4 ms·

I run something similar - https://www.discoverdev.io/ https://www.discoverdev.io/ Except this feed comes to me and I personally filter and select 8-10 links fo

I run something similar - https://www.discoverdev.io/ https://www.discoverdev.io/ Except this feed comes to me and I personally filter and select 8-10 links for the day. Helps to filter out the BS. I also tag the articles. Been doing this for over two years now, have curated over 3200+ links. Check it out, I try to select interesting and more engineering oriented articles and leave out the "Hello world" types. List of interesting articles across - 1. Data Engineering : https://www.discoverdev.io/tags/data-engineering https://www.discoverdev.io/tags/data-engineering 2. Systems : https://www.discoverdev.io/tags/systems https://www.discoverdev.io/tags/systems 3. Software Architecture : https://www.discoverdev.io/tags/software-architecture https://www.discoverdev.io/tags/software-architecture

desireco42 7y ago
Looks really cool and clean. Are you hoping to monetize by advertising?
- deepakkarki 7y ago
  I do a little bit. Some affiliate income now and then (look at the first link in the website). But I don't really advertise much at all, just one plaintext link that too only on the home page. Sometimes I get sponsors for my mailing list. In total I might have made a few thousand dollars.
amrrs 7y ago
Looks really nice. Especially the hand-picking part of human curation part. Based on the other reply of yours about monetization, wondering why aren't you actively monetizing it. The software engineering daily podcast makes about $60K+ a montb[1]. You can become like that interms of newsletter and aggregation. No? [1] - https://www.indiehackers.com/podcast/114-jeff-meyerson-of-software-engineering-daily https://www.indiehackers.com/podcast/114-jeff-meyerson-of-so...
- deepakkarki 7y ago
  I'm honestly more of a engineer / research person. I started this because this was something I was really excited by! It do advertise every now and then but nothing too exciting in terms of $$. I did make a bunch of ideas on growing this into a blog + community + youtube channel + job board (for engineering heavy dev jobs). But I realised that would take quite a bit of time on the business side of things, and right now I just want to enjoy coding and building stuff.
pythonbase 7y ago
Nice collection. May subscribe to the list. By the way, I am planning to do something similar. What's your tech stack for scraping and rendering the feeds?
tmd83 7y ago
This looks nice at a first glance. I have been looking for more dev oriented article lately and this seem like a good start. On a side note just read about sqreen. Anyone with a clue to how useful such a product is in reality. I find application security related products very hard to evaluate from the docs without heavy usage and trial.
- paulb81 7y ago
  [I work at Sqreen] We try to provide a “dev-tool" approach to security: free trial, simple install and dev-friendly install, no need to configure the tool for hours before getting any value, etc. I would recommend just to give it a trial. I'm biased, but our customers love us. We serve both developers without time to handle security and large security teams. For the latter, we often see collaboration between developers and security teams. Maybe some of the HN comments on our Launch HN will give a less biased view: https://news.ycombinator.com/item?id=20215483 https://news.ycombinator.com/item?id=20215483
  - tmd83 7y ago
    Thanks for the HN link, that's what I looked for but somehow algolia wasn't giving me the result at the time. Two points about a potential trial. 1) Since it's a runtime tool to actually see what it can detect I assume I will actually have to generate some attacks myself to actually see it in affect? It also makes false positive testing a little harder. The reporting and such is on the cloud I presume? Are there some documentation on what happens at the agent level and what gets send to the cloud?
    - paulb81 7y ago
      1) If your app has decent traffic it will be attacked. But we also describe how to scan your app with Arachni on our docs: https://docs.sqreen.com/using-sqreen/how-can-i-test-sqreen-detects-attacks/ https://docs.sqreen.com/using-sqreen/how-can-i-test-sqreen-d... False positives on our RASP module are very rare. Most of our customers use it in blocking mode in production. How we do it? By using the application context. Our detection is done in-app. It's based on parsers that tokenize the query and detect injections when the user input changes the structure of the query. More details on our detection rules [1] and more details on how we do dynamic instrumentation [2] 2) It’s on the cloud [AWS]. But our agent doesn’t redirect your traffic or collect sensitive data. We scrub the data inside your agent before sending it to our servers (just like Sentry or New Relic). You can also customize this behavior. [3] [1] https://blog.sqreen.com/block-sql-injections-not-customers/ https://blog.sqreen.com/block-sql-injections-not-customers/ [2] https://blog.sqreen.com/building-a-dynamic-instrumentation-agent-for-java/ https://blog.sqreen.com/building-a-dynamic-instrumentation-a... (you also have articles for other technologies) [3] https://docs.sqreen.com/guides/how-sqreen-works/#pii-scrubbing https://docs.sqreen.com/guides/how-sqreen-works/#pii-scrubbi...

desireco42 7y ago

Looks really cool and clean. Are you hoping to monetize by advertising?

deepakkarki 7y ago
I do a little bit. Some affiliate income now and then (look at the first link in the website). But I don't really advertise much at all, just one plaintext link that too only on the home page. Sometimes I get sponsors for my mailing list. In total I might have made a few thousand dollars.

amrrs 7y ago

Looks really nice. Especially the hand-picking part of human curation part. Based on the other reply of yours about monetization, wondering why aren't you actively monetizing it. The software engineering daily podcast makes about $60K+ a montb[1]. You can become like that interms of newsletter and aggregation. No? [1] - https://www.indiehackers.com/podcast/114-jeff-meyerson-of-software-engineering-daily https://www.indiehackers.com/podcast/114-jeff-meyerson-of-so...

deepakkarki 7y ago
I'm honestly more of a engineer / research person. I started this because this was something I was really excited by! It do advertise every now and then but nothing too exciting in terms of $$. I did make a bunch of ideas on growing this into a blog + community + youtube channel + job board (for engineering heavy dev jobs). But I realised that would take quite a bit of time on the business side of things, and right now I just want to enjoy coding and building stuff.

pythonbase 7y ago

Nice collection. May subscribe to the list. By the way, I am planning to do something similar. What's your tech stack for scraping and rendering the feeds?

tmd83 7y ago

This looks nice at a first glance. I have been looking for more dev oriented article lately and this seem like a good start. On a side note just read about sqreen. Anyone with a clue to how useful such a product is in reality. I find application security related products very hard to evaluate from the docs without heavy usage and trial.

paulb81 7y ago
[I work at Sqreen] We try to provide a “dev-tool" approach to security: free trial, simple install and dev-friendly install, no need to configure the tool for hours before getting any value, etc. I would recommend just to give it a trial. I'm biased, but our customers love us. We serve both developers without time to handle security and large security teams. For the latter, we often see collaboration between developers and security teams. Maybe some of the HN comments on our Launch HN will give a less biased view: https://news.ycombinator.com/item?id=20215483 https://news.ycombinator.com/item?id=20215483
- tmd83 7y ago
  Thanks for the HN link, that's what I looked for but somehow algolia wasn't giving me the result at the time. Two points about a potential trial. 1) Since it's a runtime tool to actually see what it can detect I assume I will actually have to generate some attacks myself to actually see it in affect? It also makes false positive testing a little harder. The reporting and such is on the cloud I presume? Are there some documentation on what happens at the agent level and what gets send to the cloud?
  - paulb81 7y ago
    1) If your app has decent traffic it will be attacked. But we also describe how to scan your app with Arachni on our docs: https://docs.sqreen.com/using-sqreen/how-can-i-test-sqreen-detects-attacks/ https://docs.sqreen.com/using-sqreen/how-can-i-test-sqreen-d... False positives on our RASP module are very rare. Most of our customers use it in blocking mode in production. How we do it? By using the application context. Our detection is done in-app. It's based on parsers that tokenize the query and detect injections when the user input changes the structure of the query. More details on our detection rules [1] and more details on how we do dynamic instrumentation [2] 2) It’s on the cloud [AWS]. But our agent doesn’t redirect your traffic or collect sensitive data. We scrub the data inside your agent before sending it to our servers (just like Sentry or New Relic). You can also customize this behavior. [3] [1] https://blog.sqreen.com/block-sql-injections-not-customers/ https://blog.sqreen.com/block-sql-injections-not-customers/ [2] https://blog.sqreen.com/building-a-dynamic-instrumentation-agent-for-java/ https://blog.sqreen.com/building-a-dynamic-instrumentation-a... (you also have articles for other technologies) [3] https://docs.sqreen.com/guides/how-sqreen-works/#pii-scrubbing https://docs.sqreen.com/guides/how-sqreen-works/#pii-scrubbi...