The React Show

Many people are using serverless these days, often without even really thinking about it because they are the default mode of operation for many popular services like NextJS with Vercel. But what is it? Should you use it? Join Richard and I as we discuss serverless, how it works, and how we consider using it.

Join me in learning more about a revolutionary new dev tool for React apps! Unlike visual designers of the past, MightyMeld understands your code at a much deeper level and allows for modifying running and interactive React applications!

https://www.mightymeld.com/

Music by DRKST DWN: https://soundcloud.com/drkstdwn

What would it take to grow my freelance business? How do I find actually good clients and stand out? Tim Noetzel is the creator of FreelanceGPS.com and gives me coaching on how to get better at freelancing including: positioning, marketing,  and where to find great clients.

https://freelancegps.com/

https://twitter.com/timnoetzel

Music by DRKST DWN: https://soundcloud.com/drkstdwn

Savas launched Stormkit around 5 years ago as a solo-founder. We discuss what it's like to build and a launch a SaaS product and keep it running and growing for so many years. We also talk about a previous food delivery startup Savas started in Instanbul. Armed with the experience Savas talks about everything from motivation to finding a cofounder to building what people want.

https://www.stormkit.io/

https://github.com/stormkit-io/monorepo-template-react

https://twitter.com/stormkitio

Music by DRKST DWN: https://soundcloud.com/drkstdwn

What is it like to use the Dvorak keyboard layout? Is it better for programming than the standard Qwerty layout? Join Evan and Thomas as they discuss keyboard layouts along with potential advantages of different keyboard types when it comes to dealing with RSI. The discussion then turns to editors and how they relate to each other including Emacs, Neovim, and VSCode. And then finishing with a discussion on Rust/programming safety and a brief overview of design-by-contract and literate programming.

https://twitter.com/_evanwalter_

Music by DRKST DWN: https://soundcloud.com/drkstdwn

How does Segun create so many successful and popular open source libraries? Segun, creator of Chakra UI, Panda, Zag, and Ark joins me to discuss how he creates software! We also discuss what makes Panda and Zag unique and what Segun thinks the future holds for component libraries as well as learning more about his latest projects: Panda and Zag.

https://twitter.com/thesegunadebayo

Chakra UI: https://chakra-ui.com/
Panda: https://panda-css.com/
Zag: https://zagjs.com/

Music by DRKST DWN: https://soundcloud.com/drkstdwn

In this episode, delve into the world of web application security and discover practical insights to safeguard your code. Join Thomas as they discuss common threats like SQL injection, cross-site scripting, and request forgery, emphasizing the importance of using secure libraries and following best practices. Explore topics such as data validation, authentication, and authorization, along with the significance of log security and intrusion detection. Gain valuable tips for writing secure code and understand the risks associated with implementing your own cryptography.

Music by DRKST DWN: https://soundcloud.com/drkstdwn

Part 1: Introduction to Web Application Security In this segment, the host discusses the importance of web application security and the potential risks associated with vulnerabilities. The focus is on common threats such as SQL injection, cross-site scripting, and request forgery. The host emphasizes the need for understanding and addressing these threats, even when using frameworks like React that offer built-in security measures.

Part 2: Log Security and Authentication/Authorization The host highlights the significance of log security and cautions against logging sensitive user information that could be exploited. They stress the importance of implementing secure authentication and authorization systems and share insights on common mistakes made in login system implementation. Keeping the login process simple and separate from other code is strongly recommended to minimize vulnerabilities.

Part 3: Data Validation and Libraries/External Services Data validation is discussed, with an emphasis on distinguishing between data sanitization and data validation. The host advises against relying on client-side validation and stresses the importance of validating and sanitizing data on the server-side. They also provide insights on assessing the security of libraries and external services, recommending thorough documentation on secure implementation, policies for handling vulnerabilities, and a high-level security approach.

Part 4: Writing Secure Code and Final Tips The host shares their approach to writing secure code, emphasizing the need for systemic solutions, explicit labeling of untrusted data, and assuming worst-case scenarios to design robust security mechanisms. They caution against overcomplicating security measures and advocate for using well-tested libraries for cryptographic functions. The importance of backups, intrusion detection, and minimizing stored data is also highlighted.

Can you even write good code in the workplace? It might often feel difficult and we have a chat about that and also some ideas on how to do it anyways.

thereactshow.com

Music by DRKST DWN: https://soundcloud.com/drkstdwn

In this episode we dive deep into what the JavaScript engine actually does when you define and call a function; including for React components defined as functions! We learn a lot of fun nuggets along the way like how function invocation relates to lexical scoping and closures!

thereactshow.com

Music by DRKST DWN: https://soundcloud.com/drkstdwn

• https://mimetype.app/
• The Mom Test: https://www.amazon.com/The-Mom-Test-Rob-Fitzpatrick-audiobook/dp/B07RJZKZ7F
• meier.sh
• Music by DRKST DWN: https://soundcloud.com/drkstdwn