Searching We Love Privacy Club

Twts matching #blog
Sort by: Newest, Oldest, Most Relevant

The importance of secrets detection and redaction within the SLSA framework
Member post by Wayne McDaniel, GitGuardian Leaked credentials, aka secrets, are an easy way for bad actors to gain access to your environments and data. While no one intends to leave these valuable API keys, tokens, and passwords… ⌘ Read more

⤋ Read More

Docker Desktop 4.33: GA Releases of Docker Debug and Docker Build Checks Plus Enhanced Configuration Integrity Checks
Docker Desktop 4.33 is packed with powerful new features designed to elevate your container development experience. Docker Desktop 4.33 includes GA releases of Docker Debug and Docker Build checks, and significant UX improvements to the Configuration integrity check. ⌘ Read more

⤋ Read More
In-reply-to » I setup and switched to Headscale last night. It was relatively simple, I spent more time installing a web GUI to manage it to be honest, the actual server is simple enough. The native Tailscale Android app even works with it thankfully.

@prologic@twtxt.net Yes I suppose that is true. There is an article on Tailscale’s site that explains it all quite a bit: https://tailscale.com/blog/how-nat-traversal-works

To me, with CGNAT, it’s a small miracle that a direct connection can be made between peers (as opposed to going through a relay constantly) but it does indeed work. I guess to host it at home you would need to have it WAN accessible, and if you’ve already gone to the trouble of port forwarding etc… well 😅
Not that I could personally do that, but for those with static IPs etc.

⤋ Read More

Summer vacation ‘24
A week ago, we returned from our summer vacation: This year, just like four years ago, when there weren’t many other options due to COVID, we went for 1.5 weeks to my grandmother’s vacation apartment in Lübeck-Travemünde. ⌘ Read more

⤋ Read More

Beyond the Heat Island
Growing up in Athens in the 1980s air conditioning was not exactly commonplace. Not in our cars and certainly not at home. We first got air conditioning at my parents’ home in the late 1990s. With very few exceptions during my childhood, we didn’t feel we needed any. Nobody did. Sure, the weather got hot […] ⌘ Read more

⤋ Read More

The inevitable Kubernetes – 10 years, still a lot to do
Member post by Sergey Pronin, Percona Kubernetes launched in June 2014 – since then, it has played a huge part in popularizing cloud-native application designs and supporting more microservices deployments. The growth of container deployments is massive, and… ⌘ Read more

⤋ Read More

GreenOps and FinOps: the perfect pitch toward business and environmental goals
Member post originally published on the Mia-platform blog by Graziano Casto The information and communication technology sector alone contributes around 1.4% of global emissions, making sustainability a critical issue in today’s tech industry. Gartner predicts that within the next two years,… ⌘ Read more

⤋ Read More

GoBlog can show GPX tracks as SVG now
After my bike tour on Monday, I first felt the usual exhaustion, but later that evening and night, more symptoms joined and showed me, that I, again (third time already this year), caught some infection. Nothing too bad, but it forced me to relax and recover the last two days. ⌘ Read more

⤋ Read More

Empowering Developers with Docker: Simplifying Compliance and Enhancing Security for SOC 2, ISO 27001, FedRAMP, and More
With a Docker Business subscription, Docker customers have access to granular controls and a full product suite to help them maintain compliance and improve security. ⌘ Read more

⤋ Read More

Building a zero CVE strategy
Member post originally published on the Kubesimplify blog by Kunal Verma With the increase in software complexity and as digital threats evolve (as discussed in our previous blog) in today’s digital age, the organizations are facing a massive increase… ⌘ Read more

⤋ Read More

Docker Security Advisory: AuthZ Plugin Bypass Regression in Docker Engine
Certain versions of Docker Engine have a security vulnerability that could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low. This advisory outlines the issue, identifies the affected versions, and provides remediation steps for impacted users. ⌘ Read more

⤋ Read More

How we improved availability through iterative simplification
Solving and staying ahead of problems when scaling up a system of GitHub’s size is a delicate process. Here’s a look at some of the tools in GitHub’s toolbox, and how we’ve used them to solve problems.

The post [How we improved availability through iterative simplification](https://github.blog/engineering/engineering-principles/how-we-improved-availability-through-iterative-simplification/ … ⌘ Read more

⤋ Read More

How to review code effectively: A GitHub staff engineer’s philosophy
GitHub Staff Engineer Sarah Vessels discusses her philosophy of code review, what separates good code review from bad, her strategy for finding and reviewing code, and how to get the most from reviews of her own code.

The post [How to review code effectively: A GitHub staff engineer’s philosophy](https://github.blog/developer-skills/github/how-to-review-code-effectively-a-github-staff-eng … ⌘ Read more

⤋ Read More

Welcome Bob Killen, CNCF’s new Senior Technical Program Manager!
We’d like to take a moment to welcome and introduce (or reintroduce) Bob Killen, CNCF’s new Senior Technical Program Manager! Bob has been a member of the cloud native community for some time now and is probably familiar… ⌘ Read more

⤋ Read More

Authentication vs authorization: understanding the difference
Member post originally published on the Cerbos blog by Omu Inetimi Authentication vs Authorization: Understanding the Difference In recent times, security in modern applications cannot be overemphasized. It is extremely important to ensure our applications have proper security… ⌘ Read more

⤋ Read More

JMP: Newsletter: Calls from SIP; Potential New SIM Plan
Hi everyone!

Welcome to the latest edition of your pseudo-monthly JMP update!

In case it’s been a while since you checked out JMP, here’s a refresher: JMP lets you send and receive text and picture messages (and calls) through a real phone number right from your computer, tablet, phone, or anything else that has a Jabber client. Among other things, JMP has these features: Your phone number on every device; Multiple phone numbers, one app; Free as … ⌘ Read more

⤋ Read More

Lessons from CrowdStrike’s Buggy Update: The Critical Importance of Robust Release Processes
Community post by Andrés Vega, CNCF TAG Security Recent events involving CrowdStrike’s Falcon security software have underscored a critical lesson across the industry : the importance of having a robust, secure release process. This incident serves as a… ⌘ Read more

⤋ Read More

ProcessOne: ejabberd 24.02

Image

Introducing ejabberd 24.02: A Huge Release!

ejabberd 24.02 has just been release and well, this is a huge release with 200 commits and more in the libraries. We’ve packed this update with a plethora of new features, significant improvements, and essential bug fixes, all designed to supercharge your messaging infrastructure.

Image

– **![🌐](https://s.w.org/im … ⌘ Read more

⤋ Read More

Cloud Native Glossary — the Turkish version is live! (blog in English + Turkish)
The Cloud Native Glossary is a project led by the CNCF Business Value Subcommittee. Its goal is to explain cloud native concepts in clear and simple language without requiring any previous technical knowledge. We are in the process… ⌘ Read more

⤋ Read More

Erlang Solutions: Meet the team: Nico Gerpe
Welcome to our first-ever “Meet the Team” series!  In this first edition, we’ll be shining the spotlight on Nico Gerpe, the Business Unit Lead for the Americas team at Erlang Solutions.

Nico discusses his role at Erlang Solutions, his latest explorations in the IoT and machine learning space and most importantly- fun Argentinian summer traditions!

Image

About N … ⌘ Read more

⤋ Read More

Docker Desktop 4.32: Beta Releases of Compose File Viewer, Terminal Shell Integration, and Volume Backups to Cloud Providers
Discover the powerful new features in Docker Desktop 4.32, including the Compose File Viewer, terminal integration, and enterprise-grade volume backups, designed to enhance developer productivity and streamline workflows. ⌘ Read more

⤋ Read More

How researchers are using GitHub Innovation Graph data to estimate the impact of ChatGPT
An interview with economic researchers who are applying causal inference techniques to analyze the effect of generative AI tools on software development activity.

The post [How researchers are using GitHub Innovation Graph data to estimate the impact of ChatGPT](https://github.blog/2024-07-17-how-researchers-are-using-github-innovation-graph-data-to-estimate-t … ⌘ Read more

⤋ Read More

Interval tree implementation in Xline
The Reason for Implementing Interval Trees In a recent refactoring of Xline, we identified a performance bottleneck caused by two data structures on the critical path: the Speculative Pool and the Uncommitted Pool. These two data structures are… ⌘ Read more

⤋ Read More

It took me so long to find the cause of a memory leak in GoBlog. I thought it was smart to use a cache for prepared database statements. But I didn’t read the documentation and didn’t know that prepared statements need to be closed when they are no longer needed to free up the allocated resources. 🤦‍♂️ I finally fixed it by removing the prepared statement cache altogether. Less code, fewer problems in the future, and the cache wasn’t much of an improvement anyway. I also learned about the usefulness of memory profil … ⌘ Read more

⤋ Read More