Ali Andani

Infosec guy

[tara_ @TechByTaraa]

Programming language and their usage:-

RUST:

1. Systems Programming
2. Blockchain & WebAssembly
3. Embedded & OS Development
4. High-Performance APIs / CLI Tools

GO :

1. Backend & Microservices
2. Cloud-Native & DevOps Tools
3. Networking Services
4. Distributed / High-Concurrency Systems

NODE.JS :

1. Backend APIs
2. Real-Time Apps (Chat, Streaming)
3. REST / GraphQL Services
4. Serverless & Automation

PHP :

1. Server-Side Web Development
2. CMS & E-commerce
3. REST APIs
4. SaaS & Payment Systems

KOTLIN :

1. Android Development
2. Backend Services
3. Multiplatform Apps
4. Enterprise Systems

TYPESCRIPT :

1. Frontend (React / Next.js)
2. Backend (Node.js)
3. Full-Stack Applications
4. Large-Scale Web Systems

DART :

1. Cross-Platform Mobile Apps
2. Web & Desktop Apps
3. UI-Focused Applications
4. Rapid MVP Development

R :

1. Data Analysis
2. Statistical Computing
3. Visualization
4. Machine Learning

[Raul Junco @RaulJuncoV]

A common mistake I see:

People treat message queues and streams as if they’re interchangeable.

They’re not.

Here’s the difference 👇

Message Queue (MQ)

- Designed for delivery guarantees (at-least-once, exactly-once).
- Great for sporadic workloads and asynchronous tasks.
- Messages are consumed and removed. Once acknowledged, they’re gone.
- Think: order processing, background jobs, retry logic.

Stream

- Designed for real-time, high-throughput, continuous data.
- Data is append-only and replayable.
- Multiple consumers can read the same stream independently.
- Think: real-time analytics dashboards, fraud detection, monitoring pipelines.

Why Streams fit Aaron’s case (real-time analytics for e-commerce):

- Freshness matters → Streams process events as they arrive, with low latency.
- Replayability matters → If a consumer goes down, it can re-read from the offset.
- Scale matters → Streams partition data for massive parallel consumption.

A message queue here would introduce unnecessary latency and discard historical events that analytics needs to stay accurate.

Rule of thumb:
- If you care about delivery → Message Queue.
- If you care about freshness & scale → Stream.

That’s why the right answer here is: Streams for real-time analytics.

[Dr Milan Milanović @milan_milanovic]

𝗟𝗲𝘀𝘀𝗼𝗻𝘀 𝗔𝗿𝗲 𝗜𝗺𝗽𝗼𝗿𝘁𝗮𝗻𝘁, 𝗡𝗼𝘁 𝗠𝗶𝘀𝘁𝗮𝗸𝗲𝘀

We are all afraid of making mistakes but constantly making them. Some are bigger, and some are smaller. Yet, they don't need to be our enemy if we learn something from them.

We must make mistakes if we want to be in the growth zone and push our limits.

How we can 𝗲𝗺𝗯𝗿𝗮𝗰𝗲 𝗮 𝗴𝗿𝗼𝘄𝘁𝗵 𝗺𝗶𝗻𝗱𝘀𝗲𝘁 in ourselves:

𝟭. 𝗘𝗺𝗯𝗿𝗮𝗰𝗲 𝗖𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗲𝘀: Start by challenging yourself more. Seek out situations where you can learn and grow. Instead of sticking to familiar and safe tasks, start taking on jobs out of your comfort zone. You'll make mistakes, but that's okay. Every challenge you face is an opportunity to learn.

𝟮. 𝗥𝗲𝗳𝗿𝗮𝗺𝗲 𝗙𝗮𝗶𝗹𝘂𝗿𝗲: Change the way you think about failure. Instead of seeing it as a dead-end, see it as a learning opportunity. Making mistakes is not only natural, but it's also necessary for growth. When you make a mistake, ask yourself, "What can I learn?" This turns a negative experience into a positive one.

𝟯. 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗲 𝗣𝗲𝗿𝘀𝗶𝘀𝘁𝗲𝗻𝗰𝗲: Keep going even when faced with a difficult task. Keep trying different approaches until you find one that works. Remember that effort is a path to mastery, and learning takes time.

𝟰. 𝗦𝗲𝗲𝗸 𝗢𝘂𝘁 𝗙𝗲𝗲𝗱𝗯𝗮𝗰𝗸: Regularly ask others for feedback. This can give you valuable insights into areas you need to improve. Instead of seeing criticism as a personal attack, view it as an opportunity to learn and grow.

𝟱. 𝗖𝘂𝗹𝘁𝗶𝘃𝗮𝘁𝗲 𝗮 𝗣𝗼𝘀𝗶𝘁𝗶𝘃𝗲 𝗔𝘁𝘁𝗶𝘁𝘂𝗱𝗲: Maintain a positive outlook on your capabilities. Even if you're not good at something now, remember you can improve with practice and effort. You're right if you say you can or cannot do something.

And remember, take mistakes as scientists do, just as data points to improve your future self.

I wish you a great week ahead 👋!

Image credits: Roberto Ferraro.

#productivity #career #personalgrowth

[nixCraft 🐧 @nixcraft]

Lmao. why Linux is safer than other oses?

[Luke Stephens (hakluke) @hakluke]

Giveaway! 🎉

I'm going to buy someone a new MacBook Pro M2 13".

To enter, retweet this tweet, then follow: @hakluke, @hacker_content & @haksecio.

If you're a cybersecurity org looking for high quality content and social media management, check out https://t.co/FfJsZ2HZYU 👇

[Arthur CHARLES @0xbeefed]

Cybersecurity everywhere

[Mohsin Khan @tabaahi_]

reel: There are millions of bug hunters on platforms. So much competition. No bugs left etc.

reality: Less than 500 hunters are making money every month (who do consistently). Less than 5 people in each program are hunting consistently.

1/n

[Nicolas Krassas @Dinosn]

A new PowerShell obfuscation tool for AMSI bypass written in Python https://t.co/NqMl1z4Rbr

[SwiftOnSecurity @SwiftOnSecurity]

PrintNightmare is the worst thing about printers since actually trying to use a printer.

[meg west @cybersecmeg]

we live in a world where we understand the most granular, technical aspects of cybersecurity and artificial intelligence and quantum physics - yet a majority of us don’t have the resources to take care of our own mental health

what does that say about the society we’ve created?

[Dr. Rohit Gautam @aslicyberguy]

I see all over twitter, people getting obsessed with infosec certs.
I believe learning > certs!
Facts:
- Most of Top Hunters on H1 don't have a cert, does that mean they cant afford one
- Okay, Talking about Beginners, they don't really need any cert. Learning is more imp.

[David Spark @dspark]

How many stickers on the laptop are necessary to demonstrate that you’re serious about cybersecurity?

[Denver Coder @denvercoder]

Burnout is real.

I’m leaving my job at the end of the month. It’s not anything to do with the job. I just can’t do it anymore.

I’m also leaving the tech industry at the end of the month.

Burnout is real.

[Dirk-jan @_dirkjan]

It's been long overdue, but my part 2 blog on Active Directory forest trusts is finally here! This blog is about trust transitivity and on the finding on CVE-2020-0665 which was a trust bypass by faking a domain. Enjoy the (long) read: https://t.co/4CACl2pbpY

[Vivek Ramachandran @vivekramac]

Today is my 10th Anniversary of becoming an entrepreneur!

Was 29 when I started in my parents basement.

Here is flashback of where I made the first videos for SecurityTube and did all my Wi-Fi security research to speak at Defcon and other conferences back in the day!

[Bryce @bryceabdo]

I don’t use Signal, I talk to friends via VirusTotal comments

[Farhan @FaniMalikHack]

Common Headers for Host Header Injection Attack:-

1. Host:

2. X-Host:

3. X-Forwarded-For:

4. X-Forwarder- Host:

5. X-Forwarder- Server:

6. Forwarded:

7. X-HTTP-Host- Override:

8. X-Forwarded-Proto headers:

#infosec

[The Artist Formally Known As NetSec Focus @netsecfocus]

Roses are red
Violets are blue
CVE-2021-3156 is a Heap-Based Buffer Overflow in Sudo