Post details
Hi, Spring fans! This week, my first as an employee of Broadcom, I am joined by Spring Security community legend Laura Spilca and we talk about all things security, OAuth, and more.

Hi, Spring fans! This week, my first as an employee of Broadcom, I am joined by Spring Security community legend Laura Spilca and we talk about all things security, OAuth, and more.
+1 on this, it came up during discussions in a recent Sustain OSS Podcast as something that would absolutely be a useful resource for protecting the community and helping out with difficult situations
Random thought I had earlier that I'd like to run by some #FLOSS software people or FLOSS lawyers: Could we start a "union" of FLOSS software developers that would support us legally and help us bargain for better terms when negotiating license exceptions, support contracts, etc.? đ§”
In this interview, we chat with Lisa Karlin Curtis, Tech Lead at incident.io, about running meetings that, well, don't suck. In it, she gives actionable advice for running your own meetings, emphasizes why empathy in the workplace is important, reflects back on bad meetings she's run, and more. Read Lisa's blog post here: https://incident.io/blog/how-to-run-meetings-that-dont-suck
Attached: 1 image this came to me in a dream
What a year 2023 was at incident.io! While it's hard to summarize 365 days, a few things stand out: We launched a bunch of new products like Catalog and Status Pages. We hired a ton and we're now sitting at nearly 80 employees as of December 2023. We expanded into the U S opening up a brand new office just a few weeks ago. ...and there's still so much more ahead of us So as we close the curtain on 2023, we sat down with the three co-founders of incident.io to do a bit of reflection on the wild ride that was this year. In this episode you'll hear them discuss challenges, big wins, moments of growth, what's next for us, and most importantly, what the three co-founders like most about one another. Read our year-end blog post here: https://incident.io/blog/reflecting-on-a-momentous-2023
Apparently 8.2% of the most downloaded package versions from npm are depreciated.. Deceptive Deprecation: The Truth About npm Deprecated Packages https://blog.aquasec.com/deceptive-deprecation-the-truth-about-npm-deprecated-packages
Here's a tough but common situation for open source maintainers: You want a project you co-maintain to be more secure by reducing the attack surface. There are one or more folks in privileged rol...
This week we talk to Steve Krouse, the creator of Val.Town, a platform for writing TypeScript code in a browser and deployed instantly. Starting with Steve's with his first venture into teaching children to code we trace that line directly to the vision of Val.Town. Val.Town is a social network, app store, and collaborative place all in one. https://twitter.com/stevekrouse https://stevekrouse.com/ https://val.town https://futureofcoding.org/episodes/ Become a paid subscriber our patreon, spotify, or apple podcasts for the full episode. https://www.patreon.com/devtoolsfm https://podcasters.spotify.com/pod/show/devtoolsfm/subscribe https://podcasts.apple.com/us/podcast/devtools-fm/id1566647758
I will be attending
Today I've been emailed by both Clever Cloud and Heroku around "your account hasn't been used in some time so we're gonna delete it" - coincidence, or is today their "clean up all the old accounts day"?
Between and I took 6206 steps.
In this episode of the Mechanical Ink podcast, host Schalk Neethling engaged in a profound conversation with Taylor Fairbank and Kai Katschthaler from Distribute Aid. They delved into the intersection of technology and humanitarian aid, emphasizing the importance of understanding ground-level needs over imposing tech solutions. Taylor narrated his transition from a tech background to co-founding Distribute Aid, influenced by his experiences in startups and the socio-political climate. Kai introduced the Open Source Explorers Program, highlighting its inclusive nature and role in integrating diverse skills into humanitarian projects. The discussion also touched upon the personal aspects of working in this field, including the impact of neurodiversity and gender identity on their experiences and perspectives.
*Opens zoom *Angles camera so boobs are in shot *Turns on video
The best management advice I ever got is to try and figure out what good management looks like and then put on a performance - try and act like a good manager, go through all of the required motions Because it turns out imitating a good manager and actually being a good manager are mostly the same thing (I think about this sometimes when I encounter debates about whether or not LLMs can reason about or understand content)
Me and @charlieegan3 have been working on a new guide for the most common errors seen in #OPA during #Rego policy development. Parser errors, compiler errors and evaluation errors â it's all in there. Hopefully it'll be a useful resource to anyone trying to get a better understanding on why some errors happen, and how to fix them. Feedback always welcome! https://docs.styra.com/opa/errors #PolicyAsCode #IAM #Identity #Authorization #DevOps #DevSecOps
The product team is too busy with incidents to prioritize work to prevent incidents đ€·
Pro tip: If you want to stop being friends with an autistic ADHDer, you probably need to tell them straight out. Because all this "fading away into the woodwork" doesn't work with people who will often not speak to their friends in years without any of the friendship feelings changing. Not seeing someone doesn't change that we think of them as our friends. So not being in touch with us, doesn't communicate "I don't want to be friends anymore". You're going to have to say it. And don't worry, we'll respect your wishes. We just need to know to understand. #adhd #audhd #actuallyAutistic
This yearâs State of Open Con schedule focuses on establishing the future of open source across software, hardware and data. Open source communities are reliant on a significant amount of unpaid labour. That makes for an interesting dichotomy that is emphasized during economic downturns. Since, theoretically, anyone should be able to join an open source project, it should have lower barriers to entry. But having free time time do free work â or being employed by a big tech company specifically to contribute to open source â is entirely based on privilege.  » Read more about: The Future of Open Source is Uncertain  »
Why am I getting Too many arguments
with vault
? (1 mins read).
Why you may be getting Too many arguments
from the vault
CLI, and how to fix it.
Phil sits down with Lorna Jane Mitchell to get the latest on what's going on at Redocly, the state of OpenAPI 3.1, and what's to come with OpenAPI's proposed 4.0 spec, Moonwalk.
Between and I took 7791 steps.
Week Notes 24#03 (4 mins read).
What happened in the week of 2024-01-15?
I was pretty chuffed with adding these Slack notifications (via Goreleaser and go-semantic-release) for releases to #DependencyManagementData which flag when there are breaking changes in the release! Makes it much easier to see at a glance, especially as there's a lot of changes going into it đ€
If you've been hearing me talking about #DependencyManagementData and are wondering about some real world scenarios it's been useful, check out the new Case Studies section on the site đ
Also looking for more examples of where it's been useful!
Mohammed discusses WhatsApp TOS violations, and how the distressing experience of receiving cease and desist letters forced him to step down from the project.
Jerod, Adam Argyle & the CompressedFM crew hang out prior to their Fronted Feud battle! They discuss CSS as a programming language, Appleâs walled garden, how nobody is on the same social media sites anymore, how to choose tech, the communityâs sentiment shift on GraphQL & a whole bunch more. (This episode is f...
Attached: 1 image I donât know what I was timing but itâs safe to say, I probably didnât achieve it.
Attached: 1 image Is ... is that ...
Went to a tech meetup in Dublin yesterday and no one I spoke to had heard of the fediverse (or Mastodon, even). Iâm talking about software engineers. This blows my mind. (At least everyone I spoke with has heard of it now, though. And when people do hear about it â as with the #SmallWeb â they do get it. And theyâre excited about it.) #fediverse #mastodon #SmallWeb
Kim Harrison, a freelance content marketing strategist and author, joins Corey on Screaming in the Cloud to talk about asking the right questions to find your target demographic, why she has such a deep love for story telling, and how marketing extends after the product has been sold. Kim shares...
Ben Johnson (@benbjohnson) is the creator of Litestream and LiteFS, two open-source disaster recovery solution for SQLite. Litestream is designed to provide continuous backups for SQLite databases by streaming incremental changes, allowing for easy data recovery in the event of a server crash. LiteFS, on the other hand, is built on LiteStream but uses transactional control to focus on replication and high availability. Join us as Ben discusses the challenges and trade-offs of open source contributions and the future of databases. Contributor is looking for a community manager! If you want to know more, shoot us an email at eric@scalevp.com. Subscribe to Contributor on Substack for email notifications! In this episode we discuss: The history of how Ben got involved in SQLite development out of âspiteâ How Litestream âworks on a flukeâ Different use cases for Litestream vs LiteFS Why fully open contributions isnât always Benâs style The greater server-side SQLite landscape Links: Litestream LiteFS Fly.io BoltDBÂ People mentioned: Philip OâToole (@general_order24) Other episodes: The Social Miracle: rqlite with Philip OâToole The Big Fork: libSQL with Glauber Costa
I will be attending
This show is supported by you! Consider joining as a Patreon member to support the show.Thanks Yarden for coming on the show!ProposalsDeclined: ASCII output in Go tools, PowerShell investigation underwayLikely Accept: `-json` flag for go buildThe new Range syntaxGo Wiki: Rangefunc ExperimentRange...
Una & Adam from The CSS Podcast defend their Frontend Feud title against challengers James & Brad from CompressedFM. Letâs get it on!
Between and I took 10234 steps.
I was concerned that if my build runs every 12 hours, itâll keep sending webmentions for the same posts. Remy assures me that duplicate webmentions arenât an issue, as the accepting server will just respond with a 200 if I send a webmention that itâs already seen.
Although that should be true, I found that some folks don't handle it as well - my site was deploying multiple times an hour so was a bit noisier, but worth knowing that not every Webmention receiver is equal
â hypnotizing your partnerâs partners â metaprogramming
Content warning: what, lewd
I strive to respect everybodyâs personal preferences, so I usually steer clear of debates about which is the best programming language, text editor or operating system. However, recently I was asked a couple of times why I like and use a lot of Go, so here is a coherent article to fill in the blanks of my ad-hoc in-person ramblings :-).
I will be attending
.Between and I took 9515 steps.