Dreams of Code
Dreams of Code
  • Видео 60
  • Просмотров 7 149 920
So, you've committed a secret, what next?
Over 10M of them are committed every year.
Secrets are something we often have to deal with as software developers, but unfortunately a huge number of them still make their way as hardcoded secrets in to our codebases.
Resolving and preventing hardcoded secrets is possible to do, but can sometimes feel a little obscure. Fortunately this video shows how you can resolve them.
Video Links:
Git Guardian 10M: www.gitguardian.com/state-of-secrets-sprawl-report-2023
Git Leaks: github.com/gitleaks/gitleaks
Become a better developer in 4 minutes: bit.ly/45C7a29 👈
Join this channel to get access to perks:
ruclips.net/channel/UCWQaM7SpSECp9FELz-cHzuQjoin
Join Discord: discord.com/invite/eMjRTvscyt
Join Twitte...
Просмотров: 32 836

Видео

We can now write scripts using these languages, but is it worth it?
Просмотров 59 тыс.21 день назад
To try everything Brilliant has to offer-free-for a full 30 days, visit brilliant.org/DreamsofCode . You’ll also get 20% off an annual premium subscription. Bash is often my go to for writing shell scripts, and by doing so, it allows me to easily automate a lot of my workflow. However, the syntax of bash is kinda weird at times, and I often wonder if it'd just be quicker to use a compiled langu...
Binary Search Animated
Просмотров 25 тыс.Месяц назад
Binary search is a simple yet elegant algorithm for searching for values in a data structure such as an array. Despite this simplicity, however, Binary Search also happens to be incredibly important, due to the efficiency it provides. This efficiency enables searches to take place on millions of items in orders of magnitude less time. This video seeks to show what Binary Search is, through anim...
The best (and worst) types for storing money in PostgreSQL
Просмотров 44 тыс.Месяц назад
To try everything Brilliant has to offer-free-for a full 30 days, visit brilliant.org/DreamsofCode . You’ll also get 20% off an annual premium subscription. Storing Money in a Database is not as easy as you might think. So, in this video, we look at some of the types you can use in PostgreSQL, and perhaps, why you may not want to. This video was inspired by a discussion in the Dreams of Code Di...
Testcontainers have forever changed the way I write tests
Просмотров 110 тыс.2 месяца назад
I don't always test my code, but when I do, I test against real services. The testcontainers package enables me to easily test against real services, in a way that doesn't cause issues that normally come from integration testing, which usually leads to flaky tests. This video is kindly sponsored by Docker. Download Tescontainers Desktop for free: dockr.ly/49HLeVy AtomicJar is now part of Docker...
Function Iterators might just change the way we write loops in Go
Просмотров 48 тыс.2 месяца назад
The rangefunc experimental feature is now available with Go 1.22. Over the last couple of weeks I have been playing with this new feature to see how far I can push it, and I think it may just change the way we write some loops in Go. Sign up for my Golang course at: dreamsofcode.io/courses/command-line-apps-go (Website is written in Go, btw) Video links: - RangeFunc wiki: go.dev/wiki/RangefuncE...
Why I'm no longer using Copilot
Просмотров 160 тыс.2 месяца назад
To try everything Brilliant has to offer-free-for a full 30 days, visit brilliant.org/DreamsofCode . You’ll also get 20% off an annual premium subscription. I've been using Copilot for about a year now, and initially I was impressed. However, since it became a permanent fixture in my workflow, I've noticed my own skills getting worse. This video was sponsored by Brilliant Become a better develo...
The standard library now has all you need for advanced routing in Go.
Просмотров 97 тыс.3 месяца назад
Use my link sponsr.is/tld_dreamsofcode and code APPDEVFOO5 and get a .dev, .app, or .foo domain name for only $5! This video is sponsored by Porkbun. Since 1.22, the Go standard library now has everything we need to perform advanced routing without the need of a third party dependency. However, knowing how to perform tasks such as middleware, path parameters, subrouting and more can be difficul...
Adding a cache is not as simple as it may seem...
Просмотров 105 тыс.3 месяца назад
Knowing what the expect and how to mitigate the issues with caching is the first step towards a successful caching implementation. Adding a cache is usually a good way to reduce load on your database, but it does come at the cost of increased complexity. This video looks at the most commong caching pattern, and the problems that can occur. This video was sponsored by Aiven. Their platform is us...
Create beautiful code screenshots in Neovim. Without damaging your wrists.
Просмотров 55 тыс.3 месяца назад
Create beautiful code screenshots in Neovim. Without damaging your wrists.
Tonic makes gRPC in Rust stupidly simple
Просмотров 42 тыс.4 месяца назад
Tonic makes gRPC in Rust stupidly simple
Go 1.22 is bringing about a new future for the language.
Просмотров 148 тыс.4 месяца назад
Go 1.22 is bringing about a new future for the language.
One of the most common mistakes in Go is about to be fixed
Просмотров 28 тыс.4 месяца назад
One of the most common mistakes in Go is about to be fixed
8 ways JavaScript is just... different.
Просмотров 58 тыс.4 месяца назад
8 ways JavaScript is just... different.
Using docker in unusual ways
Просмотров 408 тыс.5 месяцев назад
Using docker in unusual ways
This is perhaps the greatest feature of modern programming languages.
Просмотров 106 тыс.5 месяцев назад
This is perhaps the greatest feature of modern programming languages.
The perfect Neovim setup for Next.js (it's back)
Просмотров 30 тыс.6 месяцев назад
The perfect Neovim setup for Next.js (it's back)
I never thought I'd use Socket.io ever again
Просмотров 86 тыс.6 месяцев назад
I never thought I'd use Socket.io ever again
Never write another loop again (maybe)
Просмотров 249 тыс.6 месяцев назад
Never write another loop again (maybe)
Should you learn Elixir in 2024?
Просмотров 79 тыс.7 месяцев назад
Should you learn Elixir in 2024?
When RESTful architecture isn't enough...
Просмотров 243 тыс.7 месяцев назад
When RESTful architecture isn't enough...
"Hello, World" in 5 CURSED languages that no one should use
Просмотров 529 тыс.8 месяцев назад
"Hello, World" in 5 CURSED languages that no one should use
This is apparently the most loved CRUD app of 2023
Просмотров 129 тыс.8 месяцев назад
This is apparently the most loved CRUD app of 2023
I've been using Redis wrong this whole time...
Просмотров 333 тыс.8 месяцев назад
I've been using Redis wrong this whole time...
I built my own Reddit API to beat Inflation. Web Scraping for data collection.
Просмотров 180 тыс.9 месяцев назад
I built my own Reddit API to beat Inflation. Web Scraping for data collection.
The (almost) perfect Neovim setup for Node.js
Просмотров 70 тыс.9 месяцев назад
The (almost) perfect Neovim setup for Node.js
The most unconventional internet speed test.
Просмотров 12 тыс.9 месяцев назад
The most unconventional internet speed test.
Solving one of PostgreSQL's biggest weaknesses.
Просмотров 176 тыс.10 месяцев назад
Solving one of PostgreSQL's biggest weaknesses.
Should you learn C++ in 2023?
Просмотров 53 тыс.10 месяцев назад
Should you learn C in 2023?
Gorilla Toolkit for Golang is revived! But is it too late?
Просмотров 28 тыс.10 месяцев назад
Gorilla Toolkit for Golang is revived! But is it too late?

Комментарии

  • @bijayaprasadkuikel5162
    @bijayaprasadkuikel5162 5 часов назад

    I think you must make one video about setting up neovim for go developers. I am diehard Goland fan but I would like to try neovim.

  • @bijayaprasadkuikel5162
    @bijayaprasadkuikel5162 5 часов назад

    Superb content as always. I am waiting for a full microservices course from you. 😁

  • @OfficialViper
    @OfficialViper 16 часов назад

    Just when I needed this, thanks! :)

  • @Bubsfull
    @Bubsfull 20 часов назад

    How did your redis deploy yaml look like? I tried recreating your setup to test the persistenve stuff, but it didn't work for me. Did a redis:alpine deploy with 1 replica and a CM mounted with a redis.conf with appendonly yes and appendeverysec yes. Data did not persist.

  • @Kosin-zs9il
    @Kosin-zs9il День назад

    This is a very intuitive approach when you work with sorted arrays, the reality is just that you rarely work with sorted arrays and sorting the array to then use a binary search is a pretty bad approach as well.

  • @PugganBacklund
    @PugganBacklund День назад

    For the slack token I'd use the `git commit --amend` instead, and for the cache-password id use `git commit --fixup <hash>` followed by a `git rebase -i` (with config `rebase.autosquash=true`).

  • @philosophia5577
    @philosophia5577 День назад

    I startef daily driving NixOS a month ago.. As a developer, once you understand Nix and NixOS, you wouldn't want to go to a world without it..

  • @utkarshrajput8513
    @utkarshrajput8513 День назад

    after TSInstall im'not getting a long suggestion list, moreover my header file is not getting autocomplete. pls help moreover lsp server isn't working. no warning like yours if i access an element out of bounds

    • @utkarshrajput8513
      @utkarshrajput8513 День назад

      moreover if i follow GitHub installation steps i always encounter error in installing script. And even if I achieve that, my LSP linter and TSinstall doesn't run on startup and every file shows warning of deprecated libraries. I'm new to all this so don't know how to solve With the latest Nvchad link, installation doesn't work but with 2.0 link stuff mostly works with few hiccups stated above

  • @matiasm.3124
    @matiasm.3124 2 дня назад

    My favorite is a txt file encrypted with vim

  • @danielniels22
    @danielniels22 2 дня назад

    2:03 how do you enter newline between that curly braces in Vim? My way is press “i” and then press “enter” to do that. But it seems like you are still in Normal mode doing that. How? This is my first time using Vim 🙏

  • @SakibUllah-tu8nx
    @SakibUllah-tu8nx 2 дня назад

    now most of my issues with tmux-nvim workflow got solved. now just gotta add fzf in tmux and maybe harpoon too

  • @mabonhunts
    @mabonhunts 2 дня назад

    The LLM's are meant for people that don't know how to code like me i can just tell it what to do and it will write code for me. I don't have to pay someone to do it for me. It frees me up to put my efforts elsewhere. Also everyone is on about AI its going to be the future weather you like it or not you can either get on board or stick your head in the sand and pretend its not here. AI is going to get better and better to the point it can do what you do better then you its just a matter of time, we are talking a few years not a decade. Maybe its a bad thing for you but there is another 3 billion people on the planet that it will benefit so you can cry all you want but I'd gladly switch jobs if it meant all the people in Africa can eat a good meal every day.

  • @dejanduh2645
    @dejanduh2645 2 дня назад

    Will you do a video on Nix OS? Been looking at it for a while but not sure if I want Debian with i3 or just Nix OS. Or you could just write your opinion on it if you want to.

  • @OghamTheBold
    @OghamTheBold 2 дня назад

    I enabled the mouse - Gran paid £1,ooo for a house

  • @tibzdankan
    @tibzdankan 2 дня назад

    "You can lower the roof and feel the wind in your hair", I love Dreams of Code, I love PostgreSQL

  • @RazoBeckett.
    @RazoBeckett. 3 дня назад

    are you going to make videos on NixOS ? on channel ? because we would love to watch that.

    • @letanoname2966
      @letanoname2966 2 дня назад

      yes, he mentioned during the stream, that he's working on some content around nix for us :D

    • @RazoBeckett.
      @RazoBeckett. 2 дня назад

      @@letanoname2966 Yayeeeeeeeeeeee

  • @andherium
    @andherium 3 дня назад

    what a treat! Thanks!

  • @anlego6470
    @anlego6470 3 дня назад

    i can't install the clangd! please help

    • @utkarshrajput8513
      @utkarshrajput8513 День назад

      same issue, but i think I got a workaround in Mason install All move cursor to clangd in available packages then press i

  • @PasquiDente
    @PasquiDente 3 дня назад

    Yes, please more content on testcontainer

  • @random-staff
    @random-staff 3 дня назад

    Was: simple & explicit, will: tricky & implicit

  • @Zmey5656
    @Zmey5656 3 дня назад

    I use docker only when I need PostgreSQL. I need to master other area.

  • @Luna-lp9op
    @Luna-lp9op 3 дня назад

    your content + nix = yes yes yes yes yes yes yes yes yes yes!!

  • @bananaman9869
    @bananaman9869 4 дня назад

    Can’t wait to use my c shell to launch my interpreted vim to write my interpreted kernel to run on my interpreted version of qemu!

  • @elifry1478
    @elifry1478 4 дня назад

    I see even well-versed devs make mistakes. Sometimes, as with crypto, this causes the loss of thousands or millions of dollars. Pre-commit hooks in sensitive situations (many such cases) are needed, as a last resort.

  • @RishabhGupta-tn6do
    @RishabhGupta-tn6do 4 дня назад

    Fall of golang, sadge.

  • @zacharyrice8547
    @zacharyrice8547 4 дня назад

    Thanks for featuring my tool! Great video!

  • @PhanPlan-dq5iw
    @PhanPlan-dq5iw 4 дня назад

    This is fake, neovim isn't even an IDE to begin with.

  • @gloomabhi
    @gloomabhi 4 дня назад

    I set up pyright correctly however i am getting this error while opening a python file "Spawning language server with cmd: `{ "/data/data/com.termu x/files/home/.local/share/nvim/mason/bin/pyright-langserver", "--stdio" }` failed. The language server is either not install ed, missing from PATH, or not executable. Press ENTER or type command to continue " how can i resolve this?

  • @fahim0404150
    @fahim0404150 5 дней назад

    This is an awesome step by step guide. I was able to follow everything and it worked like a charm. I have a question. what is the keyboard shortcut that you use to clear the terminal (since "ctrl + l" is already mapped to something else)? I use "clear" for terminal but it does not work when I am using PostgreSQL.

    • @dreamsofcode
      @dreamsofcode 4 дня назад

      Thank you! Yeah the ctrl+l is an issue for me. For postgres, I use "\! clear" which works well enough, but there's also the ability to rebind to another key as well which I will probably do at some point.

  • @rugiero569
    @rugiero569 5 дней назад

    how can you combine the python and c++ setup. Trying it breaks one or the other

  • @MohammadLsk
    @MohammadLsk 5 дней назад

    Thank you for the excellent video. Also, using git filter-repo is a good way to remove a file from history.

  • @rembautimes8808
    @rembautimes8808 5 дней назад

    An excellent video and got me interested in time scale db. Solves a very pressing issue and look forward to more videos. To me if you’re providing value to data analysts and those tasked with solving complex business problems. If a tool provider does it well no harm in showcasing it

    • @dreamsofcode
      @dreamsofcode 5 дней назад

      Thank you! I'm a big fan of TimeScale personally as well, we've used them to solve some large time series problems!

  • @id02009
    @id02009 6 дней назад

    You recommended baseline as a way to exclude false positives. This is a bad ideas because it forces you to deal with leaked secrets in order of the commits. Better way is to use rules.allowList to exclude particular commits (it's explained in the docs)

  • @JETurp
    @JETurp 6 дней назад

    I’ve never worked at an organization where an investigation occurred BEFORE secret rotation. It was always the reverse unless some special circumstance like downtime that would violate an SLA was possible. Time to complete an investigation is time where your secret could be exploited.

    • @dreamsofcode
      @dreamsofcode 5 дней назад

      That's surprising to hear. How do you know which services are even affected without doing some preliminary investigation, or whether the secret is even active?

  • @tobb10001
    @tobb10001 6 дней назад

    Force Push: "Don't try this at home!" Aight, imma try this at work then. 🙃 Jokes aside, great video. I'd like to share the tip to put `.env` (or better `*.env`) in your global gitignore (`~/.gitignore` or `~/.config/ignore`), to keep you save from accidentally pushing that in all your repos.

  • @thegioveZ
    @thegioveZ 6 дней назад

    What's your neovim setup?

  • @ashiqnuaiman
    @ashiqnuaiman 6 дней назад

    A question, Is the `net/http` package in Go 1.22 fully capable of replacing the Gin framework?

  • @jamesborb4255
    @jamesborb4255 6 дней назад

    When I tell my employers I love programming this is what I mean, not Spring Boot queries

  • @mk72v2oq
    @mk72v2oq 6 дней назад

    If you want to get rid of old unreachable commits right away, just run a cleanup manually: $ git gc --prune=now

  • @mk72v2oq
    @mk72v2oq 6 дней назад

    As of unreachable commits garbage collection, you don't need to wait. If you want to get rid of them right away, trigger a cleanup manually: $ git gc --prune=now

  • @fahimferdous1641
    @fahimferdous1641 6 дней назад

    Can't relate. I have commitment issues.

  • @ShimoriUta77
    @ShimoriUta77 6 дней назад

    NPC stream broke me xD

  • @Kaelthas93
    @Kaelthas93 6 дней назад

    Just change passwords or revoke tokens asap.

  • @Rubricube
    @Rubricube 6 дней назад

    Please make a video that goes more in depth about leaks.

  • @iammac5813
    @iammac5813 6 дней назад

    Doom Emacs installation of packages is far easier with better feature set . Nice video though

  • @marliechiller
    @marliechiller 6 дней назад

    I thought you had moved to nixOS?

  • @_baco
    @_baco 6 дней назад

    Although I share the belief that good hygiene is better than tooling the git commit around with pre-commit, in a not-so-big team that is already difficult to enforce. And code-reviews could be used in a better way.

  • @_baco
    @_baco 6 дней назад

    video on GitLeaks, pls!

  • @shubhamarya1918
    @shubhamarya1918 6 дней назад

    This was really informative Thank you. I just recently gave an interview and I was presented with this EXACT question.

  • @erikvanraalte4557
    @erikvanraalte4557 6 дней назад

    Good video, very helpful. For future watchers of the video that are interested in install Catppuccin, you can do the mod that Dreams of Code did by adding this line to your config, whilst using the official repo: `set -g @catppuccin_window_current_text "#(echo '#{s|$HOME|~|:pane_current_path}' | rev | cut -d'/' -f-3 | rev) "` This way you don't have to use a fork that has not been updated in over a year. :). This snippet also substitutes the /home/user part with `~`, which looks a lot cleaner imo.