Kyriakos Markakis

💼 solution architect | software engineer • 📚 technical reviewer • tweets about #javascript, #nodejs, #fastify

[Matteo Collina @matteocollina]

We cut @nodejs memory in half with a one-line Docker image swap.

No code changes. No new APIs. Just smaller heaps.

Here's what happened when we tested pointer compression on real workloads 🧵

[Luciano Mammino 𝕏 Node.js Design Patterns @loige]

I almost approved a security hole last year.

A simple image server. Clean code. Worked perfectly.

It also let anyone read any file on our filesystem.

Here's what happened 🧵

[Kyriakos Markakis @marquicodes]

@Mishi_2210 999

[Kyriakos Markakis @marquicodes]

Just started diving into the preview copy of "Node.js Design Patterns" by @loige and @mariocasciaro!

Loving the clarity & depth so far. If you are into Node.js or backend architecture, this is shaping up to be a must-read. Kudos to the authors for crafting such a thoughtful book

[Matteo Collina @matteocollina]

For years, I’ve been asked whether I’ll ever write a book about @Nodejs.

I’m excited to announce the time has come.

Presenting “The Definitive Guide for Node.js in Enterprise”, a labour of love by myself, @Lucamaraschi, and every single member of the @Platformatic team.

[Manuel Spigolon @ManuEomm]

The wait is over! 🎉 Fastify Mini Course is NOW LIVE for everyone! 🚀 Build high-performance APIs faster than ever. Get started here: https://t.co/F4BFCDtSlc #Fastify #NodeJS

[Liran Tal @liran_tal]

❗ New Security Vulnerabilities

shared from the Node.js Security newsletter latest issue: https://t.co/dspkaBmlmN

[Rafael Gonzaga @_rafaelgss]

is-my-node-vulnerable is now part of the Node.js organization!

https://t.co/dQNorwEJtj

[Matteo Collina @matteocollina]

Yesterday, we introduced multiple workers into @platformatic’s Watt application server 🚀

Why?
• To reduce resource wastage
• To improve app performance

Let's clear up a couple questions we've received! 👇

[Kyriakos Markakis @marquicodes]

@_vangelis_66 @athudeosthale @that_anokha_boy There are no guarantees that it is encrypted.

Give a good valid reason for the password to be returned in a response.

[Kyriakos Markakis @marquicodes]

@_rafaelgss @NodeConfEU Get well soon Rafael.

[Kyriakos Markakis @marquicodes]

@_vangelis_66 @athudeosthale @that_anokha_boy Because it is not encrypted is even worse to send it in the response. It is sensitive data that should not leave the server.

[Kyriakos Markakis @marquicodes]

@_vangelis_66 @athudeosthale @that_anokha_boy In that case you POST the user entered password to the server to hash it and check equality. You do not return the hashed stored value from the database so that someone can run a numerous techniques of cracking it.

[Kyriakos Markakis @marquicodes]

@hieuSSR Electricity is enough. No WiFi required if the 6 month period is between April - October.

[NodeConf EU @NodeConfEU]

🚀 Excited to announce that @ArrowoodTech will speak at #NodeConfEU 2024! Join us for "Node.js Streams vs Web Streams" as we dive into Next.js's evolution and key API differences. Don’t miss it!
Secure tickets: https://t.co/i22h8W2aQD
#NodeJS #NodeConfEU2024 #November #Ireland

[NodeConf EU @NodeConfEU]

#JavaScript devs! Join @naugtur for a #hands-on #workshop on memory management & leak detection at #NodeConfEU this November at @waterfordcastle Learn:🧠 Memory basics🔧 Fixing leaks
🛠️ Dev tools Don’t miss out! 🎟️ Get tickets: https://t.co/i22h8W2aQD
#NodeConfEU #TechEvents

[Kyriakos Markakis @marquicodes]

@drakakisgeo PiHole και την IP των συσκευών της μικρής. Θα το κάνει block 24/7 λόγω του rule για το domain. Μπορείς να βάλεις ένα group από domains επειδή έχει διαφορετικά domains όπως https://t.co/pPiMrrLGj7, https://t.co/qFlUBB782W κ.τ.λ.

[Matteo Collina @matteocollina]

Good news: the @nodejs downloads reached an all-time high in August, when Node.js v20 finally surpassed Node.js v18!

Bad news: Node.js v16 still has major usage; go update, it has been out of LTS for a year!

Really bad news: who the heck is still using Node.js v14 and v12?

[Kyriakos Markakis @marquicodes]

@liran_tal I do not have anything against dotenv itself. Actually it’s a tremendously helpful package.

Where I disagree, is the way most tutorials teach it and how developers use it to start up / configure their projects.

It’s a configuration step, that might not be used in every provider

[Liran Tal @liran_tal]

New Node.js feature is environment variables support

You can keep using dotenv, or you can remove it and spin up Node.js with --env-file=./.env and it will automatically populate your `process.env`