On my blog: Developer Diary, Saint Patrick’s Day ☘️ https://john.colagioia.net/blog/2025/03/17/patrick.html #programming #project #devjournal
On my blog: Free Culture Book Club — electric (yang) https://john.colagioia.net/blog/2025/03/15/electric-yang.html #freeculture #bookclub
On my blog: Toots 🦣 from 03/10 to 03/14 https://john.colagioia.net/blog/2025/03/14/week.html #linkdump #socialmedia #quotes #week
Highlights from Git 2.49
The open source Git project just released Git 2.49. Here is GitHub’s look at some of the most interesting features and changes introduced since last time.
The post Highlights from Git 2.49 appeared first on The GitHub Blog. ⌘ Read more
KDE splits KWin into kwin_x11 and kwin_wayland
One of the biggest behind-the-scenes changes in the upcoming Plasma 6.4 release is the split of kwin_x11 and kwin_wayland codebases. With this blog post, I would like to delve in what led us to making such a decision and what it means for the future of kwin_x11. ↫ Vlad Zahorodnii For the most part, this change won’t mean much for users of KWin on either Wayland or X11, at least for now. At least for the remainder of the Plasma 6.x life … ⌘ Read more
On my blog: Real Life in Star Trek, Birthright part 2 https://john.colagioia.net/blog/2025/03/13/birthright-2.html #scifi #startrek #closereading
Shift-Left Testing with Testcontainers: Catching Bugs Early with Local Integration Tests
Learn how integration tests can help you catch defects earlier in the developers inner loop and how Testcontainers can make them feel as easy as unit tests. ⌘ Read more
Part 1 of the move (Kassel to Braunschweig) is complete. Today we dropped off the van, handed over the apartment, and took the opportunity to take one last walk through the nearby park and nature. Part 2 (second home to new primary residence) will follow soon. ⌘ Read more
How GitHub engineers learn new codebases
Strategies to quickly get up to speed, whether you’re a seasoned engineer or a newcomer to the field.
The post How GitHub engineers learn new codebases appeared first on The GitHub Blog. ⌘ Read more
Kubernetes Troubleshooting: A Step-by-Step Guide
In the modern era of the software industry, microservice architecture and Kubernetes have become the globally adopted solution, for organizations looking for scalability and operational efficiency. At one end where these cutting-edge technologies help organizations operate… ⌘ Read more
Erlang Solutions: Meet the team: Erik Schön
In our final “Meet the Team” of 2024, we’d like to introduce you to Erik Schön, Managing Director at Erlang Solutions.
Erik shares his journey with Erlang, Elixir, and the BEAM ecosystem, from his work at Ericsson to joining Erlang Solutions in 2019. He also reflects on a key professional highlight in 2024 and looks ahead to his goals for 2025. Erik also reveals his festive traditions, including a Swedish-Japanese twist.
Erlang Solutions: Elixir vs Haskell: What’s the Difference?
Elixir and Haskell are two very powerful, very popular programming languages. However, each has its strengths and weaknesses. Whilst they are similar in a few ways, it’s their differences that make them more suitable for certain tasks.
Here’s an Elixir vs Haskell comparison.
Elixir vs Haskell: a comparison Core philosophy and design goalsStarting at a top-level view of both languages, the first difference we see is … ⌘ Read more
Sign in as anyone: Bypassing SAML SSO authentication with parser differentials
Critical authentication bypass vulnerabilities (CVE-2025-25291 + CVE-2025-25292) were discovered in ruby-saml up to version 1.17.0. In this blog post, we’ll shed light on how these vulnerabilities that rely on a parser differential were uncovered.
The post [Sign in as anyone: Bypassing SAML SSO authentication with parser differentials](https://github.blog/security/sign-in-as-anyone- … ⌘ Read more
GitHub Availability Report: February 2025
In February, we experienced two incidents that resulted in degraded performance across GitHub services.
The post GitHub Availability Report: February 2025 appeared first on The GitHub Blog. ⌘ Read more
Datalagring, igen!
Some of my usual readers will have to excuse me. This post will be in
Swedish. It’s about proposed Swedish legislation for forcing someone
who offers a message system to the public to cooperate with the law.
— — —
Ändring- Första version: 2025-03-10 07:55
- Ändrad: 2025-03-12 18:01 +0100: Listan i “En bugg?” hade automatiskt
numrerats av blogverktyget och HTML så poängen försvann. Nu citerad
mer korrekt där det framgår att “1.” är borttagen.
Nytt lagförslag: Även chatsystem ska va … ⌘ Read more
Announcing Dapr AI Agents
The Dapr project is excited to announce Dapr Agents, a framework for developers to simplify the creation of AI agents that reason, act, and collaborate using LLMs. Today, we are excited to announce Dapr Agents, a… ⌘ Read more
Expose the Kubernetes API and access it anywhere
Accessing the Kubernetes API for your clusters from anywhere or across any network is a powerful lever. It’s even better if you can do so without shipping or extending more messy networks, like VPCs or VPNs…. ⌘ Read more
お知らせ：JPCERT/CC Eyes「JSAC2025 開催レポート～Workshop & Lightning Talk～」 ⌘ Read more
Mathieu Pasquet: slixmpp v1.9.1
This is mostly a bugfix release over version 1.9.0.
The main fix is the rust JID implementation that would behave incorrectly when
hashed if the JID contained non-ascii characters. This is an important issue as
using a non-ascii JID was mostly broken, and interacting with one failed in
interesting ways.
- The previously mentioned JID hash issue
- Various edge cases in the roster code
- One edge case in the MUC ( [XEP-0045](https: … ⌘ Read more
Automating NIS2 Compliance in Kubernetes with Kyverno: A Practical Guide
2025 is the year when NIS2 measures will start to bite. Is your platform team ready for the challenge? This post gives a brief overview of NIS2 in the context of platform engineering. Then it gives… ⌘ Read more
Dapr in Two Minutes: Simplifying Distributed Application Development
Dapr (Distributed Application Runtime) takes the pain out of building distributed applications by offering developers simple “building block” APIs to manage the challenges of connecting with complex infrastructure. Developers can use these APIs to interact with… ⌘ Read more
Why Java endures: The foundation of modern enterprise development
For 30 years, Java has been a cornerstone of enterprise software development. Here’s why—and how to learn Java.
The post Why Java endures: The foundation of modern enterprise development appeared first on The GitHub Blog. ⌘ Read more
Full exposure: A practical approach to handling sensitive data leaks
Treating exposures as full and complete can help you respond more effectively to focus on what truly matters: securing systems, protecting sensitive data, and maintaining the trust of stakeholders.
The post Full exposure: A practical approach to handling sensitive data leaks appeared first on [The GitHu … ⌘ Read more
Falcoctl: Artifact Management for Falco
Artifact management is the process of storing, organising, and securing the essential components generated throughout software development. Cloudsmith defines artifacts as the tangible outputs of the development lifecycle, including compiled source code, libraries, executables, and configuration… ⌘ Read more
CNCF Joins Google Summer of Code 2025 – Calling All Contributors!
We’re thrilled to share that the Cloud Native Computing Foundation has once again been accepted as a Google Summer of Code (GSoC) mentoring organization for 2025! This program is a fantastic opportunity for new contributors—especially students—to… ⌘ Read more
On my blog: Developer Diary, Harriet Tubman Day https://john.colagioia.net/blog/2025/03/10/tubman.html #programming #project #devjournal
The NixOS Foundation Board Announced ⌘ Read more
Datalagring, igen!
Some of my usual readers will have to excuse me. This post will be in
Swedish. It’s about proposed Swedish legislation for forcing someone
who offers a message system to the public to cooperate with the law.
— — —
InledningNytt lagförslag: Även chatsystem ska vara “anpassningsskyldiga” för
hemlig avlyssning och hemlig övervakning!
Det är väl ingen överraskning bland mina läsare vad jag tycker om det.
Går förslaget igenom gör vi det mer komplicerat för vanliga användare
att meddela sig med varan … ⌘ Read more
On my blog: Free Culture Book Club — acoustic (yin) https://john.colagioia.net/blog/2025/03/08/acoustic-yin.html #freeculture #bookclub
On my blog: Toots 🦣 from 03/03 to 03/07 https://john.colagioia.net/blog/2025/03/07/week.html #linkdump #socialmedia #quotes #week
Why Infrastructure as Code Needs to be Secure by Default
Infrastructure as Code (IaC) has become the standard for managing cloud infrastructure, but it introduces significant challenges, particularly around security and compliance. Issues such as misconfigurations, secret management, policy enforcement, and auditing can complicate workflows. These… ⌘ Read more
Welcome StrimziCon 2025!
We are very pleased to announce the return of StrimziCon, scheduled later this year! After the huge success of StrimziCon 2024, the Strimzi community decided to repeat the event for 2025. Like last year, this is… ⌘ Read more
[ANN] How Monero Fulfilled Satoshi’s Promise
Links:
- https://zola.ink/blog/posts/how-monero-fulfilled-satoshis-promies
- https://news.ycombinator.com/item?id=43290408
@basses:matrix.org ⌘ Read more
On my blog: Real Life in Star Trek, Birthright, part 1 https://john.colagioia.net/blog/2025/03/06/birthright-1.html #scifi #startrek #closereading
Too Complex: It’s Not Kubernetes, It’s What It Does
The open-source container orchestration system for automating software deployment, scaling, and management has earned a bad rep for being too complicated. In this post, let’s explore whether that reputation is well deserved. The Steep Learning Curve… ⌘ Read more
Kubestronaut in Orbit: Gerardo López
Get to know Gerardo Gerardo is a passionate Cloud Native Advocate, Kubernetes expert, and Docker Captain with a strong focus on DevOps, software development, and security. Based in Costa Rica, he has earned several certifications, including… ⌘ Read more
Desktop 4.39: Smarter AI Agent, Docker CLI in GA, and Effortless Multi-Platform Builds
Docker Desktop 4.39 brings Docker AI Agent for real-time help, plus Bake for faster builds and Multi-Node Kubernetes for better testing. Learn more! ⌘ Read more
I did not want to miss the chance to take one (maybe) last picture of this beautiful symmetrical view. ⌘ Read more
Four steps toward building an open source community
Three maintainers talk about how they fostered their open source communities.
The post Four steps toward building an open source community appeared first on The GitHub Blog. ⌘ Read more
Just a few more days before I leave Kassel after two and a half years. Feeling grateful for everything this city has given me and excited for what’s ahead! ⌘ Read more
Erlang Solutions: Understanding Big Data in Healthcare
Healthcare generates large amounts of data every day. From patient records and medical scans to treatment plans and clinical trials. This information, known as big data, has the potential to improve patient care, improve efficiency, and drive innovation. But many organisations are still figuring out how to use it effectively.
With AI-driven analytics, wearable technology, and real-time monitoring, healthcare providers, insurers, and phar … ⌘ Read more
KubeCon + CloudNativeCon Europe 2025 co-located event deep dive: OpenFeature Summit
Co-chairs: Michael Beemer, Jonathan Norris, Thomas PoignantApril 1, 2025London At the OpenFeature Summit, we want attendees to leave with a deep understanding of the latest trends and real-world use cases in feature flagging. This event is… ⌘ Read more
AI Cloud: What, Why, and How?
The rapid growth of AI applications across industries has led to significant changes, particularly with the adoption of deep learning and generative AI, which provide a competitive advantage in industries such as drug discovery in pharmaceutical… ⌘ Read more
Tailscale is pretty useful
Article URL: https://blog.6nok.org/tailscale-is-pretty-useful/
Comments URL: https://news.ycombinator.com/item?id=43270835
Points: 505
# Comments: 273 ⌘ Read more
Video: How to run dependency audits with GitHub Copilot
Learn to automate dependency management using GitHub Copilot, GitHub Actions, and Dependabot to eliminate manual checks, improve security, and save time for what really matters.
The post Video: How to run dependency audits with GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more
Not just for developers: How product and security teams can use GitHub Copilot
GitHub Copilot isn’t just for developers! Discover how product managers, security professionals, scrum masters, and more use GitHub Copilot to streamline tasks, automate workflows, and boost productivity across teams.
The post [Not just for developers: How product and security teams can use GitHub Copilot](https://github.blog/ai-and-ml/github-copilot/not-just-for-dev … ⌘ Read more
Volcano v1.11 Released! A New Era of Cloud-Native Scheduling for AI and Big Data
As the de facto standard in cloud-native batch computing, Volcano has been widely adopted across various scenarios, including AI, Big Data, and High-Performance Computing (HPC). With over 800 contributors from more than 30 countries and tens… ⌘ Read more
Aligning Language Practices for KubeCon + CloudNativeCon Japan and KubeCon + CloudNativeCon China
The global cloud native community thrives on diversity and collaboration, bringing together contributors, users, and enthusiasts worldwide. As we continue to grow and expand, we are committed to creating an inclusive and effective environment for learning… ⌘ Read more
Observability Trends in 2025 – What’s Driving Change?
Observability has evolved beyond traditional monitoring, integrating AI, automation, and security. Initially, monitoring focused on collecting logs and metrics separately, often leading to silos and limited visibility. The rise of distributed systems and microservices has increased… ⌘ Read more
お知らせ：JPCERT/CC Eyes「JSAC2025 開催レポート～DAY 2～」 ⌘ Read more