A guide to open source for the social sector
Calling all nonprofits! Do you want to implement open source software but don’t know where to start? We’ve got good news; you can easily get started by consulting our new guide.

The post A guide to open source for the social sector appeared first on The GitHub Blog. ⌘ Read more

Good DevEx increases productivity. Here is the data.
Explore how DevEx boosts productivity and innovation according to new research.

The post Good DevEx increases productivity. Here is the data. appeared first on The GitHub Blog. ⌘ Read more

How to get in the flow while coding (and why it’s important)
Explore what flow state entails, its benefits, and three tips for reaching it the next time you code.

The post How to get in the flow while coding (and why it’s important) appeared first on The GitHub Blog. ⌘ Read more

10 unexpected ways to use GitHub Copilot
GitHub Copilot is widely known for its code generation feature. Learn how the AI assistant’s abilities can extend beyond just code generation.

The post 10 unexpected ways to use GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more

Game Bytes · January 2024
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!

The post Game Bytes · January 2024 appeared first on The GitHub Blog. ⌘ Read more

Insider newsletter digest: Build from anywhere
Explore the August 2023 edition, featuring easy tips and tricks for GitHub Mobile.

The post Insider newsletter digest: Build from anywhere appeared first on The GitHub Blog. ⌘ Read more

New data and visualizations highlight the resilience of international developer collaboration
Discover the latest trends and insights on public software development activity on GitHub with the release of Q3 2023 data for the Innovation Graph.

The post [New data and visualizations highlight the resilience of international developer collaboration](https://github.blog/2024-01-18-new-data-and-visualizations-highlight-the-resilience-of-internation … ⌘ Read more

GitHub Availability Report: December 2023
In December, we experienced three incidents that resulted in degraded performance across GitHub services.

The post GitHub Availability Report: December 2023 appeared first on The GitHub Blog. ⌘ Read more

GitHub-hosted runners: Double the power for open source
GitHub Actions continues its industry-leading support for the OSS community by doubling the Windows/Linux machine size to 4-vCPU runners at no cost for public repositories.

The post GitHub-hosted runners: Double the power for open source appeared first on The GitHub Blog. ⌘ Read more

A developer’s second brain: Reducing complexity through partnership with AI
As we look to empower developers with AI tools, we inadvertently integrate AI deeper into the way developers work. How do developers feel about that? And what are the most impactful ways to introduce more AI into workflows? We recently conducted 25 in-depth interviews with developers to understand exactly that.

The post [A developer’s second brain: Reducing complexity through partnership … ⌘ Read more

Rotating credentials for GitHub.com and new GHES patches
GitHub received a bug bounty report of a vulnerability that allowed access to the environment variables of a production container. We have patched GitHub.com and rotated all affected credentials. If you have hardcoded or cached a public key owned by GitHub, read on to ensure your systems continue working with the new keys.

The post [Rotating credentials for GitHub.com and new GHES patches](https://github.blog/2024-01-16-ro … ⌘ Read more

Using GitHub Actions to backup OneDrive to S3
My ideals of using open-source software are fading a bit, and I’ve been using OneDrive to synchronize my files for quite some time now. It’s cheap and works reliable at least. ⌘ Read more

Empowering Uruguay’s future workforce with AI
During the second cycle of Git Commit Uruguay, students learned the basics of AI and built their own AI-powered projects.

The post Empowering Uruguay’s future workforce with AI appeared first on The GitHub Blog. ⌘ Read more

Game Off 2023 results 🏆
The GitHub Game Off results are in! All games have been rated, ranked, and reviewed. Read on for a look at the ten highest-rated submissions overall.

The post Game Off 2023 results 🏆 appeared first on The GitHub Blog. ⌘ Read more

When it comes to AI stuff - I like to run it myself, not use a service. I found this today - https://github.com/Mozilla-Ocho/llamafile
I’ll give that a good try when I need it, instead of chatgpt and such services.

GitHub Certifications are generally available
Unlock your full potential with GitHub Certifications! Earning a GitHub certification will give you the competitive advantage of showing up as a GitHub expert.

The post GitHub Certifications are generally available appeared first on The GitHub Blog. ⌘ Read more

GitHub and the Ekoparty 2023 Capture the Flag
The GitHub Security Lab teamed up with Ekoparty once again to create some challenges for its yearly Capture the Flag competition!

The post GitHub and the Ekoparty 2023 Capture the Flag appeared first on The GitHub Blog. ⌘ Read more

Frenemies to friends: Developers and security tools
When socializing a new security tool, it IS possible to build a bottom-up security culture where engineering has a seat at the table. Let’s explore some effective strategies witnessed by the GitHub technical sales team to make this shift successful.

The post Frenemies to friends: Developers and security tools appeared first on [The GitHub Blog](http … ⌘ Read more

@eaplme@eapl.me
I could try and host timetime it does look nice.

That part is missing on the Web side, there is a commented PHP code to do that
https://github.com/eapl-gemugami/twtxt-php/blob/master/libs/TOTP.php#L121
That code would end up generating an totp secret that I could put into the config?

Does it have a way to follow feeds from the web ui?
Yes, but you have to be logged in. Currently can only add URLs, not edit or unfollow.
How would I edit or unfollow?

That fit website would be nice to just genete a secret and put it into the .config and then using the totp code to login.

5 ways to make your DevSecOps strategy developer-friendly
Developers care about security, but poorly integrated tools and other factors can cause frustration. Here are five best practices to reduce friction.

The post 5 ways to make your DevSecOps strategy developer-friendly appeared first on The GitHub Blog. ⌘ Read more

Feedback on why I didn’t choose Mattermost (lack of OIDC) · mattermost/mattermost · Discussion – My discussions/feedback on Mattermost’s decision to have certain useful and IMO should be standard features as paid-for features on a per-seat licensed basis. My primary argument is that if you offer a self-host(able) product and require additional features the free version does not have, you should not have to pay for a per-seat license for something you are footing the bill for in terms of Hardware/Compute and Maintenance/Support (havintg to operate it).

Our move to generated SDKs
GitHub SDKs: software generated meets hand curated.

The post Our move to generated SDKs appeared first on The GitHub Blog. ⌘ Read more

GitHub Copilot Chat now generally available for organizations and individuals
All GitHub Copilot users can now enjoy natural language-powered coding with Copilot Chat at no additional cost.

The post GitHub Copilot Chat now generally available for organizations and individuals appeared first on The GitHub Blog. ⌘ Read more

GitHub’s top blog posts of 2023
As the year winds down, we’re highlighting some of the incredible work from GitHub’s engineers, product teams, and security researchers.

The post GitHub’s top blog posts of 2023 appeared first on The GitHub Blog. ⌘ Read more

Happy Twixmas everyone (new word I just learned 2 min ago)

I have finally gotten around to implementing a gallery feature to timeline.

Image

There is still some hiccups, like the limited caching is making it difficult to make links back to older posts not working. Maybe @eapl.me@eapl.me you can help me with that?

Remko Tronçon: Uxn in WebAssembly
While watching a Strange Loop talk on concatenative\
programming,
I learned about Uxn,
a small virtual machine that runs games, editors, drawing programs, … Uxn has been ported to various platforms, including classic consoles such as the Nintendo DS … ⌘ Read more

在 golang 中如何實現 WebSocket 的雙向通信
在 Go 語言中實現 WebSocket 的雙向通信通常需要使用第三方庫，其中 gorilla/websocket 是一個非常流行和廣泛使用的庫。以下是實現 WebSocket 雙向通信的步驟和簡單示例代碼：1 安裝 gorilla/websocket 庫：go get github.com/gorilla/websocket2 編寫 WebSocket 服務器：package mainimpor ⌘ Read more

How to Use OpenPubkey with GitHub Actions Workloads
Learn how to use OpenPubkey to bind public keys to workload identities using GitHub Actions and Docker. And find out how Docker is using OpenPubkey with GitHub Actions to sign Docker Official Images and improve supply chain security. ⌘ Read more

How we organize and get things done with SERVICEOWNERS
Take CODEOWNERS and GitHub teams to the next level. Learn about how GitHub engineering solves the age old problem of who owns what.

The post How we organize and get things done with SERVICEOWNERS appeared first on The GitHub Blog. ⌘ Read more

From migration tools to updates to Enterprise Managed Users, what’s new in GitHub Enterprise
Read a round-up of the exciting, new innovation coming from GitHub Enterprise.

The post From migration tools to updates to Enterprise Managed Users, what’s new in GitHub Enterprise appeared first on [The GitHub Blog](https://githu … ⌘ Read more

Release Radar · End of 2023 Edition
Hacktoberfest has wrapped up, GitHub Universe has come to a close, and our community has been super hard at work. All the while people enjoyed turkey over thanksgiving and expressed gratitude for those around them. In this edition, we’d like to thank the open source community for all the awesome projects shipped over the past […]

The post Release Radar · End of 2023 Edition appeared first on [The GitHub Blog](https://gi … ⌘ Read more

Release Radar · Thanksgiving 2023 Edition
Hacktoberfest has wrapped up, GitHub Universe has come to a close, and our community has been super hard at work. All the while people have been enjoying turkey and expressing gratitude for those around them. In this edition, we’re thankful to the open source community and all the awesome projects shipped over the past two […]

The post Release Radar · Thanksgiving 2023 Edition appeared first on [The GitHub Blog](h … ⌘ Read more

Scaling vulnerability management across thousands of services and more than 150 million findings
Learn about how we run a scalable vulnerability management program built on top of GitHub.

The post Scaling vulnerability management across thousands of services and more than 150 million findings appeared first on … ⌘ Read more

GitHub Availability Report: November 2023
In November, we experienced one incident that resulted in degraded performance across GitHub services.

The post GitHub Availability Report: November 2023 appeared first on The GitHub Blog. ⌘ Read more

Securing our home labs: Frigate code review
This blog post describes two linked vulnerabilities found in Frigate, an AI-powered security camera manager, that could have enabled an attacker to silently gain remote code execution.

The post Securing our home labs: Frigate code review appeared first on The GitHub Blog. ⌘ Read more

Default setup now includes scheduled scans and supports all languages covered by CodeQL
We’ve added new improvements to default setup, including automatically scheduling scans on repositories and support for all CodeQL covered languages.

The post [Default setup now includes scheduled scans and supports all languages covered by CodeQL](https://github.blog/2023-12-13-default-setup-now-includes-scheduled-scans-and-supports-all-languages-covered-by-cod … ⌘ Read more

Templ - 一種更好的管理 HTML 模板的 Go 語言框架
背景介紹在開發 Web 應用時我們常常需要寫 HTML 代碼以構建用戶界面。然而，創建和管理 HTML 模板可能會變得非常複雜和困難，特別是在大型項目中。要優化並整理這些模板代碼，我們需要一個強大且易於使用的模板語言。這種需求在使用 Go 語言開發 Web 應用時尤爲突出，因爲 Go 語言在內建支持的模板語言方面還不夠友好，尚有待提升。今天要給大家推薦一個 GitHub 開源項目 a-h/temp ⌘ Read more

Upgrading GitHub.com to MySQL 8.0
GitHub uses MySQL to store vast amounts of relational data. This is the story of how we seamlessly upgraded our production fleet to MySQL 8.0.

The post Upgrading GitHub.com to MySQL 8.0 appeared first on The GitHub Blog. ⌘ Read more

From macOS runners to secure deployments, what’s new from GitHub Actions
Read a roundup of the exciting, new innovation coming from GitHub Actions.

The post From macOS runners to secure deployments, what’s new from GitHub Actions appeared first on The GitHub Blog. ⌘ Read more

GitHub Innovation Graph Q2 2023 Data Release
Discover the latest trends and insights on public software development activity on GitHub with the release of Q2 2023 data for the Innovation Graph.

The post GitHub Innovation Graph Q2 2023 Data Release appeared first on The GitHub Blog. ⌘ Read more

Cueing up a calculator: an introduction to exploit development on Linux
Using CVE-2023-43641 as an example, I’ll explain how to develop an exploit for a memory corruption vulnerability on Linux. The exploit has to bypass several mitigations to achieve code execution.

The post Cueing up a calculator: an introduction to exploit development on Linux appeared first … ⌘ Read more

How we’re experimenting with LLMs to evolve GitHub Copilot
Learn how we’re experimenting with generative AI models to extend GitHub Copilot across the developer lifecycle.

The post How we’re experimenting with LLMs to evolve GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more

GitHub Enterprise Server 3.11 is now generally available
Customers using GitHub Enterprise Server can gain more insight and understanding into the security of their code.

The post GitHub Enterprise Server 3.11 is now generally available appeared first on The GitHub Blog. ⌘ Read more

Addressing post-quantum cryptography with CodeQL
Learn how researchers and security experts at GitHub, Microsoft, and Santander came together to address the challenges presented by the post-quantum cryptography world.

The post Addressing post-quantum cryptography with CodeQL appeared first on The GitHub Blog. ⌘ Read more

The ultimate gifts for the developer in your life this holiday season
If you’re on the hunt for the perfect holiday gifts for the developer who has it all, look no further. We’ve curated a list of 10 must-have items (plus a few more) that strike the perfect balance between practicality and style.

The post [The ultimate gifts for the developer in your life this holiday season](https://github.blog/2023-12-04-the-ultimate-gifts-for-the-developer-in-your-life-this-holid … ⌘ Read more

This day one advantage of code was pretty neat looking.

https://twitter.com/gereleth/status/1730495736070938786?s=09

Code here: https://github.com/gereleth/aoc_python/blob/main/src/year2023/day01vis.py

This day one advantage of code was pretty neat looking.

https://twitter.com/gereleth/status/1730495736070938786?s=09

Code here: https://github.com/gereleth/aoc_python/blob/main/src/year2023/day01vis.py

Ahh I see how someone did it.

https://github.com/immannino/advent-of-go/blob/master/cmd/2023.go#L30-L40

Ahh I see how someone did it.

https://github.com/immannino/advent-of-go/blob/master/cmd/2023.go#L30-L40

From the pages of our Insider newsletter: How to use GitHub Copilot
Explore July’s Insider newsletter, featuring prompts, tips, and use cases for GitHub Copilot.

The post From the pages of our Insider newsletter: How to use GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more

Securing our home labs: Home Assistant code review
The GitHub Security Lab examined the most popular open source software running on our home labs, with the aim of enhancing its security. Here’s what we found and what you can do to better protect your own smart home.

The post Securing our home labs: Home Assistant code review appeared first on The GitHub Blog. ⌘ Read more

NixOS 23.11 released

Image

Hey everyone, we are figsoda and Ryan Lahfa,
the release managers for this stable release and we are very proud to announce the public availability of NixOS 23.11 “Tapir”.

This release will receive bugfixes and security updates for seven months (up until 2024-06-30).

• [Relea … ⌘ Read more

Github is like Linkedin for Developers

Started the process of migrating from Github to Codeberg with my projects.

Neat.. Gitea cloud for a hosted alternative to github and gitlab. https://blog.gitea.com/gitea-cloud/

Neat.. Gitea cloud for a hosted alternative to github and gitlab. https://blog.gitea.com/gitea-cloud/

Ignite Realtime Blog: Smack 4.4.7 released
We are happy to announce the release of Smack 4.4.7. For a high-level overview of what’s changed in Smack 4.4.7, check out Smack’s changelog

As with the last release, 4.4,6, parts of the release where driven by feedback from the Jitsi folks.

Due to SMACK-927, we had to change the behavior of a certain kind of incoming stanzas listeners, namely the ones added with XMPPCo ... ⌘ [Read more](https://discourse.igniterealtime.org/t/smack-4-4-7-released/93357)

For Good First Issue: Introducing a new way to contribute
For Good First Issue is a curated list of open source projects that are also digital public goods and need the help of developers.

The post For Good First Issue: Introducing a new way to contribute appeared first on The GitHub Blog. ⌘ Read more

Highlights from Git 2.43
The last Git release of 2023 is here! Take a look at some of our highlights on what’s new in Git 2.43.

The post Highlights from Git 2.43 appeared first on The GitHub Blog. ⌘ Read more

Security best practices for authors of GitHub Actions
Improve your GitHub Action’s security posture by securing your source repository, protecting your maintainers, and making it easy to report security incidents.

The post Security best practices for authors of GitHub Actions appeared first on The GitHub Blog. ⌘ Read more

Universe’s key takeaway: Innovate better with AI-powered workflows on a single, unified platform
Discover new AI-powered features and tools to help developers stay in the flow and organizations innovate at scale.

The post [Universe’s key takeaway: Innovate better with AI-powered workflows on a single, unified platform](https://github.blog/2023-11-15-universes-key-takeaway-innovate-better-with-ai-powered-workflows-on-a-single-unified-pla … ⌘ Read more

On GitHub becoming an AI platform
Listen now (19 mins) | Lunduke’s Big Tech Show - November 13th, 2023 ⌘ Read more

Gracias. Also the git repo now contain code that should actually work

GitHub Availability Report: October 2023
In October, we experienced two incidents that resulted in degraded performance across GitHub services.

The post GitHub Availability Report: October 2023 appeared first on The GitHub Blog. ⌘ Read more

Celebrating the GitHub Awards 2023 recipients 🎉
The GitHub Awards recognizes and celebrates the outstanding contributions and achievements in the developer community, honoring individuals, projects, and organizations for their impactful work, innovation, thought leadership, and creating an outsized positive impact on the community.

The post Celebrating the GitHub Awards 2023 recipients 🎉 appeared first on [The … ⌘ Read more

Building Trusted Content with GitHub Actions
As part of our continued efforts to improve the security of the software supply chain and increase trust in the container images developers create and use every day, Docker has begun migrating its Docker Official Images (DOI) builds to the GitHub Actions platform. Leveraging the GitHub Actions hosted, ephemeral build platform enables the creation of secure, verifiable images with provenance and SBOM attestations signed using OpenPubkey and the GitHub … ⌘ Read more

Universe 2023: Copilot transforms GitHub into the AI-powered developer platform
GitHub is announcing general availability of GitHub Copilot Chat and previews of the new GitHub Copilot Enterprise offering, new AI-powered security features, and the GitHub Copilot Partner Program.

The post [Universe 2023: Copilot transforms GitHub into the AI-powered developer platform](https://github.blog/2023-11-08-universe-2023-copilot-transforms-github-into-the-ai-powered- … ⌘ Read more

Octoverse: The state of open source and rise of AI in 2023
In this year’s Octoverse report, we study how open source activity around AI, the cloud, and Git are changing the developer experience.

The post Octoverse: The state of open source and rise of AI in 2023 appeared first on The GitHub Blog. ⌘ Read more

Introducing AI-powered application security testing with GitHub Advanced Security
Learn about how GitHub Advanced Security’s new AI-powered features can help you secure your code more efficiently than ever.

The post Introducing AI-powered application security testing with GitHub Advanced Security appeared first on The GitHub Blog. ⌘ Read more

Leveraging AI to empower all developers at GitHub Universe 2023
GitHub Universe 2023 is just around the corner! Join us and learn how GitHub is leveraging AI to empower all developers, including developers with disabilities.

The post Leveraging AI to empower all developers at GitHub Universe 2023 appeared first on The GitHub Blog. ⌘ Read more

Celebrating the first round of GitHub Accelerator and what’s next
Celebrate the maintainers of the first GitHub Accelerator cohort, learn what they have been up to since, and hear what’s next for GitHub Accelerator.

The post Celebrating the first round of GitHub Accelerator and what’s next appeared first on The GitHub Blog. ⌘ Read more

GitHub Game Off 2023 theme announcement
It’s the moment you’ve all been waiting for. Are you ready?

The post GitHub Game Off 2023 theme announcement appeared first on The GitHub Blog. ⌘ Read more

Diversity, inclusion, and belonging at GitHub in 2023
We expanded diversity of our employee base, launched several new employee engagement programs, made investments to improve accessibility, and more.

The post Diversity, inclusion, and belonging at GitHub in 2023 appeared first on The GitHub Blog. ⌘ Read more

Introducing the GitHub transparency center
It’s time for our biannual transparency report, where we share how we approach content moderation and disclosure of user information. This year, we’re introducing the transparency center, a new platform for our transparency reporting data.

The post Introducing the GitHub transparency center appeared first on The GitHub Blog. ⌘ Read more

Release Radar · Hacktoberfest 2023 Edition
As Hacktoberfest comes to a close, you still have a day or so left to complete and submit your pull requests. If you’re struggling to think of projects to contribute to, our picks below might help you. This edition of the Release Radar covers a few projects that shipped major version updates this August and […]

The post Release Radar · Hacktoberfest 2023 Edition appeared first on [The GitHub Blog](https://github.bl … ⌘ Read more

The architecture of today’s LLM applications
Here’s everything you need to know to build your first LLM app and problem spaces you can start exploring today.

The post The architecture of today’s LLM applications appeared first on The GitHub Blog. ⌘ Read more

Hackable Halloween games MMXXIII
13 spooktacular games plus source code for readers to jam on.

The post Hackable Halloween games MMXXIII appeared first on The GitHub Blog. ⌘ Read more

Demystifying LLMs: How they can do things they weren’t trained to do
Explore how LLMs generate text, why they sometimes hallucinate information, and the ethical implications surrounding their incredible capabilities.

The post Demystifying LLMs: How they can do things they weren’t trained to do appeared first on The GitHub Blog. ⌘ Read more

Developers are the first group to adopt AI at work. Here’s why that matters.
From starting at GitHub over 10 years ago as a developer to becoming the Chief Operating Officer, I’ve learned that developers are often bellwethers for change across the rest of their organizations. That makes investing in—and learning from—them critical.

The post [Developers are the first group to adopt AI at work. Here’s why that matters.](https://github.blog/2023-10-27-developers-ar … ⌘ Read more

5 tips for making your GitHub profile page accessible
Your profile’s README invites the world to know you and your work, so it’s important that everyone can read and understand it. In this post, we share some tips for making your README more accessible.

The post 5 tips for making your GitHub profile page accessible appeared first on The GitHub Blog. ⌘ Read more

Cybersecurity spotlight on bug bounty researcher @Ammar Askar
We’re excited to highlight another top contributing researcher to GitHub’s Bug Bounty Program—@Ammar Askar!

The post Cybersecurity spotlight on bug bounty researcher @Ammar Askar appeared first on The GitHub Blog. ⌘ Read more

Does anyone have any personal experience with Spiral Linux? It is just preconfigured Debian + your choice of DE installed with Calamares. After the installation is completed, you aren’t dependent on anything except the existing Debian infrastructure which is, of course, rock-solid.

How to gain insight into your project contributors
We’re excited to share with you the contributors Action! At GitHub, we maintain several open source repositories and have developed this Action to empower maintainers to measure how many new and returning contributors and contributions have occurred over any given time period.

The post How to gain insight into your project contributors appeared first … ⌘ Read more

@lyse@lyse.isobeef.org I wish more standardization around distributed issues and PRs within the repo ala git-bug was around for this. I see it has added some bridge tooling now.

@lyse@lyse.isobeef.org I wish more standardization around distributed issues and PRs within the repo ala git-bug was around for this. I see it has added some bridge tooling now.

How to Download a Mac App from Github?
A ton of open source software is available on Github, and many Mac applications are often available to download for free through the Github service as well. And if you read websites like this one and many others in the Apple and tech world, you’ll often find links to neat software projects on Github. One … Read More ⌘ Read more

How to Download a Mac App from Github?
A ton of open source software is available on Github, and many Mac applications are often available to download for free through the Github service as well. And if you read websites like this one and many others in the Apple and tech world, you’ll often find links to neat software projects on Github. One … Read More ⌘ Read more

ICYMI: improved C++ vulnerability coverage and CodeQL support for Lombok
The effectiveness of a static application security solution hinges on its ability to provide extensive vulnerability coverage and support for a wide range of languages and frameworks. Today, we’re highlighting two releases that’ll help you discover more vulnerabilities in your codebase, so you can ship more secure software.

The post [ICYMI: improved C++ vulnerability coverage and CodeQL support … ⌘ Read more

Your curated GitHub Universe agenda: AI, ethics, and productivity
Gain actionable insights about the intersection of AI and human skills, while tackling ethics, accessibility, and productivity at these GitHub Universe sessions.

The post Your curated GitHub Universe agenda: AI, ethics, and productivity appeared first on The GitHub Blog. ⌘ Read more

The clock is ticking: Atlassian’s support for Bitbucket Server ends on February 15, 2024
Atlassian is ending support for its Server products—including Bitbucket Server—in February 2024. In this post, you’ll learn what that means for you, your options, and how you can move to GitHub.

The post [The clock is ticking: Atlassian’s support for Bitbucket Server ends on February 15, 2024](https://github.blog/2023-10-17-the-clock-is-ticking-atlassians-support … ⌘ Read more

Getting RCE in Chrome with incomplete object initialization in the Maglev compiler
In this post, I’ll exploit CVE-2023-4069, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site.

The post [Getting RCE in Chrome with incomplete object initialization in the Maglev compiler](https://github.blog/2023-10-17-getting-rce-in-chrome-with-incomplete-object-initialization-in-the- … ⌘ Read more

Measuring Git performance with OpenTelemetry
Use our new open source Trace2 receiver component and OpenTelemetry to capture and visualize telemetry from your Git commands.

The post Measuring Git performance with OpenTelemetry appeared first on The GitHub Blog. ⌘ Read more

js13kGames 2023 winners 🏆
The twelfth annual js13kGames coding competition, challenging participants to create games in 13kB or less of JavaScript in a month, just wrapped up. This post highlights the top thirteen entries.

The post js13kGames 2023 winners 🏆 appeared first on The GitHub Blog. ⌘ Read more

Ensuring the next generation of open source leaders are truly “all in”
If you are a student from a U.S. minority-serving institution looking to start your journey into open source, join us!

The post Ensuring the next generation of open source leaders are truly “all in” appeared first on The GitHub Blog. ⌘ Read more

GitHub Availability Report: September 2023
In September, we experienced two incidents that resulted in degraded performance across GitHub services.

The post GitHub Availability Report: September 2023 appeared first on The GitHub Blog. ⌘ Read more

Enforcing code reliability by requiring workflows with GitHub Repository Rules
GitHub Enterprise Cloud customers can now ensure controlled workflows run and pass before code is merged into any of its repositories.

The post Enforcing code reliability by requiring workflows with GitHub Repository Rules appeared first on [The GitHub Blog](https://g … ⌘ Read more

How did I just find this program? Reptyr: Reparent a running program to a new terminal: https://github.com/nelhage/reptyr

Research: Quantifying GitHub Copilot’s impact on code quality
Findings show that code quality is better across the board and developers felt more confident, too.

The post Research: Quantifying GitHub Copilot’s impact on code quality appeared first on The GitHub Blog. ⌘ Read more

@prologic@twtxt.net https://github.com/stig-atle/YarnDesktopClient

Coordinated Disclosure: 1-Click RCE on GNOME (CVE-2023-43641)
CVE-2023-43641 is a vulnerability in libcue, which can lead to code execution by downloading a file on GNOME.

The post Coordinated Disclosure: 1-Click RCE on GNOME (CVE-2023-43641) appeared first on The GitHub Blog. ⌘ Read more