GoCN 每日新闻 (2021-12-12)

1. GopherCon 2021 视频https://space.bilibili.com/756684/channel/seriesdetail?sid=586416
   
2. 告别 Sidecar-使用 eBPF 解锁内核级服务网格https://mp.weixin.qq.com/s/W9NySdKnxuQ6S917QQn3PA
   
3. 我为 ent gRPC 插件贡献功能学到的[https://entgo.io/blog/2021/12/09/contributing-my-first-feature-to-ent-grpc-plugin/](https://entgo.io/blog/2021/12/09/contributing-my-first-f … ⌘ Read more

[47°09′17″S, 126°43′30″W] Bad satellite signal – switching to analog communication

Apache Log4j 2 CVE-2021-44228
We know that many of you are working hard on fixing the new and serious Log4j 2 vulnerability CVE-2021-44228, which has a 10.0 CVSS score. We send our #hugops and best wishes to all of you working on this vulnerability, now going by the name Log4Shell. This vulnerability in Log4j 2, a very common Java […]

The post Apache Log4j 2 CVE-2021-44228 appeared first on Docker Blog. ⌘ Read more

Every good blogging system should have an option to schedule posts for later! GoBlog now has such a feature as well. And this is the first scheduled post. 😀 ⌘ Read more

King Crimson seem to have disbanded. I feel blue all of a sudden.

[47°09′51″S, 126°43′11″W] Automatic systems disengaged due to thunderstorm

Globetrotter’s Guide to the Galaxy with Neil deGrasse Tyson ⌘ Read more

[47°09′43″S, 126°43′28″W] Storm recedes – back to normal work

Ignite Realtime Blog: Openfire 4.6.5 released
Although we’re preparing for the Openfire 4.7.0 release, the recently discovered vulnerability in the Apache Log4j utility prompted us to push an immediate release of Openfire to address that issue. This release, Openfire 4.6.5, is available now.

We urge you to update as soon as possible. If that’s not feasible, then we advise you to apply the documented workaround (in the form o … ⌘ Read more

[47°09′13″S, 126°43′03″W] Automatic systems disengaged due to blizzard

A group will never admit they were wrong. A group will never admit, “We made a mistake,” because a group that tries to change its mind falls apart. Groups never admit failure | Hacker News

The Greatest Threat to Your Freedoms ⌘ Read more

Killing time in Goodwill, I picked up a desk calculator from a pile. Dude standing next to me goes “what’s that for?”. 😳💀

Give your programming career a boost by moving to Mexico
You’re welcome. Hey, want to support The Lunduke Journal? There are ways. Oh, yes. There are ways. ⌘ Read more

@lyse@lyse.isobeef.org I thought it was just me. I drives me nuts to try reading on that page. I guess I am no longer capable to look at old CRT monitors without side effects.

@lyse@lyse.isobeef.org more often than not, it is! I mean, I try to go over the changes, but soon find myself in a web (not pun!), all entangled. Then say, “screw it!” and to the bin it goes. 🥴

[47°09′06″S, 126°43′56″W] Transponder still failing – switching to analog communication

Docker Secure Images: What Are They and How Do I Use Them?
One of the major challenges in today’s development environments is balancing innovation with security. Focusing on both is never a small effort and might seem tedious or constraining at times, but when security is implemented from the start, it can shorten development time and prevent exposure to vulnerabilities. This is why Docker rolled out Docker […]

The post [Docker Secure Images: What Are They and How Do I Us … ⌘ Read more

I know I’ve mentioned this in various social media, but I just want to reiterate how much internet reality drama means to me. It’s insanely entertaining.

This pi will now boot directly to ed if the gpio pin is grounded at boot time. ed(1)term v1. :-) http://txtpunk.com/edterm/

I am not launching it with a specific file right now, but I’ll likely have it default to my daily work log shortly.

@lyse This was basically a trial/proof-of-concept for the real goal: a switch which, if on at boot time, causes the pi to boot straight to ed.

Do the New Terms of Docker Desktop Apply If You Don’t Use the Docker Desktop UI?
Even if you’re not taking advantage of the user interface that Docker provides with Docker Desktop and are simply using the CLI, you may still need a paid subscription to use Docker Desktop. Much of the value of Docker Desktop comes from making it easy to develop with containers locally on Windows and Mac. We […]

The post [Do the New Terms of Docker Desktop Apply If Yo … ⌘ Read more

Defeat Street
Some of the sincerity slimed up on me

Cards wrote themselves and rifled me

Rigging the blast door to explore didn’t pan out this time

Rushed in, gobbled up and left me bottled up, that monstrous cub

To tell you the truth, I snort mousse

Rust seeps into cereals I produce

Rum may run rampantly down the drain, so let me think

I’ll leave a limb in the pipes to entice a drink ⌘ Read more

使用 KubeSphere 快速部署 Chaos Mesh

Chaos Mesh 是一个开源的云原生混沌工程平台，提供丰富的故障模拟类型，具有强大的故障场景编排能力，方便用户在开发测试中以及生产环境中模拟现实世界中可能出现的各类异常，帮助用户发现系统潜在的问题。

Image

Docker Verified Publisher: Trusted Sources, Trusted Content
Six months since its launch at DockerCon, the Docker Verified Publisher program delivers on its promise to developers and partners alike The Docker Verified Publisher program means trusted content and trusted sources for the millions of Docker users. At the May 2021 DockerCon, Docker announced its Secure Software Supply Chain initiative, highlighting Docker Verified Publisher […]

The post [Docker Verified Publishe … ⌘ Read more

How to support The Lunduke Journal (& where to buy Lunduke’s books)
Multiple ways to support this nerdy publication and become part of the community. ⌘ Read more

Enrolling all npm publishers in enhanced login verification and next steps for two-factor authentication enforcement
Today we’re introducing enhanced login verification to the npm registry, and we will begin a staged rollout to maintainers beginning Dec 7. ⌘ Read more

[47°09′29″S, 126°43′26″W] Bad satellite signal – switching to analog communication

An imaginary conversation with Peter Schiff
Before I get to the conversation I find it necessary to note that I have been listening to Peter Schiff’s podcast on and off, and find his inside to be agreeable most of the time. He knows his stuff, and is explaining it very well. Me Why invest in Gold rather then diamonds? What makes […] ⌘ Read more

[47°09′15″S, 126°43′13″W] Storm recedes – back to normal work

[47°09′10″S, 126°43′53″W] Automatic systems disengaged due to thunderstorm

Updated Flash Cardon to use manifest v3

Write more secure code with the OWASP Top 10 Proactive Controls
This lesser-known OWASP project aims to help developers prevent vulnerabilities from being introduced in the first place. ⌘ Read more

Micro.blog’s new newsletter feature
I think the new micro.blog feature for newsletters is the right approach. Blog first, newsletter second. But newsletters are not difficult to set up, they only need to be activated by a checkbox. ⌘ Read more

Building Docker images in Drone CI using Docker-in-Docker
This evening I tried to improve the build process of GoBlog. GoBlog gets built using Drone CI and Docker. The problem was that two image variants are to be built, one based on the other, and the whole thing always took quite a long time. ⌘ Read more

Ignite Realtime Blog: Openfire 4.7.0 beta & Hazelcast plugin 2.6.0 releases!
After a long few months full of hard work, we are happy to tell you that we are close to a 4.7.0 release for Openfire!

This next version of our real time communications server has received a lot of improvements and bug fixes.

A key area of the code that has received updates is the Multi-User Chat (MUC) impl … ⌘ Read more

Safeguard your containers with new container signing capability in GitHub Actions
GitHub has partnered with the OpenSSF and Project Sigstore to add container image signing to our default “Publish Docker Container” workflow. ⌘ Read more

Ooh time to upgrade

friendlyjordies: Enemy To Women? ⌘ Read more

@movq@www.uninformativ.de Great work! I wish we could make all those BIG twtxt writers to use it ;-)

I’ve a problem with local_twtxt_file not beeing supported any more. Being forced to use twtxt.txt as file name breaks at least my URL.

Underscores in Imports
Underscores in Imports Underscores in Go serve a few purposes. In U+005F, “_” is a letter (as a string). You may also see them as [ “_” ] in between successive digits and a base prefix. In this case, it’s to improve the readability of the code. You may also see them in function names, e.g., imaginary_lit.
The underscore is quite a versatile tool. They even have their place in defining the kind of action that will take place in a function. ⌘ Read more

Walking and listening to an audiobook 😌🚶‍♂️🎙️📚 ⌘ Read more

So the evolution of my nick is as follows. I had a bicycle that had the word Zephyr written on it. Which means a western wind. That is related to the Greek god Zephyrus.

I liked words where X make a Z sound. And also had a bit of dyslexia so my firs IRC nick was Xypher swapping the y and e.. I would also use the forms Xypherius or just Xypheri.

Because its close hemming to Cypher I found the nick would get used by others.. Though that is not my origin.

Later I would sign websites I created as The X-Urban Underground (where X was short for Xypher) and that evolved to xuu. Pronounced like zoo.

So the evolution of my nick is as follows. I had a bicycle that had the word Zephyr written on it. Which means a western wind. That is related to the Greek god Zephyrus.

I liked words where X make a Z sound. And also had a bit of dyslexia so my firs IRC nick was Xypher swapping the y and e.. I would also use the forms Xypherius or just Xypheri.

Because its close hemming to Cypher I found the nick would get used by others.. Though that is not my origin.

Later I would sign websites I created as The X-Urban Underground (where X was short for Xypher) and that evolved to xuu. Pronounced like zoo.

The XMPP Standards Foundation: The XMPP Newsletter November 2021
Welcome to the XMPP Newsletter covering the month of November 2021 - the last release for this year! After our editorial break we will be back in February 2022!

Many projects and their efforts in the XMPP community are a result of people’s voluntary work. If you are happy with the services and software you may be using, especially throughout the current situation, please consider to say thanks or help these projects!

[Read this Ne … ⌘ Read more

I’ve never really done test-driven development (TDD). But Advent of Code offers the perfect opportunity for that, because there is already an example input and an example result. So it is possible to create a test first and program until the test passes. ⌘ Read more

[47°09′49″S, 126°43′08″W] Working impossible due to blizzard

[47°09′17″S, 126°43′59″W] Working impossible due to heavy rain

On the blog: Tweets from 11/08 to 11/12 https://john.colagioia.net/blog/media/2021/12/03/week.html #twitter #week #socialmedia #linkdump

It’s time again to ask my followers: I have my homepage jlelse.dev, but I’m thinking about using jlelse.com for a more professional and appealing website about me. I can program, but my design skills are somewhat limited. What should I use to design and create the site? I used Carrd a couple of years ago. But are there any other recommendations? ⌘ Read more

Thanks to @TANTlab@twitter.com and @birkbak@birkbak.neocities.org for havning me today at AAU CPH🙏 Presentation notes can be found at: http://darch.dk/aau-tool-talk/

[47°09′25″S, 126°43′50″W] Storm recedes – back to normal work

Extraordinary that I’ve managed to avoid DS9 spoilers for twenty years. Really enjoying this final season, so far.

How to Steal a City ⌘ Read more

Ignite Realtime Blog: inVerse plugin for Openfire version 9.0.0.1 released!
The Ignite Realtime community is happy to announce the immediate availability of a an update to the inVerse plugin for Openfire, which makes the Converse.js web client available to your users.

This release updates Converse to version 9.0.0.

Your Openfire instance should automatically display the … ⌘ Read more

Faster Multi-Platform Builds: Dockerfile Cross-Compilation Guide
There are some important changes happening in the software industry. With Apple moving all of their machines to their custom ARM-based silicon and AWS offering the best performance-per-cost ratio with their Graviton2 instances, one can no longer expect that all software only needs to run on x86 processors. If you work with containers there is some […]

The post [Faster Multi-Platform Builds: Dockerfile … ⌘ Read more

Advent of Code ‘21
New year, new code advent calendar. This year I’m trying my hand at Advent of Code once again in Go. This time with a little help from the copilot. Let’s see if I make it to the end, or have to give up early again… ⌘ Read more

Using ChatOps to help Actions on-call engineers
You can multiply the impact of your domain experts by building their common workflows into ChatOps. ⌘ Read more

@thecanine@twtxt.net been there a few times! Thank goodness for mosh for when trying to debug from spotty GSM connection and having ssh drop out every few minutes.

@thecanine@twtxt.net been there a few times! Thank goodness for mosh for when trying to debug from spotty GSM connection and having ssh drop out every few minutes.

@lyse@lyse.isobeef.org Me when I find myself crossing an international border, close to midnight, using free bus WiFi, spammed by messages from people, telling me that the server hosting my web-apps is down. 😂
*Only happened once so far

Docker SSO is Coming
The impending winter and holiday season hasn’t slowed us down here at Docker HQ. In fact, our engineers have been hard at work to put the finishing touches on one of our most requested features by our enterprise customers: Docker Single Sign-On (SSO). 🎄🎁 With Docker SSO enabled, users can authenticate using their organization’s standard […]

The post Docker SSO is Coming appeared first on [Docker Blog](https://www.docker.com/bl … ⌘ Read more

[47°09′40″S, 126°43′36″W] Bad satellite signal – switching to analog communication

Jérôme Poisson: Libervia v0.8 « La Cecília »
I’m proud to announce the release of Libervia 0.8 « La Cecília » (formerly known as « Salut à Toi »), after more than 2 years of development.

This version is a big milestone preparing the future of the project. Let’s have an overview of some major changes.

In the interest of simplicity, the project has been renamed to “ Libervia ” (with was formerly the name of the web frontend), and all official frontends have now a … ⌘ Read more

oh boy, I’m looking at !minilisp and I have to say I’m inspired to try and hack on it somehow #halfbakedideas

My November ‘21 in Review
Welcome to my monthly review for November 2021. What was going on this month? ⌘ Read more

5 DevOps tips to speed up your developer workflow
From learning YAML to scripting with Bash, here are a few simple tips for developers who want to speed up their workflows. ⌘ Read more

New repository: aquilax/gh-user-activity - gh extension to show the latest user activity across all repositories

A brand-spanking-new Windows 3.1 mouse driver. Seriously.
It’s for use in VMWare. You know. So you don’t need to grab and ungrab the mouse. ⌘ Read more

News from AWS re:Invent – Docker Official Images on Amazon ECR Public
We are happy to announce today that, in partnership with Amazon, Docker Official Images are now available on AWS ECR Public. This is especially exciting because Docker Official Images are some of the most popularly used images on Docker Hub, acting as a key and trusted starting point for base images for the entire container […]

The post [News from AWS re:Invent – Docker Official Images on Am … ⌘ Read more

Gajim: Development News November 2021
Annoyed of spam messages in public channels? Gajim just gained support for Message Moderation! Also this month: better message corrections and improved notifications.

If you’re participating in public channels you might have witnessed spam from time to time. Someone comes along and pastes some URL about a promising business opportunity, or leaves an offending picture. Moderators can kick/ban spammers, but that does not remove those … ⌘ Read more

[47°09′31″S, 126°43′31″W] Working impossible due to thunderstorm

Peter Saint-Andre: Aristotle Research Report #17: Let the Re-Reading Begin
Just under two years ago, I thought I was done with phase one of my research into Aristotle’s views o human flourishing, having at that point read around 120 distinct works by or related to Aristotle (including all of Plato’s dialogues). Well, I was wrong: since then I’ve read an additional 150 works, almost exclusively in the scholarly literature on Aristotle. Now I have three whole shelves of books about Aristotle in my office…. ⌘ Read more

[47°09′13″S, 126°43′42″W] Bad satellite signal – switching to analog communication

How to See the Universe with Dr. Annette S. Lee ⌘ Read more

Happy Thanksgiving y’all! From our home (?) to yours!

On the blog: Tweets from 11/22 to 11/26 https://john.colagioia.net/blog/media/2021/11/26/week.html #twitter #week #socialmedia #linkdump

First experience with my new unlimited mobile phone contract while traveling: The phone hotspot works much better than the ICE (German high speed train) WiFi usually does. At most, there are small interruptions in tunnels, but otherwise surfing, writing e-mails, and listening to music work perfectly. Even remote programming works. It was worth it… ⌘ Read more

[47°09′12″S, 126°43′01″W] Storm recedes – back to normal work

Siren
⌘ Read more

[47°09′39″S, 126°43′22″W] Working impossible due to heavy rain

[47°09′03″S, 126°43′16″W] Working impossible due to thunderstorm

Tigers and Bears and Programmers.
That’s a comic strip. You like it very much. You probably want to send it to everyone you know. If you aren’t currently a subscriber to The Lunduke Journal, I highly recommend it. It is so choice. The free edition is great. If you pitch in a few bucks you get ⌘ Read more

Lossless Image Compression in O(n) Time
Introducing QOI — the Quite OK Image Format. It losslessly compresses RGB and
RGBA images to a similar size of PNG, while offering a 20x-50x speedup in
compression and 3x-4x speedup in decompression. All single-threaded, no
SIMD. It’s also stupidly simple.

tl;dr: 300 lines of C, single header,
source on github,
benchmark results here.

![QOI compression](/content/a … ⌘ Read more

Linus Sebastian attempts to install Linux video editor, entire universe implodes
“We kind of all saw it coming, you know?” says one fellow YouTuber. ⌘ Read more

Bidens Democracy Summit
There is an interesting article about The Summit for Democracy titled Biden Invites Taiwan to Democracy Summit Alongside 110 Countries.I want to add a short but important observation.As mentioned in the article Hungary and Turkey have not been invited to the Summit. But contrary to the article, I believe that the reason has nothing to […] ⌘ Read more

Fiction vs Nonfiction
⌘ Read more

Germany planning to start using Linux, then stop using Linux again. Again.
Linux users applaud the move… until Germany switches back to Windows in a few months. ⌘ Read more

Man charged with “telling people he uses Arch across state lines”
Prosecution makes case that Seattle area man travelled between states with clear intention to “tell people he uses Arch”. ⌘ Read more

Secure deployments with OpenID Connect & GitHub Actions now generally available
GitHub Actions now supports OpenID Connect for secure deployment to different cloud providers via short-lived, auto-rotated tokens. ⌘ Read more

@lyse@lyse.isobeef.org Ooh I used to live in a place with real autumn leaves and snow. That picture made me miss it heh.

How to squash bugs by enrolling in OSS-Fuzz
OSS-Fuzz is Google’s awesome fuzzing service for open source projects. GitHub Security Lab’s @kevinbackhouse describes enrolling a project. ⌘ Read more

The Copyright Office expands your security research rights
Recently, the Copyright Office responded to the calls to clarify the scope of protected security research. ⌘ Read more

[47°09′51″S, 126°43′24″W] Transponder still failing – switching to analog communication

@movq@www.uninformativ.de, is removing the hash from the body of the twt on the TODO? I read it, but I am unsure if it is there already, or not. 🙈 Sorry if it is, and I failed to spot it!

Today GoBlog got the option to configure your own map tile server. So not only standard OpenStreetMap is possible, but also Stamen Toner for example. Fits much better to my blog aesthetics, right? (See the map page.) ⌘ Read more

Accelerate security adoption in your organization
The GitHub Services Engineers have released the Advanced Security Enforcer GitHub Action to enable organizations to utilize code scanning in a consistent and automated way. ⌘ Read more

Ada Lovelace accused of not collaborating well with GNOME Project
Lovelace has not submitted a single line of code to the GNOME project. ⌘ Read more

taught and enjoyed our intro to uxn programming online workshop via babycastles academy! | https://compudanzas.net/intro_to_uxn_programming.html