> Markdown version of [/magazine/393-dev-digest-105-security-first](https://www.wearedevelopers.com/magazine/393-dev-digest-105-security-first). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Dev Digest 105 - Security First **Published:** March 3, 2024 Last Friday's Dev Digest was mostly about security and game topics, so let's take a look what you didn't get in your inbox. We also covered some brand new online courses to get started as a developer or refresh your knowledge. And we wrapped up CODE100 Amsterdam and wonder if you could have been a winner. ## News and Articles In **security news** , there are some annouccements: - **Github** shows how they [automatically fix security vulnerabilities with AI](https://github.blog/2024-02-14-fixing-security-vulnerabilities-with-ai/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) - ‍ **Microsoft's** released **PyRIT** [to generate malicious prompts to test Generative AI models](https://www.microsoft.com/en-us/security/blog/2024/02/22/announcing-microsofts-open-automation-framework-to-red-team-generative-ai-systems/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) and - in **bonkers security news** : [fingerprints can be recreated from the sounds made when you swipe on a touchscreen](https://www.tomshardware.com/tech-industry/cyber-security/your-fingerprints-can-be-recreated-from-the-sounds-made-when-you-swipe-on-a-touchscreen-researchers-new-side-channel-attack-can-reproduce-partial-fingerprints-to-enable-attacks?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk). In **accessibility** land: - Webaim's [screen reader survey 10 results](https://webaim.org/blog/screen-reader-user-survey-10-results/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) are out. Every year Webaim asks screen reader users how they experience the web and it is a great resource for information how to fix your products. - ‍ **Josh Collinsworth** worries about [Copilot generating inaccessible solutions as](https://joshcollinsworth.com/blog/copilot?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk)generated front-end code is often far from semantic. And in terms of web platform news: - ‍ **Mozilla** [released](https://developer.mozilla.org/en-US/blog/mdn-curriculum-launch/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) a brand new [Front End Development Curriculum](https://developer.mozilla.org/en-US/curriculum/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk)! - ‍ **Apple** vs. PWA is still on, here's [what will be broken soon](https://blog.tomayac.com/2024/02/28/so-what-exactly-did-apple-break-in-the-eu/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) if we [don't act about](https://infrequently.org/2024/02/home-screen-advantage/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) it and you can sign [an open letter to Tim Cook](https://letter.open-web-advocacy.org/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) to stop it. ## Code and Tools **CODE100 puzzle: Stars in their Eyes** On 29/02 CODE100 came to Amsterdam and this was the final challenge. Could you have done it? ![](https://wearedevelopers.imgix.net/public/magazine/articles/393/images/65e1f4fb023234ff39883dd7_stars.png?w=720&fit=max&dpr=2&auto=format) Check the [README](https://devrel.wearedevelopers.com/code100-puzzles/017-stars/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) and the [dataset](https://devrel.wearedevelopers.com/code100-puzzles/017-stars/stars.json?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk). - Deno is releasing [JSR - a JavaScript Package Registry](https://socket.dev/blog/jsr-new-javascript-package-registry?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) to rival NPM. - **Google** released an **AI model** that [can generate 2D platformer games](https://80.lv/articles/google-s-new-ai-can-generate-entire-2d-platformer-games/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk). Sure, but can it do [Frogger in 256 bytes](https://killedbyapixel.github.io/TinyCode/games/CrossMyHeart/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk)? - Ahmad Shadeed has an [interactive guide to using CSS has()](https://ishadeed.com/article/css-has-guide/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk). ## Videos and talks ![CWD-Jonathan_Fielding-Thumbnail](https://wearedevelopers.imgix.net/public/magazine/articles/393/images/65e1f4fbf68f72d412d875a3_CWD-Jonathan_Fielding-Thumbnail.jpeg?w=720&fit=max&dpr=2&auto=format) We met with **Jonathan Fielding** to talk about **Neurodiversity in the tech industry**. [**Check out the video**](https://youtu.be/_BJj_vIEtB0?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) and [his resources on the topic](https://www.jonathanfielding.com/speaking/embracing-neurodiversity?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk). - **Microsoft's** brand new “[Security for Beginners](https://github.com/microsoft/Security-101/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk)” course - with code. - [10 JavaScript security vulnerabilities](https://www.youtube.com/watch?v=ypNKKYUJE5o&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) with code examples (25m) - [Code Pac Man in JS - live in one hour](https://www.youtube.com/watch?v=q2ViNbRwr5U&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) with explanations - **Jodie Burchell's** [guide to modern natural language processing (1h)](/videos/858-a-beginner-s-guide-to-modern-natural-language-processing) - **Luca Palmieri's** [introduction to Rustdoc's JSON format (45m)](/videos/848-reasoning-about-rust-an-introduction-to-rustdoc-s-json-format) ## Work and Jobs - The UK just made the [four-day week permanent in world’s biggest trial](https://www.theguardian.com/money/2024/feb/21/four-day-week-made-permanent-for-most-uk-firms-in-worlds-biggest-trial?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk). - You can learn a lot about your company by [renaming your profile to "Slackbot"](https://www.theverge.com/2024/2/23/24081249/slack-slackbot-gizmodo-tom-mckay?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk). - Wired has an interesting bit on [tech job interviews getting ridiculously hard](https://www.wired.com/story/tech-job-interviews-out-of-control/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) and it seems some companies [make it even bizarre](https://old.reddit.com/r/mildlyinfuriating/comments/1ap1345/i_applied_for_a_software_role_at_fedex_and_was/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk). - ‍[AI won't eat your job, but your salary](https://platforms.substack.com/p/ai-wont-eat-your-job-but-it-will?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) talks about work becoming a commodity with automation. And lastly, - Jensen Huang of Nvidia [says kids shouldn't learn to code and leave it up to AI](https://www.tomshardware.com/tech-industry/artificial-intelligence/jensen-huang-advises-against-learning-to-code-leave-it-up-to-ai?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk). Do you agree? ## Procrastination Corner / Wonderful Weird Web - [Mario Kart 3 in the browser](https://mario-kart-3-js.vercel.app/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk#r=RUPAU) and you [can help make it better](https://github.com/Lunakepio/Mario-Kart-3.js/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) - In [Sinusoidial Tetris](https://www.andreinc.net/2024/02/06/the-sinusoidal-tetris?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) you win by changing a sine curve to match the one below - Gorgeous [Random animations](https://bleuje.com/randomanimations/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_V0p8G8FBd4zssw5eedyoahElaNDo3I3TO2uyArXVygPnZ8XgciJPAM4yILWFLaiqHe2wk) on every reload. Until next week! Soon we will also release a more in-detail post about the CODE100 event with all the questions, answers and code challenges. ## Related Articles - [Dev Digest 109 -Egg-citing things…](https://www.wearedevelopers.com/magazine/408-dev-digest-109-egg-citing-things) - [Dev Digest 123 - Easy as A, B, C1](https://www.wearedevelopers.com/magazine/459-dev-digest-123-easy-as-a-b-c1) - [Dev Digest 106 - DHH in HD](https://www.wearedevelopers.com/magazine/394-dev-digest-106-dhh-in-hd) - [Dev Digest 113 - Debugging above the cloud](https://www.wearedevelopers.com/magazine/422-dev-digest-113-debugging-above-the-cloud) ## Related Videos - [WeAreDevelopers LIVE - Back to CODE100](https://www.wearedevelopers.com/videos/1909-wearedevelopers-live-back-to-code100) - [Dev Digest End of Year Recap](https://www.wearedevelopers.com/videos/1284-dev-digest-end-of-year-recap) - [WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe](https://www.wearedevelopers.com/videos/2132-wearedevelopers-live-code100-at-wearedevelopers-europe) - [WeAreDevelopers LIVE - Dapr / Pixels and Generative Art / Open Source and Communities / and more](https://www.wearedevelopers.com/videos/1720-wearedevelopers-live-dapr-pixels-and-generative-art-open-source-and-communities-and-more) ## Related Jobs - [Senior Software Engineer](https://www.wearedevelopers.com/jobs/ext/15942-senior-software-engineer) at **GitHub** - [Staff Developer Advocate, GitHub Security Lab](https://www.wearedevelopers.com/jobs/ext/1921051-staff-developer-advocate-github-security-lab) at **GitHub** - [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/679408-remote-senior-full-stack-engineer) at **Edge Impulse** - [Senior Full Stack Engineer](https://www.wearedevelopers.com/jobs/48289-senior-full-stack-engineer) at **Sensory-Minds GmbH** - [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/683045-remote-senior-full-stack-engineer) at **Edge Impulse** - [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/639235-remote-senior-full-stack-engineer) at **Edge Impulse**