#what are main difference in python and javascript

TeamPCP has initiated another campaign similar to the Mini Shai-Hulud attack, targeted at supply chain development in npm and PyPI environments, including TanStack, uipath and mistralai (although these two were ultimately rendered non-functional due to a pre-exisitng bug in the packages). Using the same command-and-control infrastructure as previous campaigns, this latest attack affects several layers of development ecosystems, with persistence and propagation being key facets of the attack, as well as credential stealing and data wiping.

One of the stages of this malware is installation of a persistent gh-token-monitor daemon. But what is that exactly? In computing, a daemon is a background process, running without the need for user interaction or permission. It’s used mostly for Unix based systems, which are often the backbone of package development. Because it requires no oversight, poisoning its architecture can go unnoticed until persistence is established and/or the poisoned dataset is integrated into the main registry. In this case, the token monitor is looking for a set of criteria that, if met, determines whether or not a wiper is applied. The malware identifies any GitHub Personal Access Tokens or Oauth Tokens, then runs them through a series of checks looking for validity that contains a login field, a repo or public_repo in its scope, public profile, ability to write a repository, and whether the tokens belong to a member of an org.

A Python variant is also being distributed, malicious versions of guardrails-ai[@]0.10.1 and mistralai[@]2.4.6. These are trojanized and operate differently than the JavaScript version of the malware. They are not obfuscated and contain a modular credential stealer that executes on Linux machines that are not in Russian (which the JavaScript version does as well). The data this variant exfiltrates includes password vaults like Bitwarden. This version also contains a command to execute a full volume mp3 file while running file deletion if the location settings – timezone and language – are Israeli or Iranian.

This campaign has another notable upgrade from previous attacks besides the wiper daemon, namely redundancies in terms of C2 architecture. Instead of funneling the data to just one place, it is now being sent to three. A typosquatted domain, a session messenger network and GitHub API dead drop repositories with a Dune theme.

The team at nmp is removing the malicious packages from the registry as soon as they find them, but Wiz has other recommendations for avoiding infection. Aside from the common sense tactic of rotating credentials, which should be happening frequently in the first place as the first step to prevention of credential stealing, they encourage developers to keep an eye on exposure, searching lockfiles and CI logs for affected package versions. Watch out for persistence. Search for the gh-token-monitor daemon on developer machines and remove it. Do this before revoking GitHub tokens, to avoid the wiper. Audit IDE directories, since router_runtime.js and setup.mjs persist after npm uninstall. And finally, block the C2 infrastructure at the DNS/proxy level, as the domains are known (git-tanstack[.]com and *.getsession[.]org). Wiz’s article also contains further links to postmortems of each of the affected packages for more information.

"Programming is easy"

I saw some variations of this statement shared around the site recently, always in good intentions of course, but it got me thinking.

Is that really true?

Well it certainly isn't hard in the way some developers would want to make you believe. A great skill bestowed only upon the greatest of minds, they're the ones making the world work. You better be thankful.

That is just elitist gibberish. If anyone ever tells you that programmers are "special people" in that way, or tries to sell you on the idea of "real" programmers that are somehow better than the rest, you can safely walk in the other direction. They have nothing of value to tell you.

But I think the answer is more complicated than a simple "Yes, programming is easy" too. In all honesty, I don't think it's an easy thing to "just pick up" at all. It can be very unintuitive at first to wrap your head around just how to tell a computer to solve certain problems.

One person in the codeblr Discord server likened it to cooking. That's a skill that can be very hard, but it's also something that everyone can learn. Anyone can cook. And anyone can program.

I really mean that. No need to be good at maths, to know what a bit is or whatever it is people told you you need. You're not too old to learn it either, or too young for that matter. If you want to start programming (and you can read this post), you already have everything you need. You can write your first little programs today!

One of the cool things about programming is that you can just fuck around and try lots of stuff, and it's fine. Realistically, the worst thing that can happen is that it doesn't work the way you imagined. But you'll never accidentally trigger the fire alarm or burn your house down, so feel free to just try a bunch of stuff.

"Okay I want to learn programming now, what do I do?"

That's awesome, I love the enthusiasm! As much as I'd love to just give you a resource and tell you to build a thing, you still have to make a choice what you want to learn first. The options I'd recommend are:

Scratch: A visual education tool. The main advantage is that you don't have to worry about the exact words you need to write down, you can just think about the structure of your program. The way it works is that you drag and drop program elements to be executed when they should be. You can relatively quickly learn to make cute little games in it. The downside is that this isn't really a "professional" programming language, so, while learning from Scratch will give you the basics that apply to most languages and will make switching to another language easier, you're still gonna have to switch sooner or later. Start here: https://scratch.mit.edu/

Python: The classic choice. Python is a very widely used, flexible programming language that is suited for beginners. It is what I would recommend if you want to skip right to or move on from Scratch to a more flexible language. https://automatetheboringstuff.com/ is your starting point, but there's also a longer list of resources here if you want to check that out at some point.

HTML/CSS/JavaScript: The web path. HTML and CSS are for creating the look of websites, and JavaScript is for the interactive elements. For example, if you ever played a game in your browser, that was probably written in JS. Since HTML and CSS are just for defining how the website should look, they're different from traditional programming languages, and you won't be able to write programs in them, that's what JS is for. You have to know HTML before you learn CSS, but otherwise the order in which you learn these is up to you. Your JavaScript resource is https://javascript.info/, and for HTML and CSS you can check out https://developer.mozilla.org/en-US/docs/Learn/Getting_started_with_the_web.

I put some starting out resources here, but they're really just that - they're for starting out. You don't have to stick to them. If you find another path that suits you better, or if you want to get sidetracked with another resource or project, go for it! Your path doesn't have to be linear at all, and there's no "correct" way to learn things.

Was just looking at this post and thought of some new advice for learning to code. Check out books from your local library.

This may seem a little counter-intuitive or strange for learning about computers, but it's extremely helpful. As someone who has ADHD and would get overwhelmed trying to find the correct/exact answer I was looking for when I knew very little about coding terminology, books are fantastic. There are so many different options that explain (in plain language) how to code for beginners in addition to easily-readable compendiums that have all the essential information you need about a programming language (so there's no frantic searching online). Here's some that I've been using recently: ( * = my favorites)

CSS(/HTML)

CSS, The Definitive Guide: Visual Presentation for the Web (4th Edition) by Eric A. Meyer & Estele Weyl

CSS: The Missing Manual (4th Edition) by David Sawyer McFarland *

JavaScript

Sams Teach Yourself JavaScript in 24 Hours (7th Edition) by Phil Ballard *

Learning JavaScript: Add Sparkle and Life to your Web Pages (3rd Edition) by Ethan Brown

Other

An Artist's Guide to Programming: A Graphical Introduction by Jim Parker (this one is part of a series of "no-nonsense books" from No Starch Press with books aimed at teaching code visually for visual artists, I know the series has several books for learning Python—what Ren'Py uses—too)

Speaking from my experience with American public libraries, you can go online to your library's digital catalog, see what's available, and reserve books (or whatever else) to pick up. In addition to picking materials up in person, libraries may also have books lockers, drive-up windows, or curbside options if you want to minimize exposure or just avoid interacting with humans (in general I recommend looking into what your library offers for accessibility services too, both on and off-site).

In the library, if they use the Dewey Decimal System, then the coding books will be in the early 000s (around 005-006). If not or if you want help, librarians will happily show you where to look, what's available, and (if necessary) can use inter-library loans to order in books from other libraries so you can pick them up and check out from there.

Note I: This is also helpful for writing books (like how to craft intriguing plots, how to stay motivated, prompt books, improving creative writing/thinking, etc.). Creative writing and screenwriting books will be shelved around 808 in the DDS. Game writing/design is around 794 (and try checking the children's section if you don't find any in the main one).

for example i learned C as my first and i'm very glad for it, it's not used much outside of certain fields now but it's fantastic to start out, especially bc it operates at a lower level than most modern languages and by learning it you understand what's going on "under the hood" in your program and forces you to get used to many good programming practices.

imo the most important thing when starting out is finding a course that teaches you the main concepts common to most programming languages, once you are familiar with those you can learn others very easily. and it's better to start with a language that has strong rules, and then move onto those that are more lax. python is very popular and beginner friendly so it's an ok point to start for many, definitely better than js, and includes OOP as well so you can get familiar with that too. although if you want a really rigorous approach i'd still go with a typed language as your first.

basically: if you really care abt writing good code and eventually want to learn other languages i'd recommend C, or its more moden cousin Go (which is one of my fav languages and getting pretty popular), as your first. If you just want to throw yourself into programming and don't want to waste time with a language that is not super popular/don't care about, then python is good.

i'll try to look up some resources later maybe, i'd love to give you my uni courses materials but they're not in english/german :( anyway best of luck !! anyone can learn programming if they try, i know it can be really hard and confusing at first but dont give up !! :D

i knew itd work if i make another post abt it, i Love when i ask smth and all the expert professional anons following me just crawl out of the woodworks DFGJKFDJK

Web development has become complicated over the course of the last ten years. To facilitate the interaction, the utilization of web systems is fundamental.

A system is a construction or climate that helps an engineer. It can incorporate projects, libraries, compilers, devices, and Programming interface with node js web development company

In straightforward terms, you can consider them programming bundles that depend on a coding language and accelerate the most common way of composing a web application.

Which is awesome back end system?

There are three contending innovations - Node.js, Django, and Laravel.

Each of the three are well known among back-end designers. Be that as it may, does any have a slight edge? We find out.

1. Node.js

A few engineers would differ that Node.js is a structure. As indicated by them, it is a runtime.

Node.js is an open-source, cross-stage runtime climate that utilizes JavaScript. It involves the V8 motor for execution and runs outside the program.

The system was composed by Ryan Dahl in 2009 and the ongoing adaptation is 17.5. The Open JS Establishment deals with its turn of events and delivery.

The system is utilized by:

LinkedIn

Microsoft

Netflix

Paypal

Go Daddy

Groupon

Why use Node.js?

Node.js isn't a structure alone, yet can likewise function as a server. It is comprised of nonconcurrent Programming interface and is occasion driven.

Numerous engineers believe it to be better since it fills in as a solitary string.

Scalable apps

To make it greater, everything necessary is to add hubs. This should be possible both in an upward direction and on a level plane for scaling applications.

Better performing

Node.js works utilizing the V8 open-source JavaScript motor. This velocities up code execution to bursting quick rates even on not great equipment. The V8 can change JavaScript straightforwardly into machine language and go about as a compiler.

Adjustable

A designer can change and tweak Node.js according to their prerequisites. It is incredibly flexible and can be utilized for applications as differed as streaming and stockbroking. The expansion of JSON with Node.js makes data trade among client and server consistent.

Device support

Node.js permits an engineer to work with various instruments. Mocha permits engineers to test scripts inside a program and furthermore in a control center. The Internet Tempest IDE is ideal for investigating quickly and building Node.js applications on both the client and server sides.

Cache advantage

Node.js upholds the utilization of use memory for storing. The module gets naturally put away in the store and can be executed on a case by case basis. This paces up any application complex.

Extent of utilizing Node.js

All systems are not similarly appropriate for an undertaking. What are the applications that we can assemble utilizing Node.js?

Real-Time

The most ideal utilization of Node.js is for constant applications. Visit and email clients use Node.js consequently.

It doesn't gobble up a ton of assets, stacks quick, and has a little impression. Utilizing Node.js is great for numerous discussions and high traffic volume the executives.

Project Cooperation

Cooperative devices have taken on a unique kind of energy, as remote work has taken off.

Node.js is obviously fit in view of its speed and reliability.

Node.js utilizes nonconcurrent I/O and, surprisingly, based design, which makes it ideal for use with such applications.

So productive is the framework that laborious undertakings like altering a previous message are currently typical. The utilization of web attachments for full-duplex transmission guarantees that the server doesn't freeze and information is refreshed on each hub impeccably.

Consequently, Trello utilizes Node.js.

2. Django 

Django is a web system that utilizes Python.

The main public delivery was in 2005. It is kept up with and created by the Django Programming Establishment.

It is interesting since it follows the model layout view (MTV) design. The basic role of Django is to work on the undertaking of utilizing sites with enormous data sets that are continually being adjusted.

In the beyond couple of years, as Python has filled in prominence, the profile of Django has additionally risen.

An engineer can, with little exertion, use Django to incorporate arrangements and make applications. The outcome is a fast circle back from idea to send off.

For this reason Django is utilized by the greatest names:

Instagram

Spotify

YouTube

Dropbox

The Washington Post

Why use Django?

There are a great deal of benefits to involving Django as the fundamental structure. It has a different interest for various designers.

Utilizes Python

Python is the most famous coding language right now. No big surprise a Python system is picked so frequently.

Since the utilization of Python is comprehensive, from information science to server-side programming, there is extreme interest in any program that relies upon it.

Django is like Python, entirely steady, and needs a shallow expectation to learn and adapt.

Cross Stage

Obviously, the very best structures are cross-stage, yet the plan of Python was explicitly pointed towards it.

Django can work similarly wellin any climate. It is a genuine compose once and run anyplace stage. Be it Windows, Linux or Macintosh, expect a Django application to work with a couple of minor changes.

Extremely Protected

A web system is pretty much as great as the security it offers. Django gets security refreshes consistently.

The chance of SQL infusion and cross-site clicking is nearly non-existent. The implicit security it offers is excellent.

Administrator Board

Most structures require an administrator board to be created by the coder. Not so with Django.

It has an unlimited connection point that allows you to change the administrator board in a few viewpoints. Consent modules are inbuilt and there is compelling reason need to code without any preparation.

Scope of using Django

Django is, most importantly, a sober minded system. It involves minimal assets for greatest returns. For some, it is the system of decision since it removes the problem of application advancement.

Information Scratching

Django is unmistakably appropriate for separating information. Assuming you are building an application that would create a great deal of data of interest, utilizing Django is ideal.

Potential regions incorporate web based business and streaming.

Speedy Sending

In the event that the improvement group has almost no opportunity to fabricate an application, utilizing Django is ideal. The system helps with numerous pre-constructed capabilities that are not difficult to introduce and run.

Open Source

Django can be utilized to bring down the general expense. Open source enjoys many benefits. It is modest and secure as a result of additional clients and an enormous local area.

Likewise, it assists you with documentation and finding arrangements through a local area based approach.

Information base Administration

Django utilizes ORM or object-social planning. It is a strong method for interfacing with the information base without presenting intricacy. ORM allows designers to imagine information as an article and makes SQL questions in a flash.

ORM makes Django very simple to involve in any event, for those designers who are not happy with the backend.

Web Application

Most web applications use Django. The most remarkable model is Quora. However accessible as a versatile application, Quora became well known with its straightforward program variant. The equivalent can be said about YouTube, which changed the web form from PHP to Django.

3.Laravel

Laravel is a PHP structure. It is a full-stack stage, meaning it tends to be utilized for both client and server programming. This brings down cost, as a similar group can deal with the two finishes of the task.

It was made by Taylor Otwell and is planned for creating web applications. Laravel utilizes a Model View Regulator or MVC design and its source code is facilitated on GitHub.

Laravel is an ever-evolving system, meaning it very well may be utilized by designers with any degree of skill. In any case, except if a designer is familiar with PHP, they wouldn't have the option to utilize Laravel.

Top locales assembled utilizing Laravel include:

Jerk The New York Times Disney Bankrate Warner Siblings

Why use Laravel?

Laravel offers a few remarkable benefits. It has many highlights that make web applications assembled utilizing Laravel stick out.

Mistake Taking care of

Laravel is appropriate to deal with mistake messages. It can rapidly send blunder messages and make log records.

This element makes it simple to follow issues during advancement and pinpoint the code that must be revamped.

Quick Steering

Laravel utilizes regulators proficiently and executes steering quickly. It can likewise add code to the course.

This is helpful for programs that utilization different regulators at each stage.

Information Movement

Laravel offers variant powers over information bases. This is finished utilizing the movement highlight. Movements track how the data set is altered over the long haul.

Simple Templating

Laravel utilizes a PHP templating motor known as Sharp edge. It makes code that is straightforward and has a basic grammar. Most Laravel highlights rely upon Edge rather than unadulterated PHP.

Scope of using Laravel Laravel is impeccably appropriate for most kinds of web applications.

Data set Administration

PHP structures are best utilized for taking care of data sets. Assuming a site has an information base that changes continually, involving Laravel for integrity is ideal.

Learning Applications

Web applications that are utilized for computerized learning can be fabricated effectively utilizing Laravel. In the event of high traffic, Laravel can deal with rehashed questions to the backend with practically no freezing.

Web-based feature

Laravel is appropriate for building streaming applications to convey sound and video content over the web. It is additionally ideally suited for applications that have various I/O demands, like Jerk.

Node.js vs Django vs Laravel—how do they stack up?

Community

Node.js has the largest community in GitHub. Laravel is in second place and Django comes third. No doubt this is because of the popularity of JavaScript as a frontend language.

Framework

Laravel is MVC architecture and uses PHP.

Node.js is an open source platform and uses the V8 engine.

Django has an MVT template.

All three are solid frameworks that are regularly used by developers.

Performance

Performance-wise Node.js is faster than the rest. It is mostly derived from its ability to cache. Django is also fast but does not have asynchronous programming. Laravel has problems with scaling and complexity.

Security

Laravel is probably the frontrunner. It is based on PHP that has long been recognized as a safe way to code the backend. Django, with its frequent security updates, comes second.

Learning Curve

Most programmers know JavaScript due to front-end projects. For this reason alone, most are also familiar with Node.js.

Python is rapidly catching up and with it Django. Laravel has a somewhat steeper learning curve.

Summary

Only one thing can be said with certainty – Node.js, Django, and Laravel are equally popular with developers.

A developer has to look at specific requirements and match them to the framework.

@shinelikethunder wrote a nice addition about getting started to the original post, but if you can write SQL queries and do math in Python I would put you slightly above complete beginner level.

There's a lot of different learning styles, but if it were me, I'd do what I did do when I was in that position: figure out a project to build, and set out to build it.

IMHO, some of the important characteristics of a good such project are:

Enjoyable/interesting to you: one of my first "serious" projects (we're talking 15 years ago now) was a cute visitors counter for my website so I could have custom images for numbers rather than the ugly pre-sets other sites offered; another was a sudoku in Flash that used pictures of my favorite characters in place of numbers; when I wanted to learn how to use payments APIs, I ended up making RobinBoob... Regardless of which project you choose, building something that plays to your interests will energize you, and help you see it through the end.

Reasonably ambitious: as a programmer, you'll rarely know upfront how to build your whole project (and if you do, you might soon find out there's hidden difficulties you had not predicted). Finding solutions to problems you don't know how to solve is a fundamental skill, and something you should be learning almost since day 0. A lot of learning programming is just becoming better at knowing what to Google (and how to read the results you get back). This is also where having a supportive environment to ask questions in helps. Also, "is this project within my current reach?" might be easier for a seasoned expert—who already made many such mistakes—to judge.

Breakable in small, incremental steps: good learning projects don't take months and months to complete, or at least don't take months and months to create the first "deliverable" you (or your friends) can play around with. "Quick wins" are great: once you solve the core problem you really wanted to tackle, you should to be able to decide whether you want to continue going down the rabbit hole, or move on to something else. At the same time, stretch goals are also amazing learning opportunities: you already have a solid base you know the nook and crannies of, and that base will continue existing regardless of whether your stretch goals fail, so what about going for something even more ambitious? You have nothing to lose, and everything to learn!

Based on websites people on Tumblr have recommended, which I have gone through and tried out.

The National Snow and Ice Data Center at CU Boulder is one of 12 data centers across the country in charge of archiving NASA’s satellite imagery. This week, we had a nice chat with Chris Torrence (Software Development Manager) and Matt Fisher (Software Developer) on their work and their experience with the System76 Lemur Pro.

Tell us about what goes on at the NSIDC.

Chris: NSIDC is part of an organization called CIRES, which stands for the Cooperative Institute for Research in Environmental Sciences. Our team is kind of a suborganization within that, which is a software development group made up of 14 people. Most of our funding comes from NASA. Our primary mission is to archive all of NASA’s satellite imagery for the Arctic and the Antarctic.

Matt: Part of our mandate is we don’t just have to store the data, we have to make it available openly and freely to our users. Some of our data is a little more restrictive because it’s provisional and we’re still working on it, but it’s important that we service anybody who wants to use our data. So to do that, we wrote a JavaScript application that allows you to go to our website and select exactly what data you’re interested in—without having to write code to filter out the rest.

What kinds of users do you generally see on the site?

Matt: Our User Services office deals with a wide variety of use cases. Even developers like us at NSIDC will go to our User Services office and ask them questions for help using our own data. So they’re servicing developers, scientists, students, teachers, politicians, newspapers—we make products for newspapers and the military as well.

What sort of software does your work entail?

Chris: There’s two main aspects of what we do: Data storage and data distribution. Our web development team builds web applications so that scientists and the general public can come to our website to browse, download, and analyze our data. A lot of our applications are a combination of a front end, which would typically be written in JavaScript, and a back end written in Python which ties the front end into our database. We do also have some legacy code which we have to maintain as well, but those are the two main languages we use. We house most of our data on CU’s campus, though now we’re starting to move some of our data up into the cloud. That’s our next big project. 

Matt: To add to that, we’re also building tools for generating visualizations on our website. ASINA (Arctic Sea Ice News and Analysis) provides recent news on what’s happening in the Arctic and the Antarctic. Then there’s IceBridge, which shows flights of aircraft that have flown over the Arctic and taken photographs and measurements of the ice. You can scroll through all the data that’s available, choose what you want, zoom into areas, look at the thumbnails of the images, and then download the data.

Matt: I’m also working on a project called QGreenland. We’re building a data package for commercial off-the-shelf QGIS, which is an open source tool for visualizing geographic data. The data package is focused on the geographic region around Greenland, so people who are going out there to do field work can take along this pre-downloaded data package that covers all kinds of disciplines, including atmospheric data, oceanographic data, human activity data, human health data, and animal migration data. 

Matt: Another data package we built contains different categories of data focusing on Greenland. It shows scientific data such as vegetation biomass, ice streams, glacial termini positions, ice sheet velocity, bathymetric data, and locations of bird colonies. It’s aimed at all kinds of scientists, as opposed to our other work which is focused on cryospheric science.

How did you first hear about System76?

Matt: We had just started buying Linux laptops when I first started at NSIDC. I’ve always been a Linux user, and there were other Linux users here who had been asking for this for a while. I was part of the first test group that did that. We had laptops from another vendor at first that we were having trouble with, and we felt that we needed somebody to provide us laptops that had Linux expertise. That was one of the primary reasons we looked at System76. It also helped that you were local to us and that your systems had Ethernet ports for fast Internet access.

What led you to decide on the Lemur Pro?

Matt: Battery life was one of the largest reasons we chose the Lemur Pro. It had a very modern CPU in it, and we liked that they had a very high memory limit that you could configure it with. I personally appreciate the repairability of this style of laptop. Being able to just remove the bottom plate and replace the RAM is a great thing to be able to do without having to send it in or have a technician show up on-site.

Chris: We had some cases where people were installing Linux on a generic laptop, which was taking a fair amount of effort for them to maintain and keep up to date. That was another benefit of having Ubuntu come pre-installed, so you’re 75 percent of the way to a system that’s ready to go instead of starting from 0.

What distro are you using?

Matt: A few of us are on Ubuntu 20.04. One of us got their laptop a little earlier with Pop!_OS 18.04 installed. He’s since upgraded, and as far as I can tell he really likes it. At this point my experience with Ubuntu 20.04 has me wishing I went with Pop!_OS 20.04 as well because of snaps. I don’t really like snaps, so I had to go through a good amount of effort to disable them and block them from my system.