ProcessOne: Automatic schema update in ejabberd
ejabberd 23.10 has a new feature that is currently in beta testing:

Automatic relational schema creation and update.

Previously, if you were using ejabberd with an external relational database, you might have to manually apply some schema changes that come with new features when you upgrade to a new ejabberd release. ejabberd can now handle this schema upgrade automat … ⌘ Read more

Ignite Realtime Blog: Openfire plugin maintenance release galore!
After I performed a release of an Openfire plugin yesterday, @akrherz apparently had a ‘hold-my-beer’ moment, and apparently went through all of our plugins source repositories, creating maintenance releases for pretty much every one of them that had outstanding changes.

Wow!

As I do not believe we’re doing anyone a favor with 16 individual blog posts, I have com … ⌘ Read more

Ignite Realtime Blog: REST API Openfire plugin 1.10.2 released!
Earlier today, we have have performed a maintenance release for the REST API plugin for Openfire. In this release, version 1.10.2, we have made a warning in documentation more visible. This is aimed at reducing confusion around installation with Openfire 4.7.5.

Also in this release a translation into Ukrainian, gracefully provided by community member Yurii Savchuk (svais) and his son Vladislav Savchuk (Bruhmozavr)!

Th … ⌘ Read more

Highlights from Git 2.43
The last Git release of 2023 is here! Take a look at some of our highlights on what’s new in Git 2.43.

The post Highlights from Git 2.43 appeared first on The GitHub Blog. ⌘ Read more

On my blog: Developer Diary, Día de la Revolución https://john.colagioia.net/blog/2023/11/20/revolucion.html #programming #project #devjournal

The Coding Robot
Back in 2019, after deciding to leave Beat, I was contemplating starting a new project. It was an ML-based project, informed by my experience at both smaller and larger companies, like Beat: An ML-based Code Reviewer. The idea was that smaller companies, founders aside, seldom have senior engineering talent on board, and the quality of […] ⌘ Read more

Starlink and Natural Monopolies
A couple of weeks ago Elon Musk tweeted (or Xed, or whatever it’s called today) that Starlink has broken even and congratulated its team. The company has been offering fast satellite internet access through its own Low Earth Orbit (LEO) constellation of more than 5000 satellites. As part of SpaceX, it’s the first company of […] ⌘ Read more

On my blog: Free Culture Book Club — Homestuck, part 3 https://john.colagioia.net/blog/2023/11/18/homestuck-3.html #freeculture #bookclub

On my blog: Toots 🦣 from 11/13 to 11/17 https://john.colagioia.net/blog/2023/11/17/week.html #linkdump #mastodon #socialmedia #week

Ignite Realtime Blog: Openfire 4.8.0 beta release!
It is exciting to be able to announce the immediate availability of the beta release of Openfire 4.8.0!

It has been 667 days ago since we released the 4.7.0. That was the last time that a release was made from the same source code branch. And, that shows: we have closed almost 180 issues against this release! I’ll reserve the details for a blogpost on the 4.8.0 (non-beta) release, but some of the highlights are:

• We’ve dropped support for Jav … ⌘ Read more

Sam Whited: Software is Political

I recently attended the inaugural Free and Open Source Software Yearly ( FOSSY)
conference where I gave a talk in the XMPP track.
Though my talk was just a brief technical overview of the XMPP protocol, I also
gave some quick ending remarks about why I think it’s the correct choice to use
as a universal standardized chat protocol.
The closing remarks were written … ⌘ Read more

Accelerating Developer Velocity with Microsoft Dev Box and Docker Desktop
We’re pleased to announce our partnership with the Microsoft Dev Box team to streamline developer onboarding, environment set-up, security, and administration with Docker Desktop. ⌘ Read more

On my blog: Real Life in Star Trek, Family https://john.colagioia.net/blog/2023/11/16/family.html #scifi #startrek #closereading

Security best practices for authors of GitHub Actions
Improve your GitHub Action’s security posture by securing your source repository, protecting your maintainers, and making it easy to report security incidents.

The post Security best practices for authors of GitHub Actions appeared first on The GitHub Blog. ⌘ Read more

Universe’s key takeaway: Innovate better with AI-powered workflows on a single, unified platform
Discover new AI-powered features and tools to help developers stay in the flow and organizations innovate at scale.

The post [Universe’s key takeaway: Innovate better with AI-powered workflows on a single, unified platform](https://github.blog/2023-11-15-universes-key-takeaway-innovate-better-with-ai-powered-workflows-on-a-single-unified-pla … ⌘ Read more

Microsoft Loop
It looks like Microsoft cloned Notion and calls it “Loop”. ⌘ Read more

The Livecycle Docker Extension: Instantly Share Changes and Get Feedback in Context
Livecycle’s Docker Extension makes it easy to share your work in progress and collaborate with your team. We provide step-by-step instructions to get started. ⌘ Read more

Completed my second Freeletics Hell Week and with it my second training journey! 💪 ⌘ Read more

GitHub Availability Report: October 2023
In October, we experienced two incidents that resulted in degraded performance across GitHub services.

The post GitHub Availability Report: October 2023 appeared first on The GitHub Blog. ⌘ Read more

How JW Player Secured 300 Repos in an Hour with Docker Scout
For companies like JW Player, whose core business revolves around streaming, content, and infrastructure, security must be a priority without slowing down delivery or affecting operations. Learn how JW Player uses Docker to help meet such challenges, including how JW Player enabled more than 300 repositories for Docker Scout within just one hour. ⌘ Read more

On my blog: Developer Diary, World Kindness Day https://john.colagioia.net/blog/2023/11/13/kindness.html #programming #project #devjournal

Today, while being in the second home over the weekend, I finally installed the 5G router setup (ZTE MC801A + GL.iNet Beryl AX). Now my home server (staying in this flat because it has a good place here) is behind a cellular 5G connection. There’s running nothing important on it, but let’s see how reliable this new setup will work over a longer period. Today so far all works fine. And if there will be problems, I still have a few months time to find solutions. ⌘ Read more

On my blog: Free Culture Book Club — Homestuck, part 2 https://john.colagioia.net/blog/2023/11/11/homestuck-2.html #freeculture #bookclub

On my blog: Toots 🦣 from 11/06 to 11/10 https://john.colagioia.net/blog/2023/11/10/week.html #linkdump #mastodon #socialmedia #week

お知らせ：JPCERT/CC Eyes「RFC 9116「security.txt」の紹介（2022年8月）の続報」 ⌘ Read more

Celebrating the GitHub Awards 2023 recipients 🎉
The GitHub Awards recognizes and celebrates the outstanding contributions and achievements in the developer community, honoring individuals, projects, and organizations for their impactful work, innovation, thought leadership, and creating an outsized positive impact on the community.

The post Celebrating the GitHub Awards 2023 recipients 🎉 appeared first on [The … ⌘ Read more

On my blog: Real Life in Star Trek, The Best of Both Worlds Part 2 https://john.colagioia.net/blog/2023/11/09/best-both-worlds-part-2.html #scifi #startrek #closereading

Achieve Security and Compliance Goals with Policy Guardrails in Docker Scout
We show how Docker Scout policies enable teams to identify, prioritize, and fix their software quality issues at the point of creation. ⌘ Read more

LLM Everywhere: Docker for Local and Hugging Face Hosting
We show to use the Hugging Face hosted AI/ML Llama model in a Docker context, which makes it easier to deploy advanced language models for a variety of applications. ⌘ Read more

Colin just reminded me, that it’s the third GoBlog birthday of this blog! I am still genuinely content with it, despite the apparent loss of my blogging momentum since then. ⌘ Read more

Erlang Solutions: The Power of Green Coding: Erlang and Elixir Leading the Charge
In the era of the green revolution, industries across the board are gravitating towards sustainable solutions. The software realm is no exception, striving for efficient code that optimises resource utilisation. This not only conserves energy but also minimises the environmental impact of server farms and data centres. Leading the charge in this green coding initiative are Erlang and Elixir.

These two languages, both runn … ⌘ Read more

Building Trusted Content with GitHub Actions
As part of our continued efforts to improve the security of the software supply chain and increase trust in the container images developers create and use every day, Docker has begun migrating its Docker Official Images (DOI) builds to the GitHub Actions platform. Leveraging the GitHub Actions hosted, ephemeral build platform enables the creation of secure, verifiable images with provenance and SBOM attestations signed using OpenPubkey and the GitHub … ⌘ Read more

Universe 2023: Copilot transforms GitHub into the AI-powered developer platform
GitHub is announcing general availability of GitHub Copilot Chat and previews of the new GitHub Copilot Enterprise offering, new AI-powered security features, and the GitHub Copilot Partner Program.

The post [Universe 2023: Copilot transforms GitHub into the AI-powered developer platform](https://github.blog/2023-11-08-universe-2023-copilot-transforms-github-into-the-ai-powered- … ⌘ Read more

Octoverse: The state of open source and rise of AI in 2023
In this year’s Octoverse report, we study how open source activity around AI, the cloud, and Git are changing the developer experience.

The post Octoverse: The state of open source and rise of AI in 2023 appeared first on The GitHub Blog. ⌘ Read more

Introducing AI-powered application security testing with GitHub Advanced Security
Learn about how GitHub Advanced Security’s new AI-powered features can help you secure your code more efficiently than ever.

The post Introducing AI-powered application security testing with GitHub Advanced Security appeared first on The GitHub Blog. ⌘ Read more

My default apps and services in late 2023
To join another trend, here’s my list of default apps and services in late 2023. ⌘ Read more

I quickly played with OpenAI’s new Text-To-Speech model to check if it’s an alternative to Google’s API. And wow! English is fantastic and even German is not bad. Just some syllables in German have a weird English accent. But even then, it’s still good. But sadly, it’s also a bit costly. Let’s wait a few months until it gets cheaper and better, and you can enjoy my blog’s “Read aloud” feature even more. 😉 ⌘ Read more

On my blog: Developer Diary, IDPEEWAC https://john.colagioia.net/blog/2023/11/06/idpeewac.html #programming #project #devjournal

On subscriptions 💸
Manuel Moreale, Kev Quirk and some others (in response to them) listed their subscriptions and what and why they are paying for them. ⌘ Read more

On my blog: Free Culture Book Club — Homestuck, part 1 https://john.colagioia.net/blog/2023/11/04/homestuck-1.html #freeculture #bookclub

On my blog: Toots 🦣 from 10/30 to 11/03 https://john.colagioia.net/blog/2023/11/03/week.html #linkdump #mastodon #socialmedia #week

On my blog: Real Life in Star Trek, Season 3, TNG https://john.colagioia.net/blog/2023/11/02/ng-season-3.html #scifi #startrek #closereading

Leveraging AI to empower all developers at GitHub Universe 2023
GitHub Universe 2023 is just around the corner! Join us and learn how GitHub is leveraging AI to empower all developers, including developers with disabilities.

The post Leveraging AI to empower all developers at GitHub Universe 2023 appeared first on The GitHub Blog. ⌘ Read more

Celebrating the first round of GitHub Accelerator and what’s next
Celebrate the maintainers of the first GitHub Accelerator cohort, learn what they have been up to since, and hear what’s next for GitHub Accelerator.

The post Celebrating the first round of GitHub Accelerator and what’s next appeared first on The GitHub Blog. ⌘ Read more

Erlang Solutions: The Future Trends of Sustainability in Programming Software

Future sustainability changes are now impacting almost every sector worldwide, and both the wider tech sector and programming as a profession aren’t exempt from this trend. As everyone continues to … ⌘ Read more

GitHub Game Off 2023 theme announcement
It’s the moment you’ve all been waiting for. Are you ready?

The post GitHub Game Off 2023 theme announcement appeared first on The GitHub Blog. ⌘ Read more

Diversity, inclusion, and belonging at GitHub in 2023
We expanded diversity of our employee base, launched several new employee engagement programs, made investments to improve accessibility, and more.

The post Diversity, inclusion, and belonging at GitHub in 2023 appeared first on The GitHub Blog. ⌘ Read more

My October ‘23 in Review
Another month has come and gone, time to take a look back. ⌘ Read more

Introducing the GitHub transparency center
It’s time for our biannual transparency report, where we share how we approach content moderation and disclosure of user information. This year, we’re introducing the transparency center, a new platform for our transparency reporting data.

The post Introducing the GitHub transparency center appeared first on The GitHub Blog. ⌘ Read more

The last week was really rainy, so I didn’t leave the flat much. And now walking at sunset time, everything looks so pretty. ⌘ Read more

Almost a full yearly cycle since my first post. The leaves are starting to get colorful again. 🍂 ⌘ Read more

Release Radar · Hacktoberfest 2023 Edition
As Hacktoberfest comes to a close, you still have a day or so left to complete and submit your pull requests. If you’re struggling to think of projects to contribute to, our picks below might help you. This edition of the Release Radar covers a few projects that shipped major version updates this August and […]

The post Release Radar · Hacktoberfest 2023 Edition appeared first on [The GitHub Blog](https://github.bl … ⌘ Read more

お知らせ：JPCERT/CC Eyes「TSUBAMEレポート Overflow（2023年7～9月）」 ⌘ Read more

Docker Desktop 4.25: Enhancements to Docker Desktop on Windows, Rosetta for Linux GA, and New Docker Scout Image Analysis Settings
The Docker Desktop 4.25 release supports the GA of Rosetta for Linux, a feature that furthers the speed and productivity that Docker Desktop brings. We’ve also optimized the installation experience on Windows and simplified Docker Scout image analysis settings in this latest Docker Desktop release. ⌘ Read more

The architecture of today’s LLM applications
Here’s everything you need to know to build your first LLM app and problem spaces you can start exploring today.

The post The architecture of today’s LLM applications appeared first on The GitHub Blog. ⌘ Read more

On my blog: Developer Diary, …Victims of Political Repressions https://john.colagioia.net/blog/2023/10/30/repression.html #programming #project #devjournal

Hackable Halloween games MMXXIII
13 spooktacular games plus source code for readers to jam on.

The post Hackable Halloween games MMXXIII appeared first on The GitHub Blog. ⌘ Read more

Read this interesting retro about discords migration path from Mongo to Cassandra to now ScyllaDB.

https://discord.com/blog/how-discord-stores-trillions-of-messages

Read this interesting retro about discords migration path from Mongo to Cassandra to now ScyllaDB.

https://discord.com/blog/how-discord-stores-trillions-of-messages

On my blog: Free Culture Book Club — Duelyst https://john.colagioia.net/blog/2023/10/28/duelyst.html #freeculture #bookclub

On my blog: Toots 🦣 from 10/23 to 10/27 https://john.colagioia.net/blog/2023/10/27/week.html #linkdump #mastodon #socialmedia #week

Demystifying LLMs: How they can do things they weren’t trained to do
Explore how LLMs generate text, why they sometimes hallucinate information, and the ethical implications surrounding their incredible capabilities.

The post Demystifying LLMs: How they can do things they weren’t trained to do appeared first on The GitHub Blog. ⌘ Read more

Developers are the first group to adopt AI at work. Here’s why that matters.
From starting at GitHub over 10 years ago as a developer to becoming the Chief Operating Officer, I’ve learned that developers are often bellwethers for change across the rest of their organizations. That makes investing in—and learning from—them critical.

The post [Developers are the first group to adopt AI at work. Here’s why that matters.](https://github.blog/2023-10-27-developers-ar … ⌘ Read more

Erlang Solutions: The Power of Green Coding: Erlang and Elixir Leading the Charge
In the era of the green revolution, industries across the board are gravitating towards sustainable solutions. The software realm is no exception, striving for efficient code that optimizes resource utilisation. This not only conserves energy but also minimises the environmental impact of server farms and data centers. Leading the charge in this green coding initiative are Erlang and Elixir.

These two languages, both runn … ⌘ Read more

On my blog: Real Life in Star Trek, The Best of Both Worlds, Part One https://john.colagioia.net/blog/2023/10/26/both-worlds-1.html #scifi #startrek #closereading

5 tips for making your GitHub profile page accessible
Your profile’s README invites the world to know you and your work, so it’s important that everyone can read and understand it. In this post, we share some tips for making your README more accessible.

The post 5 tips for making your GitHub profile page accessible appeared first on The GitHub Blog. ⌘ Read more

Cybersecurity spotlight on bug bounty researcher @Ammar Askar
We’re excited to highlight another top contributing researcher to GitHub’s Bug Bounty Program—@Ammar Askar!

The post Cybersecurity spotlight on bug bounty researcher @Ammar Askar appeared first on The GitHub Blog. ⌘ Read more

Highlights from DockerCon 2023: New Docker Local, Cloud, and AI/ML Innovations
DockerCon 2023 celebrated 10 years of Docker. We round up event announcements, including Docker Scout for the software supply chain, Docker Build, Debug, Docker AI, GenAI stack, OpenPubkey, a Udemy partnership, and more. Videos are available on-demand now on the DockerCon site and will be added to YouTube in the coming weeks. ⌘ Read more

お知らせ：JPCERT/CC Eyes「フィッシングサイト経由の認証情報窃取とドメイン名ハイジャック事件」 ⌘ Read more

JMP: CertWatch
As you may have already seen, on October 21st, it was reported that a long-running, successful MITM (Machine-In-The-Middle) attack against jabber.ru had been detected. The nature of this attack was not specific to the XMPP protocol in any way, but it was of special interest to us as members of the XMPP community. This kind of attack relies on being able to present a TLS certificate which anyone trying to connect will accept as valid. In this case, it was done b … ⌘ Read more

How to gain insight into your project contributors
We’re excited to share with you the contributors Action! At GitHub, we maintain several open source repositories and have developed this Action to empower maintainers to measure how many new and returning contributors and contributions have occurred over any given time period.

The post How to gain insight into your project contributors appeared first … ⌘ Read more

On my blog: Developer Diary, Emmanuel de Grouchy https://john.colagioia.net/blog/2023/10/23/grouchy.html #programming #project #devjournal

The next big social network is just the Web ?~L~X https://notiz.blog/b/6k2

The next big social network is just the Web ?~L~X https://notiz.blog/b/6k2

Fun fact: Since I started tracking my train journeys in mid-May, I’ve already spent almost 7 whole days on trains. 🚄 ⌘ Read more

I acquired a new, fancy domain for a new side project. A site with tips on how to save money on purchases is something I would like to start. The search for a CMS reminds me of why I built GoBlog: all available options are not optimal. But GoBlog also isn’t optimal for this project for various reasons, as it shouldn’t be a typical personal blog. And now I have this really cool domain and question my plans. 😅 ⌘ Read more

Snikket: On the jabber.ru MITM attack
This post is about a recent security incident on a public XMPP service, which
provides jabber.ru and xmpp.ru. We have received a few questions from Snikket
users about whether they should be concerned about the security of their own
servers (Snikket also uses XMPP).

The good news is that Snikket was not affected by this incident - this was a
targeted attack against the jabber.ru/xmpp.ru service specifically. Later in
the post we’ll share more information about what we’ve done, and … ⌘ Read more

On my blog: Free Culture Book Club — Sugar the Robot, part 2 https://john.colagioia.net/blog/2023/10/21/roboteers-2.html #freeculture #bookclub

On my blog: Toots 🦣 from 10/16 to 10/20 https://john.colagioia.net/blog/2023/10/20/week.html #linkdump #mastodon #socialmedia #week

Docker State of Application Development Survey 2023: Share Your Thoughts on Development
Participate in the Docker State of Application Development Survey 2023 to help us better understand and serve the developer community. We want to know where developers are focused, what they’re working on, and what is most important to them. Your participation and input will help us build the best products and experiences for you. ⌘ Read more

logs/blog: words pointing to the sharp blade of practice; garden/food: new recipes

I just learned Aaron Swartz had a blog, and it still works.

On my blog: Real Life in Star Trek, Transfigurations https://john.colagioia.net/blog/2023/10/19/transfigurations.html #scifi #startrek #closereading

ICYMI: improved C++ vulnerability coverage and CodeQL support for Lombok
The effectiveness of a static application security solution hinges on its ability to provide extensive vulnerability coverage and support for a wide range of languages and frameworks. Today, we’re highlighting two releases that’ll help you discover more vulnerabilities in your codebase, so you can ship more secure software.

The post [ICYMI: improved C++ vulnerability coverage and CodeQL support … ⌘ Read more

ProcessOne: ejabberd 23.10
A new ejabberd release, ejabberd 23.10, is now published with more than 150 commits since the previous 23.04. It includes many new features and improvements, and also many more bugfixes.

• Support for XEP-0402: PEP Native Bookmarks
  
• Support for XEP-0421: Occupant Id
  
• Many new options and features
  

Image

A more detailed explanation of improvements and features:

[XEP-0402 … ⌘ Read more

Erlang Solutions: Erlang Security Audit

Cybersecurity is a non-negotiable aspect of business. The need for robust protection extends to all aspects of your operations, including the security of your Erlang-based code.

At Erlang Solutions, we recognise the vital importance of safeguarding your code from potential vulnerabilities and security threats. We are thrilled to introduce our latest offering – the … ⌘ Read more

Erlang Solutions: MongooseIM Health-Check

MongooseIM plays a key role in today’s evolving digital landscape. For businesses, it ensures seamless communication within your organisation or application. However, like any other system, it requires regular check-ups to maintain peak performance.

Enter the MongooseIM Health Check from our team at Erlang Solutions – your ticket to a more efficient messaging environment.

Your curated GitHub Universe agenda: AI, ethics, and productivity
Gain actionable insights about the intersection of AI and human skills, while tackling ethics, accessibility, and productivity at these GitHub Universe sessions.

The post Your curated GitHub Universe agenda: AI, ethics, and productivity appeared first on The GitHub Blog. ⌘ Read more

The clock is ticking: Atlassian’s support for Bitbucket Server ends on February 15, 2024
Atlassian is ending support for its Server products—including Bitbucket Server—in February 2024. In this post, you’ll learn what that means for you, your options, and how you can move to GitHub.

The post [The clock is ticking: Atlassian’s support for Bitbucket Server ends on February 15, 2024](https://github.blog/2023-10-17-the-clock-is-ticking-atlassians-support … ⌘ Read more

Hello WordPress ?~L~X https://notiz.blog/p/6jp

Hello WordPress ?~L~X https://notiz.blog/p/6jp

Getting RCE in Chrome with incomplete object initialization in the Maglev compiler
In this post, I’ll exploit CVE-2023-4069, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site.

The post [Getting RCE in Chrome with incomplete object initialization in the Maglev compiler](https://github.blog/2023-10-17-getting-rce-in-chrome-with-incomplete-object-initialization-in-the- … ⌘ Read more

Update Tailscale on the GL.iNet Beryl AX (GL-MT3000)
I’ve been toying with my recently received GL.iNet Beryl AX (GL-MT3000) for some days and I have to say, it’s wonderful! It provides all the features I need in combination with my 5G router (like support for IPv6). I was also able to set up a VPN connection using Wireguard to the other home that will keep a wire-based internet connection with a public (but changing) IPv4 address. As it also works perfectly fine with an LTE stick or mobile tethering, I’m quite tempte … ⌘ Read more

Measuring Git performance with OpenTelemetry
Use our new open source Trace2 receiver component and OpenTelemetry to capture and visualize telemetry from your Git commands.

The post Measuring Git performance with OpenTelemetry appeared first on The GitHub Blog. ⌘ Read more

On my blog: Developer Diary, World Food Day https://john.colagioia.net/blog/2023/10/16/food.html #programming #project #devjournal

On my blog: Free Culture Book Club — Sugar the Robot, part 1 https://john.colagioia.net/blog/2023/10/14/roboteers-1.html #freeculture #bookclub

On my blog: Toots 🦣 from 10/09 to 10/13 https://john.colagioia.net/blog/2023/10/13/week.html #linkdump #mastodon #socialmedia #week

Signing Docker Official Images Using OpenPubkey
Learn about the updated Docker Official Images (DOI) signing strategy and how OpenPubkey can be leveraged to smooth the flow and decrease the number of third-party entities the verifier is required to trust. ⌘ Read more

Sam Whited: Co-Op Ideas
This is a list of co-ops I’d like to start one day and where (if applicable).

DIY Bike Kitchen (Cobb County, GA)There is a DIY bike shop, Sopo Bike Co-op in Atlanta, but Cobb has
historically been very transit-averse and it’s hard to get into Atlanta by
bike if you need to get it worked on. Having something local to Cobb could
encourage biking and start to change attitudes to biking on the local city
councils and among the county commissioners.Traditional bik … ⌘ Read more

js13kGames 2023 winners 🏆
The twelfth annual js13kGames coding competition, challenging participants to create games in 13kB or less of JavaScript in a month, just wrapped up. This post highlights the top thirteen entries.

The post js13kGames 2023 winners 🏆 appeared first on The GitHub Blog. ⌘ Read more