can achieve this through specific elements, such as a logo, name, corporate sounds, and colors. Your brand must be noticeable, readable, and easy to reproduce to be well remembered. Memorability. The functions and promises of the product should be clear to users — what, how, and why is happening in the product. Meaningfulness. The presence of aesthetic appeal to users. Moreover, this is not about beauty but attractiveness for those using your product. If people who love biker aesthetics use your product (dark tones, leather, chrome, tattoos), then the pink-mint-peach gradients from Dribbble trends will be clearly out of their understanding. Sympathy. If new features, services, or sub-products are to be added, the branding must support them. Polygon created a list of solutions with a comprehensive design system: Polygon PoS, Polygon Miden, Polygon zkEVM, and Polygon Supernets. Scalability. If you know that people with visual or hearing impairments can use your product, your mission will be to make their experience more enjoyable. Inclusiveness and kindness. For example, in trading applications, taking into account people with color blindness, it's worthwhile to approach the visualization of indicators and the "Buy" (green) and "Sell" (red) buttons more carefully in terms of accessibility — they should be distinguishable even in monochrome mode. Brand elements must be protected by law, especially if you enter the international market. Security. Conclusion Your brand strategy is a living thing, so it won't be perfect the first time, but it will give you something to build on. It should be good enough to allow you to make faster and better decisions to move your Web3 product forward. If you have read this article, you are already on the right path to building brand ranks. I wish you success in developing the brand of your Web3 product or service! Follow me on social media if you like my thoughts: and , , Linkedin Twitter . YouTube

Brand Strategy for a Web3 Startup - Raise Your Value and Visibility in the Web3 Space

In what is becoming a very cost-conscious world of cloud usage due to a myriad of reasons; global economic pressures, run-away cloud costs, failed migration programs et cetera. Is that there is still an opportunity for each organization irrespective of existing or new landing zone design (organizational governance structure) to achieve the necessary cost visibility to enable Cloud Financial Operations ('FinOps') practices to be operationalized in a way that ensures best-of-breed outcomes in a given scenario. Table of Contents The Magical Cloud What does this mean? Why does it matter? Architecting Account Hierarchy for Cost Visibility Common governance constructs Company A - Environments Company B - Business units Company C - Workloads & environments Conclusion The Magical Cloud , once marketed as the magical computer, tucked away in the sky, ready to solve your organization's most complex problems, has seen the sentiment change drastically in the last few years as organizations learned the hard and fast way, that it isn't that simple. Cloud computing From failed migrations where chatty bloated on-premises monoliths were lifted and shifted in a rush to promote 'cloud first principles' with no supporting skills to refactor once there. Through to poorly planned and established governance to ensure enforcement of basic guard rails to protect organizations from security events, and what this article is about, architecting to avoid bill shock by bringing visibility to your organization's cloud spend. As "what get's measured, get's improved" Peter Drucker The reality is, that the world of the cloud is not in any way similar to on-premises workloads, with millions of SKUs representing every flavor of service, computing, memory, storage, and more at the click of a button. Engineers can single-handedly blow a hole in an organization’s IT operating budget. As Dann Berg puts it in his article the 'money feedback loop' is significantly longer (if there is at all) compared to a failed technical change by an engineer. here What does this mean? It means, by the time organizations realize deployed a fleet of u-12tb1.112xlarge AWS EC2 instances with a whopping 448 vCPUs, 12TB of memory for a Proof of Concept Web App, and took off on holidays, they have at least an 80K USD bill by EOM. Intern Engineer A Now, this is an unlikely scenario in that the intern was left to deploy without an approval workflow but the fact is, it can happen and it does every day of the week, worldwide. As that kind of tin isn't available on premises for anyone to spin up without jumping through hoops, and certainly not as quickly as the magical cloud enables. Why does this matter? It matters because cloud usage isn't showing signs of slowing down. has forecasted a 20.4% growth in public cloud spending in 2022, and a total of $600B is forecasted to be spent worldwide by 2023. Though according to , of that significant worldwide spend, 32% is expected to be wasted in 2022 ($158.3B). Ouch. Gartner Flexera Those numbers alone are eye-watering, but when contrasted with the global economy trending toward more trying times, and 83% of organizations' top cloud challenge is managing their cloud spend (Flexera). It is inevitable that executives are already asking or about to ask, where can I save money? Though to save money, to optimise, to operate efficiently, we first must know where spend is occuring across the organisation So let's examine that. Architecting Account Hierarchy for Cost Visibility Depending on whether your organization was an early cloud adopter or whether your organization is exploring best-of-breed practices to establish new cloud capabilities within your organization. The answer to cloud visibility is not just #tagging. Several articles speak to tagging as if it's the panacea to solving all an organization's allocation and visibility concerns. Though, as a cloud architect and a FinOps lead working in Professional Services where I am engaged at all ends of the spectrum in a variety of organizations' cloud journeys, I find the truth of 'tagging' to be one lever of many. But as stipulated in many articles, they don't provide the complete picture which leads to why I am writing this article. It all begins with how your organization has utilized its offerings to design necessary governance upfront. You see, tagging comes after establishing the necessary organizational structure, control policies, guardrails, etc. for how your organization may want to best organize itself. This could be by business units, environments, workloads et cetera. CSP Based on this, there are more than just cost considerations, and depending on the industry of your organization, you may find that governance constructs vary greatly. The below is going to provide a number of the common constructs I see, and what the pros and cons of these are to enable you to make the right decision for your organization. The intent here is to 'shift left' FinOps capability to not rely on one factor that is commonly just 'tacked on' i.e. tagging, but to 'bake it in' to the design of your governance structure within your CSP or CSPs if you are multi-cloud. To discuss this, we first must clarify some general nomenclature so we are all on the same page. Across CSPs, the terminology used to represent the same logical construct is different though in deployment we can achieve the same outcome. The below provides a comparison of Amazon Web Services (AWS) and Microsoft Azure (Azure) and how their terminology of governance hierarchy differs yet enables the same outcomes. In all examples below, I will be utilizing AWS terminology, but please refer back to the below for a comparison of terms if I lose you! Note: Common Governance Constructs As discussed briefly above, the governance construct your organization deploys or has deployed may be based on what was available at the time (early adopter) or well-architected best practices that exist now. Either way, understanding how different industries may architect their landing zones and governance constructs enables you to make better decisions to improve cost visibility in your organization now and move forward and make the right trade-offs. In the examples below the 'Management Account' is used as a collective of potential 'other' accounts which are used for common governance and policy enforcement, security etc. And not specific to AWS terminology whereby 'management account' is the central account used to manage AWS Organisation Hierarchy (formerly known as the master account). These may include, but are not limited to: Note: Identity Account; centralize management of Active Directories, RBAC, etc. Connectivity Account; centralized management and configuration of network resources such as AWS Direct Access Management Account; central management of monitoring, logging, and analytics which may connect back on-premises to SIEM tooling like Splunk So please don't get hung up on those management accounts. Additionally, the examples provided below are by no means exhaustive but attempt to provide you with enough information to begin to consider your organizational governance requirements. As such, may require you to organize your organizational units and their respective accounts in ways that support the scale, policies, network design, or management boundaries that best serve the organization's operational needs. As one size does not fit all. Company A - Environments This organizational structure uses AWS Organisational Units (OUs) and breaks accounts up by environments with all business units and their respective workloads mixed into each 'DEV', 'TEST', and 'PROD' in this example. This structure has the benefit of minimizing cost as common resources can be shared and logically the account creates a boundary for isolation that separates concerns. So even without tagging, we can attribute workloads to their environment. However, due to the structure by ‘environment’, it is easy to see tagging here is crucial if a 'chargeback' cost allocation method is intended or even a 'show back' to each business unit and their workloads. Though security here is of concern, as the 'PROD' account is a honey pot of production workloads waiting to be exploited if not managed correctly. Company B - Business Units This organizational structure uses OU's to represent business units with all workloads of that business unit, and their respective 'environments' managed within each. This structure has the benefit of minimizing cost as common resources can be shared, and logically the account creates a boundary for isolation that separates concerns similar to Company A. So even without tagging, we can attribute workloads to logical business units. In an organization where show back or a chargeback is used for cost allocation, this may be enough to have specific cost boundaries defined by the account structure. However, to understand further what workload was utilizing a specific resource and to further break down costs, tagging is required. It is important to call out here that this organizational structure does introduce risk around security similar to Company A, as environments are mixed, therefore engineers may through negligence inadvertently make a change meant for a 'DEV' environment but instead affect a 'PROD' workload. Strong development practices, pipelines, code reviews et cetera are important here. Including the use of AWS Service Control Policies (SCPs), AWS Control Tower, and AWS Organisations to help manage and enforce policy guardrails. CI/CD Company C - Workload & Environment This organizational structure is not common for many organizations but is common in high-security organizations were limiting the blast radius is important such as for my clients in the Defence & National Security sector. Organizational units may be used, but if so are to implement control policies as cost granularity is achieved by the very nature of account structure. Accounts are broken up by both workloads and by the environment. As such, each workload will at minimum have two accounts with all 'Non-Production' workloads in one account and 'Production' in another. The number of accounts can increase where higher-level non-production environments such as 'Pre-Production' has integration with third parties to test end-to-end configuration and integration and separation of concerns are needing to be maintained. This structure, undoubtedly, is the most expensive way to operationalize an organizational structure within a CSP as no resources are shared. Given workloads that may communicate with each other as part of an end-to-end system must take additional measures to enable peering etc. Additionally, costs are duplicated for the organization as core resources used such as AWS WAF are required in every account, and are charged accordingly. Given this structure, workloads have evident operational boundaries and policy enforcement. In turn, costs can be directly attributed to a specific workload and its respective environment. In this scenario, tagging becomes less crucial as costs are granular to the cent, with no shared costs to allocate back. This structure therefore may be enough for some organizations to have confidence in just 'paying the bill' and trusting teams to take action through cloud-native advisor tools. However, when you begin to consider what resources are being used such as Kubernetes Clusters, and getting to the next level of visibility in large workloads with hundreds of VMs potentially, tagging becomes crucial. As is discussed above, it comes down to your organization's imperative. I have spoken with some organizations in the Cryptocurrency Exchange business who are not concerned at all about their spending and therefore don't care for visibility in context to finances (though may from an SRE perspective. While others, such as the government are spending public funds and have tighter controls on how that money should be spent. Conclusion Understanding the organizational governance structure is the first step toward better cost allocation and visibility. Though tagging plays an incredibly important role in this, it is just a lever, and understanding the purpose of why things are architected the way they are enables you to pull the lever more effectively. Lowering the burden on your engineering teams, and increasing the value-add certain tags have. As too many tags without a specific purpose simply create overheads. Don't be that team! So get intimate, and understand and I promise you will achieve better outcomes for your finops team, and in turn, your organization. the why This article represents my personal opinion only and not that of my employer. Also published here.

Navigating Cloud Costs: How to Achieve Financial Visibility with Cloud Architecture 

Introduction On 22 September 2022, Australia's second-largest telecom company, Optus, that it had suffered a significant data breach. Though the data breach details are not public, reports indicate that the breach was caused due to a human error. In this blog post, we will dive deeper into what happened and how organizations can take steps to avoid such a breach. announced Cause Optus exposed its customer identity database to an Application Programming Interface (API) for use in the internal systems. Such an exercise is prevalent in large organizations that must keep changing access controls to various databases in the company. However, in this case, the API was publicly available without authentication. This means anyone could access that data via the API endpoint https://www.optus.com.au/mcssapi/rp-webapp-9-common/customer-management/contact-person/{contactId}?lo=en_US&sc=SS. This is a classic case of enumeration error, where the following user's information can be obtained by querying contactId + 1. The hackers iterated over the contactId to get the personal data of over 2 million Optus users. How could it have been avoided? With the speed of software development, it often becomes increasingly difficult to keep a check on applications that have access to customer data. Restricting access and manual verification can slow down the developer's speed and reduce the innovation cycle of an organization. Also, with hundreds of code commits daily, it becomes humanly impossible for data security and privacy engineers to keep track of all the changes and identify privacy vulnerabilities. Some form of automation is required to help organizations deal with this issue. Organizations need real-time visibility of the data flows across multiple applications and databases. They need to know which applications or repositories have access to which data and how it is being exposed to the world. Using assessments or manual threat modeling techniques to acquire this information is slow and often incomplete. To solve this, organizations must move their assessments closer to the developer workflows. With shift-left processes, organizations can monitor, identify and fix such data security vulnerabilities. This includes integrating tools and workflows into the CI/CD pipelines to automate risk detection and avoid time-consuming assessments. It also helps prevent any last-minute surprises from the privacy or security teams and allows teams have clear visibility of the constraints. Imagine if Optus could identify that a new test network was accessing their customer identity database and that they have exposed this information via a public API. All of this happened as soon as the developer committed to these changes. This would have raised red flags in the application security team, and they could have moved swiftly to secure the code. Detecting APIs using Privado open source To detect real-time data flows and minimize application security issues, we can use Privado, an open-source static code scanning tool that helps developers and organizations monitor, detect and resolve data security issues at the time of commit. For this example, we will take a repository that processes user data. Let's assume we have a legacy repository, , with all the security configurations that handle private customer data. We first and find the existing APIs processing user data. To scan the project, we follow these steps: BankingSystem-Backend scan the repository with Privado Step 1 - Clone the Required Repositories git clone https://github.com/saurabh-sudo/BankingSystem-Backend
git clone https://github.com/Privado-Inc/privado Step 2 - Install Privado curl -o- https://raw.githubusercontent.com/Privado-Inc/privado-cli/main/install.sh | bash Step 3 - Run the scan privado scan BankingSystem-Backend After the scan is complete, we can view the results at BankingSystem-Backend/.privado/privado.json. To interpret the results, you can check the following . Under the “Collections“ section in the result, we see that Privado scan has detected 2 APIs that collect user data. However, there are a few more APIs in the app that are also handling some data - might not be user data. One such example is shown below: guide @GetMapping("/getById/{id}")
 public ResponseEntity getById(@PathVariable Long id) throws Exception {
 try {
 Account acc = accountDao.findById(id).get();
 return ResponseEntity.ok(acc);

 } catch (Exception e) {

 System.out.println("Error is " + e);
 return new ResponseEntity(HttpStatus.BAD_REQUEST);
 }
 } By default, Privado scan does not detect this since it is unclear if the data is linked to the user. So lets suppose we are browsing the code and discover this snippet above. We scratch our heads a bit and decide that we should start tracking any data leading to the Account DAO that we have since this looks like data can go in and out from here. To do this, we can define a simple rule in Privado to detect APIs that expose all entries in the database, using the JDBC’s findById() method that fetches a particular entry from the database. We then mark those leakages as sinks. We must place the above rule in the Privado project's rules/sinks/storages/jdbc/java.yaml : file sinks:
 - id: Storages.SpringFramework.AccountDao.Read
 name: AccountDao JBDC Connector
 patterns:
 - "(i?)com.common.BankData.dao.AccountDao.*findById.*"
 tags: Now, to pass these custom rules to the scan, we run the privado scan BankingSystem-Backend -c <path/to/privado> . On scanning the repository with our custom rules, we can see that Privado detects the new API in the code and maps out the data flow in the application. The below screenshot displays the data flow of the passport number of the user as highlighted by the red box. It also generates a line-by-line code analysis that can be viewed by developers to understand the flow of information inside the code. Note that this process does not solve the problem itself. However, it helps improve visibility around data flow in an organization and collaboration between developers and data security engineers. This is particularly useful in large organizations, where hundreds of code changes are made daily, and new repositories are added to the codebase. You can check out the tool yourself on . Feel free to post any issues or contribute to the project. GitHub Also published . here

VISIBUILD

visibuild.com.au

11-50 employees

Since 2021

COMPANY RANKING

VISIBUILD

EVERGREEN INDEX #11168

Representing this company? Click here to claim and customize this page!

Visibuild WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!

VISIBUILD

visibuild.com.au

11-50 employees

Since 2021

COMPANY RANKING

VISIBUILD

EVERGREEN INDEX #11168

RELATED COMPANIESRANK

STORIES ABOUT VISIBUILD

Representing this company? Click here to claim and customize this page!

Visibuild WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!