10 March 2021

80 links · Wednesday

I don't want to learn your garbage query language

This is a bit of a rant but I really don't like software that invents its own query language. There's a trillion different ORMs out there. Another trillion databases with their own query language. Another trillion SaaS products where the only way to query is t…

Opt-out of pwned secrets warnings

I have an internal service that uses a basic password. Not because it needs to be secure but because the addon required it. I’m now getting pwned notifications all the time. Is there a way to opt out of this new feature?

About the March 8 & 9, 2021 Verkada camera hack

To be clear: this hack affected the cameras and nothing else. No customer data was accessed, no production systems, no databases, no encryption keys, nothing.

Tic Tac Toe Collection - BuiltWithDot.Net

A free mobile game aiming to feature as many variations of Tic-tac-toe as possible. Built primarily using Xamarin Forms and Skiasharp. Currently available on Android, with versions for iOS and Windows already in development.

Phil Libin: Find a new way to ski

Brief transcript of What I Know podcast with Phil Libin on entrepreneurship

After Minimalism - David Perell

It's time for us to move beyond minimalism. If we want a dynamic world, we should splash our buildings with enthusiastic colors, bold patterns, and visions of a better tomorrow.

Web Wednesday

Wed, Mar 10, 2021, 3:00 PM: What is the session about?Web development can be challenging and sometimes might feel a little overwhelming. There are so many different technologies, emerging languages, a

OVH Tasks

OVH RSS Feed

Using Alba to Test ASP.Net Services

TL;DR: Alba is a handy library for integration tests against ASP.Net web services, and the rapid feedback that enables is very useful One of our projects at Calavista right now is helping a client …

What's New in Visual Basic on .NET 5?

Visual Basic has full language support on .NET Core and in .NET 5 we've enabled even more features for Windows desktop developers. Come take a look at some o...

A Git security release

Several new versions of the Git source-code management system have been released; they fix a vulnerability that could allow a hostile remote repository to execute code locally during a clone operation. Only users with case-insensitive filesystems are affecte…

Welcome Session

Scott and Olia open the day with what's happening in the .NET ecosystem, the .NET Windows developer landscape, and show you what's new with Windows Forms and WPF development on .NET 5.

part 1 — Store Halfword Byte-Reverse Indexed

Recently a set of 8 vulnerabilities were disclosed for the grub bootloader. I found 2 of them (CVE-2021-20225 and CVE-2021-20233), and contributed a number of other fixes for crashing bugs which we don't believe are exploitable. I found them by applying fuzz t…

Saas sucks: we can do better

SAAS – Software as a “Service”, ahem Subscription, sucks. It’s really good for software companies and for the engineers that build the systems but as an end user it totally sucks. I’m going to talk about why, and what we can do better as an industry.

Security Flaw in iPhone App Could Have Let Anyone Listen To Your Recordings

In terms of privacy nightmares, this one is pretty bad: a glaring security flaw in a popular iPhone call recorder app would have let literally anyone listen to a user’s recordings if they knew their target’s phone number. Call Recorder claims to have over a mi…

The coding interview that I failed

I’m talking a lot about candidates and the hiring process we go through right now. I thought it would only be fair to share a story about an interview task t...

Final Fantasy Randomizer - BuiltWithDot.Net

Final Fantasy Randomizer is a program that modifies a ROM image of Final Fantasy for the NES. The features are far too numerous to list here, but basically, it shuffles around the treasures to make you choose different routes, and randomizes many, many other …

Api2Pdf - BuiltWithDot.Net

Api2Pdf is an API for generating PDFs from HTML, URLs, and Office Docs. You can also merge PDFs together. The biggest challenge is ensuring that the API can handle massive scale of API requests without rate limits or file size limits. We solved this with the u…

Getting started with Dapr for .NET Developers

Dapr for .NET Developers is a great book, read in a weekend, to start gaining an understanding of what Dapr is and especially for .NET Developers. In this post, we will see how you can use .NET to cre

Let's Learn .NET: Web APIs

Jumpstart your experience building Web APIs with .NET! Come learn about what Web APIs are, why you need them, and how to build them with C# and ASP.NET Core. This fun, beginner's series will teach you

Know your “One Job” and do it first

Story time. Susan was hired as a database engineer. Her primary projects, which are supposed to be upgrading/rolling out a major point release and running load tests against various config options …

Sentry .NET SDK - BuiltWithDot.Net

An SDK for Sentry which is an OSS error tracking tool. The SDK is to be compatible with most .NET apps so the unit and integration tests run on .NET Framework, Mono and .NET Core. The repo has an integration with ASP.NET Core which can run in CoreCLR or CLR bu…

Conflicted Capital

I’ve spent a long time wrestling with how to advise founders about investors and the conflicts of interest generated by opposing incentives.[1] These considerations are especially important when a...

artperrin/image2csv

Convert tables stored as images to an usable .csv file - artperrin/image2csv

State of Secrets Sprawl on GitHub - 2021 report

GitGuardian has been scanning every single public commit made on GitHub for secrets since 2017, now we are releasing our findings in the most comprehensive study on secrets sprawl ever conducted.

Role based JWT Tokens in ASP.NET Core

ASP.NET Core Authentication and Authorization continues to be the most filddly part of the ASP.NET Core eco system and today I ran into a problem to properly configure JWT Tokens with Roles. As I had a hard time finding the information I needed in one place an…

New article: “Beyond console.log() – level up your debugging skills”

Today, Sitepoint released an article they commissioned me to write a few weeks ago that a lot of work went into and I’m happy with the result. In Beyond console.log – level up your debugging skills I describe a few features of Chromium browser developer tools …

Let's Learn .NET: Web APIs

Jumpstart your experience building Web APIs with .NET! Come learn about what Web APIs are, why you need them, and how to build them with C# and ASP.NET Core. This fun, beginner's series will teach you

Why asynchronous Rust doesn't work

In 2017, I said that “asynchronous Rust programming is a disaster and a mess”. In 2021a lot more of the Rust ecosystem has become asynchronous – such that it...

Developing with Rust on Windows

Get started developing with Rust using Windows, including setup for your development environment, Rust for Windows, and code examples.

Monsters Weekly 203 - OzCode Production Debugger

In this episode we take a look at doing production debugging with the OzCode Production Debugger and see how it can be used to debug production problems as they occur. https://oz-code.com/ozcode-produ

.NET March 2021 Updates – 5.0.4, 3.1.13, 2.1.26 | .NET Blog

Today, we are releasing the .NET March 2021 Updates. These updates contains reliability and security improvements. See the individual release notes for details on updated packages. You can download 5.0.4 , 3.1.13, 2.1.26 versions for Windows, macOS, and Linux,…

Lynicon asp.net core CMS - BuiltWithDot.Net

In tune with the .Net Core philosophy, Lynicon is a composable and unopinionated CMS which is lightweight and low impact yet full-featured. It supports fully structured content (i.e. JSON structures) defined as C# classes which can have properties which are su…

Asemblr - BuiltWithDot.Net

Asemblr automates the legwork of your workflow requirements leading up to each event. That means no more spreadsheets or managing timelines and vendors manually. Instantaneously visualise where you are with each supplier, what’s been discussed and confirmed, a…

Git clone vulnerability announced - The GitHub Blog

Today, the Git project released new versions to address CVE-2021-21300: a security vulnerability in the delayed checkout mechanism used by Git LFS during git clone operations affecting versions 2.15 and newer.