|
On March 30, 2022, a critical remote code execution (RCE) vulnerability was found in the Spring Framework. This vulnerability is another example of why securing the software supply chain is important to open source.
|
|
Last month, we had the pleasure of having Dr. Ron Westrum join us in our Tech Talk series at Cerner. Dr. Westrum is an Emeritus Professor of Sociology at Eastern Michigan University and author of the Westrum organizational typology model. In his talk, he discusses how an information flow culture reflects how managers shape values and behavior. The first part of this talk will discuss information flow in organizations, as well as provide a c..
|
|
Dive into the structure of popular Big Data file formats like Parquet, Avro, and ORC. Understand their unique features and advantages. Learn how these formats optimize data storage and processing.
|
|
I’m not sure if comments improve blogs, but I’m willing to try. But my blog is a static site and I don’t like the idea of forcing Disqus on readers of my blog. Luckily there exists a project built on matrix for adding comments to your site.
|
|
I’m not sure if comments improve blogs, but I’m willing to try. But my blog is a static site and I don’t like the idea of forcing Disqus on readers of my blog. Luckily there exists a project built on matrix for adding comments to your site.
|
|
I’m not sure if comments improve blogs, but I’m willing to try. But my blog is a static site and I don’t like the idea of forcing Disqus on readers of my blog. Luckily there exists a project built on matrix for adding comments to your site.
|
|
This post is about how I’m doing the backup of my Mac using (the great) Carbon Copy Cloner software. Maybe you can take some inspiration. My setup is to have an external SSD that is always connected via USB-C to my Mac, but I don’t want to leave it mounted on my macOS system every time, due to security and because this would cause more disk wear. So I leave my disk attached to my Mac and CCC should mount it and do the backup, just in..
|
|
In honor of April Fools' Day, I decided to write about a blockchain topic. The crypto economy is in the process of speedrunning their way from zero to a modern economy, and when you move that fast, a few things have to break along the way. One of those things is corporate governance. Matt Levine's "Money Stuff" is a financial newsletter that I can't recommend enough. If you are at all interested in finance, stocks, and markets, it is ..
|
|
Software engineering, knowledge work, or most broadly any type of white collar labor is, primarily, the production of our own psychology. Our mental capacity is our means of production. We embody the values of our work. Our identity is tightly bound up with our careers, knowledge, skills, methods, company, and our industry— we are our work . Having our identities bound to our work, and most dangerously, to an employer severely limits on....
|
|
Dive into the structure of popular Big Data file formats like Parquet, Avro, and ORC. Understand their unique features and advantages. Learn how these formats optimize data storage and processing.
|
|
This post is about how I’m doing the backup of my Mac using (the great) Carbon Copy Cloner software. Maybe you can take some inspiration. My setup is to have an external SSD that is always connected via USB-C to my Mac, but I don’t want to leave it mounted on my macOS system every time, due to security and because this would cause more disk wear. So I leave my disk attached to my Mac and CCC should mount it and do the backup, just in..
|
|
In honor of International Transgender Day of Visibility, Martin McKeay, Snyk’s Sr. Editorial Research Manager, sits down with his daughter to discuss what their experiences were together when she first came out as transgender a few years ago.
|
|
Because here’s something else that’s true. In the day-to-day trenches of adult life, there is actually no such thing as atheism. There is no such thing as not worshipping. Everybody worships. The only choice we get is what to worship. And an outstanding reason for choosing some sort of God or spiritual-type thing to worship-be it J.C. or Allah, be it Yahweh or the Wiccan mother-goddess or the Four Noble Truths or some infrangible set of eth..
|
|
Spring4Shell or SpringShell is a credible RCE vulnerability in spring-beans package, which is part of Spring Core. This is a key enabler of the inversion of control (IoC) capabilities of Spring. This is often referred to as dependency injection.
|
|
If you want to extract a tar archive tar -xf archive.tar.gz If you want to compress a directory tar -czvf archive.tar.gz /path/to/directory That’s all.
|
|
Disable the discrete graphics card on an old Macbook Pro (Mid-2010) in Linux
-
tsak.dev
-
4 years ago
-
eng
One member of the ever-growing stack of old laptops is my wife’s old Macbook Pro (Mid 2010) . Years ago I installed the maximum allowable RAM of 8 GB as well as a 250 GB SSD instead of the HDD it originally came with. It has the well-known issue of crashing whenever the discrete NVidia graphics are being used. A long time ago I started running Linux on it, as it feels much faster than the latest version of MacOS that would run on it, a..
|
|
Improving Evaluation Practices in Natural Language Generation
-
tech.trivago.com
-
4 years ago
-
eng
|
|
I have a deep interest in both matrix and different authentication schemes. When I saw the HN discussion about “Sign in with Matrix” , I thought I could probably come up with something better.
|
|
Two weeks ago I moved the very last interview from Signal Tower to this site. All of the interviews that have been published now exist here.
|
|
I have a deep interest in both matrix and different authentication schemes. When I saw the HN discussion about “Sign in with Matrix” , I thought I could probably come up with something better.
|
|
I have a deep interest in both matrix and different authentication schemes. When I saw the HN discussion about “Sign in with Matrix” , I thought I could probably come up with something better.
|
|
Improving Evaluation Practices in Natural Language Generation
-
tech.trivago.com
-
4 years ago
-
eng
|
|
Turns out we had a post t'least once every month so far since December 2020 (n actually every month since we started back in Jul 2020 barring Nov 2020). N we kinda didn't wanna break that streak, n I did actually've a post in mind. Before we getta the main topic, just a note that our Veloren server's up again, but we noticed we kinda lack interest in games without a good story/plot (while gameplay's secondary as long it's not as boring/gr....
|
|
Using the Snyk Vulnerability Database to find projects for The Big Fix
-
snyk.io
-
4 years ago
-
eng
The official event may be over, but The Big Fix community is active as ever. Today, I’ll show you how to find a project with the Snyk Vulnerability Database, so you can join the movement making the internet more secure.
|
|
I use the macOS proxy icon all the time. For me it is one of the most useful features on day-to-day use of macOS. Having it available at all times, not after hovering and an animation is great.
|
|
Dan Goodin at Ars Tecnica, on multifactor authentication (2FA/MFA): Multifactor authentication (MFA) is a core defense that is among the most effective at preventing account takeovers. In addition to requiring that users provide a username and password, MFA ensures they must also use an additional factor—be it a fingerprint, physical security key, or one-time password—before they can access an account. Nothing in this article should be ..
|
|
I am going on a sabbatical. The last two years have been tougher than usual for most people, and for many the situation has not gotten any better in the last two months. In the course of those two years my partner has had to endure two distinct cancer diagnosis along with subsequent chemo & radiation treatments. While the whole ordeal has taken its toll mentally and physically, it has also drastically changed the trajectory of our lives.
|
|
I am going on a sabbatical. The last two years have been tougher than usual for most people, and for many the situation has not gotten any better in the last two months. In the course of those two years my partner has had to endure two distinct cancer diagnosis along with subsequent chemo & radiation treatments. While the whole ordeal has taken its toll mentally and physically, it has also drastically changed the trajectory of our lives.
|
|
Having been on the Internet for decades, I’ve seen the growth of walled gardens and the associated problems. I hate it. Especially the messaging walled gardens.
|
|
Having been on the Internet for decades, I’ve seen the growth of walled gardens and the associated problems. I hate it. Especially the messaging walled gardens.
|
|
Having been on the Internet for decades, I’ve seen the growth of walled gardens and the associated problems. I hate it. Especially the messaging walled gardens.
|
|
Choosing from various pre-defined map styles and customizing maps is much easier with the new Cloud UX and the refreshed map designer tool.
|
|
In this article, we’ll learn how to secure GraphQL APIs by building a simple Node.js application using Fastify and GraphQL.
|
|
Earlier this month, I mentioned the importance of behavioral interviews for engineering managers. This next series of blog posts is going to tackle behavioral interview questions.
|
|
Elm is an interesting new front end language technology based on a functional language that generates JavaScript transparently and has a focus on great documentation and ease of learning. A good starting point is the Guide . In this blog post, I'm going to walk through the initial steps. Along the way I'll draw some comparisons to things like Rails or Laravel. My goal in all this is re-implementing a recent project I built with a Java....
|
|
WFH Day 744 It’s a whole week now since we can’t use any water in the house due to a clogged sewage pipe between the property and the main sewer pipe. That clogged pipe led to a flooding of the bathroom in the basement. Bad experience… Several plumbing companies showed up and couldn’t resolve the problem. Some broke their machines snaking through the pipe. That wasn’t very reassuring to hear.
|