DEV Community: MorphZG

Relfection of values

MorphZG — Tue, 03 Dec 2024 20:24:16 +0000

In a world obsessed with numbers, we've traded authenticity for algorithms. We post, not to connect, but to collect likes, hollow currency for shallow validation. Technology isn't the villain, it mirrors us. Are we building tools to improve lives, or just to mask our emptiness? Maybe it's time to pause the scrolling and confront our own, unfiltered image. Ask yourself: Where are the real values?

Let me tell you a story

MorphZG — Mon, 16 Sep 2024 10:14:34 +0000

A simple guy, nothing special about him, not much different from the other regulars you see in public. But.... that's just on surface, inside, every single one of us is very special. Living through unique experiences that shapes who we are. First love, first disappointment, first school fight.... Very early in life we start to diverge in unimaginable ways from each other but still, somehow, we are drawn to other people with similar interests.

I like to stay occupied, i enjoy being productive. Sometimes finding fun where others would get bored to death. That's the reason i write. I like writing. Writing is more than just an escape or a way to pass the time. It's a reflection, a conversation with myself. Each word is like pulling back a layer, exposing thoughts I didn’t even know I had. It's strange, really, how putting pen to paper or fingers to keyboard can bring out emotions you didn’t realise were hiding beneath the surface.

I often think about the power of storytelling. How, with the right words, you can capture an entire moment, a fleeting feeling, or a lifetime of experiences. When I write, I'm not just telling a story; I'm weaving a piece of myself into it. Sometimes it's about people I've met, situations I've been in. Sometimes it's just pure imagination, creating worlds and characters that don’t exist, yet somehow feel more real than anything around me.

There’s something thrilling about it, like I’m both the creator and the observer. I write to understand, to make sense of the chaos that sometimes spins in my head. And if, by chance, my words resonate with someone else, if they read something I’ve written and feel even a fraction of what I felt while writing it well, that’s just a bonus. Because, ultimately, I write for me.

But that’s the thing about sharing your thoughts no matter how personal they feel, you never know who might connect with them.

Perfect note taking system

MorphZG — Wed, 21 Aug 2024 14:49:35 +0000

Tweaking and configuring until you make it

I’ve been down the rabbit hole of finding the perfect tool. It started innocently enough—I was searching for a text editor that could do it all. I tried everything from Evernote to Notion, but then I discovered the text editor that built a huge legacy over the decades of existence, Vim. Text editor you can run on a pocket calculator if it had a few more buttons but also so customisable and extensible you can do some serious work with it. While it's modern brother Neovim ruling the scene these days only sky is the limit.

I could customise every little detail, configure countless plugins, scripts and themes available i can make it exactly how I want. I’d lose hours tweaking settings and refining my setup, convinced I was being productive just because I was working something. It felt like I was really accomplishing something, and i actually did have really cool piece of a tool. But it was not what i initially went for.

I had a beautifully customised text editor that could handle anything i throw at it. But i had zero content, zero or almost zero output. Most of my time had been spent fiddling with configurations rather than getting things done. Like most of you i was scammed, by my own surplus of creativity combined with a lack of courage. That’s when it hit me: I wasn’t really moving forward. I was just spinning my wheels, obsessing over the system instead of the work. Being active on reddit.com i found many lost souls looking for a system, how to do it right. It is not about doing it right, you just have to start and you won't be wrong.

Why are we scared to start without having a system?

So, why do we get so hung up on finding the perfect note-taking system before we even start? For many of us, it’s about control. Starting something new, like switching careers or diving into a new field, can be intimidating. We crave a sense of order, something that will guide us through the chaos. Having a system feels like having a map in uncharted territory—it’s reassuring. But here’s the problem: spending too much time on the map means you never actually start the journey.

We’re scared that if we don’t have a system, we’ll mess up. We’ll forget something important, miss a critical detail, or simply feel overwhelmed by the sheer volume of information. But in reality, the only way to overcome that fear is to dive in, messy and unorganised as it might be. The system can come later.

Do we need a system?

Here’s where things get interesting: you don’t really need a system to get started. I know, it sounds counterintuitive. But think about it, some of the most successful people in the world didn’t start with a flawless system. They started with passion, curiosity, and a willingness to learn. The system was something they developed over time, based on what actually worked for them.

In fact, obsessing over a system before you even begin can be more of a hindrance than a help. You’re putting the cart before the horse, worrying about the structure when you should be focusing on the content. Notes, after all, are just a tool to help you capture and organise your thoughts. The real value lies in what you’re learning, not how you’re organising it.

Start with content, and the system will come

So, where should you begin? Start with the content. Write, scribble, note what you’re learning, just save what seems important. Why you think it's important? Where you found the information? Think about how would you search for it when you need it. There is a search tool in any app you use, so help your future self and make the information easy to find by adding tags or keywords. Still no need for complex directory structure, keep everything together and just use search tool. If you are adding tags try not to go crazy with to many tags. Tags should be specific with no more than 3 or 4 tags per note, otherwise they loose the purpose. The point here is to help you find the information later.

As you accumulate more notes, patterns will naturally start to emerge. You’ll begin to see what works and what doesn’t. Maybe you’ll notice that certain tools or methods help you retain information better. That’s when you can start to develop your own system, tailored to your needs. The key is to let the system evolve organically, rather than forcing it.

Don’t stress too much

It’s easy to get caught up in the idea that you need to have everything figured out from day one. But here’s a little secret: nobody does. Whether you’re starting a new career, learning a new skill, or just trying to keep track of your grocery list, the perfect system is one that grows with you.

Don’t stress if your notes look like a chaotic mess at first. The important thing is that you’re capturing information and learning. The organisation will come with time, as you refine what works for you. Remember, the goal is progress, not perfection.

Conclusion: Embrace the mess and keep moving

In the end, the perfect note-taking system is a myth. There is no one system to rule them all even when it seem like it. There are many templates and workflows available online but at the end you will notice how you can combine different ideas with your creativity and your own personal preference. In the end you will naturally start following a pattern you like and enjoy, your own personal workflow should not restrain you but help you to grow. The real magic happens when you let go of the need for perfection and simply focus on what is actually important. Start with the content, and allow your system to evolve slowly. Embrace the messiness, the trial and error, and the inevitable tweaks along the way.

Image taken from: https://www.getclockwise.com/

Note Taking as a Learning Tool: How to Retain Knowledge and Spark New Ideas

MorphZG — Tue, 06 Aug 2024 03:14:30 +0000

The Importance of Taking Notes

If you're like most people, you've probably scribbled down notes in the margins of a textbook, jotted a few thoughts on a notepad, or tapped out reminders on your phone. But have you ever considered how structured note taking can transform your learning process and spark new and fresh ideas? For those diving into new fields, like i am jumping into a web development, note taking isn't just something you do here and there. Notes should be like a living, always evolving organism. If done right, note taking can be a powerful tool for personal growth and creativity. Not only retaining the new knowledge but as a tool help you develop new insights and wider perspective. In this post, i will share my own experience with note taking, and how leveraging tools like Obsidian can supercharge thinking capacity.

A Brief History of Note-Taking

Before we dive into modern methods, let’s take a quick trip down memory lane. Note taking has been around for centuries, from ancient scholars scratching ideas onto papyrus to medieval monks meticulously copying texts. In the 20th century, the advent of typewriters and early computers revolutionised how we capture information, making it easier and faster. Fast forward to today, and digital tools have opened up a world of possibilities for organising and retrieving our thoughts with ease.

“Note taking is not just a way to remember things; it's a method of making sense of the world around you.”

Different Methods of Note Taking

There’s no single best approach to note taking, but understanding different methods can help you find what works best for you. Here’s a rundown of popular techniques:

Zettelkasten

"Linking ideas creates a web of knowledge that evolves over time."

Concept: Developed by German sociologist Niklas Luhmann, Zettelkasten, which means “slip box” in German, is a method of note-taking that focuses on creating a network of interconnected notes.
How it Works: Each note (or “zettel”) is a self-contained idea or concept. Notes are linked to each other through a unique identification system, making it easy to trace connections between different ideas. This method encourages the development of a personal knowledge base or "second brain."
Strengths: Great for building a complex web of interconnected ideas, which can be particularly useful for research and writing projects.

Cornell Method

“The Cornell Method provides a clear and organised way to simplify knowledge review”

Concept: Developed by Walter Pauk, the Cornell Method is a systematic approach to note taking that helps with organization and review.
How it Works: The page is divided into three sections: a narrow left hand column for cues or key terms, a wider right hand column for detailed notes, and a summary section at the bottom. During the lecture or reading, take notes in the right-hand column. Afterward, summarize the notes and jot down key terms or questions in the left hand column.
Strengths: Provides a structured way to review and study notes. The summary section and cue column help reinforce learning and facilitate easier review.

Mind Mapping

“Mind mapping helps visualise relationships and encourages creative thinking.”

Concept: Developed by Tony Buzan, mind mapping is a visual note-taking method that organizes information around a central idea.
How it Works: Start with a central concept in the middle of a page, and then branch out with related ideas, keywords, or concepts. Each branch can further expand into sub-branches.
Strengths: Useful for brainstorming, organising thoughts, and visualising relationships between concepts. It’s also helpful for memory retention due to its visual nature.

Outline Method

“Outlining breaks down information into manageable chunks, making it easier to digest.”

Concept: This is a hierarchical method that organizes information into main topics and subtopics.
How it Works: Start with main headings and then create subheadings or bullet points under each heading. Each level of detail is indented to show the relationship between ideas.
Strengths: Excellent for organizing structured information and creating a clear, logical flow. It’s particularly useful for subjects with a clear hierarchy, such as history or science.

Sentence Method

“This method is perfect for capturing detailed, step-by-step information.”

Concept: This method involves writing each new piece of information as a new sentence, often in a linear fashion.
How it Works: Notes are taken in complete sentences, with each sentence representing a distinct idea or fact. This method tends to produce a narrative style of notes.
Strengths: Provides detailed and comprehensive notes that can be easy to understand when reviewed later. It’s particularly useful for lectures with dense information.

Flow Based Note Taking

"Capture ideas in their natural flow to foster creativity and insight."

Concept: This approach emphasizes capturing ideas in a free form, non linear way, often using a combination of text, diagrams, and arrows.
How it Works: Notes are taken in a continuous, flowing manner, integrating text and visual elements to capture the flow of ideas as they come.
Strengths: Allows for creative expression and can adapt to various types of information, making it useful for subjects where connections are fluid and less structured.

Charting Method

"Categorise data to compare, contrast, and clarify information efficiently."

Concept: This method organises information into tables or charts, which is particularly useful for comparing and contrasting data.
How it Works: Create a chart with columns and rows to systematically categorise information. Each row can represent a different item or concept, while columns represent different attributes or criteria.
Strengths: Ideal for subjects involving comparisons, classifications, or data analysis. It helps to quickly visualise and retrieve information.

Boxing Method

"Separate topics visually to keep your notes organised and accessible."

Concept: Information is divided into “boxes” or sections on a page to visually separate different topics or subtopics.
How it Works: Draw boxes around related pieces of information to group them together visually. Each box can be a topic or a subtopic.
Strengths: Helps in organising notes by visually separating different sections. Useful for subjects where clear delineation between topics is helpful.

Each method has its own advantages, and the best choice often depends on personal preference, the nature of the material, and the intended use of the notes. Some people even combine methods to suit their needs!

Practical Tips for Effective Note Taking

Be Concise and Focused

Tip: Avoid writing down everything verbatim. Instead, focus on capturing key points, main ideas, and essential details. Use abbreviations and symbols to speed up the process and keep your notes succinct.
Why It Helps: Concise notes are easier to review and retain. They also help you to process and understand the material better as you’re forced to distil the information into its most important elements.

Use Active Listening and Engagement

Tip: Engage actively with the material as it’s presented. This means asking questions, making connections to what you already know, and summarising information in your own words as you take notes.
Why It Helps: Active engagement ensures that you’re not just passively transcribing information, but actually processing and understanding it. This improves retention and comprehension.

Organise Your Notes Clearly

Tip: Use headings, subheadings, bullet points, and numbered lists to structure your notes. Leave space for additional information or clarifications. Consistently use a system for organising your notes, whether it's a specific method like the Cornell Method or just a personal style.
Why It Helps: Well organised notes are easier to navigate and review. They make it simpler to find specific information and see the overall structure of the material.

Review and Revise Regularly

Tip: Set aside time to review and revise your notes regularly. Summarise what you’ve learned in your own words, fill in any gaps, and clarify any points that are unclear.
Why It Helps: Regular review helps reinforce the material in your memory and ensures that your notes are accurate and complete. Revising also helps you to better understand and integrate the information.

Utilise Visual Aids

Tip: Incorporate diagrams, charts, and other visual elements to represent complex information and relationships. Tools like mind maps or flowcharts can help in visualising connections between ideas.
Why It Helps: Visual aids can make abstract or complex information more concrete and easier to understand. They also help in memory retention by engaging different cognitive processes.

Why i love Obsidian?

Obsidian is a flexible note taking app that helps you organise your ideas by linking notes together and using simple Markdown formatting. Its Graph View shows how your notes are connected, making it easy to explore your thoughts visually. With notes stored locally and lots of customisation options, Obsidian is great for keeping track of and connecting your information.

Markdown Support. Obsidian uses Markdown, a lightweight markup language, which allows you to format your notes easily and ensures compatibility with other Markdown based tools. This makes writing and editing content straightforward and flexible.

Links and backlinks. One of Obsidian’s standout features is its bidirectional linking system. You can create wiki style links between the notes and Obsidian will automatically update the links when you change or move connected notes. It is possible to create a link to notes that still has to be written, empty and nonexistent files. After clicking on such link, obsidian will automatically create a new file. It helps if you are writing a lot and planning to connect future writings, no need to come back and update the links. It is flexible and powerful. The ability to link notes and visualise connections makes Obsidian ideal for building a personal knowledge base.

Graph View. The Graph View is a visual representation of your notes and their connections. It provides an intuitive way to see how your ideas are related, allowing you to explore your knowledge base dynamically.

Customisability. Obsidian is highly customisable. You can choose from a range of themes, install plugins, and adjust settings to tailor the app to your workflow. This adaptability makes it suitable for various use cases, from simple note-taking to complex project management. Obsidian can work very well as a bare bones app, without any additional plugins but plugins are also a great way to add and remove extra features. From simple styles and calendars to complex data fetching plugins that turns your obsidian vault into a database, powerful template generators... you name it.

Local Storage. Only you are the owner of your notes. Unlike many cloud based note taking apps, Obsidian stores your notes locally on your device as a plain markdown files organised into a set of directories and sub-directories. This offers greater control over your data and ensures that your notes remain accessible even without an internet connection. You can easily format, reformat, convert, code, encode and so on... It is your data and you can move it how you wish.

Publishing tools. By utilising a simple structure of notes stored in a local directories or online repositories like github or gitlab, with the help of the static site generators like Quartz or Jekyll it is only a matter of few minutes and you can have your own digital garden, collection of personal knowledge and everything you written. Feeling inspired? Read this: A Brief History and Ethos of the Digital Garden, a newly revived philosophy for publishing personal knowledge on the web.

Conclusion

Taking notes is a simple yet powerful practice that can greatly improve how you perceive the world around you. From organising ideas to tracking progress and facilitating learning, effective note taking can enhance your productivity and problem solving skills. By using the right tools and methods, and maintaining a consistent note taking habit, you can ensure that you stay organised, focused, and continuously improving in your web development journey.

So, grab a notebook or fire up Obsidian, and start turning your scattered thoughts into a well organised stash of knowledge. Happy note taking!

Image taken from: https://blog.cuaa.edu

YAML reference and important concepts.

MorphZG — Sun, 21 Jul 2024 22:07:32 +0000

YAML Ain’t Markup Language

YAML is a data serialisation language designed to be human-friendly and work well with modern programming languages for common everyday tasks. It is often used for configuration files that are parsed and read by a programming language or a framework. It's readable syntax format makes it easy for developers and system admins to understand and modify.

Design goals

The design goals for YAML are, in decreasing priority:

Should be easily readable by humans.
YAML data should be portable between programming languages.
Should match the native data structures of dynamic languages.
Should have a consistent model to support generic tools.
Should support one-pass processing.
Should be expressive and extensible.
Should be easy to implement and use.

Basics syntax rules

Case sensitive.
Files should have .yaml as the extension.
Does not allow usage of tabs, use spaces instead.
As opposed to json, comments are supported with #
Use indentation to denote structure
List members are written with leading hyphen - each on it's own line but can also be enclosed in square brackets and separated with commas.

# Block style list
List:
  - itemA
  - itemB

# Flow style list
List: [itemA, itemB]

Associative arrays or dictionaries, also called maps or mapping values are represented using colon : in the format of key value pair. They are enclosed in curly braces {key1: value1, key2: value2}. A question mark can be used in front of a key if key have complex structure, like combination of ? key: value both being a key to another value. They provide efficient mechanisms to retrieve values based on keys and organised data storage. The values can be of any type, including other nested dictionaries, lists, strings... anything.

# Block style
employees:
  - name: Alice
    role: developer
    skills:
      - Python
      - Javascript
  - name: Bob
    role: designer
    skills:
      - Photoshop
      - Illustrator

# Flow style
employees:
  - { name: Alice, role: developer, skills: [Python, Javascript] }
  - { name: Bob, role: designer, skills: [Photoshop, Illustrator] }

Strings can be unquoted but may be enclosed in double or single quotes.
Multiple documents can be separated inside a single file using a --- while document end is denoted with dots .... Using dots is optional since enclosing the document with hyphens --- inherently ends it. Dots can be useful in cases where you need to explicitly denote the end in situations where document is followed by non-yaml content.

---
# Document 1
title: "Document 1"
data:
  key1: value1
  key2: value2
...

---
# Document 2
title: "Document 2"
data:
  key3: value3
  key4: value4
...

# Non-YAML content can follow, or another YAML document can start with `---`
Some non-YAML content or metadata

Use anchors & to define reusable nodes and aliases * to refer to previously defined node. Merge key << to merge the content of an anchor into another node. Using anchors and aliases simplify the yaml files by avoiding redundancy and ensuring consistency. When dealing with large configuration files you can make them cleaner and easier to maintain.

default_settings: &default
  resolution: 1080p
  frame_rate: 60
  aspect_ratio: 16:9

player1:
  <<: *default
  name: Player1
  controls:
    move_up: "W"
    move_down: "S"

player2:
  <<: *default
  name: Player2
  controls:
    move_up: "ArrowUp"
    move_down: "ArrowDown"

To assign a tag to a node use ampersand &. To reference that node, use an asterisk *.

name: Tom Nolan
bill-to:  &id01
  street: |
          123 Main Valley
          Room 16          
  city:   New York
  state:  NY

ship-to:  *id01

In YAML, scalar values can be represented in various ways, including block notation, which allows for multi-line text. The | and > symbols are used to specify how line breaks and formatting should be treated.
Literal block scalar, the | symbol is used when you want to preserve all the line breaks and formatting in the text exactly as it appears. It tells yaml to include the line breaks in the content. The text will be rendered with the exact formatting you see, including newlines and indentation. Useful for preformatted text, code blocks, or any content where exact formatting is crucial.
Folded block scalar, the > symbol is used to fold newlines into spaces, which helps to produce a single-line output for text that is easier to read. It also allows for maintaining newlines when there are blank lines between paragraphs. Converts line breaks into spaces to produce more compact text. Maintains paragraph breaks with blank lines but removes other line breaks. Ideal for long texts that should appear as a single paragraph in the output.

literal_block: |
  This block preserves line breaks.
  Each line is treated separately.

  Blank lines are kept as is.

folded_block: >
  This block folds newlines into spaces,
  so it will be displayed as a single
  line of text with spaces replacing
  line breaks.

  Paragraphs are separated by blank lines.

In YAML, scalar values are simple, indivisible data values that can be represented in different ways. They include basic data types like strings, numbers, and booleans. Scalars are the most basic form of data you can work with in YAML, as opposed to more complex data structures like lists or maps. These include: Strings, Numbers, Boolean, Null, Date and Time,

scalar_values:
  string_plain: This is a plain string.
  string_double_quoted: "This is a double-quoted string with a newline \n and a \"quote\"."
  string_single_quoted: 'This is a single-quoted string with a single quote '' inside it.'
  integer: 42
  float: 3.14
  boolean_true: true
  boolean_false: false
  null_value: null
  date: 2024-07-21
  datetime: 2024-07-21T14:30:00

Who am i? For real

MorphZG — Fri, 12 Apr 2024 14:19:34 +0000

Young, naive and overconfident. Now, 38 years of age, frustrated but highly motivated. I thought success will come by default but was wrong. I always felt confident with skills and value i offer to my employee. bartender since 2005 till now. and i was sure i am a good one. but after my 30 birthday i started to question. somehow i realized i have other skills and interests that none of my colleagues have. In more than a decade of my bartending None of my work buddies. few more years have passed and i am now sure i am different. i just don’t fit into the stereotype.

Started to wonder. who am i actually? my natural talent. some born as warriors, some as bards, musicians and others as clowns. Who am i? And i found the answer. What you do in your free time? That is career for you. Ever since high school technology was around me. While friends just play the games. I always tried to find how mechanics work? How damage is calculated? How to get highest value with minimal effort. And just like that my head bulb was lit. i love code, i love exploiting the system rules to get optimal results. never really a math guy but mechanics in the background.

When i started coding in visual studio i got access to simplified git interface. I had urge to learn how all those components work together. Launch the terminal and learn git, learn bash and linux scripting… like puzzles connecting and forming a picture. I realized the backend for web apps is my perfect fit. But then came machine learning and all those really challenging stuff years ahead of me. Currently to high above my level. With 36 i think i am now more than ready to take that bite.

Beyond the login screen

MorphZG — Fri, 12 Apr 2024 12:20:35 +0000

In the fast-paced world of web development, ensuring the security of your applications is paramount. With cyber threats becoming increasingly sophisticated, it's more important than ever to fortify your websites against vulnerabilities and pitfalls. In this guide, we'll delve into common vulnerabilities, pitfalls to avoid, and best practices for securing your web applications, covering topics such as user authentication, secure storage of user data, encryption, password hashing and salting, and OAuth.

Understanding Common Vulnerabilities and Pitfalls

Before diving into specific security measures, let's address common vulnerabilities and pitfalls that plague web applications. Cross-Site Scripting (XSS), SQL Injection, Cross-Site Request Forgery (CSRF), and insecure direct object references are among the most prevalent vulnerabilities. These vulnerabilities can be exploited by attackers to compromise user data, inject malicious code, or hijack user sessions. To mitigate these risks, it's crucial to implement robust security measures at every stage of development.

Ensuring Website Security

Website security encompasses a broad range of practices aimed at safeguarding your web applications against various threats. This includes implementing secure authentication mechanisms, enforcing access controls, validating user inputs, and keeping software dependencies up-to-date. Additionally, employing HTTPS encryption, using secure coding practices, and regularly auditing your codebase for vulnerabilities are essential steps in bolstering website security.

User Authentication: The Gateway to Security

User authentication forms the cornerstone of web application security. By verifying the identity of users, you can control access to sensitive resources and protect against unauthorized access. Common authentication methods include username/password authentication, multi-factor authentication (MFA), and single sign-on (SSO). It's crucial to choose the right authentication mechanism based on your application's requirements and sensitivity of the data being accessed.

Secure Storage of User Data

Once users are authenticated, their data must be securely stored to prevent unauthorized access or leakage. This involves encrypting sensitive information such as passwords, credit card numbers, and personal details before storing them in databases or filesystems. Encryption ensures that even if attackers gain access to the stored data, they cannot decipher it without the encryption keys.

The Importance of Encryption

Encryption is the process of encoding information in such a way that only authorized parties can access it. It plays a vital role in protecting data both at rest and in transit. Encryption algorithms use cryptographic keys to transform plaintext data into ciphertext, rendering it unreadable to anyone without the corresponding decryption key. Encryption is crucial for safeguarding sensitive information, such as passwords, financial transactions, and confidential communications.

How and Where We Use Encryption

Encryption is employed in various areas of web development, including data transmission over insecure networks (HTTPS), storage of sensitive data in databases, and securing communications between clients and servers. By encrypting data at rest and in transit, developers can mitigate the risk of data breaches and unauthorized access.

The Limitations of Encryption

While encryption provides a robust layer of security, it's not infallible. Attackers can employ techniques such as brute-force attacks, cryptographic vulnerabilities, or social engineering to bypass encryption controls. Additionally, the improper implementation or weak configuration of encryption algorithms can render them susceptible to exploitation. Therefore, it's essential to stay updated on best practices and emerging threats in encryption.

Password Hashing and Salt

Password hashing is a crucial aspect of user authentication, whereby passwords are transformed into irreversible hash values before being stored in databases. Unlike encryption, hashing is a one-way process, meaning that it's computationally infeasible to reverse the hashed value back to the original password. This ensures that even if the hashed passwords are compromised, attackers cannot retrieve the plaintext passwords.

Understanding Hashing and Hash Functions

Hashing involves applying a mathematical algorithm to convert input data (plaintext passwords) into fixed-length hash values. Common hash functions include SHA-256, SHA-512, and bcrypt. Hash functions produce unique hash values for each input, making them ideal for storing passwords securely.

Differentiating Hashing from Encryption

While both hashing and encryption involve transforming data into a different format, they serve distinct purposes. Encryption is reversible, meaning that encrypted data can be decrypted back to its original form using the decryption key. In contrast, hashing is irreversible, ensuring that plaintext passwords cannot be retrieved from hashed values.

Importance and Security of Hashing

Hashing passwords before storing them in databases is essential for protecting user credentials against unauthorized access. Even if attackers gain access to the hashed passwords, they cannot decipher them without performing a brute-force attack or exploiting hash vulnerabilities. However, it's crucial to use strong hash functions and employ additional security measures such as salting to enhance the resilience of password hashing.

Introducing Salt for Added Security

Salt is a random string of data that is concatenated with passwords before hashing, making each hashed value unique even for identical passwords. By adding salt to the hashing process, developers can thwart pre-computed hash attacks and rainbow table attacks, significantly increasing the complexity of password cracking attempts.

Implementing OAuth for Secure Authentication

OAuth (Open Authorization) is a widely adopted protocol for delegated authorization and authentication, allowing users to grant third-party applications limited access to their resources without sharing their credentials. Unlike traditional authentication methods, OAuth enables secure, token-based authentication, reducing the risk of credential theft and phishing attacks.

Understanding OAuth and Its Advantages

OAuth simplifies the authentication process for users by eliminating the need to disclose their credentials to third-party applications. Instead, users authorize access to their data through OAuth tokens, which can be revoked or refreshed as needed. This granular access control enhances security and privacy, minimizing the potential impact of data breaches.

The Mechanics of OAuth

OAuth operates through a series of interactions between the resource owner (user), the client application, and the authorization server. Upon initiating a request for access to protected resources, the client application redirects the user to the authorization server, where they authenticate and authorize the requested permissions. Upon approval, the authorization server issues an access token to the client application, enabling it to access the user's resources on their behalf.

Conclusion: Securing Your Web Applications with Node.js

In conclusion, securing your web applications requires a multifaceted approach encompassing authentication, encryption, and access control mechanisms. By understanding common vulnerabilities, employing best practices, and leveraging robust security protocols such as OAuth, you can mitigate the risk of data breaches and safeguard sensitive information.

Now, let's dive into implementing some of these security measures in Node.js:

Define User as a mongoose model

const mongoose = require('mongoose');

// Define user schema
const userSchema = new mongoose.Schema({
  oauthId: String,
  username: String,
  email: String,
  password: String,
  // Hash value will be stored instead of password
});

// Create User model
const User = mongoose.model('User', userSchema);

module.exports = User;

Salt the password, hash everything together and repeat 10 times

const bcrypt = require('bcrypt');

const saltRounds = 10;

async function hashPassword(password) {
  const salt = await bcrypt.genSalt(saltRounds);
  return await bcrypt.hash(password, salt);
}

async function comparePasswords(plainPassword, hashedPassword) {
  return await bcrypt.compare(plainPassword, hashedPassword);
}

User Authentication with Passport.js

passport.use(new LocalStrategy(async (username, password, done) => {
  try {
    const user = await User.findOne({ username });
    if (!user || !user.verifyPassword(password)) {
      return done(null, false, { message: 'Invalid username or password' });
    }
    return done(null, user);
  } catch (err) {
    return done(err);
  }
}));

// Serialization refers to converting a user object into a format that can be easily stored in a session. This usually involves extracting a unique identifier (such as the user's ID) from the user object and storing it in the session.
passport.serializeUser((user, done) => {
  done(null, user.id);
});

passport.deserializeUser(async (id, done) => {
  try {
    const user = await User.findById(id);
    done(null, user);
  } catch (err) {
    done(err);
  }
});

OAuth Integration with Passport.js

const passport = require('passport');
const OAuth2Strategy = require('passport-oauth2');
const User = require('./models/User');

passport.use(new OAuth2Strategy({
  authorizationURL: 'https://example.com/oauth2/auth',
  tokenURL: 'https://example.com/oauth2/token',
  clientID: process.env.CLIENT_ID,
  clientSecret: process.env.CLIENT_SECRET,
  callbackURL: 'https://example.com/auth/callback',
}, async (accessToken, refreshToken, profile, done) => {
  try {
    let user = await User.findOne({ oauthId: profile.id });
    if (!user) {
      user = new User({ oauthId: profile.id, username: profile.displayName });
      await user.save();
    }
    return done(null, user);
  } catch (err) {
    return done(err);
  }
}));

Uncovering Ikigai: My Journey

MorphZG — Fri, 13 Oct 2023 19:17:54 +0000

Life often has a way of surprising us, and my journey from behind the bar counter to becoming a web developer is a testament to that. I’m a simple guy, a 38-year-old on a quest to discover my Ikigai – that elusive balance of passion, profession, vocation, and the needs of the world. This is the story of how I found the courage to transition into the world of web development.

Life behind the bar

For 15 years, I poured drinks, mixed cocktails, and witnessed countless stories unfold in the dimly lit ambiance of the bar I called home. While it had its charms, I couldn’t ignore the nagging feeling that something was missing. I yearned for a deeper sense of fulfillment, a reason to wake up in the morning that extended beyond the nightlife.

Hint of passion

My fascination with mechanics and the inner workings of technology was a constant presence in my life. During the rare moments of downtime at the bar, I started to dive into the intricacies of technology, trying to understand how everything fits together. Each new insight felt like solving a puzzle, and it quickly turned into a passion. I couldn’t get enough of it.

Self discovery

As I delved deeper into web development and technology, I realized that the path to mastering this craft was going to be challenging. I am a self-taught developer, which meant countless hours of learning, practicing, and overcoming obstacles. The late nights in front of my computer were tough, but they were also incredibly rewarding.

World needs

While contemplating this career shift, I wondered if web development aligned with the needs of the world i live in. In today’s digital age, another industrial revolution, there’s a growing demand for talented and passionate guys willing and able to think out of the box and solve problems. Not to earn a paycheck but because they enjoy it so much. I can describe the feeling like solving the puzzle or winning the game you love playing. That is my Ikigai.

Financial stability

Leaving the stability of my bartending job was a daunting prospect. The steady income had been my lifeline, but my growing passion for web development and understanding technology’s inner workings gave me the courage to embrace the unknown. I realized that I could be paid for something I loved and believed in.

The journey ahead

My pursuit of Ikigai has brought me to this point, where I’m no longer just a bartender; I’m a budding web developer with a passion for understanding technology’s mechanics. My journey is ongoing, and the path ahead is still filled with uncertainty, but every line of code I write and every project I complete is a step closer to my true purpose.

As I continue this transition and exploration of my newfound passion, I want to share my knowledge and experiences with the world. This blog is the canvas where I’ll paint the picture of my journey – the challenges, the triumphs, and everything in between. My hope is that by sharing my story, I can inspire others to follow their passions and uncover their own Ikigai.

Until the next chapter of our adventure.