Johannes Brodwall

@jhannes
411 Followers
61 Following
91 Posts
Builds software to keep you safe. Teaches programming students. Speaks up about injustice. He/him
PrivacyAgile software development
JavaTypescript
ReactProgramming

I accidentally found a security issue while benchmarking postgres changes.

If you run debian testing, unstable or some other more "bleeding edge" distribution, I strongly recommend upgrading ASAP.

https://www.openwall.com/lists/oss-security/2024/03/29/4

oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise

Ganske utrolig at det faktisk er nødvendig at noen skriver et innlegg for å forklare at det faktisk er påbudt å kjøre under fartsgrensa🤦
Men når det først ble nødvendig var dette i det minste et usedvanlig pedagogisk innlegg:
https://vartoslo.no/bussjafor-magnus-henningsmoen-oslo/her-ma-jeg-papeke-at-det-hverken-er-farlig-eller-ulovlig-a-kjore-tregt-i-en-40-sone/481118
– Her må jeg påpeke at det hverken er farlig eller ulovlig å kjøre «tregt» i en 40-sone

– Da jeg leste Jannike Thomassen sitt innlegg om trege busser trodde jeg først det var satire, og jeg må innrømme at jeg fortsatt har et lite håp om det.

VårtOslo

I wanted to take a few moments and apologize to many of my former students.

In the past I said the industry needs people who look at security as a vocation and an avocation.

I was wrong.

Have a life outside of this industry.

Have hobbies that have nothing to do with your computer.

Get outside.

The problems of the industry are not problems of people not working hard enough.

They are not problems of people not being "hard core" enough.

They are problems of education and resource prioritization.

I was wrong.

I am sorry.

Stop breaking yourself on rocks for people who don't really care if you break yourself on rocks.

Apparently "writing code that solves the business problems" is way less exciting than creating shared libraries, minor iterations of code style, automating linting and working on pipelines.

My guess is that it's because the latter requires no specific business knowledge of concepts, and is more transferable

My second guess is that recognition from tech peers is probably worth more to them than recognition from the POs and business leaders

It makes me sad as that stuff adds little value

Exactly 14 years ago , Satoshi Nakamoto designed the most pathetic / inefficient system ever invented by humankind : the blockchain.

Today, it weights 60 000 tons, wastes constantly 10 gigawatts (more than Belgium or Chile) to process less than 7 transactions per second :

Less than a 33 bps modem from 1990.

This could be a joke if it didn't have such gigantic environmental impact, wasn't enabling billion dollars ransomware industry and was not crushing thousands of lives in the process.

Det rareste med #elektrifisering av norsk sokkel er hvordan oljebransjen plutselig har fått det for seg at å brenne deres egen fossile energi er en stor synd, men når andre gjør det er det helt greit. Dette er kynisk #grønnvasking intet annet. #NorskTut

One aspects of Agile software development is to work concurrently

On a typical week, my team will be observing or talking to end users, sketching design ideas, pair programming key parts of the future system, meeting with technical experts to understand technical constraints and possibilities and deploying things to our servers

The activities support and enable each others. For example, when implementing code, we may come to with questions to ask at our next meeting with users

The Problem With Dependency Injection Frameworks: A 🧵

Right before the weekend, I wrote a snarky article about my gripes with dependency injection frameworks. Here's the thread I promised about it.

Here's the article: https://www.jamesshore.com/v2/blog/2023/the-problem-with-dependency-injection-frameworks

1/

James Shore: The Problem With Dependency Injection Frameworks

6/ Magic frameworks are bad:

They're sorta cool when they work, but absolute hell when they don't.

5/ I'll give a quick summary of the arguments for each point. Read the article for details. (https://www.jamesshore.com/v2/blog/2023/the-problem-with-dependency-injection-frameworks)

Third-party code is expensive: People's build vs. buy is wrong. You’re not comparing the cost of building and maintaining it yourself to the cost of buying it from someone else. You’re comparing it to the cost of buying it, learning it, working around not-quite-right behavior, keeping up with updates, and dealing with incompatibilities.

James Shore: The Problem With Dependency Injection Frameworks