JMP: SMS Account Verification
Some apps and services (but not JMP!) require an SMS verification code in order to create a new account.  (Note that this is different from using SMS for authentication; which is a bad idea since SMS can be easily intercepted, are not encrypted in transit, and are v … ⌘ Read more

On my blog: Free Culture Book Club — Life Blood, chapters 23 – 25 https://john.colagioia.net/blog/2023/02/18/life-blood-8.html #freeculture #bookclub

On my blog: Toots 🐘 from 02/13 to 02/17 https://john.colagioia.net/blog/2023/02/17/week.html #linkdump #mastodon #socialmedia #week

blog: short note about why you should code it yourself

On my blog: Real Life in Star Trek, Time Squared https://john.colagioia.net/blog/2023/02/16/time-squared.html #scifi #startrek #closereading

ICYMI: CodeQL enhancements
Learn about CodeQL’s improved user experience and enhancements that let you scan new languages, detect new types of CWEs, and perform deeper analyses of your applications. ⌘ Read more

お知らせ：JPCERT/CC Eyes「CWE（Common Weakness Enumeration）のView「CWE-1003」日本語訳の公開」 ⌘ Read more

2022 Transparency Report
Looking back over a year’s worth of developer-first content moderation and, new in this report, making our data more accessible to researchers. ⌘ Read more

5 Developer Workstation Security Best Practices
Learn how Hardened Docker Desktop can help you follow the five most critical developer workstation security best practices. ⌘ Read more

JMP: Newsletter: JMP is 6! Leaving beta this year! And FOSSY 🙂️
Hi everyone!

Welcome to the latest edition of your pseudo-monthly JMP update!

In case it’s been a while since you checked out JMP, here’s a refresher: JMP lets you send and receive text and picture messages (and calls) through a real phone number right from your computer, tablet, phone, or anything else that has a Jabber client.  Among other things, JMP has these features: Your phone number on every device; Multiple phone numbers, one … ⌘ Read more

Git security vulnerabilities announced
Git users are encouraged to upgrade to the latest version, especially if they use `git apply` or `git clone` against untrusted patches or repositories. ⌘ Read more

GitHub Copilot now has a better AI model and new capabilities
We’re launching new improvements to GitHub Copilot to make it more powerful and more responsive for developers. ⌘ Read more

GitHub Copilot for Business is now available
GitHub Copilot is the world’s first at-scale AI developer tool and we’re now offering it to every developer, team, organization, and enterprise. ⌘ Read more

Microsoft Office and OneDrive for free?
I’m a bit of an indecisive (and frugal) person sometimes. ⌘ Read more

Nice, the number of GoBlog users is growing! 🤓 The next step is a growing number of GoBlog developers. It would be great to have more people giving advice on how to improve the code. 😅 Any senior Go devs out there? ⌘ Read more

Yout amicus: fighting for developers’ right to innovate
Our mission to accelerate human progress through developer collaboration requires us, from time to time, to fight against legal developments that would needlessly impair developers’ right to innovate. That’s why GitHub has filed an amicus brief in the appeal of Yout LLC v. Recording Industry of America, Inc. ⌘ Read more

On my blog: Developer Diary, World Radio Day https://john.colagioia.net/blog/2023/02/13/radio.html #programming #project #devjournal

The impending first era of AI
There’s an article in WSJ about the imminent ‘AI Boom’ and how a couple of companies, the ones that have already been both enabling and controlling our existence, to a large extent, are bound to become even more powerful. It’s interesting to ‘see’ the interplay if you’ve been working in computing technology for the past decade or so. Christopher Mims, the author of the WSJ article, posits that the computing requirements of large language models, latent text-to-image diffus … ⌘ Read more

On my blog: Free Culture Book Club — Life Blood, chapters 20 – 22 https://john.colagioia.net/blog/2023/02/11/life-blood-7.html #freeculture #bookclub

On my blog: Toots 🐘 from 02/06 to 02/10 https://john.colagioia.net/blog/2023/02/10/week.html #linkdump #mastodon #socialmedia #week

How I archive my favorite TV show to get rid of Amazon Prime
I’m a fan of the German TV series “Notruf Hafenkante”, which is shown on the public broadcaster ZDF and is also available on their website. New episodes are released weekly, and older episodes are also made available on a regular basis. After a few months, however, they are no longer available for free. At the moment I have to buy an extra subscription for a Prime Video Channel to be able to watch all the old episodes. But that makes me dependent on Amazon, and I d … ⌘ Read more

R to @mind_booster: Sobre o do PS, escrevi na semana passada sobre ele aqui:
https://tilde.pt/~marado/blog/o-voto-eletronico-e-a-memoria-selectiva.html
Sobre o do PS, escrevi na semana passada sobre ele aqui:

tilde.pt/~marado/blog/o-voto… ⌘ Read more

On my blog: Real Life in Star Trek, The Royale https://john.colagioia.net/blog/2023/02/09/royale.html #scifi #startrek #closereading

Erlang Solutions: Elixir, 7 steps to start your journey
Read this post in Spanish.

Let’s talk about Elixir!

Elixir is a functional programming language created by José Valim to build concurrent and scalable systems. It is defined as:

“a dynamic, functional language for building scalable and maintainable applications”.

https://elixir-lang.org/

Its first version was released in 2012. Since then, n … ⌘ Read more

Erlang Solutions: Elixir, 7 pasos para iniciar tu viaje
¡Hablemos de Elixir!

Elixir es un lenguaje de programación funcional creado por José Valim para construi sistemas concurrentes y escalables.

“a dynamic, functional language for building scalable and maintainable applications”.

https://elixir-lang.org/

Su primera versión fue liberada en 2012. Desde entonces, se le han agregado nuevas funcionalidades y mejoras hasta llegar a su [versión actual](https://elixir-lang.org/blog/2 … ⌘ Read more

Release Radar, Festive Edition · December 2022 – January 2023
Welcome to our special edition of the Release Radar 🎄. Between Christmas festivities, end of the year parties, Chinese New Year, or simply enjoying some time off, almost everyone has been celebrating – us too! Now we’re taking a moment to celebrate these awesome open source projects that shipped major version releases during December and […] ⌘ Read more

Frozen ❄️ ⌘ Read more

Dino: Dino 0.4 Release
Dino is a secure and open-source messaging application.
It uses the XMPP (Jabber) protocol for decentralized communication.
We aim to provide an intuitive and enjoyable user interface.

The 0.4 release adds support for message reactions and replies. We also switched from GTK3 to GTK4 and make use of libadwaita now.

Image

Reactions give you a quick and light-weight way to respond to a message with an emoji.
They … ⌘ Read more

In reply to: Oatmeal - week notes

The worst kind of blogging is blogging about blogging, so, I’ll keep this blogging about blogging short!

I’ve made some minor updates to the design of the website that have improved it’s usability a wee bit, and are a step in the right direction toward upping my accessibility game. The major remaining accessibility issues are around color contrast and some structura … ⌘ Read more

お知らせ：JPCERT/CC Eyes「TSUBAMEレポート Overflow（2022年10～12月）」 ⌘ Read more

The technology behind GitHub’s new code search
A look at what went into building the world’s largest public code search index. ⌘ Read more

How to mitigate OWASP vulnerabilities while staying in the flow
Explore how GitHub Advanced Security can help address several of the OWASP Top 10 vulnerabilities ⌘ Read more

On my blog: Developer Diary, Day against FGM https://john.colagioia.net/blog/2023/02/06/no-fgm.html #programming #project #devjournal

Yet another AI application
AI is currently finding its way more and more into various software. There is ChatGPT, which sometimes feels like an all-knowing human, DeepL uses artificial intelligence not only for its translator, but also for its new tool that improves written text, or Bunny.net provides an API to generate images “on the edge”. ⌘ Read more

On my blog: Free Culture Book Club — Life Blood, chapters 17 – 19 https://john.colagioia.net/blog/2023/02/04/life-blood-6.html #freeculture #bookclub

Ludum Dare 52 staff picks 🕹
We’ve got ten top games from the latest Ludum Dare game jam plus source code for you to check out. Pun intended. ⌘ Read more

Sam Whited: Places to Go
This is a love letter to many places, among them:

• Triple Step Studios,
  
• Smyrna, and Cobb County public libraries and parks,
  
• Sopo Bicycle Co-op and the Austin Yellow Bike Project,
  
• and AtlantaCritical Mass.
  

Dear comra … ⌘ Read more

On my blog: Toots 🐘 from 01/30 to 02/03 https://john.colagioia.net/blog/2023/02/03/week.html #linkdump #mastodon #socialmedia #week

Europe’s chance to be a leader in the age of AI
Below are my prepared remarks delivered at the EU Open Source Policy Summit in Brussels on Feb 3rd. ⌘ Read more

On my blog: Real Life in Star Trek, Contagion https://john.colagioia.net/blog/2023/02/02/contagion.html #scifi #startrek #closereading

How the GitHub Docs team uses GitHub Projects
Explore how the GitHub Docs team uses GitHub Projects for content coordination, reviews, and publishing. ⌘ Read more

Enabling branch deployments through IssueOps with GitHub Actions
What if developers want to leverage branch deployments but don’t have a full ChatOps stack integrated with their repositories? We wanted to set out to find a way for all developers to be able to take advantage of branch deployments with ease, right from their GitHub repository, and so the branch-deploy Action was born! ⌘ Read more

Announcing the launch of the All In for Maintainers DEI Resource Hub
The DEI Resource Hub is a vetted collection of resources, tools, and best practices designed to help open source maintainers create and maintain inclusive and diverse open source communities. ⌘ Read more

Open source’s impact on the world’s 100 million developers
We’re taking a look at how open source software has evolved on GitHub, and how the role of a maintainer and contributor has changed alongside the massive growth in open source software. ⌘ Read more

GitHub Availability Report: January 2023
In January, we experienced two incidents, one that resulted in degraded performance for Packages and Pages and another that impacted Git users. ⌘ Read more

Enable No-Code Kubernetes with the harpoon Docker Extension
Find out how to use the harpoon Docker Extension to deploy Kubernetes without any code right from Docker Desktop. ⌘ Read more

Skilling for the future: How GitHub is advancing diversity, equity, and inclusion within open source communities
In the coming months, we’re scaling, expanding, and launching new programming to further DEI within open source communities. ⌘ Read more

My January ‘23 in Review
Before you realize it, January - and with it the first month of the new year - is already over. A little review. ⌘ Read more

44.9666543118^2 ?~L~X https://notiz.blog/b/6Dg

44.9666543118^2 ?~L~X https://notiz.blog/b/6Dg

Docker Compose: What’s New, What’s Changing, What’s Next
Docker Compose V1 will be deprecated after June, 2023. Here’s what you need to know to transition to Compose V2! ⌘ Read more

GoBlog plugins enable completely new and optional functionality. Andrés created a plugin to show the song currently playing on his blog. I use this plugin for now as well. 🎶 If you don’t see a song in the header, I’m probably not listening to music right now. 😅 ⌘ Read more

Action needed for GitHub Desktop and Atom users
Update to the latest version of Desktop and previous version of Atom before February 2. ⌘ Read more

🎬🚄💶
Since I have YouTube Premium and log in to YouTube, YouTube is suggesting videos that seem to fit my interests a lot more (and it’s a little addictive again, but not as bad as when I was still studying). ⌘ Read more

On my blog: Developer Diary, Fred Korematsu Day https://john.colagioia.net/blog/2023/01/30/korematsu.html #programming #project #devjournal

On my blog: Free Culture Book Club — Life Blood, chapters 14 – 16 https://john.colagioia.net/blog/2023/01/28/life-blood-5.html #freeculture #bookclub

Australia’s Best Health Insurers
TL;DR List of best health insurers in Australia based on publicly available statistics.

I recently decided to up my health insurance from the bare minimum required by
the government here in Australia. It proved quite difficult to find which insurer
is the best for my state. Now the “best” insurer is a loaded term. It depends
on your needs, your age and so on. But that’s the matter of coverage. I wanted
to know which insurer was the easiest to deal with and actually cared abou … ⌘ Read more

On my blog: Toots 🐘 from 01/23 to 01/27 https://john.colagioia.net/blog/2023/01/27/week.html #linkdump #mastodon #socialmedia #week

Sam Whited: Smyrna Parks: Rose Garden and Jonquil

I live in a suburb of Atlanta called Smyrna 1.
Though Smyrna has been ranked favorably compared to other towns in the U.S.2, it
suffers from many of the same problems as other suburbs:
wide, fast, roads that aren’t very pedestrian or bicycle (or even car) friendly
and a lack of public transit make it [hard to get a … ⌘ Read more

Bypassing OGNL sandboxes for fun and charities
Object Graph Notation Language (OGNL) is a popular, Java-based, expression language used in popular frameworks and applications, such as Apache Struts and Atlassian Confluence. Learn more about bypassing certain OGNL injection protection mechanisms including those used by Struts and Atlassian Confluence, as well as different approaches to analyzing this form of protection so you can harden similar systems. ⌘ Read more

On my blog: Real Life in Star Trek, The Dauphin https://john.colagioia.net/blog/2023/01/26/dauphin.html #scifi #startrek #closereading

Setting the foundations for compliance
Laying the groundwork for developer-enabled compliance. ⌘ Read more

100 million developers and counting
There are now 100 million developers around the world using GitHub. Here’s what this means—and why it’s just the beginning. ⌘ Read more

January Extensions: Deploy Kubernetes and Develop Cloud Apps Locally
Find out what’s new this month in the Docker Extension Marketplace, including no-code kubernetes deployment and local cloud app development. ⌘ Read more

My code is still a mess, but I’m learning
I taught myself Go (and programming in general) by learning by doing. I learned by making a lot of mistakes and after noticing them, doing the necessary research. My Go code is probably a big mess, but it’s so satisfying, after not touching some code for a while, to do a major rewrite and improve the code with everything I’ve learned since the last time. ⌘ Read more

ChatGPT is smart enough to detect what the code in the single minified JavaScript file on my blog front page does. Try it out! 🙃 ⌘ Read more

ChatGPT is smart enough to detect what the code in the single minified JavaScript file on my blog front page does. Try it out! 🙃 ⌘ Read more

H3: Instead of C3
[Updated with correct Gemlog link.]

A version of this was posted on on 2023-01-06 but I thought it might
also fit here. Go to my gemlog for somewhat more personal takes and
see what I publish first. IPv6 only!

gemini://gem.hack.org/mc/log/

As long-time readers know I have participated in the Chaos
Communication Congress (C3) in Germany every year since 2008.

Since C3 was cancelled this year I thought I’d arrange a very small
conference of my own. I would at least try to gather some friends and
acquaintances … ⌘ Read more

Generating SBOMs for Your Image with BuildKit
Learn how to use BuildKit v0.11 to generate SBOMs so you (and your users) can quickly answer questions about your images and packages. ⌘ Read more

H3: Instead of C3
A version of this was posted on on 2023-01-06 but I thought it might
also fit here. Go to my gemlog for somewhat more personal takes and
see what I publish first. IPv6 only!

gemini://gem.hack.org/log/

As long-time readers know I have participated in the Chaos
Communication Congress (C3) in Germany every year since 2008.

Since C3 was cancelled this year I thought I’d arrange a very small
conference of my own. I would at least try to gather some friends and
acquaintances in chat and video conference and watch t … ⌘ Read more

My motivation to work on GoBlog isn’t always the same. Sometimes I don’t feel like programming in my free time, so the most I do is some bug fixing when I find broken things. Sometimes I just have no time to work on new features or improvements. But since yesterday evening I feel a new push and have completely rewritten the plugin system to make it much more flexible (and I like flexibility). I had to break compatibility with existing plugins, but given the small user base and the limited scope of what plugins could … ⌘ Read more

JMP: Threads, Thumbnails, XMR, ETH
Hi everyone!

Welcome to the latest edition of your pseudo-monthly JMP update!

In case it’s been a while since you checked out JMP, here’s a refresher: JMP lets you send and receive text and picture messages (and calls) through a real phone number right from your computer, tablet, phone, or anything else that has a Jabber client.  Among other things, JMP has these features: Your phone number on every device; Multiple phone numbers, one app; Free as in Freedom; Shar … ⌘ Read more

Introducing the GitHub Bug Bounty swag store
We’re excited to share the newest addition to our GitHub Bug Bounty Program! ⌘ Read more

Pwning the all Google phone with a non-Google bug
It turns out that the first “all Google” phone includes a non-Google bug. Learn about the details of CVE-2022-38181, a vulnerability in the Arm Mali GPU. Join me on my journey through reporting the vulnerability to the Android security team, and the exploit that used this vulnerability to gain arbitrary kernel code execution and root on a Pixel 6 from an Android app. ⌘ Read more

On my blog: Developer Diary, World Freedom Day https://john.colagioia.net/blog/2023/01/23/freedom.html #programming #project #devjournal

On my blog: Free Culture Book Club — Life Blood, chapters 10 – 13 https://john.colagioia.net/blog/2023/01/21/life-blood-4.html #freeculture #bookclub

On my blog: Toots 🐘 from 01/16 to 01/20 https://john.colagioia.net/blog/2023/01/20/week.html #linkdump #mastodon #socialmedia #week

Unpacking the value of open source and code collaboration
We’re more excited than ever about what the future holds and the role open source will continue to play in solving critical societal challenges. ⌘ Read more

Sunsetting Subversion support
On January 8, 2024, GitHub will remove support for Subversion. ⌘ Read more

Bringing GitHub Actions to GitHub Mobile
How to tap into the power of GitHub Actions from anywhere with GitHub Mobile! ⌘ Read more

On my blog: Real Life in Star Trek, The Measure of a Man https://john.colagioia.net/blog/2023/01/19/measure-man.html #scifi #startrek #closereading

Unlocking security updates for transitive dependencies with npm
How Dependabot integrated with npm to address security vulnerabilities on transitive dependencies and increase the likelihood of success for JavaScript security updates by 40%. ⌘ Read more

How GitHub coordinates product releases with GitHub Projects and GitHub Actions
When teams work cross-functionally, good things happen. See how our teams use GitHub Projects to coordinate and ship new products and features. ⌘ Read more

logs: new blog post on visual design in software and first photojournal entries of 2023

Remediation made simple: Introducing new validity checks for GitHub tokens
GitHub now tells you whether GitHub tokens found by secret scanning are active so you can prioritize and escalate remediation efforts. ⌘ Read more

Highlights from the BuildKit v0.11 Release
Docker BuildKit v0.11 is now available with new features, bug fixes, performance improvements, and more! ⌘ Read more

I posted about GoToSocial, but another Mastodon-alternative and Fediverse software, Takahē, seems to make fast progress and has some unique features like support for multiple domains or multiple identities per user. I haven’t tried running it yet, but it looks promising! ⌘ Read more

Dependabot alerts are now visible to more developers
Default settings will allow developers with write and maintain access to see and resolve Dependabot alerts. ⌘ Read more

Git security vulnerabilities announced
Git users are encouraged to upgrade to the latest version, especially if they use `git archive`, work in untrusted repositories, or use Git GUI on Windows. ⌘ Read more

ProcessOne: ejabberd 23.01

Image

Almost three months after the previous release, ejabberd 23.01 includes many bug fixes, several improvements and some new features.

A new module, mod_mqtt_bridge, can be used to replicate changes to MQTT topics between local and remote servers.

A more detailed explanation of those topics and other features:

Remember that support for Erlang/OTP 19.3 is discouraged, and will b … ⌘ Read more

3 common DevOps antipatterns and cloud native strategies that can help
Explore how GitHub and cloud native strategies can help you address common DevOps pipeline and team antipatterns. ⌘ Read more

ProcessOne: ejabberd 23.01

Image

Two months after the previous release, ejabberd 23.01 includes many bug fixes, several improvements and some new features.

A new module, mod_mqtt_bridge, can be used to replicate changes to MQTT topics between local and remote servers.

A more detailed explanation of those topics and other features:

Remember that support for Erlang/OTP 19.3 is discouraged, and will be removed … ⌘ Read more

ProcessOne: ejabberd 23.01

Image

Two months after the previous release, ejabberd 23.01 includes many bug fixes, several improvements and some new features.

A new module, mod_mqtt_bridge, can be used to replicate changes to MQTT topics between local and remote servers.

A more detailed explanation of those topics and other features:

Remember that support for Erlang/OTP 19.3 is discouraged, and will be removed … ⌘ Read more

On my blog: Developer Diary, Martin Luther King Jr. Day https://john.colagioia.net/blog/2023/01/16/mlk.html #programming #project #devjournal

On my blog: Free Culture Book Club — Life Blood, chapters 6 – 9 https://john.colagioia.net/blog/2023/01/14/life-blood-3.html #freeculture #bookclub

Game Off 2022 winners 🏆
All of the winners and some of the best games from Game Off 2022. ⌘ Read more

On my blog: Toots 🐘 from 01/09 to 01/13 https://john.colagioia.net/blog/2023/01/13/week.html #linkdump #mastodon #socialmedia #week

Paul Schaub: Use Any SOP Binary With SOP-Java and External-SOP
The Stateless OpenPGP Protocol specification describes a shared, standardized command line interface for OpenPGP applications. There is a bunch of such binaries available already, among them PGPainless’ pgpainless-cli, Sequoia-PGP’s sqop, as well as ProtonMails [gosop](https://github.com/ProtonMa … ⌘ Read more

Majestetic 🏰 ⌘ Read more

New GitHub CLI extension tools
Support for GitHub CLI extensions has been expanded with new authorship tools and more ways to discover and install custom commands. Learn how to write powerful extensions in Go and find new commands to install. ⌘ Read more