Enable No-Code Kubernetes with the harpoon Docker Extension
Find out how to use the harpoon Docker Extension to deploy Kubernetes without any code right from Docker Desktop. ⌘ Read more

Skilling for the future: How GitHub is advancing diversity, equity, and inclusion within open source communities
In the coming months, we’re scaling, expanding, and launching new programming to further DEI within open source communities. ⌘ Read more

My January ‘23 in Review
Before you realize it, January - and with it the first month of the new year - is already over. A little review. ⌘ Read more

44.9666543118^2 ?~L~X https://notiz.blog/b/6Dg

Docker Compose: What’s New, What’s Changing, What’s Next
Docker Compose V1 will be deprecated after June, 2023. Here’s what you need to know to transition to Compose V2! ⌘ Read more

GoBlog plugins enable completely new and optional functionality. Andrés created a plugin to show the song currently playing on his blog. I use this plugin for now as well. 🎶 If you don’t see a song in the header, I’m probably not listening to music right now. 😅 ⌘ Read more

Action needed for GitHub Desktop and Atom users
Update to the latest version of Desktop and previous version of Atom before February 2. ⌘ Read more

🎬🚄💶
Since I have YouTube Premium and log in to YouTube, YouTube is suggesting videos that seem to fit my interests a lot more (and it’s a little addictive again, but not as bad as when I was still studying). ⌘ Read more

On my blog: Developer Diary, Fred Korematsu Day https://john.colagioia.net/blog/2023/01/30/korematsu.html #programming #project #devjournal

On my blog: Free Culture Book Club — Life Blood, chapters 14 – 16 https://john.colagioia.net/blog/2023/01/28/life-blood-5.html #freeculture #bookclub

Australia’s Best Health Insurers
TL;DR List of best health insurers in Australia based on publicly available statistics.

I recently decided to up my health insurance from the bare minimum required by
the government here in Australia. It proved quite difficult to find which insurer
is the best for my state. Now the “best” insurer is a loaded term. It depends
on your needs, your age and so on. But that’s the matter of coverage. I wanted
to know which insurer was the easiest to deal with and actually cared abou … ⌘ Read more

On my blog: Toots 🐘 from 01/23 to 01/27 https://john.colagioia.net/blog/2023/01/27/week.html #linkdump #mastodon #socialmedia #week

Sam Whited: Smyrna Parks: Rose Garden and Jonquil

I live in a suburb of Atlanta called Smyrna 1.
Though Smyrna has been ranked favorably compared to other towns in the U.S.2, it
suffers from many of the same problems as other suburbs:
wide, fast, roads that aren’t very pedestrian or bicycle (or even car) friendly
and a lack of public transit make it [hard to get a … ⌘ Read more

Bypassing OGNL sandboxes for fun and charities
Object Graph Notation Language (OGNL) is a popular, Java-based, expression language used in popular frameworks and applications, such as Apache Struts and Atlassian Confluence. Learn more about bypassing certain OGNL injection protection mechanisms including those used by Struts and Atlassian Confluence, as well as different approaches to analyzing this form of protection so you can harden similar systems. ⌘ Read more

On my blog: Real Life in Star Trek, The Dauphin https://john.colagioia.net/blog/2023/01/26/dauphin.html #scifi #startrek #closereading

Setting the foundations for compliance
Laying the groundwork for developer-enabled compliance. ⌘ Read more

100 million developers and counting
There are now 100 million developers around the world using GitHub. Here’s what this means—and why it’s just the beginning. ⌘ Read more

January Extensions: Deploy Kubernetes and Develop Cloud Apps Locally
Find out what’s new this month in the Docker Extension Marketplace, including no-code kubernetes deployment and local cloud app development. ⌘ Read more

My code is still a mess, but I’m learning
I taught myself Go (and programming in general) by learning by doing. I learned by making a lot of mistakes and after noticing them, doing the necessary research. My Go code is probably a big mess, but it’s so satisfying, after not touching some code for a while, to do a major rewrite and improve the code with everything I’ve learned since the last time. ⌘ Read more

ChatGPT is smart enough to detect what the code in the single minified JavaScript file on my blog front page does. Try it out! 🙃 ⌘ Read more

ChatGPT is smart enough to detect what the code in the single minified JavaScript file on my blog front page does. Try it out! 🙃 ⌘ Read more

H3: Instead of C3
[Updated with correct Gemlog link.]

A version of this was posted on on 2023-01-06 but I thought it might
also fit here. Go to my gemlog for somewhat more personal takes and
see what I publish first. IPv6 only!

gemini://gem.hack.org/mc/log/

As long-time readers know I have participated in the Chaos
Communication Congress (C3) in Germany every year since 2008.

Since C3 was cancelled this year I thought I’d arrange a very small
conference of my own. I would at least try to gather some friends and
acquaintances … ⌘ Read more

Generating SBOMs for Your Image with BuildKit
Learn how to use BuildKit v0.11 to generate SBOMs so you (and your users) can quickly answer questions about your images and packages. ⌘ Read more

H3: Instead of C3
A version of this was posted on on 2023-01-06 but I thought it might
also fit here. Go to my gemlog for somewhat more personal takes and
see what I publish first. IPv6 only!

gemini://gem.hack.org/log/

As long-time readers know I have participated in the Chaos
Communication Congress (C3) in Germany every year since 2008.

Since C3 was cancelled this year I thought I’d arrange a very small
conference of my own. I would at least try to gather some friends and
acquaintances in chat and video conference and watch t … ⌘ Read more

My motivation to work on GoBlog isn’t always the same. Sometimes I don’t feel like programming in my free time, so the most I do is some bug fixing when I find broken things. Sometimes I just have no time to work on new features or improvements. But since yesterday evening I feel a new push and have completely rewritten the plugin system to make it much more flexible (and I like flexibility). I had to break compatibility with existing plugins, but given the small user base and the limited scope of what plugins could … ⌘ Read more

JMP: Threads, Thumbnails, XMR, ETH
Hi everyone!

Welcome to the latest edition of your pseudo-monthly JMP update!

In case it’s been a while since you checked out JMP, here’s a refresher: JMP lets you send and receive text and picture messages (and calls) through a real phone number right from your computer, tablet, phone, or anything else that has a Jabber client.  Among other things, JMP has these features: Your phone number on every device; Multiple phone numbers, one app; Free as in Freedom; Shar … ⌘ Read more

Introducing the GitHub Bug Bounty swag store
We’re excited to share the newest addition to our GitHub Bug Bounty Program! ⌘ Read more

Pwning the all Google phone with a non-Google bug
It turns out that the first “all Google” phone includes a non-Google bug. Learn about the details of CVE-2022-38181, a vulnerability in the Arm Mali GPU. Join me on my journey through reporting the vulnerability to the Android security team, and the exploit that used this vulnerability to gain arbitrary kernel code execution and root on a Pixel 6 from an Android app. ⌘ Read more

On my blog: Developer Diary, World Freedom Day https://john.colagioia.net/blog/2023/01/23/freedom.html #programming #project #devjournal

On my blog: Free Culture Book Club — Life Blood, chapters 10 – 13 https://john.colagioia.net/blog/2023/01/21/life-blood-4.html #freeculture #bookclub

On my blog: Toots 🐘 from 01/16 to 01/20 https://john.colagioia.net/blog/2023/01/20/week.html #linkdump #mastodon #socialmedia #week

Unpacking the value of open source and code collaboration
We’re more excited than ever about what the future holds and the role open source will continue to play in solving critical societal challenges. ⌘ Read more

Sunsetting Subversion support
On January 8, 2024, GitHub will remove support for Subversion. ⌘ Read more

Bringing GitHub Actions to GitHub Mobile
How to tap into the power of GitHub Actions from anywhere with GitHub Mobile! ⌘ Read more

On my blog: Real Life in Star Trek, The Measure of a Man https://john.colagioia.net/blog/2023/01/19/measure-man.html #scifi #startrek #closereading

Unlocking security updates for transitive dependencies with npm
How Dependabot integrated with npm to address security vulnerabilities on transitive dependencies and increase the likelihood of success for JavaScript security updates by 40%. ⌘ Read more

How GitHub coordinates product releases with GitHub Projects and GitHub Actions
When teams work cross-functionally, good things happen. See how our teams use GitHub Projects to coordinate and ship new products and features. ⌘ Read more

logs: new blog post on visual design in software and first photojournal entries of 2023

Remediation made simple: Introducing new validity checks for GitHub tokens
GitHub now tells you whether GitHub tokens found by secret scanning are active so you can prioritize and escalate remediation efforts. ⌘ Read more

Highlights from the BuildKit v0.11 Release
Docker BuildKit v0.11 is now available with new features, bug fixes, performance improvements, and more! ⌘ Read more

I posted about GoToSocial, but another Mastodon-alternative and Fediverse software, Takahē, seems to make fast progress and has some unique features like support for multiple domains or multiple identities per user. I haven’t tried running it yet, but it looks promising! ⌘ Read more

Dependabot alerts are now visible to more developers
Default settings will allow developers with write and maintain access to see and resolve Dependabot alerts. ⌘ Read more

Git security vulnerabilities announced
Git users are encouraged to upgrade to the latest version, especially if they use `git archive`, work in untrusted repositories, or use Git GUI on Windows. ⌘ Read more

ProcessOne: ejabberd 23.01

Image

Almost three months after the previous release, ejabberd 23.01 includes many bug fixes, several improvements and some new features.

A new module, mod_mqtt_bridge, can be used to replicate changes to MQTT topics between local and remote servers.

A more detailed explanation of those topics and other features:

Remember that support for Erlang/OTP 19.3 is discouraged, and will b … ⌘ Read more

3 common DevOps antipatterns and cloud native strategies that can help
Explore how GitHub and cloud native strategies can help you address common DevOps pipeline and team antipatterns. ⌘ Read more

ProcessOne: ejabberd 23.01

Image

Two months after the previous release, ejabberd 23.01 includes many bug fixes, several improvements and some new features.

A new module, mod_mqtt_bridge, can be used to replicate changes to MQTT topics between local and remote servers.

A more detailed explanation of those topics and other features:

Remember that support for Erlang/OTP 19.3 is discouraged, and will be removed … ⌘ Read more

ProcessOne: ejabberd 23.01

Image

Two months after the previous release, ejabberd 23.01 includes many bug fixes, several improvements and some new features.

A new module, mod_mqtt_bridge, can be used to replicate changes to MQTT topics between local and remote servers.

A more detailed explanation of those topics and other features:

Remember that support for Erlang/OTP 19.3 is discouraged, and will be removed … ⌘ Read more

On my blog: Developer Diary, Martin Luther King Jr. Day https://john.colagioia.net/blog/2023/01/16/mlk.html #programming #project #devjournal

On my blog: Free Culture Book Club — Life Blood, chapters 6 – 9 https://john.colagioia.net/blog/2023/01/14/life-blood-3.html #freeculture #bookclub

Game Off 2022 winners 🏆
All of the winners and some of the best games from Game Off 2022. ⌘ Read more

On my blog: Toots 🐘 from 01/09 to 01/13 https://john.colagioia.net/blog/2023/01/13/week.html #linkdump #mastodon #socialmedia #week

Paul Schaub: Use Any SOP Binary With SOP-Java and External-SOP
The Stateless OpenPGP Protocol specification describes a shared, standardized command line interface for OpenPGP applications. There is a bunch of such binaries available already, among them PGPainless’ pgpainless-cli, Sequoia-PGP’s sqop, as well as ProtonMails [gosop](https://github.com/ProtonMa … ⌘ Read more

Majestetic 🏰 ⌘ Read more

New GitHub CLI extension tools
Support for GitHub CLI extensions has been expanded with new authorship tools and more ways to discover and install custom commands. Learn how to write powerful extensions in Go and find new commands to install. ⌘ Read more

Develop Your Cloud App Locally with the LocalStack Extension
Learn how to use the LocalStack Docker Extension to emulate a cloud service locally with Docker Desktop. ⌘ Read more

On my blog: Real Life in Star Trek, A Matter of Honor https://john.colagioia.net/blog/2023/01/12/matter-honor.html #scifi #startrek #closereading

A smarter, quieter Dependabot
Dependabot is getting a little smarter—and, a little quieter—by reducing bot-based noise from repositories based on your interaction with Dependabot. ⌘ Read more

Docker Desktop 4.16: Better Performance and Docker Extensions GA
We’re kicking off the new year with exciting Docker Extensions news and improved performance in Docker Desktop 4.16. ⌘ Read more

Erlang Solutions: Building a Remote Control Car from Scratch Using Elixir

Elixir is undoubtedly one of the most comprehensive full stack languages available, offering battle-tested reliability and fault-tolerance on the backend. This is thanks to its origins in Erlang, the BEAM VM and OTP, powerful and agile frontend development thanks to LiveView and the ability to write to hardware with Nerves (not to mention the exciting developments happening in the mac … ⌘ Read more

Probably preaching to the choir… ⌘ Read more

I had an AWS training in November and have the opportunity to get the “Certified Developer Associate” certificate. Even though I have two attempts, I want to do well on the first shot. Since the trainer didn’t show us everything that is required for the exam, I’m kind of re-doing the training with this Udemy course (luckily I have access to Udemy Business and don’t have to pay for it). It’s really helpful because it helps me demystify the AWS cloud and reduce the 🤯 whenever I do something in the AWS console. ⌘ Read more

Passwordless deployments to the cloud
Discovering passwords in our codebase is probably one of our worst fears. But what if you didn’t need passwords at all, and could deploy to your cloud provider another way? In this post, we explore how you can use OpenID Connect to trust your cloud provider, enabling you to deploy easily, securely and safely, while minimizing the operational overhead associated with secrets (for example, key rotations). ⌘ Read more

Introducing required workflows and configuration variables to GitHub Actions
Now, you can standardize and enforce CI/CD best practices across all repositories in your organization to reduce duplication and secure your DevOps processes. ⌘ Read more

GitHub Discussions just got better with Category Forms!
Category Forms allow maintainers to create templates for their GitHub Discussions, which means that users can start new discussions with all the necessary information already included. ⌘ Read more

Default setup: A new way to enable GitHub code scanning
Default setup is a new way to automatically set up code scanning on your repository, without the use of a .yaml file. ⌘ Read more

On my blog: Developer Diary, Hōonkō https://john.colagioia.net/blog/2023/01/09/hoonko.html #programming #project #devjournal

Nice to see that there is such a variety of MicroPub clients, next to Quill, Micropublish and the mobile app Indigenous, there’s also sparkles. But on the desktop, I mostly just use GoBlog’s editor nowadays. It has live sync and and a live preview, which is sometimes very helpful. But flexibility is the key, use what fits you and the situation the best. ⌘ Read more

My first Freeletics week
My first Freeletics week is complete. And I got a badge for the first “perfect week”. I hope this gamification (levels and badges for perfect weeks, perfect week streaks, training session milestones etc.) will make me pull through. My girl friend also joined me and started using Freeletics. 🤓 ⌘ Read more

On my blog: Free Culture Book Club — Life Blood, chapters 4 – 5 https://john.colagioia.net/blog/2023/01/07/life-blood-2.html #freeculture #bookclub

On my blog: Toots 🐘 from 01/02 to 01/06 https://john.colagioia.net/blog/2023/01/06/week.html #linkdump #mastodon #socialmedia #week

On my blog: Real Life in Star Trek, Unnatural Selection https://john.colagioia.net/blog/2023/01/05/unnatural-selection.html #scifi #startrek #closereading

GitHub Availability Report: December 2022
In December, we did not experience any incidents that resulted in degraded performance across GitHub services. This report sheds light into an incident that impacted customers using GitHub Packages and GitHub Pages in November. ⌘ Read more

I bought a full year of access to the Freeletics coach, so I should actually start doing my workout, right? 🙃 I can already feel the soreness just thinking about it… ⌘ Read more

My 2022 in Review
2022 is over, welcome 2023! A year full of unexpected events, many personal changes and a lot of new experiences… But since I wrote a review every month, I just want to highlight the highlights here. ⌘ Read more

On my blog: Developer Diary, National Science Fiction Day https://john.colagioia.net/blog/2023/01/02/scifi.html #programming #project #devjournal

RT by @mind_booster: Já está publicada a lista de autores portugueses que entram hoje em #DomínioPúblico. Podem consultar aqui https://blog.wikimedia.pt/2023/01/01/dia-do-dominio-publico-2022-2/
No dia 6 de janeiro, há um evento organizado pela @wikimediapt Biblioteca Nacional e @ANSOL Link no mesmo site. Se puderem, partilhem!
href=”https://txt.sour.is/search?q=%23PublicDomain”>#PublicDomain**
Já está publicada a lista de autores portugueses que entram hoje em #DomínioPúblico. Podem consultar aqui [blog.wikimedi … ⌘ Read more

On my blog: 🍾 Happy Calendar-Changing Day, 2023 🎆 https://john.colagioia.net/blog/2023/01/01/hny2023.html #holiday #newyear

**RT by @mind_booster: As of today, most published works from 1927 have entered the public domain in the US! Celebrate with us on Jan 19 & 20: http://blog.archive.org/2022/11/30/the-best-things-in-life-are-free-two-ways-to-celebrate-public-domain-day-in-2023/

Welcome to the #PublicDomain:
🎞️ The Beloved Rogue, starring John Barrymore
https://archive.org/details/TheBelovedRogue**
As of today, most published works from 1927 have entered the public domain in the US! Celebrate with us on Jan 19 & 20: [blog.arc … ⌘ Read more

Happy new year! 🎆 ⌘ Read more

blog: closing out the new year with reflections and resolutions

On my blog: Free Culture Book Club — Life Blood, chapters 1 – 3 https://john.colagioia.net/blog/2022/12/31/life-blood-1.html #freeculture #bookclub

On my blog: Tweets from 12/26 to 12/30 https://john.colagioia.net/blog/2022/12/30/week.html #twitter #week #socialmedia #linkdump

My December ‘22 in Review
Now the last month of the year is coming to an end and before I put together a short review of the year soon, here’s another monthly review. ⌘ Read more

My December ‘22 in Review
Now the last month of the year is coming to an end and before I put together a short review of the year soon, here’s another monthly review. ⌘ Read more

My December ‘22 in Review
Now the last month of the year is coming to an end and before I put together a short review of the year soon, here’s another monthly review. ⌘ Read more

GitHub and the Ekoparty 2022 Capture the Flag
Learn about the design behind, and solutions to, several of GitHub’s CTF challenge for Ekoparty’s 2022 event! ⌘ Read more

On my blog: Real Life in Star Trek, The Schizoid Man https://john.colagioia.net/blog/2022/12/29/schizoid-man.html #scifi #startrek #closereading

GitHub’s top 10 blog posts of 2022
As the year winds down, we’re highlighting some of the incredible work from GitHub’s engineers, product teams, and security researchers. ⌘ Read more

December 2022 Newsletter ⌘ Read more

Bitwarden Unified
Bitwarden (my favorite and recommended password manager) is offering a “new deployment option”. This new option combines all microservices into a single Docker container and doesn’t require 11 different containers anymore. And it supports PostgreSQL and MariaDB in addition to MS SQL. ⌘ Read more

Achievement for today: I can finally correctly reply to Mastodon/Fediverse/ActivityPub posts. 🥳 ⌘ Read more

Achievement for today: I can finally correctly reply to Mastodon/Fediverse/ActivityPub posts. 🥳 ⌘ Read more

On my blog: Developer Journal, Boxing Day https://john.colagioia.net/blog/2022/12/26/boxing.html #programming #project #devjournal

Just setting up a quick Mastodon instance to test some compatibility is a pain. Using test accounts on public instances is also unreliable, because many instances are already overloaded and I don’t want to create spam. So I got a new DigitalOcean account with a $200 starter credit… ⌘ Read more

On my blog: 🔭 Looking Back on 2022 https://john.colagioia.net/blog/2022/12/25/review-2022.html #retrospective #newyear

The first 90 percent of the code accounts for the first 90 percent of the development time. The remaining 10 percent of the code accounts for the other 90 percent of the development time. Zeno’s Paradox and Why Modern Technology is Rubbish – Terence Eden’s Blog

On my blog: Free Culture Book Club — Quantum Flux https://john.colagioia.net/blog/2022/12/24/quantum-flux.html #freeculture #bookclub

Ignite Realtime Blog: Help us translate Spark and Openfire!
We have started to experiment with an online tool that facilitates the process of translating Spark and Openfire. Both already have a bunch of translations, but none are complete.

I’m looking for people wanting to test the tool and/or provide translations. The aim is to make providing translations become so easy that little technological know-how is required.

If you’re interested, please sign up to [Ignite Realtime localizati … ⌘ Read more

On my blog: Tweets from 12/19 to 12/23 https://john.colagioia.net/blog/2022/12/23/week.html #twitter #week #socialmedia #linkdump

What’s with all the ducks?
What in the world do rubber ducks have to do with programming? And why were they everywhere at GitHub Universe? A lot of you asked, so I’m here to help explain. ⌘ Read more