Programming

Guys, need opinion!

I am an indie dev, a student (still in school), trying to think of ways to earn with just my laptop, internet, and programming skills, any ways as part of my journey I have developed several apps, now as an indie creator with practically no capital, and just reddit and facebook for marketing, should one explore this world of selling apps, your opinion and tips are highly valued so please do comment

P.S I have linked the types of apps I have that I could set up of sale, if you have any feedback on it, do tell https://muhammadj.gumroad.com/l/wifipassfinder

So-called ‘AI’ does not reduce, but rather diffuses and renders labour practically invisible.

With the arrival of Cyber Resilience Act it can be helpful to generate a Software Bill of Materials (SBOM), and to process other to look for known vulnerabilities.

Two open source tools under Apache 2.0 license:

• Syft, for SBOM generation: https://github.com/anchore/syft
• Grype, to process then the SBOM: https://github.com/anchore/grype

A 16 minute read, but great nonetheless

I would prefer activitypub on stuff like this, but its still cool.

Developer experience, concrete examples, contextualized, including flaws/edge of capabilities.

Ideation, Maintenance, Coding, Testing, Debugging, …

Chapters:

• Speaker Introductions
• 00:03:03 - Personal experiences with AI in coding
• 00:14:41 - Updating regular expression engine
• 00:31:39 - AI Assisting in Code Writing and Fixing Mistakes
• 00:34:01 - AI-Driven Regex Capabilities for Uri Templates
• 00:37:59 - Enhancements in Memory Extensions
• 00:44:10 - Discussion about AI handling tasks and upcoming merge
• 00:46:00 - AI creates and handles test cases automatically
• 00:46:57 - AI tackles project tasks, improves efficiency, and handles edge cases

A good look into how it is and can currently be used.

cross-posted from: https://programming.dev/post/31210046

Firefox 139.0 released yesterday, with support for the Temporal JavaScript API.

I explored the API, writing down the most relevant interfaces into a reference or cheat sheet.

It's certainly and finally a thorough API for handling temporal information. Working with zoned datetime across time offsets and time zones can get very confusing, though.

I love how you can work with them though, especially with durations.

console.log(Temporal.PlainDateTime.from('2025-02-05T08:00:00'))

console.log(Temporal.Now.plainDateTimeISO("Europe/Berlin"))

console.log(Temporal.Now.plainDateTimeISO().add('PT2M0.2S').subtract('PT0.5S').since(Temporal.Now.plainDateTimeISO()))

console.log(Temporal.ZonedDateTime.from('2025-02-05T13:57:35.777888[Europe/Berlin]').withTimeZone('Europe/London'))

I learned about Appwrite from the entry in the selfh.st newsletter. It looks like an open source (BSD-3 Clause license) alternative to Google's Firebase and other BaaS platforms:

https://appwrite.io/blog/post/open-source-firebase-alternative

I haven't tried it, but it looks neat

Is anyone aware of any FOSS browser replacement projects? Being a "full stack dev" (feels like a false skill set most of the time) I'm at this point where there are easily enough of us who have struggled with implementing web apps in the various frameworks and tools that essentially all boil down to JavaScript, HTML and CSS.

There's nothing wrong with them individually, but with modern languages and hardware we should be able to make something better. At least in a way to encourage adoption of something better, and I want to contribute to it.

Marketers promote AI-assisted developer tools as workhorses that are essential for today’s software engineer. Developer platform GitLab, for instance, claims its Duo chatbot can “instantly generate a to-do list” that eliminates the burden of “wading through weeks of commits.” What these companies don’t say is that these tools are, by temperament if not default, easily tricked by malicious actors into performing hostile actions against their users.

Researchers from security firm Legit on Thursday demonstrated an attack that induced Duo into inserting malicious code into a script it had been instructed to write. The attack could also leak private code and confidential issue data, such as zero-day vulnerability details. All that’s required is for the user to instruct the chatbot to interact with a merge request or similar content from an outside source.

Title really, but some comments ...

I'm likely to move to Codeberg, and I like the idea of a CI system that I can run locally, without tie-in to a particular code hosting vendor. But why this over e.g. Jenkins, or whatever other systems there are these days? I'm new to Woodpecker.

The comment does well in providing context and arguments.

Lets go back to the closest thing we have for requirements for this editor..Default CLI Editor - Feature Exploration!. This discussion was based on the current state of windows and was not concerned with UNIX.

Being a simple text editor, it should not hallucinate, it should not add text one did not type, it should not change the text that was typed. If the user typed a tab character, it was because the user wanted a tab character. If you want four spaces then type four spaces.

edit should by default work like the original namesake and not hallucinate or add characters that were not typed or make assumptions.

Where do you draw the line on "smart" features? Tab should not add indent spaces? Encoding or newline mechanisms? Determining EOF newline?

I'm trying to figure out what has changed between the previous version of the user agreement and the current one, and the big missing thing is lack of the fallback version definitions and rules. Does this mean Jetbrains no longer offers them?