Published in Better Programming·Dec 14, 2022Compile Time Feature Flags in Rust: Why, How, and When?And what’s the tradeoff? — The ability to pick compile time features in Rust can improve your code's performance, size, maintainability, safety, and portability. Below are a few arguments for why you should proactively use features when consuming dependencies and offer those to other library users. Performance Using feature flags in Rust can improve the performance…Rust6 min readRust6 min read
Published in Better Programming·Nov 29, 2022Introducing Hyperstack — The Pragmatic Node.js Web Framework for BuildersA look at our latest open-source tool for programmers — Hyperstack is a new open-source Node.js web framework for builders. It’s not reinventing the wheel, it’s just wrapping a bunch of great wheels and good parts for you to use — in one nice Rails-like package. Good software is simple software that solves complex problems. Building simple software usually requires…Nodejs7 min readNodejs7 min read
Published in Better Programming·Nov 19, 2022How to Do Pipeline Forensics, DFIR, or Just Find Files Quickly With ReconA quick introduction to the open-source tool — Recon is an open-source tool built in Rust 🦀, with great performance and ergonomics for finding files. You might want to: Run some validations or checks in your pipeline — for example, not producing binary files while building Javascript, Or you might want to run a digital forensics task on…Cybersecurity4 min readCybersecurity4 min read
Published in Better Programming·Updated Nov 10, 2022Tauri vs. Electron for Tray AppsBuild a desktop tray starter app using Tauri, Rust, and JavaScript — Tauri is similar to Electron in general. The principles are the same: build apps quickly by using JavaScript for doing most of the app / UI work. However, Tauri takes a radically different approach in how it is implemented, and therefore, achieves better results on virtually every possible criterion. Size Comparison We…Rust12 min readRust12 min read
Published in Better Programming·Oct 29, 2022Running Rust Tasks With “xtask” and “xtaskops”Pop quiz: How do you write and run your daily tasks? — If you have a moderately large React project or a project in Go, or any other kind of language, you probably found yourself needing your own build, tests or CI tasks. For example, for npm or yarn in Node.js, …Rust6 min readRust6 min read
Jul 12, 2022Be More Productive with Starter Projects and Backpacktl;dr. I’ve built backpack, a tool written in Rust that helps you use starter and template projects. I also explain what are the TEA and TEAM frameworks for productivity and how to manage Time, Energy and Attention with starter projects. Stater projects are key to unlocking your productivity, for side-projects…Rust8 min readRust8 min read
Jul 9, 2022How to do code coverage in RustNow that we have source based coverage in Rust, we’re going to look at how to do the following: Run coverage locally Integrate with IDE for inline coverage indicators Run coverage in CI and upload results to a coverage service provider But first, let’s look at the history of code…Rust6 min readRust6 min read
Apr 6, 2022Principles of Effective WorkSpectral is a DevSecOps startup which I founded, that was born directly into COVID times (Spectral has since been acquired by Check Point 🎉). When I founded the company it was not clear to anyone that COVID is there to stay (it was early COVID days), and obviously it is…Culture11 min readCulture11 min read
Oct 5, 2021🔑 Open sourcing Keyscope!Keyscope is an open source one-stop-shop tool built in Rust, made for developers and security engineers that need to automatically validate (and rotate, in the future) keys, tokens, passwords that were issued by a wide array of any of the SaaS APIs they use such as: Dropbox, Github, Zendesk, Twilio…Security5 min readSecurity5 min read
May 31, 2021Stopping Supply Chain Attacks With PreflightTL;DR: we’ve just released Preflight, a CI tool against supply chain attacks that stops attacks like the recent Codecov hack: https://github.com/spectralops/preflight It’s been a few weeks since the CodeCov hack sent ripples across the software development industry. One of these ripples was an increased awareness of supply chain attacks and…Golang8 min readGolang8 min read
