On my blog: Graphs with Chart.js https://john.colagioia.net/blog/2023/05/10/chart-js.html #linux #programming #techtips

How companies are boosting productivity with generative AI
Explore how generative AI coding tools are changing the way developers and companies build software. ⌘ Read more

How to fix a ReDoS
Code scanning detects ReDoS vulnerabilities automatically, but fixing them isn’t always easy. This blog post describes a 4-step strategy for fixing ReDoS bugs. ⌘ Read more

Push protection is generally available, and free for all public repositories
Announcing the general availability of push protection–a feature that proactively prevents secret leaks in your public and private repositories. ⌘ Read more

お知らせ：JPCERT/CC Eyes「注意喚起や情報共有活動における受信者側の「コスト」の問題について ー情報発信がアリバイや成果目的の自己目的化した行為にならないためにー」 ⌘ Read more

How we work: inclusive retrospectives for the GitHub Accessibility leadership team
Learn about tools and processes the GitHub Accessibility leadership team uses for retrospectives that fully engage every team member. ⌘ Read more

GitHub code search is generally available
The world’s code is now at your fingertips. ⌘ Read more

It’s green again outside. 🌳 ⌘ Read more

Building a culture of innovation in your business with GitHub
Consider the typical software development practices in an organization. Projects are commonly closed, and causes friction across engineering teams. But open source communities work asynchronously, openly, remotely and at global-scale. What if our internal teams could reuse those same practices? ⌘ Read more

On my blog: Developer Diary, WWII Remembrance https://john.colagioia.net/blog/2023/05/08/remembrance.html #programming #project #devjournal

😋🎂❤️ ⌘ Read more

On my blog: Free Culture Book Club — Expedition Sasquatch, part 3 https://john.colagioia.net/blog/2023/05/06/sasquatch-3.html #freeculture #bookclub

On my blog: Toots 🐘 from 05/01 to 05/05 https://john.colagioia.net/blog/2023/05/05/week.html #linkdump #mastodon #socialmedia #week

Building a more inclusive GitHub Global Campus
Every student and teacher deserves the same access to GitHub Education offerings. We’ve enlisted GitHub’s Accessibility team to help identify areas for improving inclusivity. ⌘ Read more

Web Summit Rio 2023: Building an app in 18 minutes with GitHub Copilot X
GitHub CEO Thomas Domke demonstrated the power of GitHub Copilot X live on stage. ⌘ Read more

On my blog: Real Life in Star Trek, Evolution https://john.colagioia.net/blog/2023/05/04/evolution.html #scifi #startrek #closereading

Manage your application security stack effectively with the tool status page
Code scanning’s tool status gives you a bird’s eye view of your application security stack, allowing you to quickly confirm everything is working, or troubleshoot any tool in your application security arsenal. ⌘ Read more

All In for Students 2023 cohort: our biggest group of open source leaders yet!
The second cohort of All In for Students has graduated! With a cohort 12 times as large as the pilot, learn about how this group of college students is leaning into the future of technology. ⌘ Read more

GitHub Availability Report: April 2023
In April, we experienced four incidents that resulted in degraded performance across GitHub services. This report also sheds light into three March incidents that resulted in degraded performance across GitHub services. ⌘ Read more

More than meets the pull request: maintainers talk contributions
Creating an open source project can feel a bit like sending out an open invite to a party—will it be a roaring good time, or will you unbegrudginly dine on leftover junk food for the following week after nobody shows? When the first guest arrives, you breathe a sigh of relief. The party’s a success, […] ⌘ Read more

Building a Local Application Development Environment for Kubernetes with the Gefyra Docker Extension
Gefyra is an easy-to-use Docker Desktop extension that connects with Kubernetes to improve development workflows and team collaboration. We show how to install and configure Gefyra in this article. ⌘ Read more

Dependabot relieves alert fatigue from npm devDependencies
A new alert rules engine for Dependabot leverages alert metadata to identify and auto-dismiss up to 15% of alerts as false positives. ⌘ Read more

Docker Desktop 4.19: Compose v2, the Moby project, and more
Docker Desktop 4.19 includes performance enhancements, new language support, and a Moby update. Container-to-host networking performance is 5x faster on macOS, and Docker Init supports Python and Node.js. ⌘ Read more

JMP: Newsletter: Jabber ID Discovery, New Referral Codes
Hi everyone!

Welcome to the latest edition of your pseudo-monthly JMP update!

In case it’s been a while since you checked out JMP, here’s a refresher: JMP lets you send and receive text and picture messages (and calls) through a real phone number right from your computer, tablet, phone, or anything else that has a Jabber client.  Among other things, JMP has these features: Your phone number on every device; Multiple phone numbers, one app; Free … ⌘ Read more

My April ‘23 in Review
I almost forgot this monthly review, although it should actually be a routine after more than two years. But so much exciting has not happened this month… ⌘ Read more

On my blog: Developer Diary, International Workers’ Day https://john.colagioia.net/blog/2023/05/01/workers.html #programming #project #devjournal

お知らせ：JPCERT/CC Eyes「攻撃キャンペーンDangerousPasswordに関連する攻撃動向」 ⌘ Read more

A beautiful flowering tree that I see from the window of my second home. 🌸 ⌘ Read more

On my blog: Free Culture Book Club — Expedition Sasquatch, part 2 https://john.colagioia.net/blog/2023/04/29/sasquatch-2.html #freeculture #bookclub

On my blog: Toots 🐘 from 04/24 to 04/28 https://john.colagioia.net/blog/2023/04/28/week.html #linkdump #mastodon #socialmedia #week

This month on The ReadME Podcast: exploring the fusion of technology and progress
Open source’s impact on nuclear fusion research, adapting to technological change, and mastering GitHub essentials. ⌘ Read more

Viewing PDFs in Firefox works again
A few months ago I complained about Firefox not being able to open PDFs without downloading them. Recently, I also wanted to start developing a custom Firefox addon to fix this behavior. ⌘ Read more

**RT by @mind_booster: 🧰 5 changes to fix the EC’s #RightToRepair proposal 🛠️

1️⃣ No contractual overrides
2️⃣ No digital locks
3️⃣ Go beyond just fixing things
4️⃣ Don’t limit who can repair
5️⃣ Broaden the scope of what can be repaired

Blog 👉 https://www.knowledgerights21.org/news-story/still-time-to-repair-the-commission-proposal-on-the-right-to-repair/
Response 👉 https://kr21.info/r2r**
🧰 5 changes to fix the EC’s #RightToRepair proposal 🛠️

1️⃣ No contractual ov … ⌘ Read more

On my blog: Real Life in Star Trek, Season 2, TNG https://john.colagioia.net/blog/2023/04/27/ng-season-2.html #scifi #startrek #closereading

I miss running
I’ve talked about this a few times and posted some of the pictures OneDrive shows me every day. Photos taken on the same day, week or month in previous years. It always gives me a “throwback” and I think about the situation at the time I took the photo. ⌘ Read more

I deleted my Twitter account a long time ago, but sometimes I still used Nitter to search Twitter or we linked tweets. I decided to stop that and removed Nitter from my home server and added “twitter.com” to the deny list at NextDNS. There are too many reasons to list here. ⌘ Read more

CLI tricks every developer should know
Learn some tips, tricks, and tools for mastering the command line from GitHub’s own developers. ⌘ Read more

A VirusTotal introduziu agora a ferramenta de Inspeção de código usando IA generativa para reforçar a análise de ameaças.

logs/blog: building a computer desktop environment just cuz

Git security vulnerabilities announced
A new set of Git releases were published to address a variety of security vulnerabilities. All users are encouraged to upgrade. Take a look at GitHub’s view of the latest round of releases. ⌘ Read more

Erlang Solutions: Re-implement our first blog scrapper with Crawly 0.15.0
It has been almost four years since my first article about scraping with Elixir and Crawly was published. Since then, many changes have occurred, the most significant being Erlang Solution’s blog design update. As a result, the 2019 tutorial is no longer functional.

This situation provided an excellent opportunity to update the original work and re-implement the Crawler using the new version of Cra … ⌘ Read more

Gearing up for Maintainer Month this May!
Are you looking for ways to support open source maintainers? Maintainer Month is the perfect opportunity! ⌘ Read more

IndiePass, Indigenous or whatever it’s called now (for Android) supports unlisted and private posts now! 🎉 Or did it already before and I just did not notice the setting? At least that was a feature I always missed and needed to use frontmatter when creating a new reply for example. Thanks Mark Sutherland! ⌘ Read more

QOA Benchmark Results and File Format Specification
The specification for the Quite OK Audio Format,
announced in a previous blog post,
is now finalized. QOA is a lossy audio compression format. Typical audio
signals (44100hz, stereo) are encoded into 278 kbits/s, or more precisely 3.2
bits per sample – exactly 1/5 of the bits needed for an uncompressed WAV.

Image

The QOA-Specification [fits on a single … ⌘ Read more

Shaping the GitHub of the future as COO
GitHub is driving the future of software development and, after 10 years as a Hubber, I’m more energized than ever as I take on the role of COO to help bring our vision to life. ⌘ Read more

On my blog: Developer Diary, Fashion Revolution Day https://john.colagioia.net/blog/2023/04/24/fashion.html #programming #project #devjournal

Samsung is known for using Apple references in their advertisements. In this ad, they do it again. Kind of funny. 😂 ⌘ Read more

On my blog: Why Federate? https://john.colagioia.net/blog/2023/04/23/federation.html #rant #socialmedia #fediverse

On my blog: Free Culture Book Club — Expedition Sasquatch, part 1 https://john.colagioia.net/blog/2023/04/22/sasquatch-1.html #freeculture #bookclub

“the secret list of websites”
Chris Coyier wrote a post mentioning a Washington Post article that analyzed which websites Google used to train its AI model. And it seems that both my blog and my website (I think I should merge them one day) are used. ⌘ Read more

On my blog: Toots 🐘 from 04/17 to 04/21 https://john.colagioia.net/blog/2023/04/21/week.html #linkdump #mastodon #socialmedia #week

Tillitis TKey
The Tillitis TKey, which I first wrote about in September last year,
is now available for sale at the the Tillitis webshop.

The TKey is a small bare-bones RISC-V computer in a USB stick form
factor with no persistent storage that measures apps uploaded to it
and derives a deterministic secret every time the same app is started.
You can use it, for instance, as a security token to keep your private
key and do signing operations. Everyt … ⌘ Read more

ProcessOne: ejabberd 22.10
This ejabberd 22.10 release includes six months of work, over 140 commits, including relevant improvements in MIX, MUC, SQL, and installers, and bug fixes as usual.

Image

This version brings support for latest MIX protocol version, and significantly improves detection and recovery of SQL connection issues.

There are no breaking changes in SQL schem … ⌘ Read more

On my blog: Real Life in Star Trek, Shades of Gray https://john.colagioia.net/blog/2023/04/20/shades-gray.html #scifi #startrek #closereading

Announcing GitHub Actions Deployment Protection Rules, now in public beta
Create and share your own deployment protection rules, or use the rules from our great partners, like Datadog, Honeycomb, New Relic, NodeSource, Sentry, and ServiceNow, to control your deployments with more confidence. And the API is open for the community to build their own rules to make GitHub Enterprise Cloud even better. ⌘ Read more

Docker Compose Experiment: Sync Files and Automatically Rebuild Services with Watch Mode
Starting with Compose v2.17, we’re excited to share an early look at the new development-specific configuration in Compose YAML as well as an experimental file watch command. ⌘ Read more

Erlang Solutions: Re-implement our first blog scrapper with Crawly 0.15.0
It has been almost four years since my first article about scraping with Elixir and Crawly was published. Since then, many changes have occurred, the most significant being Erlang Solution’s blog design update. As a result, the 2019 tutorial is no longer functional.

This situation provided an excellent opportunity to update the original work and re-implement the Crawler using the new version of Crawl … ⌘ Read more

Private vulnerability reporting now generally available
Open source maintainers and security researchers embrace a new best practice to report and fix vulnerabilities. ⌘ Read more

Introducing npm package provenance
How to verifiably link npm packages to their source repository and build instructions. ⌘ Read more

ProcessOne: ejabberd 23.04
This new ejabberd 23.04 release includes many improvements and bug fixes, as well as some new features.

Image

• Many SQL database improvements
  
• mod_mam support for XEP-0425: Message Moderation
  
• Newmod_muc_rtbl, Real-Time Block List for MUC rooms
  
• Binaries useErlang/OTP 25.3, and changes in containers
  

A more detailed explanatio … ⌘ Read more

GitHub joins industry commitment to curb cyber mercenaries
GitHub is proud to join 40 companies endorsing the Cybersecurity Tech Accord principles limiting offensive operations in cyberspace. ⌘ Read more

ProcessOne: ejabberd 23.04
This new ejabberd 23.04 release includes many improvements and bug fixes, as well as some new features.

Image

• Many SQL database improvements
  
• mod_mam support for XEP-0425: Message Moderation
  
• Newmod_muc_rtbl, Real-Time Block List for MUC rooms
  
• Binaries useErlang/OTP 25.3, and changes in containers
  

A more detailed explanatio … ⌘ Read more

The world’s fastest train
I like trains, if that should not have been known yet. This year I even have two major vacations (Romania and Scotland) coming up, both by train, even if flying would be possible. But if it can be done by train, then I also prefer the train. ⌘ Read more

Multi-repository enablement: effortlessly scale code scanning across your repositories
We’ve gotten great feedback on default setup, a simple way to set up code scanning on your repository. Now, you have the ability to use default setup across your organization’s repositories, in just one click. ⌘ Read more

On my blog: Developer Diary, Lena Massacre https://john.colagioia.net/blog/2023/04/17/lena.html #programming #project #devjournal

The XMPP Standards Foundation: Elbe-Sprint Hamburg 2023

Image

Elbe-Sprint Hamburg 2023 - _Source: Wiki Commons, Container terminals in port of Hamburg_

A new sprint is being organised within the XMPP Community: The Elbe-Sprint Hamburg!

We will have several days of good and fruitful exchange … ⌘ Read more

Sam Whited: Concord and Spring Road Linear Parks
In my earlier review of Rose Garden and Jonquil public parks I mentioned
the Mountain-to-River Trail
(M2R), a mixed-use bicycle
and walking trail that connects the two parks.

The two parks I’m going to review today are also connected by the M2R trail in
addition to the [Concord Road Trail](https://blog.samwhited.com/cate … ⌘ Read more

💭 While some people like to jump between blogging software all the time, or go back to Hugo from a custom one, I don’t really miss Hugo after switching to GoBlog in 2020, but enjoy having my own system quite a bit. Not that Hugo, WordPress, etc. are bad blogging systems, but I really enjoy being able to quickly code a fix without having to research docs, StackOverflow, or the source on GitHub. And when I have an idea for a new feature, it would often not be easy to implement in the existing systems. ⌘ Read more

After multiple years of delays, my Solo V2’s finally arrived. Let’s see what I’ll do with them. I also have a YubiKey, I can’t even find right now. 😅 ⌘ Read more

On my blog: Free Culture Book Club — Snowbound Blood part 4 https://john.colagioia.net/blog/2023/04/15/snowbound-blood-4.html #freeculture #bookclub

On my blog: Toots 🐘 from 04/10 to 04/14 https://john.colagioia.net/blog/2023/04/14/week.html #linkdump #mastodon #socialmedia #week

3 benefits of migrating and consolidating your source code
Explore how migrating your source code and collaboration history to GitHub can lead to some surprising benefits. ⌘ Read more

How generative AI is changing the way developers work
Rapid advancements in generative AI coding tools like GitHub Copilot are accelerating the next wave of software development. Here’s what you need to know. ⌘ Read more

After multiple years of delays, my Solo V2’s finally arrived. Let’s see what I’ll do with them. I also have a YubiKey, I can’t even find right now. 😅 ⌘ Read more

On my blog: Real Life in Star Trek, Peak Performance https://john.colagioia.net/blog/2023/04/13/peak-performance.html #scifi #startrek #closereading

I finished my first “Hell Week” and with it the first “Training Journey” in Freeletics. 48 training sessions. On to the next one! 💪 ⌘ Read more

Ensuring compliance in developer workflows
How GitHub Enterprise ensures secure and compliant developer workflows for highly regulated industries. ⌘ Read more

お知らせ：JPCERT/CC Eyes「暗号資産交換業者を標的とするParallax RAT感染を狙った活動」 ⌘ Read more

GitHub Accelerator: our first cohort and what’s next
Meet the individuals that make up the first GitHub Accelerator cohort and learn about how GitHub is helping bring their visions to reality. ⌘ Read more

Erlang Solutions: Optimización para lograr concurrencia: comparación y contraste de las máquinas virtuales BEAM y JVM
En esta nota exploraremos los aspectos internos de la máquina virtual BEAM o VM por sus siglas en inglés (Virtual Machine). Y haremos una comparación con la máquina virtual de Java, la JVM.

El éxito de cualquier lenguaje de programación en el ecosistema Erlang puede ser repartido a tres componentes estrechamente ac … ⌘ Read more

Introducing the newest GitHub Shop collection
From dog bowl bottles to fanny packs, explore the latest and greatest GitHub merchandise. ⌘ Read more

Generative AI-enabled compliance for software development
Explore how generative AI may soon help enable optimizing some of the foundational components of compliance. ⌘ Read more

JMP: Verify Google Play App Purchase on Your Server
We are preparing for the first-ever Google Play Store launch of Cheogram Android as part of JMP coming out of beta later this year.  One of the things we wanted to “just work” for Google Play users is to be able to pay for the app and get their first month of JMP “bundled” into that purchase price, to smooth the common onboarding experience.  So how do the JMP servers know that the app communicating with them is running a version of the app bought from Google P … ⌘ Read more

How enabling developers can help drive financial inclusion
Explore how creating a great developer experience can help provide a more inclusive financial services environment. ⌘ Read more

It’s spring! 💐 ⌘ Read more

On my blog: Developer Diary, Siblings Day https://john.colagioia.net/blog/2023/04/10/siblings.html #programming #project #devjournal

Since I found a cheap lifetime license for AdGuard Premium, I’ll try it on my phone for a while. I’ve also configured it with my strict NextDNS profile. But now my phone not only filters DNS requests to block ads, but also HTTP requests. And while uBlock Origin works pretty well in Firefox on Android, I decided to disable it while using AdGuard to see how the performance compares. ⌘ Read more

Happy Easter 🐰 ⌘ Read more

Happy Easter 🐰 ⌘ Read more

On my blog: Great Ideas from Terrible Jobs https://john.colagioia.net/blog/2023/04/09/ideas.html #rant #career

Too lazy or too ambitious?
Today was the second day of my “Hell Week”. Not because my week is so bad, it is after all holidays and time off, no, because I have arrived in the last week of the “Training Journey” at Freeletics. At the end of the Journey, the “coach” requires training every day, usually a so-called “god workout” in addition to warm-up and cool-down. ⌘ Read more

On my blog: Free Culture Book Club — Snowbound Blood part 3 https://john.colagioia.net/blog/2023/04/08/snowbound-blood-3.html #freeculture #bookclub

On my blog: Toots 🐘 from 04/03 to 04/07 https://john.colagioia.net/blog/2023/04/07/week.html #linkdump #mastodon #socialmedia #week

What developers need to know about generative AI
Generative AI has been dominating the news lately—but what exactly is it? Here’s what you need to know, and what it means for developers. ⌘ Read more

Game Bytes · April 2023
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on! ⌘ Read more

Kev built his own microblog using WordPress and iOS shortcuts to separate his long and short posts. It sounds like this is a better alternative for him than micro.blog. Maybe with SQLite as the database he can even simplify this setup. ⌘ Read more

On my blog: Real Life in Star Trek, The Emissary https://john.colagioia.net/blog/2023/04/06/emissary.html #scifi #startrek #closereading

Building GitHub with Ruby and Rails
Since the beginning, GitHub.com has been a Ruby on Rails monolith. Today, the application is nearly two million lines of code and more than 1,000 engineers collaborate on it daily. We deploy as often as 20 times a day, and nearly every week one of those deploys is a Rails upgrade. Upgrading Rails weekly Every […] ⌘ Read more