On my blog: Why Federate? https://john.colagioia.net/blog/2023/04/23/federation.html #rant #socialmedia #fediverse
On my blog: Free Culture Book Club — Expedition Sasquatch, part 1 https://john.colagioia.net/blog/2023/04/22/sasquatch-1.html #freeculture #bookclub
“the secret list of websites”
Chris Coyier wrote a post mentioning a Washington Post article that analyzed which websites Google used to train its AI model. And it seems that both my blog and my website (I think I should merge them one day) are used. ⌘ Read more
On my blog: Toots 🐘 from 04/17 to 04/21 https://john.colagioia.net/blog/2023/04/21/week.html #linkdump #mastodon #socialmedia #week
Tillitis TKey
The Tillitis TKey, which I first wrote about in September last year,
is now available for sale at the the Tillitis webshop.
The TKey is a small bare-bones RISC-V computer in a USB stick form
factor with no persistent storage that measures apps uploaded to it
and derives a deterministic secret every time the same app is started.
You can use it, for instance, as a security token to keep your private
key and do signing operations. Everyt … ⌘ Read more
ProcessOne: ejabberd 22.10
This ejabberd 22.10 release includes six months of work, over 140 commits, including relevant improvements in MIX, MUC, SQL, and installers, and bug fixes as usual.
This version brings support for latest MIX protocol version, and significantly improves detection and recovery of SQL connection issues.
There are no breaking changes in SQL schem … ⌘ Read more
On my blog: Real Life in Star Trek, Shades of Gray https://john.colagioia.net/blog/2023/04/20/shades-gray.html #scifi #startrek #closereading
Announcing GitHub Actions Deployment Protection Rules, now in public beta
Create and share your own deployment protection rules, or use the rules from our great partners, like Datadog, Honeycomb, New Relic, NodeSource, Sentry, and ServiceNow, to control your deployments with more confidence. And the API is open for the community to build their own rules to make GitHub Enterprise Cloud even better. ⌘ Read more
Docker Compose Experiment: Sync Files and Automatically Rebuild Services with Watch Mode
Starting with Compose v2.17, we’re excited to share an early look at the new development-specific configuration in Compose YAML as well as an experimental file watch command. ⌘ Read more
Erlang Solutions: Re-implement our first blog scrapper with Crawly 0.15.0
It has been almost four years since my first article about scraping with Elixir and Crawly was published. Since then, many changes have occurred, the most significant being Erlang Solution’s blog design update. As a result, the 2019 tutorial is no longer functional.
This situation provided an excellent opportunity to update the original work and re-implement the Crawler using the new version of Crawl … ⌘ Read more
Private vulnerability reporting now generally available
Open source maintainers and security researchers embrace a new best practice to report and fix vulnerabilities. ⌘ Read more
Introducing npm package provenance
How to verifiably link npm packages to their source repository and build instructions. ⌘ Read more
ProcessOne: ejabberd 23.04
This new ejabberd 23.04 release includes many improvements and bug fixes, as well as some new features.
- Many SQL database improvements
mod_mamsupport for XEP-0425: Message Moderation
- New
mod_muc_rtbl, Real-Time Block List for MUC rooms
- Binaries useErlang/OTP 25.3, and changes in containers
A more detailed explanatio … ⌘ Read more
GitHub joins industry commitment to curb cyber mercenaries
GitHub is proud to join 40 companies endorsing the Cybersecurity Tech Accord principles limiting offensive operations in cyberspace. ⌘ Read more
ProcessOne: ejabberd 23.04
This new ejabberd 23.04 release includes many improvements and bug fixes, as well as some new features.
- Many SQL database improvements
mod_mamsupport for XEP-0425: Message Moderation
- New
mod_muc_rtbl, Real-Time Block List for MUC rooms
- Binaries useErlang/OTP 25.3, and changes in containers
A more detailed explanatio … ⌘ Read more
The world’s fastest train
I like trains, if that should not have been known yet. This year I even have two major vacations (Romania and Scotland) coming up, both by train, even if flying would be possible. But if it can be done by train, then I also prefer the train. ⌘ Read more
Multi-repository enablement: effortlessly scale code scanning across your repositories
We’ve gotten great feedback on default setup, a simple way to set up code scanning on your repository. Now, you have the ability to use default setup across your organization’s repositories, in just one click. ⌘ Read more
On my blog: Developer Diary, Lena Massacre https://john.colagioia.net/blog/2023/04/17/lena.html #programming #project #devjournal
The XMPP Standards Foundation: Elbe-Sprint Hamburg 2023
Elbe-Sprint Hamburg 2023 - _Source: Wiki Commons, Container terminals in port of Hamburg_
A new sprint is being organised within the XMPP Community: The Elbe-Sprint Hamburg!
We will have several days of good and fruitful exchange … ⌘ Read more
Sam Whited: Concord and Spring Road Linear Parks
In my earlier review of Rose Garden and Jonquil public parks I mentioned
the Mountain-to-River Trail
(M2R), a mixed-use bicycle
and walking trail that connects the two parks.
The two parks I’m going to review today are also connected by the M2R trail in
addition to the [Concord Road Trail](https://blog.samwhited.com/cate … ⌘ Read more
💭 While some people like to jump between blogging software all the time, or go back to Hugo from a custom one, I don’t really miss Hugo after switching to GoBlog in 2020, but enjoy having my own system quite a bit. Not that Hugo, WordPress, etc. are bad blogging systems, but I really enjoy being able to quickly code a fix without having to research docs, StackOverflow, or the source on GitHub. And when I have an idea for a new feature, it would often not be easy to implement in the existing systems. ⌘ Read more


After multiple years of delays, my Solo V2’s finally arrived. Let’s see what I’ll do with them. I also have a YubiKey, I can’t even find right now. 😅 ⌘ Read more
On my blog: Free Culture Book Club — Snowbound Blood part 4 https://john.colagioia.net/blog/2023/04/15/snowbound-blood-4.html #freeculture #bookclub
On my blog: Toots 🐘 from 04/10 to 04/14 https://john.colagioia.net/blog/2023/04/14/week.html #linkdump #mastodon #socialmedia #week
3 benefits of migrating and consolidating your source code
Explore how migrating your source code and collaboration history to GitHub can lead to some surprising benefits. ⌘ Read more
How generative AI is changing the way developers work
Rapid advancements in generative AI coding tools like GitHub Copilot are accelerating the next wave of software development. Here’s what you need to know. ⌘ Read more
After multiple years of delays, my Solo V2’s finally arrived. Let’s see what I’ll do with them. I also have a YubiKey, I can’t even find right now. 😅 ⌘ Read more
On my blog: Real Life in Star Trek, Peak Performance https://john.colagioia.net/blog/2023/04/13/peak-performance.html #scifi #startrek #closereading
I finished my first “Hell Week” and with it the first “Training Journey” in Freeletics. 48 training sessions. On to the next one! 💪 ⌘ Read more
Ensuring compliance in developer workflows
How GitHub Enterprise ensures secure and compliant developer workflows for highly regulated industries. ⌘ Read more
お知らせ:JPCERT/CC Eyes「暗号資産交換業者を標的とするParallax RAT感染を狙った活動」 ⌘ Read more
GitHub Accelerator: our first cohort and what’s next
Meet the individuals that make up the first GitHub Accelerator cohort and learn about how GitHub is helping bring their visions to reality. ⌘ Read more
Erlang Solutions: Optimización para lograr concurrencia: comparación y contraste de las máquinas virtuales BEAM y JVM
En esta nota exploraremos los aspectos internos de la máquina virtual BEAM o VM por sus siglas en inglés (Virtual Machine). Y haremos una comparación con la máquina virtual de Java, la JVM.
El éxito de cualquier lenguaje de programación en el ecosistema Erlang puede ser repartido a tres componentes estrechamente ac … ⌘ Read more
Introducing the newest GitHub Shop collection
From dog bowl bottles to fanny packs, explore the latest and greatest GitHub merchandise. ⌘ Read more
Generative AI-enabled compliance for software development
Explore how generative AI may soon help enable optimizing some of the foundational components of compliance. ⌘ Read more
JMP: Verify Google Play App Purchase on Your Server
We are preparing for the first-ever Google Play Store launch of Cheogram Android as part of JMP coming out of beta later this year. One of the things we wanted to “just work” for Google Play users is to be able to pay for the app and get their first month of JMP “bundled” into that purchase price, to smooth the common onboarding experience. So how do the JMP servers know that the app communicating with them is running a version of the app bought from Google P … ⌘ Read more
How enabling developers can help drive financial inclusion
Explore how creating a great developer experience can help provide a more inclusive financial services environment. ⌘ Read more
It’s spring! 💐 ⌘ Read more
On my blog: Developer Diary, Siblings Day https://john.colagioia.net/blog/2023/04/10/siblings.html #programming #project #devjournal
Since I found a cheap lifetime license for AdGuard Premium, I’ll try it on my phone for a while. I’ve also configured it with my strict NextDNS profile. But now my phone not only filters DNS requests to block ads, but also HTTP requests. And while uBlock Origin works pretty well in Firefox on Android, I decided to disable it while using AdGuard to see how the performance compares. ⌘ Read more
Happy Easter 🐰 ⌘ Read more
Happy Easter 🐰 ⌘ Read more
On my blog: Great Ideas from Terrible Jobs https://john.colagioia.net/blog/2023/04/09/ideas.html #rant #career
Too lazy or too ambitious?
Today was the second day of my “Hell Week”. Not because my week is so bad, it is after all holidays and time off, no, because I have arrived in the last week of the “Training Journey” at Freeletics. At the end of the Journey, the “coach” requires training every day, usually a so-called “god workout” in addition to warm-up and cool-down. ⌘ Read more
On my blog: Free Culture Book Club — Snowbound Blood part 3 https://john.colagioia.net/blog/2023/04/08/snowbound-blood-3.html #freeculture #bookclub
On my blog: Toots 🐘 from 04/03 to 04/07 https://john.colagioia.net/blog/2023/04/07/week.html #linkdump #mastodon #socialmedia #week
What developers need to know about generative AI
Generative AI has been dominating the news lately—but what exactly is it? Here’s what you need to know, and what it means for developers. ⌘ Read more
Game Bytes · April 2023
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on! ⌘ Read more
Kev built his own microblog using WordPress and iOS shortcuts to separate his long and short posts. It sounds like this is a better alternative for him than micro.blog. Maybe with SQLite as the database he can even simplify this setup. ⌘ Read more
On my blog: Real Life in Star Trek, The Emissary https://john.colagioia.net/blog/2023/04/06/emissary.html #scifi #startrek #closereading
Building GitHub with Ruby and Rails
Since the beginning, GitHub.com has been a Ruby on Rails monolith. Today, the application is nearly two million lines of code and more than 1,000 engineers collaborate on it daily. We deploy as often as 20 times a day, and nearly every week one of those deploys is a Rails upgrade. Upgrading Rails weekly Every […] ⌘ Read more
Pwning Pixel 6 with a leftover patch
In this post, I’ll look at a security-related change in version r40p0 of the Arm Mali driver that was AWOL in the January update of the Pixel bulletin, where other patches from r40p0 was applied, and how these two lines of changes can be exploited to gain arbitrary kernel code execution and root from a malicious app. This highlights how treacherous it can be when backporting security changes. ⌘ Read more
Erlang Solutions: You’ve been curious about LiveView, but you haven’t gotten into it
As a backend developer, I’ve spent most of my programming career away from frontend development. Whether it’s React/Elm for the web or Swift/Kotlin for mobile, these are fields of knowledge that fall outside of what I usually work with.
Nonetheless, I always wanted to have a tool at my disposal for building rich frontends. While the web seemed like the platform with the lowest bar … ⌘ Read more
Bring your enterprise together with enterprise accounts for all
With enterprise accounts for all, your organization can take advantage of all that GitHub Enterprise has to offer, from GitHub Actions and GitHub Advanced Security, to Copilot. ⌘ Read more
Docker Desktop 4.18: Docker Scout Updates, Container File Explorer GA
Docker Desktop 4.18 brings new CLI features in Docker Scout and Docker init, a CLI Beta feature to help you quickly add Docker to any project, and more. ⌘ Read more
GitHub Availability Report: March 2023
In March, we experienced six incidents that resulted in degraded performance across GitHub services. This report also sheds light into a February incident that resulted in degraded performance for GitHub Codespaces. ⌘ Read more
Building organization-wide governance and re-use for CI/CD and automation with GitHub Actions
Many of us are aware of the benefits that a strong focus on automation can bring, particularly in our development workflow and DevOps lifecycle. But silos across businesses can lead to duplication of effort, and potential to lose out on best practices. In this post, we’ll explore how CI/CD can be shared across your entire organization alongside polici … ⌘ Read more
On my blog: Normalizing Image Type and Size https://john.colagioia.net/blog/2023/04/05/file-type-size.html #linux #programming #techtips
Erlang Solutions: Captura de datos con Postgres y Elixir
La captura de datos es el proceso de identificar y capturar cambios de datos en la base de datos.
Con captura de datos, los cambios en los datos pueden ser rastreados casi en tiempo real, y esa información puede ser utilizada para apoyar una variedad de casos de uso, incluyendo auditoría, replicación y sincronización.
Un buen ejemplo de un caso de uso para captura de datos es considerar una aplicación que inserta un registro en la b … ⌘ Read more
What’s new with GitHub Sponsors
GitHub Sponsors is now generally available for organizations. Also, new tooling for bulk sponsorships and an update on how we’re ensuring sustainability for GitHub Sponsors. ⌘ Read more
Level up monitoring and reporting for your enterprise
A high-quality audit log is an essential tool for enterprises to ensure compliance, maintain security, investigate issues, and promote accountability. ⌘ Read more
Calling all open source maintainers
We are building a private space for maintainers to connect with peers, preview features, and learn from each other! ⌘ Read more
Aufkleber ?~L~X https://notiz.blog/p/6GC
Aufkleber ?~L~X https://notiz.blog/p/6GC
On my blog: Developer Diary, Yuknoom Yich’aak K’ahk’ https://john.colagioia.net/blog/2023/04/03/yuknoom.html #programming #project #devjournal
On my blog: Free Culture Book Club — Snowbound Blood part 2 https://john.colagioia.net/blog/2023/04/01/snowbound-blood-2.html #freeculture #bookclub
Ignite Realtime Blog: Spark 3.0.2 Released
The Ignite Realtime community is happy to announce the availability of Spark version 3.0.2
The release contains bug fixes and updates two plugins Translator and Roar.
Many Spark translations are incomplete. Please help us translate Spark
Full list of changes can be found in the changelog.
We encourage users and developers to get invo … ⌘ Read more
On my blog: Toots 🐘 from 03/27 to 03/31 https://john.colagioia.net/blog/2023/03/31/week.html #linkdump #mastodon #socialmedia #week
CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research
Learn more about static analysis and how to use it for security research!
In this blog post series, we will take a closer look at static analysis concepts, present GitHub’s static analysis tool CodeQL, and teach you how to leverage static analysis for security research by writing custom CodeQL queries. ⌘ Read more
My March ‘23 in Review
And again a month is over, March comes to an end, April begins. A short review. ⌘ Read more
On my blog: Real Life in Star Trek, Manhunt https://john.colagioia.net/blog/2023/03/30/manhunt.html #scifi #startrek #closereading
Improvements to CodeQL’s data flow library for C++
These changes will improve the experience for custom query authors and enable better precision in some of our standard queries. Learn how to enable them for your custom queries. ⌘ Read more
Erlang Solutions: 5 Key Tech Priorities for Fintech Leaders in 2023
The fintech industry is a major disruptor. Each year, it impacts how consumers interact with financial companies and brings new and innovative means to meet ever-growing customer expectations and occupy market space.
As a business owner or executive in this space, you have no choice but to stay on top of your game to increase efficiency.
In simpler terms, if your business doesn’t scale, it could fail.
That mig … ⌘ Read more
I just wrote a mega blog post that has been on my mind for months
logs/blog: adventures in uxn and crystal; logs/photojournal: moar
お知らせ:JPCERT/CC Eyes「制御システムセキュリティカンファレンス 2023 開催レポート」 ⌘ Read more
Erlang Solutions: Cómo depurar tu RabbitMQ
Descubre las herramientas y métodos adecuados para la depuración de RabbitMQ.
Lo que aprenderás en este blog.
Nuestros clientes de consultoría de RabbitMQ provienen de una amplia gama de industrias. Como resultado, hemos visto casi todos los comportamientos inesperados que puede presentar. RabbitMQ es un software complejo que emplea concurrencia y cómputo distribuido (a través de Erlang), por lo que depurarlo no siempre es sencillo. Para llegar a la causa … ⌘ Read more
On my blog: Mastodon’s API (The Pitfalls) https://john.colagioia.net/blog/2023/03/29/mastodon-api.html #mastodon #programming #techtips
WordPress with SQLite
Philipp’s recent post on WordPress with SQLite reminded me to give the migration of a site I maintain for someone else a second try. ⌘ Read more
Enabling a No-Code Performance Testing Platform Using the Ddosify Docker Extension
Learn about the Ddosify Docker Extension and how use it for performance testing. ⌘ Read more
WordPress with SQLite
Philipp’s recent post on WordPress with SQLite reminded me to give the migration of a site I maintain for someone else a second try. ⌘ Read more
Containerizing an Event Posting App Built with the MEAN Stack
Learn how to containerize a MEAN stack application with Docker. ⌘ Read more
Some photo impressions from our walk today through the nearby park in Kassel. ⌘ Read more
Introducing self-service SBOMs
Developers and compliance teams get a new SBOM generation tool for cloud repositories. ⌘ Read more
GitHub Galaxy 2023: Empower developer teams with a new developer experience
Learn how GitHub’s one, integrated platform–powered by AI and secure at every step—helps developer teams be more productive, collaborative, and efficient. ⌘ Read more
Announcing the GitHub Actions extension for VS Code
Today, we’re excited to announce the release of the public beta of the official GitHub Actions VS Code extension, which provides support for authoring and editing workflows and helps you manage workflow runs without leaving your IDE. ⌘ Read more
Erlang Solutions: Here’s Why You Should Build Scalable and Concurrent Applications with Elixir
In today’s world, when dealing with high levels of system requests, you need applications that can handle them without slowing down. Here’s where Elixir comes in. Elixir is a programming language that is designed to create highly scalable and concurrent applications. Built on Erlang’s virtual machine (BEAM), it has been used for decades to build highly reliable … ⌘ Read more
On my blog: Developer Diary, World Theatre Day https://john.colagioia.net/blog/2023/03/27/theatre.html #programming #project #devjournal
On my blog: Modern Social Media Etiquette https://john.colagioia.net/blog/2023/03/26/etiquette.html #rant #socialmedia #harm
On my blog: Free Culture Book Club — Snowbound Blood part 1 https://john.colagioia.net/blog/2023/03/25/snowbound-blood-1.html #freeculture #bookclub
We’re No Longer Sunsetting the Free Team Plan
We’re reversing course. After taking in feedback from the community, we’re no longer sunsetting the Free Team plan. ⌘ Read more
If you regularly work remotely (away from home and the office), a portable monitor is one of the best investments you can make. I’ve had my HANNspree HL162 for almost a year now and it’s really helpful when I work from my family’s home. Having two screens really increases my productivity. 😄 ⌘ Read more
GoBlog’s new ChatGPT integration
There’s been a lot of AI hype lately. Everyone is integrating AI into their applications. ⌘ Read more
Google Bard is a bit too creative. In another chat, where I asked who “Jan-Lukas Else” is, it also said that I developed the “Quarkus programming language”. But this clearly shows the limitations of language models and the current state of AI. Just because the answers sound clever, they are not always right. ⌘ Read more
On my blog: Toots 🐘 from 03/20 to 03/24 https://john.colagioia.net/blog/2023/03/24/week.html #linkdump #mastodon #socialmedia #week
We updated our RSA SSH host key
At approximately 05:00 UTC on March 24, out of an abundance of caution, we replaced our RSA SSH host key used to secure Git operations for GitHub.com. ⌘ Read more
On my blog: Real Life in Star Trek, Up The Long Ladder https://john.colagioia.net/blog/2023/03/23/up-long-ladder.html #scifi #startrek #closereading
Effortlessly Build Machine Learning Apps with Hugging Face’s Docker Spaces
Learn about the Hugging Face Hub and how to use its Docker Spaces to build machine learning apps effortlessly. ⌘ Read more