Custom Advisories: the unsung hero of dependency-management-data (3 mins read).

How to use custom advisories with dependency-management-data to track packages that your organisation may not want to use.
Custom Advisories: the unsung hero of dependency-management-data (3 mins read).
How to use custom advisories with dependency-management-data to track packages that your organisation may not want to use.
Attached: 1 image Life is great here on the World Wide Web
Attached: 1 image "The only dangerous minority is the rich" Sticker seen in New Orleans, Louisiana
Week Notes 23#34 (2 mins read).
What happened in the week of 2023-08-21?
In this classic episode, Bridger is nothing but class even when Ben Schwartz (Parks & Rec, The Afterparty) cruelly forces a gift on him. The two discuss wizards, terrible biology teachers, and local wildlife.
Zoomers & boomers: «IDGAF. It doesn’t affect me; everyone already has all my data—» Me: No. No, they do not. You *generate* data every time you touch that service, visit that site, patronise that business. Your data isn’t just your PII, and it isn’t finite. You are a living, breathing fountain of data that can be and is used in ways that harm the vulnerable and marginalised, even if it’s never used to harm *you* It’s not zero-sum. Limiting use & reducing dependence still counts as a good
Vagrant walks us through his role at Reproducible Builds and how its mission changes the face of Linux distros, Arch Linux, openSUSE, and F-Droid.
Has development of your favorite open source project stalled? Triage is sometimes a great way to get things moving again!
On August 10th, HashiCorp made the controversial decision to re-license some of the popular, formerly-open source project under the Business Source License (BUSL). Bryan and Adam spoke with founders of the OpenTF project, an effort to keep Terraform operating in the open.In addition to Bryan...
This week we’re talking to Andreas Kling about SerenityOS and Ladybird. Andreas started SerenityOS as a means of therapy. It’s self-described as a love letter to “‘90s user interfaces with a custom Unix-like core.” Andreas previously worked at Nokia and later at Apple on the WebKit team, so he had an itch to do somethi...
Ty Franck (one half of James S.A. Corey) is joined by a special guest... the Cara Gee ('Drummer' on The Expanse)! Cara stopped by to talk about her new cool Expanse Telltale game and Wes even shows up as well as a one of our patrons...
Turning on Caps Lock when the Caps Lock key is bound to a different key (1 mins read).
How to trigger a Caps Lock event when you've rebound the key to a differnet key.
Kris Nova joins Bryan, Adam, and the Oxide Friends to talk about Mastodon. Kris runs Hachyderm, a Mastodon server. She shares her experience with Mastodon and the Fediverse.
Sorry I’ve been weird recently, and also in the past, and will also be in the future
Setting up real-time Slack notifications for GitHub (1 mins read).
How to get Slack's real-time notifications integrated with GitHub.
I will be attending
I will be attending
Was thinking of making a horror movie. For one day every year all repos are public and there’s no checks on pull requests. No tests are allowed and CI/CD won’t block you. The Merge.
I'm interested in attending
.Managing Buildkite Agent Images with Renovate (1 mins read).
How to use Renovate to manage Buildkite Agent Images.
Writing about the big beautiful mess that is making things for the world wide web.
Kris Nóva is a Senior Principal Software Engineer at Twilio Inc. We hear about her incredible journey from a nerdy teen installing Linux on the family computer to becoming an outspoken voice in the tech community. Growing up in Texas with conserva...
Week Notes 23#33 (3 mins read).
What happened in the week of 2023-08-14?
tell your friends you love them while they're still alive *it doesn't make you less sad when they die, but at least you know you did it
RIP @nova. You were an awesome person, and the world will be worse off without you.
Lane chats with Jonathan Hall, a long time Go developer, host of the cup o' go podcast, and prolific DevOps guy. They discuss what DevOps is, what it isn't and why Go is such a good option for backend and devops work.Learn back-end development - https://boot.devListen on your favorite podcast...
A little professional story: Please be kind when "correcting" co-workers about something you feel they've misunderstood or are just wrong about. One of the really weird things in my life is that I seem to encounter -or trigger- edge cases. For non-technical folks: an "edge case" is a generally rare bug that only occurs under a very particular set of circumstances, usually quite obscure. Someone might report a bug that no-one can reproduce, and it turns out that the bug only occurs on the last Friday of the month, if the device is used between 9pm and 10pm. We refer to something like that as an "edge case". A few years ago I found a *really* weird bug in one of our products, and I mentioned it to one of our senior developers. That person then proceeded to loudly, and in front of an entire group of co-workers, lambast me for something that was OBVIOUSLY end-user error, and was "fundamentally impossible" to be anything else. It was one of the most humiliating professional experiences of my life. It made me incredibly wary of raising Jira tickets, unless I could fully reproduce and document a bug. A couple of years after this incident, I was chatting with another dev who'd started working with our company, and was in QA, and he mentioned this edge case he'd recently encountered. If condition A, and condition B, and condition C, AND condition D were all met, it would trigger this really weird bug. ...the same one I'd mentioned to one of our senior devs a couple of years earlier. It wasn't end-user error. It was an edge case. [sigh] Yesterday during our weekly technical meeting, I asked a question as to whether an underlying software process had been significantly & quietly changed recently. I explained that I'd encountered a number of weird incidents over the past couple of months, but nothing I could log or document, just that I had a gut feel that there's a intermittent bug in play, and that after my 15-hour day on Wednesday, I was now almost certain that changes might have occurred in that particular process. Turns out that entire process had been rewritten. I was asked why I hadn't raised any Jira tickets for it. Our dev team could have had a couple of months headstart on this issue, and documented occurrences of it, if a deeply frustrated and under-pressure dev hadn't publicly ripped me a new arsehole five years ago. Everything is copacetic. No-one is upset with me, the dev who asked me why I hadn't raised the ticket was the QA dev, and all I had to say was "Bug X", and we both laughed, and the dev team gets more of my "gut feel" bug reports moving forward. The other dev and I are on excellent terms these days as well. I went to the mat with them three years ago, and they apologised, and we talked out our differences, and we have a great working relationship now. How you treat people matters, even in a moment of deep frustration, and can have long-term consequences in ways that you may not expect. Be kind. Always.
Our friend Justin Searls recently published a widely-read essay on enthusiast programmers, inter-generational conflict & what we do with this information. That seemed like a good conversation starter, so we grabbed Justin and Landon Gray to discuss. Let’s talk!
This week we’re talking with Jonathan Carter who’s on his fourth term as Debian Project Lead (DPL) and we’re talking about 30 years of Debian!
Running commands against every module in a Go multi-module project (1 mins read).
How to run commands like go test
when using a multi-module Go project.
A technical dive into how the Go stack works and why we as programmers should care.
Lane chats with Trash, a Netflix engineer and code streamer on Twitch. They break down Trash's story: how he got into coding, from being a mainframe developer all the way through his days as a backend engineer to a frontend developer at Netflix.Learn back-end development - https://boot.devTrash...
Ty Franck (one half of James S.A. Corey) and Wes Chatham ('Amos Burton' on The Expanse) decided after talking about Alien Invasions they wanted to do a deep dive on the movie Arrival. This is a book and a movie the guys both love so sit back and enjoy...
She’s a 10 but her flaws are part of what makes her amazing Also she’s you. You’re doing great.
Val Town is a shiny, new social programming environment to write, run, deploy and share code. Steve Krouse –Val Town creator– joins Jerod & Amal to tell us all about it.
Leslie Lamport is a computer scientist & mathematician who won ACM’s Turing Award in 2013 for his fundamental contributions to the theory and practice of distributed and concurrent systems. He also created LaTeX and TLA+, a high-level language for “writing down the ideas that go into the program before you do any c...
Gerhard joins us for the 11th Kaizen and this one might contain the most improvements ever. We’re on Fly Apps V2, we’ve moved from S3 to R2 & we have a status page now, just to name a few.
Remember that your relatives are only your starting party. You can add and remove people to create the party which works for you. It's 100% up to you who you keep in your party as your adventure progresses.
Resolving Timeout
s when generating entropy when generating a new GPG key (1 mins read).
How I resolved an issue with a Timeout
error when generating a new GPG key.
Attached: 1 image ❓ How reliant are you on Open Source software? 🤔 In this lightning talk, Jamie Tanna will describe how having a clearer picture & understanding of his team's OS dependencies is helping them to make better decisions on how to support, upgrade & migrate their projects. 🎟️ Tickets are available: https://ti.to/devopsdays-london/2023 #DevOps #DevOpsDays
🇬🇧 GopherCon UK, Aug 16-18🥳 Go 1.21.0 is released!Smallest release since Go 1.5golangci-lint v1.54.0 released with Go 1.21 support ProposalsAccepted: 0️⃣ Untyped zeroAccepted (and implemented): Use WithCancelCause for eggrgroup.WithContextAccepted: Experimental range support behind...
Welp, I've now officially logged out of Deliveroo Blind, so if you see any posts that look like me, it ain't 😅
Resolving black screen display with SDDM and NVIDIA GPUs (1 mins read).
How I resolved an issue with a black screen displaying when SDDM is used with an NVIDIA driver.
Instead of my usual TTY-based login on Linux, I've spent a bit of time trying to get LightDM/SDDM set up to allow me to use fingerprint-based login.
It turns out you don't even need to do that, pam_fprintd.so
can work as-is on the TTY 🥳
Week Notes 23#32 (4 mins read).
What happened in the week of 2023-08-07?