Post details
The home team discusses pay equity at New Relic, Okta’s security SNAFU, and the AI creating “wildly good” generative art.

The home team discusses pay equity at New Relic, Okta’s security SNAFU, and the AI creating “wildly good” generative art.
Today's story is an insider view of Debian. One of the oldest Linux distributions and probably one of the longest-running volunteer-based open-source projects. Joey Hess is my guest, and he dedicated significant parts of his adult life to working on Debian. He's going to share what that was like. The good and the bad, and it's almost all good. It's... […]
Lightspin obtains credentials to an internal AWS service by exploiting a local file read vulnerability on the RDS EC2 instance using the log_fdw extension.
Carlos Alexandro Becker joins Mat, Natalie, & Johnny to discuss the ins and outs of releasing your Go code. Carlos created and maintains GoReleaser, a popular tool that helps you deliver your Go binaries as fast and easily as possible.
Here’s a little bonus episode before we get back to your regularly scheduled Go Time. We’re calling it the funny bits. It’s a compilation of times we cracked up making the show for y’all. If you dig it, holler at Jerod. If you don’t, email Mat Ryer.
This week we have the pleasure of Rich Burroughs, Senior Developer Advocate at Loft Labs and host of the Kube Cuddle podcast. We talk about multitenancy in Kubernetes and how to run Kubernetes in Kubernetes with vcluster. If you are using KiND, you will find this episode interesting, and maybe even helpful. We also tal...
Protecting an Architect Framework Application with OAuth2 or OpenID Connect Authentication (4 mins read).
How to set up OAuth2/OpenID Connect authentication with an Architect Framework application.
I will be attending
Week Notes 22#14 (5 mins read).
What happened in the week of 2022-04-04?
If you utilize Java or any other JVM, there’s a good chance you know the Maven Central repository. Today’s episode brings long-time maintainers and contributors of Maven Central, Brian Fox, Jason Swank, and Joel Orlina to the mic to rehash the early days of Maven Central, lessons learned from managing open source ecosystems, and bring insight into the platform’s practical software supply chain management capabilities of the past, present, and future.
Did Spring4Shell set the internet on fire again? Not so fast. In a special episode of Wicked Good Development we dissect the zero-day RCE vulnerability in the Spring Framework dubbed Spring4Shell or Springshell. From comparisons to Log4j to how to remediate it and what versions on vulnerable, the experts on today's show break down what we know so far about this new vulnerability. And most importantly, how to determine if you're affected.
The home team chats with Jon Chan, Stack Overflow’s Director of Engineering, Public Platform, about his path from self-taught developer to director of engineering, why his management mantra is “Delegate and elevate,” the profound value of a diverse and inclusive workplace, and the Neopets-to-frontend-development pipeline. Plus, Jon gives excellent advice to all the self-taught developers out there.
“I’ll block, you run.” In this encouraging talk from four women in tech at Sonatype, hear how their career paths have shaped how they support mitigating and interrupting bias at work and ways to create environments that empower women to be their authentic selves every day. Join Senior Security Researcher Ankita Lamba, Product Manager Grace Lee, Customer Success Engineer Santi Mulukutla, and Director of Agile Coaching Sue Jasmin as they create space to discuss: -The importance of active sponsorship and mentorship -How to eliminate bias in the hiring process -Cultural limitations that affect bias in company cultures -Why cancel culture doesn’t work when it comes to inclusion -And so much more As we promised, here’s the article that inspired today’s discussion: https://hbr.org/2019/11/how-the-best-bosses-interrupt-bias-on-their-teams
Terminals are a gateway to building and running software, but they have not been reimagined since their initial creation. Warp is a new kind of terminal with visual aids, autocomplete, documentation, customization, and other features. It includes GPU acceleration, its own UI framework, and other engineering systems to increase speed and performance. Zach Lloyd joins
LOL! They banned Will Smith for 10 years! Even after he resigned from the Academy! That's 2 years for each finger!🤚🏿 Meanwhile, Roman Polanski is still being nominated for new Oscars. 🤡 The national pastime of the US is punishing Black men disproportionately.Mekka 💉💉💉🎉 *My Mask Protects You* Okereke (@mekkaokereke)Sat, 09 Apr 2022 00:52 +0000
Has Go caught your interest, but you just haven’t had the time/opportunity to really dig into it? Are you relatively productive in your current language/ecosystem but wonder if the grass truly is greener on Go’s side of the fence? If so, this episode’s for you!
Listen to How to Dungeons and Dragons with Owen Donovan from Nobody Panic. Ever thought Dungeons and Dragons might be for you but can’t grasp the concept? No interest whatsoever but keen to hear Stevie and Tessa get completely over-excited at the idea of being a wizard? Top drawer Dungeon Master Owen Donovan presents a beginners guide, and THEN we play a game over on the Patreon. And honestly it’s worth signing up just for that.You can find Owen's character sheet recommendations here and visit the official D&D website starter set here.And you can check out Stevie's Druid character sheet here.Subscribe to the Nobody Panic Patreon at patreon.com/nobodypanicWant to support Nobody Panic? You can make a one-off donation at https://supporter.acast.com/nobodypanicRecorded and edited by Naomi Parnell for Plosive.Photos by Marco Vittur, jingle by David Dobson.Follow Nobody Panic on Twitter @NobodyPanicPod
In Episode 3 we talked all about how Cherry would be joining Chloe with one of her clients in her Dominatrix sessions over the weekend and what Cherry had to look forward to (let's just say Cherry popped a lot of her own Cherry's that weekend). In this episode we talk about her experience, procedures during the experience, safety and aftercare. Some topics we cover in the episode are: How to get started in butt playCherrys first voyeur experienceConsent - Cherry being slapped in the face during sexSafety procedures during a client sessionSafe wordsAftercareDating apps and much much more!
I will not be attending
.Getting node-canvas to run on AWS Lambda (3 mins read).
Some common issues that occur when using node-canvas on AWS Lambda, and how to solve them.
Our final installment from GopherCon 2021 is an awesome panel conversation led by Natalie & Angelica with guests Linus Lee, Daniela Patruzalek, and Sebastian Spank. All three of these gophers are using Go in cool and interesting ways outside of traditional work projects.
Mitch and Andrew from the 1Password team talk with Amal and Nick about the company’s transition to Electron and web technologies, and how the company utilized its existing web stack to shape the future of its desktop experience.
This is our second Kaizen episode, where Adam, Jerod & Gerhard talk about changelog.com improvements since episode 10. OK, so Gerhard deleted the DNS API token. Not only did he take the time to understand how that happened, so that he could actually learn from his mistake, but now we have a system in place so that ...
Parsing the Cookie
and Set-Cookie
headers with Go (2 mins read).
How to parse the value of a Cookie
or Set-Cookie
header to a JSON object.
I will be attending
Generating a Go HTTP Client from OpenAPI schemas (2 mins read).
How to generate a Go HTTP client really quickly and easily, with no manual work, using the oapi-codegen project.
Generating Go structs from OpenAPI schemas (2 mins read).
How to generate Go structs really quickly and easily, with no manual work, using the oapi-codegen project.
Do you need a staging environment? We've written this short blog post to share how an alternative approach is saving us time, and helping us ship better code.
Setting up GitLab CI for Go projects (2 mins read).
How to set up a basic set of automated builds for Go projects on GitLab CI, for modern Go projects.
With all the fuss about Twitter’s promised edit button, and how they might design it, we’re missing a disturbing development — Twitter is using its embedded javascript to edit other people’s sites.
APIs are part of our daily roles as software developers, but what are they? What different types are there? And how can you design a good one?
Alexis Richardson Mohamed Ahmed GitOps is a deployment and infrastructure management strategy based around continuous delivery and Kubernetes, with Git at the center of deployment workflows. Policy management can be used to define permissions and rules around who can deploy and what constitutes safe deployment. There is a synergy between GitOps tooling and policy management
On this day in 2014
Today is my first official day of funemployment! I had a great few months at the Data Standards Authority in the Central Digital and Data Office in @cabinetofficeuk, but I'm looking forward to my next role, which I'll announce shortly 👀
Was nice having a week off last week with the new pup, and I'm looking forward to a couple more weeks off to reset before the new role!
Feross has been working on something big. He joins Chris and Nick, along with guests Bret Comnes and Mik Lysenko to discuss Socket, what it is, and its focus on the security of the JavaScript supply chain.
Week Notes 22#13 (9 mins read).
What happened in the week of 2022-03-28?
Today we have a special treat. A conversation with Brian Kernighan! Brian’s been in the software game since the beginning of Unix. Yes, he was there at Bell Labs when it all began. And he is still at it today, writing books and teaching the next generation at Princeton. This is an epic and wide ranging conversation. Yo...
Nabeel Sulieman, Senior Software Engineer at Vercel, talks about KCert, a simpler alternative to cert-manager that he built. Gerhard tried it out, and he thinks that Nabeel is onto something. If you want to see the video that they recorded, ping us on Twitter or Slack. We love this story, especially the long-term appro...