Securing our home labs: Frigate code review
This blog post describes two linked vulnerabilities found in Frigate, an AI-powered security camera manager, that could have enabled an attacker to silently gain remote code execution.
The post Securing our home labs: Frigate code review appeared first on The GitHub Blog. ⌘ Read more
Isode: Red/Black – 2.1 New Capabilities
OverviewThis release adds important new functionality and adds further device drivers to Red/Black, a management tool that allows you to monitor and control devices and servers across a network, with a particular focus on HF Radio Systems. A general summary is given in the white paper Red/Black Overview.
 @movq It took a little over a minute on my machine.. i should try to make it multi threaded.. 🤔
⤋ Read More
took a few attempts.. but i managed to do it in half the time!
Hey everyone, we are figsoda and Ryan Lahfa,
the release managers for this stable release and we are very proud to announce the public availability of NixOS 23.11 “Tapir”.
This release will receive bugfixes and security updates for seven months (up until 2024-06-30).
- [Relea … ⌘ Read more
Food charity ‘distressed’ by dumped fruit, vegetables after Aldi launches new supermarket
The manager of a charity that organises food donations for people in need says she is “distressed” by the amount of produce a new Townsville supermarket has sent to landfill. ⌘ Read more
Winery deploys ducks to help reduce vineyard snails and cut input costs
After introducing the birds last growing season as a trial, Castle Rock Estate is using them again this year with hopes to grow the flock. ⌘ Read more
Calibre & Handbrake have big new releases
Open source, DRM-Free media management continues to improve ⌘ Read more
Popular winemaker saved from closure by new investors and old hands
Cassegrain Wines on the NSW Mid North Coast is purchased by a syndicate of investors including the son of its former managing director, after going into voluntary administration earlier this year. ⌘ Read more
How to Verify & Repair Mac Disk from Command Line
The Disk Utility application on MacOS has a command line counterpart, that allows Mac users to run disk maintenance and disk administration tasks, including verifying and repairing disks. There are obvious advantages and benefits to using the command line for tasks like this, particularly for troubleshooting scenarios, and remote management, but some advanced users may … [Read More](https://osxdaily.com/2023/11/08/how-to-verify-rep … ⌘ Read more
The Best Free Clipboard History & Clipboard Manager for Mac is Maccy
Maccy is a really good free clipboard manager for the Mac, the type of software that is so good that you’re grateful it is available for free, in the classic spirit of computing and open source software. It’s fast, unobtrusive, allows for text and images, with a great set of features, and a simple to … Read More ⌘ Read more
The Best Free Clipboard History & Clipboard Manager for Mac is Maccy
Maccy is a really good free clipboard manager for the Mac, the type of software that is so good that you’re grateful it is available for free, in the classic spirit of computing and open source software. It’s fast, unobtrusive, allows for text and images, with a great set of features, and a simple to … Read More ⌘ Read more
How to communicate like a GitHub engineer: our principles, practices, and tools
Learn more about how we use GitHub to build GitHub, how we turned our guiding communications principles into prescriptive practices to manage our internal communications signal-to-noise ratio, and how you can contribute to the ongoing conversation.
The post [How to communicate like a GitHub engineer: our principles, practices, and tools](https://github.blog/2023-10-04-how-to-commu … ⌘ Read more
Docker Desktop 4.24: Compose Watch, Resource Saver, and Docker Engine
With the release of Docker Desktop 4.24, we announce the official General Availability of Docker Compose Watch and Resource Saver. Combined with our new enhancements to managing Docker Engine in Docker Desktop, these updates will help you be more efficient and make your software development experience more enjoyable. ⌘ Read more
Will living with varroa mite make Australian honey and food more expensive?
Research into varroa mite is expected to surge after Australia waved the white flag in its fight to eradicate the pest from New South Wales, a decision that is also expected to increase beekeeping costs. ⌘ Read more
Australia abandons efforts to eradicate deadly parasite varroa mite after 15 months
Australia has decided it is no longer technically feasible to eradicate varroa mite and will move to management of the pest. ⌘ Read more
Iceberg Efficiency
⌘ Read more
USENET, the OG social network, rises again like a text-only phoenix
The USENET management committee has reconvened and there are green shoots of growth in the original, pre-World Wide Web social network.
West Highland Way
With a backpack full of stuff for two weeks, we managed to walk 11km on the West Highland Way in 2:35h. I feel it in my legs, but the views and the experience are worth it. ⌘ Read more
West Highland Way
With a backpack full of stuff for two weeks, we managed to walk 11km on the West Highland Way in 2:35h. I feel it in my legs, but the views and the experience are worth it. ⌘ Read more
Docker Desktop 4.23: New Configuration Integrity Check, Plus Updates to Docker Init, Compose, Watch, Quick Search, and More
Docker Desktop 4.23 is now available and includes numerous enhancements, including ASP.NET support in Docker Init, Configuration Integrity Check to alert on any configuration changes that require attention, and cross-domain identity management. This release also improves Quick Search, allowing for searching across containers, apps, Docker Hub, Docs, and any volume, and performing quick actions (st … ⌘ Read more
Erlang Solutions: Pay down technical debt to modernise your technology estate
Imagine this scenario. Your CEO tells you the organisation needs a complete tech overhaul, then gives you a blank cheque and free rein. He tells you to sweep away the old and usher in the new. “No shortcuts, no compromise!” he cries. “Start from scratch and make it perfect!”
And then you wake up. As we all know, this scenario is pure fantasy. Instead, IT leaders are faced with a constant st … ⌘ Read more
@mckinley@twtxt.net Yes, I’m still with jmp.chat, and still very happy with them overall. Their beta period ended and their pricing increased a bit, so that’s worth a bit of consideration. I also managed to get one of their eSIMs. I’m slightly less happy with that aspect of their service, though they seem to be actively working on improving it and I knew in advance this was an early beta kind of thing and likely to have issues.
The only unreliability with calls that I’ve noticed was traceable to the unreliability of my own internet connection. I’ve confused incoming calls by simultaneously making and taking calls from the computer and the phone, but I think it’s understandable that problems might arise and that’s not a real use case for me. Once or twice I did not receive a text transcription of a voice mail, but the support is usually quick to address things like that.
I host my own XMPP server and have for a good decade now, and that’s what I use with jmp.chat. I can’t speak to the quality of their hosting options.
Group texting works fine for me if one of the other parties initiates the group text. I haven’t tried to initiate my own group text in well over a year; last time I did, it didn’t work. That may or may not be a problem for you, and it may or may not have been fixed by now. Worth investigating more if it’s important. I should also say I’ve only ever used group texts with 3 participants, and can’t speak to what happens if there are more nor whether there are upper limits.
Group texts don’t use MUC. Rather, they use a special syntax in the JID, something like “+1XXX,+1YYY,…,+1ZZZ@cheogram.com”, where the + and , are required, the XXX, YYY, through ZZZ are the phone numbers (no dashes or other special chars just digits), and the @cheogram.com at the end is required.
I recommend the cheogram app if you’re on android. It has a lot of nice features on top of the Conversations base. I use gajim on my (linux) computer and it works well with jmp.chat.
I’m happy to answer other questions if you have them!
A faster way to manage version updates with Dependabot
Now, you can group multiple version updates in a single pull request.
The post A faster way to manage version updates with Dependabot appeared first on The GitHub Blog. ⌘ Read more
Rosa’s been selling produce at the Queen Victoria Market for decades, but now she fears for its future
Traders at the Queen Victoria Market in Melbourne say they feel “blindsided” by management’s decision to raise licence fees and hand back the cost of utilities, waste disposal and utilities to stallholders. ⌘ Read more
5 Benefits of a Container-First Approach to Software Development
This post provides a quick introduction to the benefits of adopting a container-first model in your software development. Learn more by downloading our free Cracking the Code: Effectively Managing All of Those Applications whitepaper. ⌘ Read more
Thanks to everyone for a fantastic #BornHack ✨
I’m baffled that every Bornhack keeps being better than the last.
This year I managed to put up a talk, two lightning talks, a gamejam and a few spontaneous meetups. All of it was a great success. So many smart people engaging in interesting ways.
And here’s to all of the new friends I made this year! I’m so glad I met you. 🤗
Now I go back to $dayjob. See you all next year! ⛺ ⌘ Read more
Sentiment Analysis and Insights on Cryptocurrencies Using Docker and Containerized AI/ML Models
Learn how Prometeo.ai leverages Docker to deploy and manage its AI/ML models for sentiment analysis of cryptocurrencies. ⌘ Read more
Docker Desktop 4.22: Resource Saver, Compose ‘include’, and Enhanced RBAC Functionality
Docker Desktop 4.22 is now available, with improved memory & CPU management, support for Compose subprojects, and improvements to role-based access control. ⌘ Read more
↳
In-reply-to
»
I used to be a big fan of a service called cocalc, which you could also self host. It was kind of an integrated math, data science, research, writing, and teaching platform.
⤋ Read More
@prologic@twtxt.net It was super useful if you needed to do the sorts of things it did. I’m pretty sad.
At its core was Sage, a computational mathematics system, and their own version of Jupyter notebooks. So, you could do all kinds of different math stuff in a notebook environment and share that with people. But on top of that, there was a chat system, a collaborative editing system, a course management system (so if you were teaching a class using it you could keep track of students, assignments, grades, that sort of thing), and a bunch of other stuff I never used. It all ran in a linux container with python/conda as a base, so you could also drop to a terminal, install stuff in the container, and run X11 applications in the same environment. I never taught a class with it but I used to use it semi-regularly to experiment with ideas.
Ignite Realtime Blog: Certificate Manager plugin for Openfire release 1.1.1
The Ignite Realtime community is happy to announce a new release of the Certificate Manager plugin for Openfire.
This plugin allows you to automate TLS certificate management tasks. This is particularly helpful when your certificates are short-lived, like the ones issued by Let’s Encrypt.
This release is a maintenance release. It adds translations. More details are available in the [changelog] … ⌘ Read more
Ignite Realtime Blog: JmxWeb plugin for Openfire 0.9.1 release
The Ignite Realtime community is happy to announce a new release of the JmxWeb plugin for Openfire.
This plugin provides a web based platform for managing and monitoring Openfire via JMX
This release is a maintenance release. It adds translations and fixes one bug. More details are available in the changelog.
Your instance of Openf … ⌘ Read more
Erlang Solutions: How IoT is Revolutionising Supply Chain Management
As global supply chains continue to face significant disruptions, many businesses are turning to IoT to access greater visibility, reactivity, and streamlined operations.
Unforeseen geopolitical conflicts, economic pressures due to inflation and severe climate change events have all contributed to an uncertain and cost … ⌘ Read more
Isode: Icon-PEP 2.0 – New Capabilities
Icon-PEP is used to enable the use of IP applications over HF networks. Using STANAG 5066 Link Layer as an interface.
Listed below are the changes brought in with 2.0.
Web ManagementA web interface is provided which includes:
- Full configuration of Icon-PEP
- TLS (HTTPS) access and configuration including bootstrap with self signed certificate and ide … ⌘ Read more
Isode: Cobalt 1.4 – New Capabilities
Cobalt proides a web interface for provisioning users and roles in an LDAP directory. It enables the easy deployment of XMPP, Email and Military Messaging systems.
Listed below are the changes brought in with 1.4.
HSM SupportCobalt is Isode’s tool for managing PKCS#11 Hardware Security Modules (HSM) which may be used to provide improved server security by protecti … ⌘ Read more
Using Docker Desktop and JFrog Artifactory for the Enterprise
Learn how to configure Docker Desktop to work with JFrog Artifactory as your Docker registry to manage the push and pull of container images. ⌘ Read more
GitHub achieves ISO/IEC 27701:2019, 27018:2019, and CSA STAR certifications
GitHub’s Information Security and Privacy Management System (ISPMS) has been certified against ISO/IEC 27701:2019 (PII Processor) and 27018:2019 standards, as well as the Cloud Controls Matrix (CCM). These standards and frameworks are internationally recognized for security and privacy program best practices. ⌘ Read more
Erlang Solutions: How to Manage Your RabbitMQ Logs: Tips and Best Practices
RabbitMQ is an open-source message broker software that allows you to build distributed systems and implement message-based architectures. It’s a reliable and scalable messaging system that enables efficient communication between different parts of your application. However, managing RabbitMQ logs can be a challenging task, especially when it’s deployed on a large cluster. In this article, we’ll ta … ⌘ Read more
Erlang Solutions: Unleashing the Power of SNMP: Exposing Your Embedded Elixir/Erlang (Nerves, GRiSP) Apps to the World
Did you know that Erlang/OTP ships with built-in SNMP (Simple Network Management Protocol) support? Using SNMP is a great way to integrate your Elixir or Erlang application into an industrial environment. This will be of particular interest for those working with embedded … ⌘ Read more
Bridging code and community
Explore the impact of non-code contributions—and why they are often undervalued, the challenges of using open source in regulated environments, and the art of managing projects at the scale of Kubernetes, now on The ReadME Podcast. ⌘ Read more
Survey reveals AI’s impact on the developer experience
We surveyed 500 U.S.-based developers at companies with 1,000-plus employees about how managers should consider developer productivity, collaboration, and AI coding tools. ⌘ Read more
Survey reveals AI’s impact on the developer experience
We surveyed 500 U.S.-based developers at companies with 1,000-plus employees about how managers should consider developer productivity, collaboration, and AI coding tools. ⌘ Read more
Hey everyone, we are Ryan Lahfa and Martin Weinelt,
the release managers for this stable release and we are very proud to announce the public availability of NixOS 23.05 “Stoat”.
This release will receive bugfixes and security updates for seven months (up until 2023-12-31).
… ⌘ Read more
Kaidan: Kaidan 0.9: End-to-End Encryption & XMPP Providers
It’s finally there: Kaidan with end-to-end encryption via OMEMO 2, Automatic Trust Management and support of XMPP Providers!
Most of the work has been funded by NLnet via NGI Zero PET and NGI Assure with [public … ⌘ Read more
Manage your application security stack effectively with the tool status page
Code scanning’s tool status gives you a bird’s eye view of your application security stack, allowing you to quickly confirm everything is working, or troubleshoot any tool in your application security arsenal. ⌘ Read more
Isode: Red/Black 2.0 – New Capabilities
This major release adds significant new functionality and improvements to Red/Black, a management tool that allows you to monitor and control devices and servers across a network, with a particular focus on HF Radio Systems. A general summary is given in the white paper Red/Black Overview
Support added for Switch type devices, that can connect multiple devices and allow … ⌘ Read more
On LinkedIn I see a lot of posts aimed at software developers along the lines of “If you’re not using these AI tools (X,Y,Z) you’re going to be left behind.”
Two things about that:
- No you’re not. If you have good soft skills (good communication, show up on time, general time management) then you’re already in excellent shape. No AI can do that stuff, and for that alone no AI can replace people
- This rhetoric is coming directly from the billionaires who are laying off tech people by the 100s of thousands as part of the class war they’ve been conducting against all working people since the 1940s. They want you to believe that you have to scramble and claw over one another to learn the “AI” that they’re forcing onto the world, so that you stop honing the skills that matter (see #1) and are easier to obsolete later. Don’t fall for it. It’s far from clear how this will shake out once governments get off their asses and start regulating this stuff, by the way–most of these “AI” tools are blatantly breaking copyright and other IP laws, and some day that’ll catch up with them.
That said, it is helpful to know thy enemy.