The return of the tilde
As some of you may have noticed my web page is now under /~mc instead
of just /mc. This is a return to olden times.
The Apache web server, and probably many other web servers, had a
simple way of adding personal web pages for local users. This meant
that an URL ending with ~mc led directly to a subdirectory of user
mc’s home directory. Whatever they put in that directory was
immediately available on the Intertubes! Neat, huh?
We need to bring this back to the modern net! Many tilde pubnixe … ⌘ Read more
Computers in school
IntroductionA version of this post was initially published on 2022-05-23
(Pungenday, the 70 day of Discord in the YOLD 3188) in my gemlog at:
gemini://gem.hack.org/log/computers-in-school.gmi
The text has been edited after speaking with some old school mates and
trying to remember more. I also added a few photos.
When I started upper secondary school as a sixteen year-old in 1988 my
school had what I think were IBM PC/XT computers, one classroom of
16(?) computers with co … ⌘ Read more
On my blog: Free Culture Book Club — Pilogy, part 1 https://john.colagioia.net/blog/2025/04/26/pilogy-1.html #freeculture #bookclub
On my blog: Toots 🦣 from 04/21 to 04/25 https://john.colagioia.net/blog/2025/04/25/week.html #linkdump #socialmedia #quotes #week
How the GitHub CLI can now enable triangular workflows
The GitHub CLI now supports common Git configurations for triangular workflows. Learn more about triangular workflows, how they work, and how to configure them for your Git workflows. Then, see how you can leverage these using the GitHub CLI.
The post How the GitHub CLI can now enable triangular workflows appeared first on [The … ⌘ Read more
On my blog: Real Life in Star Trek, Rightful Heir https://john.colagioia.net/blog/2025/04/24/rightful-heir.html #scifi #startrek #closereading
A guide to deciding what AI model to use in GitHub Copilot
What to look for with each model and how to test them in your workflows—with tips, tricks, and pointers.
The post A guide to deciding what AI model to use in GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more
I have created an Open Source BLOG of small snipets for vim. ⌘ Read more
↳
In-reply-to
»
I guess mentions with
⤋ Read More
.(s) / dot(s) like @eapl.me are valid? 🤔 Or nicks even? 🤔
on timeline the mention looks OK. Is there an issue on Yarn?
It’s an interesting topic. For example on Bsky it’s natural to allow domains https://bsky.social/about/blog/4-28-2023-domain-handle-tutorial
Although TwiXter only allows (letters A-Z, numbers 0-9 and of underscores)
https://help.x.com/en/managing-your-account/x-username-rules
From prompt to production: Building a landing page with Copilot agent mode
See how I built a developer-focused landing page in under 30 minutes using GitHub Copilot agent mode and Claude 3.5 Sonnet—with just screenshots and prompts.
The post From prompt to production: Building a landing page with Copilot agent mode appeared fir … ⌘ Read more
Exploring GitHub CLI: How to interact with GitHub’s GraphQL API endpoint
Discover practical tips and tricks for forming effective GraphQL queries and mutations.
The post Exploring GitHub CLI: How to interact with GitHub’s GraphQL API endpoint appeared first on The GitHub Blog. ⌘ Read more
Racing into 2025 with new GitHub Innovation Graph data
Discover the latest trends and insights on public software development activity on GitHub with the quarterly release of data for the Innovation Graph, updated through December 2024.
The post Racing into 2025 with new GitHub Innovation Graph data appeared first on [The GitHub Blog](ht … ⌘ Read more
How to take climate action with your code
There are 60,000+ climate-focused projects on GitHub, explore one this Earth Day!
The post How to take climate action with your code appeared first on The GitHub Blog. ⌘ Read more
Regex Isn’t Hard - Tim Kellogg 👈 this is a pretty good conscience article on regexes, and I agree, regex isn’t that hard™ – However I think I can make the TL;DR even shorter 😅
Regex core subset (portable across languages):
Character sets
• a matches “a”
• [a-z] any lowercase
• [a-zA-Z0-9] alphanumeric
• [^ab] any char but a or b
Repetition (applies to the preceding atom)
• ? zero or one
• * zero or more
• + one or more
Groups
• (ab)+ matches “ab”, “abab”, …
• Capture for extract/substitute via $1 or \1
Operators
• foo|bar = foo or bar
• ^ start anchor
• $ end anchor
Ignore non‑portable shortcuts: \w, ., {n}, *?, lookarounds.
On my blog: Developer Diary, Grounation Day https://john.colagioia.net/blog/2025/04/21/grounation.html #programming #project #devjournal
↳
In-reply-to
»
💡 I had this crazy idea (or is it?) last night while thinking about Twtxt and Yarn.social 😅 There are two things I think that could be really useful additions to the
⤋ Read More
yarnd UI/UX experience (for those that use it) and as "client" features (not spec changes). The two ideas are quite simple:
All these remind me of the “blog” ability once existed in Yarnd. I hate to be the party pooper, but little to non interest from me. LOL. I am up to increase the length of a twtxt, though. It is rather limiting right now.
↳
In-reply-to
»
AI isn’t a shortcut for thinking. In her guide for skeptics, Hilary Gridley reframes AI as a collaborator—not a replacement. Use it like spellcheck for your thoughts. Don’t fear it—iterate with it. Insight improves, speed follows. Full post: https://hils.substack.com/p/the-ai-skeptics-guide-to-ai-collaboration
⤋ Read More
@prologic@twtxt.net Since you have to check and double check everything it spits out (without providing sources), I don’t find any of this helpful. It’s like someone’s in the room with you and that person is saying random stuff that might or might not be correct. At best, it might spark some new idea in your head and then you follow that idea the traditional way.
Information published on the internet (or anywhere, for that matter) was never guaranteed to be correct. But at least you had a “frame of reference”: “Ah, I read this information about Linux on a blog that usually posts about Windows, so this one single Linux post might not necessarily be correct.” That is completely lost with LLMs. It’s literally all mushed together. 🤷
On my blog: Free Culture Book Club — Secrets in the Static https://john.colagioia.net/blog/2025/04/19/secrets-static.html #freeculture #bookclub
On my blog: Toots 🦣 from 04/14 to 04/18 https://john.colagioia.net/blog/2025/04/18/week.html #linkdump #socialmedia #quotes #week
How to make your images in Markdown on GitHub adjust for dark mode and light mode
When you want your images to look good in Markdown on GitHub, you might have to adjust for the UI around them.
The post How to make your images in Markdown on GitHub adjust for dark mode and light mode appeared first on [The GitHub B … ⌘ Read more
Cracking the code: How to wow the acceptance committee at your next tech event
Want to speak at a tech conference? These four practical tips will help your session proposal stand out—and land you on the stage.
The post Cracking the code: How to wow the acceptance committee at your next tech event appeared fi … ⌘ Read more
On my blog: Real Life in Star Trek, Suspicions https://john.colagioia.net/blog/2025/04/17/suspicions.html #scifi #startrek #closereading
Which AI model should I use with GitHub Copilot?
Ever wondered which AI model is the best fit for your GitHub Copilot project? Here are some things to consider.
The post Which AI model should I use with GitHub Copilot? appeared first on The GitHub Blog. ⌘ Read more
Ubuntu 25.04 released
Version\
25.04 (“Plucky Puffin”) of the Ubuntu Linux distribution has been
released. This release includes Linux 6.14, GNOME 48, APT 3.0, and introduces a
Arm64\
desktop ISO to install Ubuntu Desktop on Arm64 systems. This is an
interim release, with support through January 2026. See the [release\
notes](h … ⌘ Read more
Tor Browser 14.5 released
Version\
14.5 of the Tor\
Browser has been released. Notable features in this release
include the addition of Connection Assist for the Android version of
the Tor Browser, and language support for Belarusian, Bulgarian, and
Portuguese for all versions of the browser.
Should Tor Browser fail to establish a direct connection to the Tor
network, Connection Assist will offer to find and try bridges for
y … ⌘ Read more
GitHub Availability Report: March 2025
In March, we experienced one incident that resulted in degraded performance across GitHub services.
The post GitHub Availability Report: March 2025 appeared first on The GitHub Blog. ⌘ Read more
Catanzaro: Dangerous arbitrary file read vulnerability in Yelp
GNOME contributor Michael Catanzaro has written a blog\
post about a noteworthy vulnerability in GNOME’s help browser, Yelp.
I don’t normally blog about particular CVEs, but Yelp CVE-2025-3155 is
noteworthy because it is quite severe, public for several weeks now,
and not yet fixed upstream. In short, help files can rea … ⌘ Read more
When to choose GitHub-Hosted runners or self-hosted runners with GitHub Actions
Comparing GitHub-hosted vs self-hosted runners for your CI/CD workflows? This deep dive explores important factors to consider when making this critical infrastructure decision for your development team.
The post [When to choose GitHub-Hosted runners or self-hosted runners with GitHub Actions](https://github.blog/enterprise-software/ci-cd/when-to-choose-github-ho … ⌘ Read more
GitHub for Beginners: Security best practices with GitHub Copilot
Learn how to leverage GitHub Copilot to make your code more secure.
The post GitHub for Beginners: Security best practices with GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more
On my blog: Developer Diary, Pohela Boishakh https://john.colagioia.net/blog/2025/04/14/pohela-boishakh.html #programming #project #devjournal
On my blog: Free Culture Book Club — Nose Ears, part 3 https://john.colagioia.net/blog/2025/04/12/nose-ears-3.html #freeculture #bookclub
Introducing sub-issues: Enhancing issue management on GitHub
Explore the iterative development journey of GitHub’s sub-issues feature. Learn how we leveraged sub-issues to build and refine sub-issues, breaking down larger tasks into smaller, manageable ones.
The post Introducing sub-issues: Enhancing issue management on GitHub ap … ⌘ Read more
On my blog: Toots 🦣 from 04/07 to 04/11 https://john.colagioia.net/blog/2025/04/11/week.html #linkdump #socialmedia #quotes #week
What the heck is MCP and why is everyone talking about it?
Everyone’s talking about MCP these days when it comes to large language models (LLMs)—here’s what you need to know.
The post What the heck is MCP and why is everyone talking about it? appeared first on The GitHub Blog. ⌘ Read more
On my blog: Real Life in Star Trek, Frame of Mind https://john.colagioia.net/blog/2025/04/10/frame-mind.html #scifi #startrek #closereading
How we’re making security easier for the average developer
Security should be native to your workflow, not a painful separate process.
The post How we’re making security easier for the average developer appeared first on The GitHub Blog. ⌘ Read more
How to request a change to a CVE record
Learn how to identify which CVE Numbering Authority is responsible for the record, how to contact them, and what to include with your suggestion.
The post How to request a change to a CVE record appeared first on The GitHub Blog. ⌘ Read more
Hardening the Firefox frontend
Tom Schuster, Frederik Braun, and Christoph Kerschbaumer have
published an article
on the Firefox Security team’s Attack & Defense
blog that explains recent work to harden Firefox’s frontend code.
We have rewritten over 600 JavaScript event handlers to mitigate XSS
and other injection attacks in the main Firefox user interface. This
mitigation will ship in … ⌘ Read more
oh out of boredom yesterday i made my blog available via markdown files too so you can use charmbracelet/glow to read them in your terminal :)
basically i just set up a file directory on a path of my blog, organized the MD files by year, and so in theory you can navigate to that path and choose a folder, then copy a link to a markdown post and run this:
glow -p https://bubblegum.girlonthemoon.xyz/md/2025/2025-03-31%20premature%20reflections%20on%20sudden%20responsibility.md
and then as long as you have glow installed, you can read my posts from the terminal :D it’s so cool
Found means fixed: Reduce security debt at scale with GitHub security campaigns
Starting today, security campaigns are generally available for all GitHub Advanced Security and GitHub Code Security customers—helping organizations take control of their security debt and manage risk by unlocking collaboration between developers and security teams.
The post [Found means fixed: Reduce security debt at scale with GitHub security campaigns](http … ⌘ Read more
↳
In-reply-to
»
I am not interested at all. If I want to interact/socialise/whatever on the Fediverse (which I do), I simply use it. I would like to keep twtxt separate.
⤋ Read More
Adding to this, we already tried. It didn’t go too well. Slightly related—because it is a third party “integration”—I might be a “smaller group” member, but I don’t care much about one-way feeds (mostly RSS from blogs, news articles, etc.) either.
Git turns 20: A Q&A with Linus Torvalds
To celebrate two decades of Git, we sat down with Linus Torvalds—the creator of Git and Linux—to discuss how it forever changed software development.
The post Git turns 20: A Q&A with Linus Torvalds appeared first on The GitHub Blog. ⌘ Read more
On my blog: Developer Diary, 1994 Rwandan Genocide https://john.colagioia.net/blog/2025/04/07/rwanda.html #programming #project #devjournal
FOSDEM 2025
I recently attended the large Free and Open Source Software conference
FOSDEM 2025 in Brussels, Belgium. I went there by train, of course,
via Copenhagen, Hamburg, and Cologne. The same route back.
I lived in the rather expensive, allegedly fancy hotel Le Châtelain in
Brussels. It was really not that fancy, but they had a … ⌘ Read more
On my blog: Free Culture Book Club — Nose Ears, part 2 https://john.colagioia.net/blog/2025/04/05/nose-ears-2.html #freeculture #bookclub
On my blog: Toots 🦣 from 03/31 to 04/04 https://john.colagioia.net/blog/2025/04/04/week.html #linkdump #socialmedia #quotes #week
Vibe coding with GitHub Copilot: Agent mode and MCP support rolling out to all VS Code users
In celebration of MSFT’s 50th anniversary, we’re rolling out Agent Mode with MCP support to all VS code users. We are also announcing the new GitHub Copilot Pro+ plan w/ premium requests, the general availability of models from Anthropic, Google, and OpenAI, next edit suggestions for code completions & the Copilot code review agent.
The post [Vibe coding with GitHub Copilot: Agent mode and MC … ⌘ Read more
On my blog: Real Life in Star Trek, The Chase https://john.colagioia.net/blog/2025/04/03/chase.html #scifi #startrek #closereading
Localhost dangers: CORS and DNS rebinding
What is CORS and how can a CORS misconfiguration lead to security issues? In this blog post, we’ll describe some common CORS issues as well as how you can find and fix them.
The post Localhost dangers: CORS and DNS rebinding appeared first on The GitHub Blog. ⌘ Read more
Rust 1.86.0 released
Version\
1.86.0 of the Rust language has been released. Changes include support
for trait upcasting, the ability to index multiple elements of HashMaps and
slices mutably, and a number of stabilized APIs. ⌘ Read more
GitHub found 39M secret leaks in 2024. Here’s what we’re doing to help
Every minute, GitHub blocks several secrets with push protection—but secret leaks still remain one of the most common causes of security incidents. Learn how GitHub is making it easier to protect yourself from exposed secrets, including today’s launches of standalone Secret Protection, org-wide scanning, and better access for teams of all sizes.
The post [GitHub found 39M secret leaks in 2024. H … ⌘ Read more
GitHub for Beginners: How to get LLMs to do what you want
Learn how to write effective prompts and troubleshoot results in this installment of our GitHub for Beginners series.
The post GitHub for Beginners: How to get LLMs to do what you want appeared first on The GitHub Blog. ⌘ Read more
On my blog: Developer Diary, Transgender Day of Visibility https://john.colagioia.net/blog/2025/03/31/transgender.html #programming #project #devjournal
On my blog: Hegemon and the Masters of… 🚫 https://john.colagioia.net/blog/2025/03/30/patriarchy.html #womenshistorymonth #harm #politics #rant
On my blog: Free Culture Book Club — Nose Ears, part 1 https://john.colagioia.net/blog/2025/03/29/nose-ears-1.html #freeculture #bookclub
On my blog: Toots 🦣 from 03/24 to 03/28 https://john.colagioia.net/blog/2025/03/28/week.html #linkdump #socialmedia #quotes #week
Edmundson: a modern Plasma Login Manager
KDE contributor David Edmundson has published
a blog post about improving KDE Plasma’s login experience by
replacing SDDM
with a new Plasma Login Manager.
It’s worth stressing nothing is official or set in stone yet,
whilst it has come up in previous Plasma online meetings and in the
2023 Akademy. I’m posting this whilst starting a more o … ⌘ Read more
On my blog: Real Life in Star Trek, Lessons https://john.colagioia.net/blog/2025/03/27/lessons.html #scifi #startrek #closereading
Rust adopting Ferrocene Language Specification
One recurring criticism of Rust has been that the language has no official specification. This is a barrier to adoption in some safety-conscious organizations, as well as to writing alternate language implementations. Now, the Rust project has
announced
that it will be adopting the
Ferrocene Language Specification (FLS) developed by
Ferrous Systems and maintaining … ⌘ Read more
5 GitHub Actions every maintainer needs to know
With these actions, you can keep your open source projects organized, minimize repetitive and manual tasks, and focus more on writing code.
The post 5 GitHub Actions every maintainer needs to know appeared first on The GitHub Blog. ⌘ Read more
↳
In-reply-to
»
@bender I taught the whole ecosystem 😁
@prologic @eapl.me The question I was asked the most was: How do I discover people?
Someone came up with a fantastic idea, instead of adding the new twt at the end of the feed, do it at the beginning. So you can paginate by cutting the request every few lines.
⤋ Read More
Twtxt was made for nerds, by nerds.
I’d like to change that. It’s by nerds/hackers, for nerds/hackers and friends of these. It doesn’t have to be hacky all the time, as you don’t need to be a nerd to have a blog.
But, for that to happen, someone has to build the tools to improve UX.by design there really is no way to easily discovers others
Yeah, I agree, and although there are directories of email addresses, usually you don’t want that, unless you are a ‘public figure’.
I couldn’t say that a microblogging is a “social network” by default, as a blog is not either. At the same time, people would expect to find new people and conversations, as you’d do in a forum.
I think of two features on top of the current spec:
- Clients showing a few posts of what your following are watching but you don’t, so perhaps you find something interesting to follow next. Or that feature of “Your ‘followings’ are following these accounts/people”. (Hard to explain in english, but I hope you get the idea)
- Sharing your .txt into some directory, saying “Hey, I have this twtxt URL, I want to be discovered”. I’m thinking of something like the Federated tab on Mastodon.
↳
In-reply-to
»
Wow, phishing is just around the corner 👀
⤋ Read More
2 is a great idea, you should suggest it in that blog post.
About 1, well, I think anyone has an email address and only about 5% use a Feed, so it makes sense to offer what most people use 🤔
↳
In-reply-to
»
Wow, phishing is just around the corner 👀
⤋ Read More
@eapl.me@eapl.me Interesting! Two points stood right out to me:
Why the hell are e-mail newsletters considered a valid option in the first place? Just offer an Atom feed and be done with it! Especially for a blog of this very type. This doesn’t even involve a third party service. Although, in addition he also links to Feedburner, what the fuck!? No e-mail address or the like is needed and subject to being disclosed.
When these spam mailers want to prevent resubscribing, then for fuck’s sake, why don’t they use a hash of the e-mail address (I saw that in yarnd) for that purpose? Storing the e-mail address in clear text after unsubscribing is illegal in my book.
Neovim 0.11 released
Version\
0.11 of the Neovim text editor has been released. Notable changes
in this release include simpler Language Server Protocol (LSP) client
setup, improved tree-sitter performance, better emoji support, and
enhancements for Neovim’s embedded terminal emulator. See the release notes for
a full list of changes. ⌘ Read more
Mastering GitHub Copilot: When to use AI agent mode
Discover the differences between agent mode and Copilot Edits with GitHub Copilot—and when to use them in your workflows.
The post Mastering GitHub Copilot: When to use AI agent mode appeared first on The GitHub Blog. ⌘ Read more
A maintainer’s guide to vulnerability disclosure: GitHub tools to make it simple
A step-by-step guide for open source maintainers on how to handle vulnerability reports confidently from the start.
The post A maintainer’s guide to vulnerability disclosure: GitHub tools to make it simple appeared fir … ⌘ Read more
On my blog: Developer Diary, World Tuberculosis Day https://john.colagioia.net/blog/2025/03/24/tuberculosis.html #programming #project #devjournal
Blogtastisch: 2. Blogs und das Fediverse ?~L~X https://notiz.blog/b/Ekj
Software Engineer Runs Generative AI on 20-Year-Old PowerBook G4
In a blog post this week, software engineer Andrew Rossignol (my brother!) detailed how he managed to run generative AI on an old PowerBook G4.
While hardware requirements for large language models (LLMs) are typically high, this particular PowerBook G4 model from 2005 is equ … ⌘ Read more
On my blog: Free Culture Book Club — Sulphur Nimbus https://john.colagioia.net/blog/2025/03/22/sulphur-nimbus.html #freeculture #bookclub
On my blog: Toots 🦣 from 03/17 to 03/21 https://john.colagioia.net/blog/2025/03/21/week.html #linkdump #socialmedia #quotes #week
[$] OSI election ends with unsatisfying results
The Open Source Initiative
(OSI) has announced
the results of its recent board of directors election. Ruth Suehle and
McCoy Smith are new to the board, while Carlo Piana will serve another
term. The results, however, seem tainted in the eyes of some
participants and observers. The election has been plagued by missteps
from the beginning and has culminated with the exclusion of three
candi … ⌘ Read more
Julien Malka proposes method for detecting XZ-like backdoors
Julien Malka has
called for the NixOS project to use build-reproducibility to detect when a program has a maintainer-generated tarball that results in a different artifact than building from source. There are good reasons for projects to release maintainer-generated tarballs, but since the materials included in them are usually documentation, extra build scripts, and so on, it makes sense to check that they don’t … ⌘ Read more
On my blog: Real Life in Star Trek, Starship Mine https://john.colagioia.net/blog/2025/03/20/starship-mine.html #scifi #startrek #closereading
World Water Day: how GitHub Copilot is helping bring clean water to communities
From simplifying the workflow of a developer to having an impact on the global water crisis, technology and AI are reshaping the way charity: water works.
The post World Water Day: how GitHub Copilot is helping bring clean water to communities appeared first on [Th … ⌘ Read more
↳
In-reply-to
»
My twtxt feed is now also available at gemini://roccodrom.de/twtxt.txt
⤋ Read More
well, I assume by syntax you mean Gemtext (which I like a lot, my personal blog is built on top of it), so I think it might work for twtxt clients…
I knew of twtxt in Gemini Antenna, so at least the 2017 spec might work on that protocol. I think the main issue with extensions is that they weren’t designed with many URLs and protocols in mind.
Also I have to admit that the Gemini community significantly reduced in the last few years. I don’t know how worth it is to add support for Gemini now.
Video: How to create checklists in Markdown for easier task tracking
Ever wondered how to create checklists in your GitHub repositories, Issues, and PRs? Make task lists more manageable in your GitHub repositories, issues, and pull requests.
The post Video: How to create checklists in Markdown for easier task tracking appeared first on [The … ⌘ Read more
IssueOps: Automate CI/CD (and more!) with GitHub Issues and Actions
A look into building IssueOps workflows on GitHub to do everything from CI/CD to handling approvals and more.
The post IssueOps: Automate CI/CD (and more!) with GitHub Issues and Actions appeared first on The GitHub Blog. ⌘ Read more
thinking about deploying anubis (https://xeiaso.net/blog/2025/anubis/) for superlove bc i doubt robots.txt is doing anything lmao
GitHub for Beginners: Essential features of GitHub Copilot
Get the most out of Copilot with code completion, inline chat, slash commands, Copilot code review, and more.
The post GitHub for Beginners: Essential features of GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more
On my blog: Developer Diary, Saint Patrick’s Day ☘️ https://john.colagioia.net/blog/2025/03/17/patrick.html #programming #project #devjournal
On my blog: Free Culture Book Club — electric (yang) https://john.colagioia.net/blog/2025/03/15/electric-yang.html #freeculture #bookclub
On my blog: Toots 🦣 from 03/10 to 03/14 https://john.colagioia.net/blog/2025/03/14/week.html #linkdump #socialmedia #quotes #week
↳
In-reply-to
»
twtxt is a decentralised, minimalist microblogging service for hackers.
⤋ Read More
it seems to be “an informational website consisting of discrete, often informal diary-style text entries (posts)” https://en.wikipedia.org/wiki/Blog and https://en.wikipedia.org/wiki/Blog#History
Highlights from Git 2.49
The open source Git project just released Git 2.49. Here is GitHub’s look at some of the most interesting features and changes introduced since last time.
The post Highlights from Git 2.49 appeared first on The GitHub Blog. ⌘ Read more
On my blog: Real Life in Star Trek, Birthright part 2 https://john.colagioia.net/blog/2025/03/13/birthright-2.html #scifi #startrek #closereading
How GitHub engineers learn new codebases
Strategies to quickly get up to speed, whether you’re a seasoned engineer or a newcomer to the field.
The post How GitHub engineers learn new codebases appeared first on The GitHub Blog. ⌘ Read more
Sign in as anyone: Bypassing SAML SSO authentication with parser differentials
Critical authentication bypass vulnerabilities (CVE-2025-25291 + CVE-2025-25292) were discovered in ruby-saml up to version 1.17.0. In this blog post, we’ll shed light on how these vulnerabilities that rely on a parser differential were uncovered.
The post [Sign in as anyone: Bypassing SAML SSO authentication with parser differentials](https://github.blog/security/sign-in-as-anyone- … ⌘ Read more
GitHub Availability Report: February 2025
In February, we experienced two incidents that resulted in degraded performance across GitHub services.
The post GitHub Availability Report: February 2025 appeared first on The GitHub Blog. ⌘ Read more
↳
In-reply-to
»
twtxt is a decentralised, minimalist microblogging service for hackers.
⤋ Read More
well (insert stubborn emoji here) 😛, word blog comes from weblog, and microblogging could derivate from ‘smaller weblog’. https://www.wikiwand.com/en/articles/Microblogging
I’d differentiate it from sharing status updates as it was done with ‘finger’ or even a BBS. For example, being able to reply; create new threads and sharing them on a URL is something we could expect from ‘Twitter’, the most popular microbloging model (citation needed)
I like to discuss it, since conversations usually are improved if we sync on what we understand for the same words.
Datalagring, igen!
Some of my usual readers will have to excuse me. This post will be in
Swedish. It’s about proposed Swedish legislation for forcing someone
who offers a message system to the public to cooperate with the law.
— — —
Ändring- Första version: 2025-03-10 07:55
- Ändrad: 2025-03-12 18:01 +0100: Listan i “En bugg?” hade automatiskt
numrerats av blogverktyget och HTML så poängen försvann. Nu citerad
mer korrekt där det framgår att “1.” är borttagen.
Nytt lagförslag: Även chatsystem ska va … ⌘ Read more
↳
In-reply-to
»
twtxt is a decentralised, minimalist microblogging service for hackers.
⤋ Read More
I’d need to think about it deeply, but at a first sight, nanoblogging would be a simple text (like the original twtxt spec, aimed for TUIs), and microblogging (like Twitter was a few years ago), would be about sharing texts, images, videos, GIFs, links, and perhaps Markdown styling.
Why? You have shorter messages than in a blog, but you may add almost anything you could do in a blog.
Buuut… who knows?
Why Java endures: The foundation of modern enterprise development
For 30 years, Java has been a cornerstone of enterprise software development. Here’s why—and how to learn Java.
The post Why Java endures: The foundation of modern enterprise development appeared first on The GitHub Blog. ⌘ Read more
Full exposure: A practical approach to handling sensitive data leaks
Treating exposures as full and complete can help you respond more effectively to focus on what truly matters: securing systems, protecting sensitive data, and maintaining the trust of stakeholders.
The post Full exposure: A practical approach to handling sensitive data leaks appeared first on [The GitHu … ⌘ Read more
On my blog: Developer Diary, Harriet Tubman Day https://john.colagioia.net/blog/2025/03/10/tubman.html #programming #project #devjournal
Datalagring, igen!
Some of my usual readers will have to excuse me. This post will be in
Swedish. It’s about proposed Swedish legislation for forcing someone
who offers a message system to the public to cooperate with the law.
— — —
InledningNytt lagförslag: Även chatsystem ska vara “anpassningsskyldiga” för
hemlig avlyssning och hemlig övervakning!
Det är väl ingen överraskning bland mina läsare vad jag tycker om det.
Går förslaget igenom gör vi det mer komplicerat för vanliga användare
att meddela sig med varan … ⌘ Read more
On my blog: Free Culture Book Club — acoustic (yin) https://john.colagioia.net/blog/2025/03/08/acoustic-yin.html #freeculture #bookclub