Podcasts about mssql

Family of database software

  • 29PODCASTS
  • 42EPISODES
  • 46mAVG DURATION
  • 1MONTHLY NEW EPISODE
  • Apr 27, 2025LATEST
mssql

POPULARITY

20172018201920202021202220232024


Best podcasts about mssql

Latest podcast episodes about mssql

Voice of the DBA
Is SQL Server Feature Complete?

Voice of the DBA

Play Episode Listen Later Apr 27, 2025 2:24


I heard Brent Ozar recently talked a bit about the SQL Server platform and its future. He also mentioned that Fabric has distracted the data platform team and it isn't a great product. I tend to agree, and I see too many bugs, holes, and problems. However at the end of this short snippet, he talks about SQL Server with an interesting comment. Is SQL Server feature complete? Read the rest of Is SQL Server Feature Complete?

7 Minute Security
7MS #664: What I'm Working on This Week

7 Minute Security

Play Episode Listen Later Feb 28, 2025 25:38


In today's episode I talk about what I'm working on this week, including: Playing with Sliver C2 and pairing it with ShellcodePack Talking about Netexecer, my upcoming tool that helps automate some of the early/boring stuff in an internal pentest A gotcha to watch out for if utilizing netexec's MSSQL upload/download functionality

playing mssql
Passwort - der Podcast von heise security
Spiderbug und andere News

Passwort - der Podcast von heise security

Play Episode Listen Later Jul 3, 2024 57:52


In Folge 4 sehen sich Christopher und Sylvester eine Reihe von aktuellen Meldungen an. Die Hosts diskutieren am Beispiel Proton das beliebte Konstrukt, eine kommerzielle Firma unter das Dach einer gemeinnützigen Stiftung zu stellen. Außerdem geht es um eine vielsagende Parsing-Lücke in wget, eine Anti-Phishing-Lösung, die durch das Certificate-Transparency-Projekt funktioniert, und einen Bug in Apples visionOS, der im wahrsten Sinne des Wortes gruselig ist. Zum Schluss verzweifeln Christopher und Sylvester noch ein bisschen an der Updatedisziplin vieler Exchange- und MSSQL-Betreiber – oder besser gesagt, an der Abwesenheit dieser Disziplin. PS: Leider haben wir am Anfang der Aufnahme zwei ganz kurze Aussetzer. Es handelt sich bei den Lücken aber nicht um Sicherheitslücken ;) Gemeinnützige Stiftungen: * Proton Foundation: https://proton.me/blog/proton-non-profit-foundation * OpenAI-Umstrukturierung: https://heise.de/-9765565 wget: * Mailthread zum Bug: https://lists.gnu.org/archive/html/bug-wget/2024-06/msg00005.html BigPhish: * BigPhish-Erklärung: https://heise.de/-9774101 * CT-Livestream: https://certstream.calidog.io * CT-Analysetool: https://crt.sh visionOS-Spinnenbug: * Bugreport: https://www.ryanpickren.com/vision-pro-hack Update-Probleme: * Angreifbare Exchange-Server: https://heise.de/-9770441 * Angreifbare MS-SQL-Server: https://heise.de/-9769490 Outtro: * Windows Recall nur für Insider: https://archive.ph/86ekx

#DataOops
Episode 47 : PostgreSQL : MVCC et Vacuum – PowerBI : Analyser les performances – Modélisation One Big Table et le stockage colonne à la rescousse – Détection d’anti-pattern dans MSSQL

#DataOops

Play Episode Listen Later Apr 6, 2024


Retour pgday Paris. PostgreSQL : MVCC et Vacuum. PowerBI : Analyser les performances et quelques conseils pour les optimiser. OBT : modélisation One Big Table et le stockage colonne à la rescousse. Clause Non-Sargable et détection d'anti-pattern avec les extended events sur MSSQL

Talion Threat Set Radio
Threat Bulletin #251

Talion Threat Set Radio

Play Episode Listen Later Jan 12, 2024 5:52


Evasive Async RAT has targeted infrastructure for almost a year.New FBot toolkit targets SaaS and cloud platforms.Turkish group uses Mimic ransomware to target MSSQL servers.

#DataOops
Episode 42 : MSSQL Server replication oops / Qdrant, PostgresML et LanceDB / chdb / tpch / oracle autonomous db

#DataOops

Play Episode Listen Later Dec 26, 2023


The Cybersecurity Defenders Podcast
#65 - Intel Chat: DB#JAMMER, Chae$ malware, W3LL, APT34 deploy Side Twist Trojan and government-backed actors in North Korea target security researchers.

The Cybersecurity Defenders Podcast

Play Episode Listen Later Sep 14, 2023 37:01


In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel. Securonix Threat Labs are reporting that threat actors working as part of the DB#JAMMER attack campaigns are compromising exposed MSSQL databases using brute force attacks. AhnLab's Security Emergency Response Center are reporting on threat actors using phishing emails to distribute some fileless malware.The researchers over at Group-IB have uncovered a covert business email compromise phishing campaign targeting Microsoft 365.NSFOCUS Security Labs captured a new APT34 phishing attack against enterprise targets that released a variant of the SideTwist Trojan to achieve long-term control of the victim host.Threat Analysis Group publicly disclosed a campaign from government-backed actors in North Korea who used 0-day exploits to target security researchers working on vulnerability research and development. The Cybersecurity Defenders Podcast: a show about cybersecurity and the people that defend the internet.

Cybercrime Magazine Podcast
Cybercrime News For Sep. 5, 2023. Hackers Compromise MSSQL Servers. WCYB Digital Radio.

Cybercrime Magazine Podcast

Play Episode Listen Later Sep 5, 2023 3:28


The Cybercrime Magazine Podcast brings you daily cybercrime news that airs each day on WCYB Digital Radio, the first and only 7x24x365 Internet radio station devoted to cybersecurity. Our host keeps you on the cutting edge of cyber with a rundown of the latest cyberattacks, hacks, data breaches, and more. Don't miss an episode! Airs every half-hour on WCYB Digital Radio and every day on our podcast. Listen to today's news at https://soundcloud.com/cybercrimemagazine/sets/cybercrime-daily-news

The CyberWire
DPRK cyberespionage update. New cybercriminal TTPs. The state of DevSecOps. Hacktivism and the nation-state. Cyberwar lessons learned. A free decryptor for Key Group ransomware.

The CyberWire

Play Episode Listen Later Sep 1, 2023 31:33


A VMConnect supply chain attack is connected to the DPRK. Reports of an aledgedly "fully undetectable information stealer." DB#JAMMER brute forces exposed MSSQL databases. A Cyberattack on a Canadian utility. The state of DevSecOps. A look at hacktivism, today and beyond. Betsy Carmelite from Booz Allen on threat intelligence as part of a third-party risk management program. Our guest is Adam Marré from Arctic Wolf Networks, with an analysis of Chinese cyber tactics. And a free decryptor is released for Key Group ransomware. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/12/168 Selected reading. VMConnect supply chain attack continues, evidence points to North Korea (ReversingLabs)  Securonix Threat Labs Security Advisory: Threat Actors Target MSSQL Servers in DB#JAMMER to Deliver FreeWorld Ransomware (Securonix) Montreal electricity organization latest victim in LockBit ransomware spree (Record) LockBit ransomware gang targets electrical infrastructure organization in Montreal (teiss) [Analyst Report] SANS 2023 DevSecOps Survey (Synopsys) SANS 2023 DevSecOps Survey (Application Security Blog) Government Agencies Report New Russian Malware Targets Ukrainian Military (National Security Agency/Central Security Service) Russian military hackers take aim at Ukrainian soldiers' battle plans, US and allies say (CNN) Ukraine: The First Cyber Lessons (AFCEA International) The Return of Hacktivism: A Temporary Reprise or Here for Good? (ReliaQuest) Decrypting Key Group Ransomware: Emerging Financially Motivated Cyber Crime Gang (EclecticIQ) Learn more about your ad choices. Visit megaphone.fm/adchoices

Software Sessions
David Cramer on Application Monitoring with Sentry

Software Sessions

Play Episode Listen Later Jun 14, 2023 76:03


Sentry is an application monitoring tool that surfaces errors and performance problems. It minimizes the need to manually look at logs or dashboards by identifying common problems across applications and frameworks. David Cramer is the co-founder and CTO of Sentry. This episode originally aired on Software Engineering Radio. Topics covered: What's Sentry? Treating performance problems as errors Why you might no need logs Identifying common problems in applications and frameworks Issues with Open Telemetry data Why front-end applications are difficult to instrument The evolution of Sentry's architecture Switching from a permissive license to the Business Source License Related Links Sentry David's Blog Sentry 9.1 and Upcoming Changes Re-Licensing Sentry Transcript You can help edit this transcript on GitHub. [00:00:00] Jeremy: Today I'm talking to David Kramer. He's the founder and CTO of Sentry. David, welcome to Software Engineering Radio. [00:00:08] David: Thanks for having me. Excited for today's conversation. What's Sentry? [00:00:11] Jeremy: I think the first thing we could start with is defining what Sentry is. I know some people refer to it as an error tracker. Some people have referred to it as, an application performance monitoring tool. I wonder if you could kind of describe in, in your words what it is. [00:00:30] David: You know, as somebody who doesn't work in marketing, I just tell it how it is. So Sentry started out doing error monitoring, which. You know, dependent on who you talk to, you might just think of as logging, right? Like that's the honest truth. It is just logging just a different shape or form. these days it's hard to not classify us as just an APM tool that's like the industry that exists. It's like the tools people understand. So I would just say it's an APM tool, right? We do a bunch of things within that space, and maybe it's not, you know, item for item the same as say a product like New Relic. but a lot of the overlap's there, so it's like errors performance, which is like latency and sort of throughput. And then we have some stuff that just goes a little bit deeper within that. The, the one thing i would say that is different for us versus a lot of these tools is we actually only do application monitoring. So we don't do any since like systems or infrastructure monitoring. Meaning Sentry is not gonna tell you when you need to replace a hard drive or even that you need new hard, like more disk space or something like that because it's just, it's a domain that we don't think is relevant for sort of our customers and product. Application Performance Monitoring is about finding crashes and performance problems that users would associate with bugs [00:01:31] Jeremy: For people who aren't familiar with the term application performance monitoring, what is that compared to just error tracking? [00:01:41] David: The way I always reason about it, this is what I tell new hires and what I would tell, like my mother, if I had to explain what I do, is like, you load Uber and it crashes. We all know that's bad, right? That's error monitoring. We capture the crash report, we send it to developers. You load Uber and it's a 30 second spinner, like a loading indicator as a customer. Same outcome for me. I assume the app is broken, right? So we also know that's bad. Um, but that's different than a crash. Okay. Sentry captures that same thing and send it to developers. lastly the third example we use, which is a little bit more. I think, untraditional, but a non-traditional rather, uh, you load the Uber app and it's like a blank screen or there's no button to submit, like log in or something like this. So it's kind of like a, it's broken, but it maybe isn't erroring and it's not like a slow thing. Right. Same outcome. It's probably a bug of some sorts. Like it's what an end user would describe it as a bug. So for me, APM just translates to there are bugs, user perceived bugs in your application and we're able to monitor and, and help the software teams sort of prioritize and resolve those, those concerns. [00:02:42] Jeremy: Earlier you were talking about actual crashes, and then your second case is, may be more of if the app is running slowly, then that's not necessarily a crash, but it's still something that an APM would monitor. [00:02:57] David: Yeah. Yeah. And I, I think to be fair, APM, historically, it's not a very meaningful term. Like I as a, when I was more of just an individual contributor, I would associate APM to, like, there's a dashboard that will tell me what's slow in my application, which it does. And that is kind of core to APM, but it would also, none of the traditional tools, pre sentry would actually tell you why it's broken, like when there's an error, a crash. It was like most of those tools were kind of useless. And I don't know, I do actually know, but I'm gonna pretend I don't know about most people and just say for myself. But most of the time my problems are errors. They are not like it's fast or slow, you know? and so we just think of it as like it's a holistic thing to say, when I've changed the application and something's broken, or it's a bug, you know, what is that bug? How do we help people fix it? And that comes from a lot of different, like data signals and things like that. the end result is still the same. You either are gonna fix it or it's not important and you ignore it. I don't know. So it's a pretty straightforward, premise for us. But again, most companies in the space, like the traditional company is when you grow a big company, what happens is like you build one thing and then you build lots of check boxes to sell more things. And so I think a lot of the APM vendors, like they've created a lot of different products. Like RUM is a good example of another acronym that lives with an APM. And I would tell you RUM is completely meaningless. It, it stands for real user monitoring. And so I'm like, well, what's not real about monitoring the application? Well, nothing's not real, but like they created a new category because that's how marketing engines work. And that new category is more like analytics than it is like application telemetry. And it's only because they couldn't collect the app, the application telemetry at the time. And so there's just a lot of fluff, i would say. But at the end of the day too, like developers or engineering teams, it's like new version of the application. You broke something, let's tell you about it so you can fix it. You might not need logging or performance monitoring [00:04:40] Jeremy: And, and so earlier you were saying how this is a kind of logging, but there's also other companies, other products that are considered like logging infrastructure. Like I, I would think of companies like Paper Trail or Log Tail. So what space does Sentry fill that's that's different than that kind of logging? [00:05:03] David: Um, so the way I always think about it, and this is both personally true, and what I advise other folks is when you're building something new, when you start from zero, right, you can often take Sentry put it in, and that's good enough. You don't even need performance monitoring. You just need like errors, right? Like you're just causing bugs all the time. And you could do that with logging, but like the delta between air monitoring and logging is night and day. From a user experience, like error monitoring for us, or what we built at the very least, aggregates the errors. It, it helps you understand the frequency. It helps you when they're new versus old. it really gives you a lot of detail where logs don't, and so you don't need logging often. And I will tell you today at Sentry. Engineers do not use logs for the most part. Uh, I had a debate with one of our, our team members about it, like, why does he use logs recently? But you should not need them because logs serve a different purpose. Like if you have traces which tell you like, like fast and slow in a bunch of other network data and you have this sort of crash report collection or error monitoring thing, logs become like a compliance or an audit trail or like a security forensics, tool, and there's just not a lot of value that you would get out of them otherwise, like once in a while, maybe there's like some weird obscure use case, but generally speaking, you can just pretend that you don't need logs most days. Um, and to me that's like an evolution of the industry. And so when, when Sentry is getting started, most people were still logs. And if you go talk to SRE teams, they're like, oh, login is what we know. Some of that's changed a little bit, but. But at the end of the day, they should only be needed for more complicated audit trails because they're just not a good solution to the problem. It's just free form data. Structured or not, doesn't really matter. It's not aggregated. It's not something that you can really use. And it's why whenever you see logging tools, um, not even the papertrails of the world, but the bigger ones like Splunk or Cabana, it's like this weird, what we describe as choose your own adventure. Like go have fun, build your dashboards and try to make the logs useful kind of story. Whereas like something like Sentry, it's just like, why would you waste any time trying to build dashboards when we can just tell you when something new is broken? Like that's the ideal situation. [00:06:59] Jeremy: So it sounds like maybe the distinction is with a more general logging tool, like you mentioned Splunk and Kibana it's a collection of all this information. of things happening, even though nothing's necessarily wrong, whereas Sentry is more Sentry is it's going to log things, but it's only going to log things if Sentry believes something is wrong, either because of a crash or because of some kind of performance issue. People don't want to dig through logs or dashboards, they want to be told when something is wrong and whyMost software is built the same way, so we know common problems [00:07:28] David: Yeah. I, i would say it's about like actionability, right? Like, like nobody wants to spend their time digging through logs, digging through dashboards. Metrics are another good example of this. Like just charts with metrics on them. Yeah. They tell me something's happening. If there's lots of log statements, they tell me something's going on, but they're not, they're not optimized to like, help me solve a problem, right? And so our philosophy was always like, we haven't necessarily nailed this in all cases for what it's worth, but. It was like, the goal is we identify an actual problem, like close to like a root cause kind of problem, and we escalate that up and that's it. Uh, versus asking somebody to like go have to like build these dashboards, build these things, figure out what data matters and all this because most software looks exactly the same. Like if you have a web service, it doesn't matter what language it's written in, it doesn't matter how different you think your architecture is from somebody else's, they're all the same. It's like you've got a request, you've got a database, you've got some cache, you've got all these like known, known quantity things, and the slowness comes from the same places. Errors are structured while logs are not [00:08:25] David: The errors come from the same places. They're all exhibiting the same kinds of behavior. So logging is very unstructured. And what I mean by that is like there's no schema. Like you can hypothetically like make it JSON and everybody does that, but it's still unstructured. Whereas like errors, it's, it's a tight schema. It's like there's a type of error, there's a message for the error, there's a stack trace, there's all these things that you know. Right. And as soon as you know and you define those things, you can just build better products. And so distributed tracing is similar. Hypothetically, it's a little bit abstract to be fair, but hypothetically, distributed tracing is creating a schema out of basically network annotations. And somebody will yell at me for just simplifying it to that. I would tell 'em that's what it is. But, same goal in mind. If you know what the data is, you can take action on it. It's not quite entirely true. Um, because tracing is much more freeform. For example, it doesn't say if you have a SQL statement, it should be like this, it should be formatted this way, things like that. whereas like stack traces, there's a file name, there's there's a line number, there's like all these things, right? And so that's how I think about the delta between what is useful information and what isn't, I guess. And what allows you to actually build things like Sentry versus just build abstract exploration. Inferring problems rather than having user identify them [00:09:36] Jeremy: Kind of paint the picture of how someone would get started with a tool like Sentry. Do they need to tell Sentry anything about their application? Do they need to modify their source code at all? give us a picture of how that works. [00:09:50] David: Yeah, like one of our fundamentals, which I think applies for any real business these days is you've gotta like reduce user friction, right? Like you've gotta make it dead simple to use. Uh, and for us there were, there was like kind of a fundamental driving constraint behind that. So in many situations, um, APM vendors especially will require you to run an agent a basically like some kind of process that runs on your servers somewhere. Well, if you look at modern tech stacks, that doesn't really work because I don't run the servers half my stuff's in the browser, or it's a mobile app or a desktop app, and. Even if I do have those servers, it's like an entirely different team that controls them. So deploying like a sidecar, an agent is actually like much more complicated. And so we, we looked at that and also because like, it's much easier to have control if you just ship within the application. We're like, okay, let's build like an SDK and dependency that just injects into the, the application that runs, set an API key and then you're done. And so what that translates for Sentry is we spend a lot of time knowing what Django is or what Rails is or what expresses like all these frameworks. And just knowing how to plug into the right signals in those frameworks. And then at that point, like the user doesn't have to do anything. And so like the ideal outcome for Sentry is like you install the dependency in whatever language makes sense, right? You somehow configure the API key and maybe there's a couple other minor settings you add and that gives you the bare bones and that's it. Like it should just work from there. Now there's a lot you can do on top of that to enrich data and whatnot, but for the most part, especially for errors, like that's good enough. And that, that's always been a fundamental goal of ours. And I, I think we actually do it phenomenally well. [00:11:23] Jeremy: So it sounds like it infers things about the application without manual configuration. Can you give some examples of the kind of things that Sentry knows without the user having to tell it? [00:11:38] David: Yeah. So a good example. So on the errors side, we know literally everything because an error object in each language has all these attributes with it. It, it gives you the stack trace, it gives you a lot of these things. So that one's straightforward. On the performance side, we use a combination of leveraging some like open source, I guess implementations, like open telemetry where it's got all this instrumentation already and we can just soak that in, um, as well as we automatically instrument a bunch of stuff. So for example, say you've got like a Python application and you're using, let's say like SQL Alchemy or something. I don't actually know if this is how our SDK works right now, but, we will build something that's aware of that library and make sure it can automatically instrument the things it needs to get the right information out of it. And be fair. That's always been true for like APM vendors and stuff like that. The delta is, we've often gone a lot deeper. And so for Python for example, you plug it into an application, we'll capture things like the error, error object, which is like exception class name exception value, right? Stack trace, file, name, line number, all those normal things, function name. We'll also collect source code. So we'll, we'll give you sort of surrounding source code blocks for each line in the stack trace, which makes it infinitely easier to consume. And then in Python and, and php, and I forget if we do this anywhere else right now, we'll actually even allow you to collect what are called stack locals. So it'll, it'll give you basically the variables that are defined almost like a debugger. And that is actually, actually like game changing from a development point of view. Because if I can go look in production when there's an incident or a bug and I can actually see the state of the application. , I, I never need to know like, oh, what was going on here? Oh, what if like, do I need to go reproduce this somehow? I always have the right information. And so all of that for us is automatic and we only succeed like, it, it's, it's like by definition inside of Sentry, it has to be automatic. Like if we ask the user to do anything whatsoever, we're failing. And so whenever we design any product or anything, and to be fair, this is how every product company should operate. it's gotta be with as little user input as humanly possible. And so you can't always pull that off. Sometimes you have to have users configure stuff, but the goal should always be no input. Detecting errors through unhandled exceptions [00:13:42] Jeremy: So you, you're talking about getting a stack trace, getting, the state of variables, source code. That sounds like that's primarily gonna be through unhandled exceptions. Would you say that's, that's the primary way that you get error? [00:13:58] David: Yeah, you can integrate in other ways. So you can like trigger our API to capture an, uh, an exception. You can also, for better or worse, it's not always good. You can integrate through logging adapters. So if you're already using a logging framework and you log their errors there, we can often capture those. However, I will say in most cases, people use the logging APIs wrong and the data becomes junk. A good, a good example of this is like, uh, it varies per language. So I'm just gonna go to Python because Python is like sort of core to Sentry. Um, in Python you have the ability to log messages, you can log them as errors, you can log like actual error objects as errors. But what usually happens is somebody does a try-catch. They, they capture the error they rescue from it. They create a logging call, like log dot error or something, put the, the error message or value in there. And then they send that upstream. And what happens is the stack trace is gone because we don't know that it's an error object. And so for example, in Python, there's actually an an A flag. You pass the logging call to make sure that stack trace stays present. But if you don't know that the data becomes junk all of a sudden, and if we don't have a stack trace, we can't actually aggregate data because like there's just not enough information to like, to run hashing on it. And so, so there are a lot of ways, I guess, to capture the information, but there are like good ways and there are bad ways and I think it, it's in everybody's benefit when they design their, their apt to like build some of these abstractions. And so like as an example, when, whenever I would start a new project these days, I will add some kind of helper function for me to like log an exception when I like, try catch and then I can just plug in whatever I need later if I want to enrich the data or if I wanna send that to Sentry manually or send it to logs manually. And it just makes life a lot easier versus having to go back and like augment every single call in the code base. [00:15:37] Jeremy: So it, it sounds like. When you're using a tool like Sentry, there's gonna be the, the unhandled exceptions, which are ones that you weren't expecting. So those should I guess happen without you catching them. And then the ones that you perhaps do anticipate, but you still consider to be a problem, you would catch that and then you would add some kind of logging statement to your code that talks to Sentry directly. Finding issues like performance problems (N+1 queries) that are not explicit errorsz [00:16:05] David: Potentially. Yeah. It becomes a, a personal choice to be fair at that, at that point. but yeah, the, the way, one of the ways we've been thinking about this lately, because we've been changing our error monitoring product to not just be about errors, so we call it issues, and that's in the guise of like, it's like an issue tracker, a bug tracker. And so we started, we started putting what are effectively like, almost like static analysis concerns inside of this issue tracker. So for example, In our performance monitor, we'll do something called like detect n plus one queries, which is where you execute a, a duplicate query in a loop. It's not necessarily an error. It might not be causing a problem, but it could be causing a problem in the future. But it's like, you know, the, the, the qualities of it are not the same as an error. Like it's not necessarily causing the user to experience a bug. And so we've started thinking more about this, and, and this is the same as like logging errors that you handle. It's like, well, they're not really, they're not really bugs. It's like expected behavior, but maybe you still want to keep it like tracking somewhere. And I think about like, you know, Lins and things like that, where it's like, well, I've got some things that I definitely should be fixing. Then I've got a bunch of other stuff that's like informing me that maybe I should take action on or not. But only I, the human can really know at the end of the day, right, if I, if I should prioritize that or not. And so that's how I kind of think about like, if I'm gonna try catch and then log. Yeah, you should probably collect that data. It's probably less important than like the, these other concerns, like, like an actual unhandled exception. But you do, you do want to know that they're happening and whatnot. And so, I dunno, Sentry has not had a strong opinion on this historically. We're just like, send us whatever you want to capture in this regard, and you can pay for it, that's fine. It's like usage based, you know? we're starting to think a lot more about what should that look like if we, if we go back to like, what's the, what's the opinion we have for how you should use the product or how you should solve these kinds of software problems. [00:17:46] Jeremy: So you gave the example of detecting n plus one queries is, is that like being aware of the framework or the ORM the person is using and that's how you're determining this? Or is it at more of a lower level than that? [00:18:03] David: it is, yeah. It's at the framework level. So this is actually where Open Telemetry causes a lot of harm, uh, for us because we need to know what a database query is. Uh, we need to know like the structure of the query because we actually wanna parse it out in a lot of cases. Cause we actually need to identify if it's duplicate, right? And we need to know that it's a database query, not a random annotation that you've added. Um, and so what we do is within these traces, which is like if you, if you don't know what a trace is, it's basically just like, it's a tree, like a tree structure. So it's like A calls B, calls C, B also calls D and E and et cetera, right? And so you just, you know, it's a trace. Um, and so we actually just look at that trace data. We try to find these patterns, which is like, okay, B was a, a SQL query or something. And every single sibling of B is that same SQL query, but sort of removing certain parameters and stuff for the value. So we'll look at that data and we'll try to pull out anomalies. So m plus one is an example of like a fairly obvious anti pattern that everybody knows is bad and can be optimized. Uh, but there's a lot of other that are a little bit more subjective. I'll give you an example. If you execute three SQL statements back to back, one could argue that you could just batch those SQL statements together. I would argue most of the time it doesn't matter and I don't need to do that. And also it's not guaranteed that that is better. So it becomes much more like, well, in my particular situation this is valuable, but in this other situation it might not be. And that's where I go back to like, it's almost like a linter, you know? But we're trying to infer all of that from the data stream. So, so Sentry's kind of, we're kind of a backwards product company. So we build our product from a technology vision, not from customers want this, or we have this great product vision or anything like that. And so in our case, the technology vision is like, there's a lot of application data that comes in, a lot of telemetry, right? Errors, traces. We have a bunch of other streams now. within that telemetry there is like signal. And so one, it's all structured data so we know what it is so we can actually interpret it. And then we can identify that signal that might be a problem. And that signal in our case is often going to translate to like this issue concept. And then the goal is like, well, can we identify these problems for people and surface them versus the choose your own adventure model, which is like, we'll just capture everything and feed it to the user and they can figure out what matters. Because again, a web service is a web service. A database is a database. They're all the same problems for everybody. All you know, it's just, and so that's kind of the model we've built and are continuing to evolve on and, and so far works pretty well to, to curate a lot of these workflows. Want to infer everything, but there are challenges [00:20:26] Jeremy: You talked a little bit about how people will sometimes use tracing. And in cases like that, they may need some kind of session ID to track. Somebody making a call to a service and that talks to a database and that talks to other services. And you, inside of your application, you have to instrument some way of tracking. This all came from this one request. Is that something that Sentry can infer or is there something that the developer has to put into play so that you can track that sort of thing? [00:21:01] David: Yeah, so it's, it's like a bit of both. And i would say our goal is that we can infer everything. The reality is there is so much complexity and there's too much of a, like, too many technologies in the world. Like I was complaining about this the other day, like, the classic example on web service is if we have a middleware hook, We kind of know request response, usually that's how middleware would work, right? And so we can infer a lot from there. Like basically we can infer the boundaries, which is a really big deal. Okay. That's one thing is boundaries is a problem. What we, we describe that as a transaction. So like when the request starts. When the request ends, right? That's a very important boundary for everybody to understand because when I'm working on the api, I care about the API boundary. I actually don't care about what the database is doing at its low level or what the JavaScript application might be doing above it. I want my boundary. So that's one that we kind of can do. But it's hard in a lot of situations because of the way frameworks and technology has been designed, but at least traditional stuff like a, a traditional web stack, it works like a Rails app or a DDjango app or PHP app kind of thing, right? And then within that it becomes, well, how do you actually build a trace versus just have a bunch of arbitrary labels? And so we have a bunch of complicated tech within each language that tries to establish that tree. and then we annotate a lot of things along the way. And so we will either leverage Open Telemetry, which is an open format spec that ideally has very high quality data. Ideally, not realistically, but ideally it has high quality data. Every library author implements it great, everybody's happy. We don't have to do anything ever again. The reality is that data is like all over the map because there's not like strict requirements for what, how the data should be labeled and stuff. And not everything even has that data. Like not everything's instrumented with open telemetry. So we also have a bunch of stuff that, unrelated to using that we'll say, okay, we know what this library is, we're gonna try to infer some characteristics from this library, or we know what maybe like the DDjango template engine is. So we're gonna try to infer like when the template renders so you can capture that block of information. it is a very imperfect science and I would tell you like it's not, even though like Open Telemetry is a very fun topic for people. It is not necessarily good, like it's not in a good state. Could will it ever be good? I don't know in all honesty, but like the data quality is like all over the map and so that's honestly one of our biggest challenges to making this experience that, you know, tells you what's going on in your database so it tells you what's going on with the cash or things like this is like, I dunno, the cash might be called something completely random in one implementation and something totally different in another. And so it's a lot of like, like data normalization that you have to deal with. But for the most part, those libraries of things you don't control can and will be instrumented. Now the other interesting thing, which we'll see how this works out, so, so one thing Sentry tries to do there, we have all these layers of telemetry, so we have errors and traces, right? Those are pretty high level concepts. We also have profiling data, which is very, very, very, very low level. So it's usually only if you have like disc. I like. It's where is all the CPU time being spent in my application? Mostly not waiting. Like waiting's usually like a network call, right? But it's like, okay, I have a loop that's doing a lot of math, or I'm writing a bunch of stuff to disc and that's really slow. Like often those are not instrumented or it's like these black box areas of a performance. And so what we're trying to do with profiling data, instead of just showing you flame charts and stuff, is actually say, could we fill in these gaps in these traces? Like basically like, Hey, I've got a long period of time where the app's doing something. You know, here's an API call, here's the database stuff. But then there's this block, okay, what's that function or something? Can we pull that out of the profiling data? And so in that case, again, that's just automatic because the profile actually knows everything about the application and know it. It has full access to the function and the stack and everything, right? And so the dream is that you would just always have everything filled in the, the customer never has to do anything with one minor asterisk. And the asterisk is what I would call like business context. So a good example would be, You might wanna associate requests with a specific customer or something like that. Like you might wanna say, well it's uh, I don't know, Goldman Sachs or one of these big companies or something. So you can know like, well when Goldman Sachs is having performance issues or whatever it is, oh maybe I should focus on them cuz maybe they pay you a lot of money or something. Right. Sentry would never know that at the end of the day. So we also have these like kind of tagging contextual APIs that will say like, tell us some informations, maybe it's like customer, maybe it's something else that's relevant to your application. And we'll keep that data associated with the telemetry that's like present, you know, um, but the, at least the telemetry, like again, application's just worth the same, should be, there should be a day in the next few years that it's just all automatic. and again, the only challenge today is like, can it be high quality and automatic? And so that, that's like to be determined. [00:25:50] Jeremy: What you're kind of saying is the ideal is being able to look at this profiling information and be able to build a full picture of. a, a call from beginning to end, all the different things to talk to, but I guess what's the, what's the reality today? Like, what, what is Sentry able to determine, in the world we live in right now? [00:26:11] David: So we've done a lot of this like performance detection stuff already. So we actually can do a lot now. We put a lot of time into it and I, I will tell you, if you look at other tools trying to do tracing, their approach is much more abstract. It's like your traditional monitoring tool that's like, we're just gonna collect a lot of signals and maybe we'll find magic anomaly detection or something going on in it, which, you know, props, but that can figure that out. But, a lot of what we've done is like, okay, we kind of know what this data looks like. Let's go after this very like known quantity problem. Let's normalize the data. And let's make it happen like that's today. Um, the enrichment of profiles is new for us, but it, we actually can already do it. It's not perfect. Detection of blocking the UI thread in mobile apps [00:26:49] David: Um, and I think we're launching something in April or May, something around the, that timeframe where hopefully for the, the technologies we can instrument, we're actually able to surface that in a useful way. but as an example that, that concept that I was talking about, like with n plus one queries, the team built something using profiling data. and I think this, this might be for like a mobile app more so than anything where mobile apps have this problem of, it's, you've got a main thread and if you block that main thread, the app is basically frozen. You see this on desktop apps all the time. You, you very rarely see it on web apps anymore. But, but it's a really big problem when you have a web, uh, a mobile or desktop app because you don't want that like thing to be non-responsive. Right? And so one of the things they did was detect when you're doing like file io on the main thread, you know, right. When you're writing a disc, which is probably a slow thing or something like that, that's gonna block the whole thing. Because you should just do it on a separate thread. It's like an easy fix, potentially may not be a problem, but it could become a problem. Same thing as n plus one. But what's really interesting about it is what the team did is like they used the profiling data to detect it because we already know threads and everything in there, and then they actually recreated a stack trace out of that profiling data when it's surfaced. So it's actually like useful data with that. You could like that I or you as a developer might know how to take and actually be like, oh, this is where it happens at the source code. I can actually figure it out and go fix it myself. And to me, like as like I, I'm still very much in the weeds with software that is like one of the biggest gaps to most things. Is it just, it doesn't make it easy to consume or like take action on, right? Like if I've got a, a chart that says my error rate is high, what am I gonna do with that? I'm like, okay, what's breaking? That's immediately my next question. Right? Okay. This is the error. Where is that error happening at? Again, my next question, it, it's literally just root cause analysis, right? Um, and so that, that to me is very exciting. and I, I don't know that we're the first people to do that, I'm not sure. But like, if we can make that kind of data, that level of actionable and consumable, that's like a big deal for me because I will tell you is like I have 20 years of software experience. I still hate flame charts and like I struggle to use them. Like they're not a friendly visualization. They're almost like a, a hypothetically necessary evil. But I also think one where nobody said like, do we even need to use that? Do we need that to be like the way we operate? and so anyways, like I guess that's my long-winded way of saying like, I'm very excited for how we can leverage that data and change how it's used. [00:29:10] Jeremy: Yeah. So it sounds like in this example, both in the mobile app blocking the UI or the n plus one query is the Sentry, suppose, SDK or instrumentation that's hooked inside of your application. There are certain behaviors that it knows are, are not like ideal I guess, just based on. people's prior experience, like your own developers know that, hey, if you block the UI thread in this mobile application, then you're gonna have performance problems. And so that way, rather than just telling you, Hey, your app is slow, it can tell you your app is slow and it's because you're blocking the UI thread. Don't just aggregate metrics, the error tracker should have an opinion on what actual problems are [00:29:55] David: Exactly, and I, and I actually think, I don't know why so many people don't recognize this gap, because at the end of the day, like, I don't know, I don't need more people to tell me response times are bad or anything. I need you to have an opinion about what's good because. The only way it's like math education, right? Like, yeah, you learn the basics, but you're not expected to say, go to calc, but, and then like, do all the fundamentals. You're like, don't get a calculator and start simplifying the problem. Like, yeah, we're gonna teach you a few of these things so you understand it. We're gonna teach you how to use a calculator and then just use the calculator and then make it easier for everybody else. But we're also not teaching you how to build a calculator because who cares? Like, that's not the purpose of it. And so for me, this is like, we should be helping people sort of get to the finish line instead of making them run the entirety of the race over and over if they don't need to. I don't, I don't know if that's a good analogy, but that has been the biggest gap, I think, in so much of this software throughout the industry. And it's, it's, it's common everywhere. And there's no reason for that gap to exist these days. Like the technology's fine. And the technology's been fine for like 10 years. Like Sentry started in oh eight at this point. And I think there was only one other company I recall at the time that was doing anything that was even similar to like air monitoring and Sentry when we built it, we're just like, what if we just go deeper? What if we collect all this information that will help you debug the problem instead of just stopping it like a log aggregator or something kind of thing, so we can actually have an opinion about it. And I, I genuinely, it baffles me that more people do not think this way because it was not a hard problem at the time. It's certainly not hard these days, but there's still very, I mean, a lot more people do it now. They've seen Sentry successful and there's a lot of similar implementations, but it's, it's just amazes me. It's like, why don't you, why don't people try to make the data more actionable and more useful, the teams versus just collect more of it, you know? 40 people working on learning the common issues with languages and frameworks [00:31:41] Jeremy: it, it sounds like maybe the, the popularity of the stack the person is using or of the framework means that you're gonna have better insights, right? Like if somebody makes a, a Django application or a Rails application, there's all these lessons that your team has picked up in terms of, Hey, if you use the ORM this way, your application is gonna be slow. Whereas if somebody builds something totally homegrown, you won't know these patterns and you won't be able to like help as much basically. [00:32:18] David: Yeah. Yeah, that's exactly, and, and you might think that that is a challenge, but then you look at how many employees exist at like large tech companies and it's, it's not that big of a deal, like, , you might even think collecting all the information for each, like programming, runtime or framework is a challenge. We have like 40 people that work on that and it's totally fine. Like, and, and so I think actually all these scale just fine. Um, but you do have to understand like the domain, right? And so the counter version of this is if you look at say like browser applications, like very rich, uh, single page application type experiences. It's not really obvious like what the opinions are. Like, like if, if you, and this is like real, like if you go to Sentry, it's, it's kind of slow, like the app is kind of slow. Uh, we even make fun of ourselves for how slow it is cuz it's a lot of JavaScript and stuff. If you ask somebody internally, Hey, how would we make pick a page fast? They're gonna have no clue. Like, even if they have like infinite domain experience, they're gonna be like, I'm not entirely sure. Because there's a lot of like moving parts and it's not even clear what like, like good is right? Like we know n plus one is bad. So we can say not doing that is the better solution. And so if you have a JavaScript app, which is like where a lot of the slowness will come from is like the render times itself. Like how do you fix it? You, you can't actually build a product that tells you what to fix without knowing how to fix it, right? And so some of these newer and very fast moving targets are, are frankly very difficult for us. Um, and so that's one thing that I think is a challenge for the entire industry. And so, like, as an example, a lot of the browser folks have latched onto web vitals, which are just metrics that hopefully tell you something about the application, but they're not always actionable either. It'll be like, the idea with like web vitals is like, okay, time to interactive is an an important metric. It's like how long until the page loads that a user can do what they're probably there to do. Okay. Like abstractly, it makes sense to us, but like put into action. How do I optimize time to interactive? Don't block the page. That's one thing. I don't know. Defer assets, that's another thing. Okay. So you've gotta like, you've gotta build a technology that knows these assets could be deferred and aren't. Okay, which ones can be deferred? I don't know. Like, it, it, it's like such a deep rabbit hole. And then the problem is, six months from now, the tech will have completely changed, right? And it won't have like, necessarily solved some of these problems. It will just have changed and they're now a completely different shape of problem. But still the same fundamental like user experience is the same, you know? Um, and to me that's like the biggest challenge in the industry right now is that like dilemma of the browser at the end of the day. And so even from our end, we're like, okay, maybe we should step back, focus on servers again, focus on web services. Those are known quantities. We can do that really well. We can sort of change that to be better than it's been in the past and easier to consume with things like our n plus one detections. Um, and then take like a holistic, fresh look at browser and say, okay, now how would we solve this to make sure we can actually really latch onto the problems that like people have and, and we understand, right? And, you know, we'll see when we get there. I don't think any product does a great job these days for helping, uh, solve those problems. . But I think even without the, the products, like I said, like even our team would be like, fixing this is gonna take months because it's gonna take months just to figure out exactly where the, the common bottlenecks are and all these other things within an application. And so I, I guess what I mean to say with that is there's a lot of opportunity, I think with the moving landscape of technology, we can find a way to, whether it's standardized or Sentry, can find a way to make that data actionable want it something in between there. There are many ways to build things on the frontend with JavaScript which makes it harder to detect common problems compared to backend [00:35:52] Jeremy: So it sounds like what you're saying, With the, the back end, there's almost like a standard way of doing things or a way that a lot of people do it the same way. Whereas on the front end, even if you're looking at a React application, you could look at tenant react applications and they could all be doing state management a totally different way. They could be like the, the way that the application is structured could be totally different, and that makes it difficult for you to infer sort of these standard patterns on the front end side. [00:36:32] David: Yeah, that's definitely true. And it, it goes, it's even worse than that because well, one, there's just like the nature of JavaScript, which is asynchronous in the sense of like, it's a lot of callbacks and things like that. And so that already makes it hard to understand what's going on, uh, where things are happening. And then you have these abstractions like React, which are very good, but like they pull a lot of that away. And so, as an example of a common problem, you load the application, it has to do a lot of stuff to make the page render. You might call that hydration or whatever. Okay. And then there's a completely different state, which is going from, it's already hydrated. Page one, I, I've done an interaction or something. Or maybe I've navigated a page too, that's an entirely different, like, sort of performance problem. But that hydration time, that's like a known thing. That's kind of like time to interactive, right? But if the problem is in your framework, which a lot of it is like a lot of the problems today exist because of frameworks, not because of the technology's bad or the framework's bad, but just because it's abstracted and it's really hard to make it work in all these situations, it's complicated. And again, they have the same problem where it's like changing non sem. And so if the problem is the framework is somehow incorrectly re rendering the page as an example, and this came up recently, for some big technology stack, it's re rendering the page. That's a really bad problem for the, the customer because it's making the, it's probably actually causing a lot of CPU seconds. This is why like your Chrome browser tabs are using so much memory in cpu, right? How do you fix that? Can you even fix that? Do you just say, I don't know, blame the technology? Is that the solution? Maybe that is right, but how would we even blame the technology like that alone, just to identify why it's happening. and you need to know the why. Right? Like, that is such a hard problem these days. And, and personally, I think the only solution is if the industry sort of almost like standardizes on a way to like, on a belief of how this should be optimized and how it should be measured and monitored kind of thing. Because like how errors work is like a standardization effectively. It may not be like a formal like declaration of like, this is what an error is, but more or less they always have the same attributes because we've all kind of understood that. Like those are the valuable things, right? Okay. I've got a server rendered application that has client interaction, which is sort of the current generation of the technology. We need to standardize on what, like that web request, like response life cycle is, right? and what are the moving targets within there. And it just, to me, I, I honestly feel like a lot of what we use every day in technology is like beta. Right. And it's, I think it's one of the reasons why we're constantly always having to up, like upgrade and, and refactor and, and, and shift dependencies and things like that because it is not, it's very much a prototype, right? It's a moving target, which I personally do not think is great for the industry because like customers do not care. They do not care that you're using some technology that like needs a change every few months and things like that. now it has improved things to be fair. Like web applications are much more like interactive and responsive sometimes. Um, but it is a very hard problem I think for a lot of people in the world. [00:39:26] Jeremy: And, and when you refer to, to things feeling like beta, I suppose, are, are you referring to the frameworks people are using or the libraries they're using to support their front end development? I, I'm curious what you're, you're thinking there. [00:39:41] David: Um, I think it's everything. Even like the browser APIs are constantly shifting. It's, that's gotten a little bit better. But even the idea like type script and stuff, it's just like we're running like basically compilers to make all this code work. And, and so the, even that they're constantly adding features just because they can, which means behaviors are constantly changing. But like, if you look at a real world example, like React is like the, the most dominant technology. It's very well designed for managing the dom. It's basically just a rendering engine at the end of the day. It's like it's managed to process updates to the dom. Okay. Makes sense. But we've all learned that these massive single page applications where you build all your application logic and loaded into a bundle is a problem. Like, like, I don't know how big Sentry's bundle is, but it's multiple megs in size and it takes a little while for like a, even on fast fiber here in the Bay Area, it takes a, you know, several seconds for the UI to load. And that's not ideal. Like, it's like at some point half of us became okay with this. So we're like, okay, what we need to do is go back, literally just go back 10 years and we need to render it on the server. And then we need some stuff that makes interactions, you know, highly responsive in the UI or dynamic content in the ui, you know, bring, it's like bringing back jQuery or something. And so we're kind of going full circle, but that is actually like very complicated because the way people are trying to do is like, okay, we wanna, we wanna have the rendering engine operate the same on the server and is on as on the client, right? So it's like we just write one, path of code that basically it's like a template engine to some degree, right? And okay, that makes sense. Like we can all get behind that kind of model. But that is actually really hard to make work with a lot of people's software and, and I think the challenge and framers have adopted it, right? So they've taken this, so for example, it's like, uh, react server components, which is basically just like, can we render it on the server and then also keep that same interaction in the ui. But the problem is like frameworks take that, they abstract it and so it's another layer of complexity on something that is already enormously complex. And then they add their own flavor onto it, like their own opinions for maybe what the world way the world is going. And I will say like personally, I find those. Those flavors to be very hard to adapt to like things that are tried and true or importantly in this context, things that we know how to monitor and fix, right? And so I, I don't know what, what the be all end all is, but my thesis on this is you need to treat the UI like a template engine, and that's it. Remove all like complexity behind it. And so if you think about that, the term I've labeled it as, which I did not come up with, I saw this from somebody at some point, is like, it's like your front end as a service. Like you need to take that application that renders on the server and the front end, and it's just an entirely different application, which is annoying. and it just calls your APIs and that's how it gets the data it needs. So you're literally just treating it as if it's like a single page application that can't connect to your database. But the frameworks have not quite done that. And they're like, no, no, no. We'll connect to the database and we'll do all this stuff, but then it doesn't work because you've got, like, it works this way on the back end and this way on the front end anyways. Again, long winded way of saying like, it's very complicated. I don't think the technology can solve it today. I think the technology has to change before these problems can actually genuinely become solvable. And that's why I think the whole thing is like a beta, it's like, it's very much like a moving target that we're eventually we'll get there and it's definitely had value, but I don't know that, um, responsiveness for low latency connections is where the value has been created. You know, for like folks with bad internet and say remote Africa or something, like I'm sure the internet is not a very fun place for them to use these days. Some frontend code runs on the server and some in the browser which creates challenges [00:43:05] Jeremy: I guess one of the things you mentioned is there's this, almost like this split where you have the application running on the server. It has its own set of rules because it, like you said, has access to the database and it can do things that you can't do in the browser, and then you have to sort of run the same application in the browser, but it's not quite the same application because it doesn't have access to the same things in the browser. So you have this weird disconnect, I suppose. [00:43:35] David: Yeah. Yeah. And, and, and then the challenges is like a developer that's actually complicated for you from the experience point of view, cuz you have to know somehow, okay, these things are ta, these are actually running on the server and only on the server. And like, so I think the two biggest technologies that try to do this, um, or at least do it well enough, or the two that I've used, there might be some others, um, are NextJS and remix and they have very different takes on how to do this. But, remix is the one I use most recently. So I, I'll comment on that. But like, there's a, a way that you kind of say, well, this only runs on, I think the client as an example. And that helps you a little bit. You're like, okay, this is only gonna render on the client. I can, I actually can think about that and reason about that. But then there's this thing like, okay, sometimes this runs on the server, only this part runs on the server. And it's, it just becomes like the mental capacity to figure out what's going on and debug it is like so difficult. And that database problem is like the, the normal problem, right? Like of like, I can only query the database on the server because I need secure credentials or something. Okay. I understand that as a developer, but I don't understand how to make sure the application is doing what I expect it to do and how to fix it if something goes wrong. And that, that's why I think. , I'm a, I'm a believer in constraints. The only way you make progress is you simplify problems. Like you just give up on solving the complicated thing and you make the problem simpler. Right? And so for me, that's why I'm like, just take the database outta the equation. We can create APIs from the client, from the server, same security levels. Okay? Make it so it can only do that and it has to be run as almost like a UI only thing. Now that creates complexity cuz you have to run this other service, right? And, and like I personally do not wanna have to spin up a bunch of containers just to write like a simple like web application. but again, I, I think the problem has not been simplified yet for a lot of folks. Like React did this to be fair, um, it made it a lot easier to, to build UI that was responsive and, and just updated values when they changed, you know, which was a big deal for a long period of time. But I feel like everything after has not quite reached that that area, whereas it's simple and even react is hard to debug when it doesn't do what you want it to do. So I don't know, there, there's so gaps I guess is what i would say. And. Hopefully, hopefully, you know, in the next five years we'll kind of see this come to completion because it does feel like it's, it's getting closer to that compromise. You know, where like we used to have pure server rendered apps with some weird janky JavaScript on top. Now we've got this bridge of really complicated, you know, JavaScript on top, and the server apps are also complicated and it's just, it's a nightmare. And then this newer generation of these frameworks that work for some types of technology, but not all. And, and we're kind of almost coming full circle to like server rendered, you know, everything. But with like allowing the same level of interactions that we've been desiring, I guess, on the web. So, and I, fingers crossed this gets better, but right now I do not see like a clear like, oh, it's definitely there. I can see it coming. I'm like, well, we're kind of making progress. I don't love being the beta tester of the whole thing, but we're kind of getting there. And so, you know, we'll see. There are multiple ways to write mobile apps as well (flutter, react native, web views) [00:46:36] Jeremy: I guess you, you've been saying this whole shifting landscape of how Front End works has made it difficult for Sentry to provide like automatic instrumentation and things like that for, for mobile apps. Is that a different story? Like is it pretty standardized in terms of how do you instrument an Android app or an iOS app. [00:46:58] David: Sort of, but also, no, like, a good example here is like early days mobile, it's a native application. You ship a binary known quantity, right? Or maybe you embedded a web browser, but like, that was like a very different thing. Okay. And then they did things where like, okay, more of it's like embedded web browser type stuff, or dynamically render content. So that's now a moving target. the current version of that, which I'm not a mobile dev so like people have strong opinions on both sides of this fence, but it's like, okay, do you use like a, a hybrid framework which allows you to build. Say, uh, react native, which is like arou you to sort of write a JavaScript ish thing and it runs on both Android and mobile, but not really well on either. Um, or do you write a native, native app, which is like a known quantity, but then you may maintain like two code bases, have two degrees of expertise and stuff. Flutters the same thing. so there's still that version of complexity that goes on within it. And I, I think people care less about mobile cuz it impacts people less. Like, you know, there's that whole generation of like, oh, mobile's the future, everything's gonna be mobile, let's not become true. Uh, mobile's very important, but like we have desktops still. We use web software all the time, half the time on mobile. We're just using the web software at the end of the day, so at least we know that's a thing. And I think, so I think that investment in mobile has died down some. Um, but some companies like mobile is like their main experience or one of their driving experience is like a, like a company like DoorDash, mobile is as important as web, if not more, right? Because of like the types of customers. Spotify probably same thing, but I don't know, Sentry. We don't need a mobile app, who cares? It's irrelevant to the problem space, right? And so I, I think it's just not quite taken on. And so mobile is still like this secondary citizen at a lot of companies, and I think the evolution of it has been like complicated. And so I, I think a lot of the problems are known, but maybe people care less or there's just less customers. And so the weight doesn't, like, the weight is wildly different. Like JavaScript's probably like a hundred times the size from an investment point of view for everyone in the world than say mobile applications are, is how I would think about it. And so whether mobile is or isn't solved is almost irrelevant to the, the, the like general problem at hand. and I think at the very least, like mobile applications, there's like, there's like a tool chain where you can debug a lot of stuff that works fairly well and hasn't changed over the years, whereas like the web you have like browser tools, but that's about it. So. Mobile apps can have large binaries or pull in lots of dependencies at runtime [00:49:16] Jeremy: So I guess with mobile. Um, I was initially thinking of native apps, but you're, you're bringing up that there's actually people who would make a native app that's just a web view for a webpage, or there's React native or there's flutters, so there's actually, it really isn't standard how to make a mobile app. [00:49:36] David: Yeah. And even within those, it comes back to like, okay, is it now the same problem where we're loading in a bunch of JavaScript or downloading a bunch of JavaScript and content remotely and stuff? And like, you'll see this when you install a mobile app, and sometimes the binaries are huge, right? Sometimes they're really small, and then you load it up and it's downloading like several gigs of data and stuff, right? And those are completely different patterns. And even within those like subsets, I'm sure the implementations are wildly different, right? And so, you know, I, that may not be the same as like the runtime kind of changing, but I remember there was this, uh, this must be a decade ago. I, I used, I still am a gamer, but. Um, early in my career I worked a lot with like games like World of Warcraft and stuff, and I remember when games started launching progressive loading where it's like you could download a small chunk of the game and actually start playing and maybe the textures were lower, uh, like resolution and everything was lower fidelity and, and you could only go so far until the game fully installed. But like, imagine like if you're like focused on performance or something like that, measuring it there is completely different than measuring it once, say everything's installed, you know? And so I think those often become very complex use cases. And I think that used to be like an extreme edge case that was like such a, a hyper-specific optimization for like what The Warcraft, which is like one of the biggest games of all time that it made sense, you know, okay, whatever. They can build their own custom tooling and figure it out from there. And now we've taken that degree of complexity and tried to apply it to everything in the world. And it's like uhoh, like nobody has the teams or the, the, the talent or the, the experience to necessarily debug a lot of these complicated problems just like Sentry like. You know, we're not dealing with React internals. If something's wrong in the React internals, it's like somebody might be able to figure it out, but it's gonna take us so much time to figure out what's going on, versus, oh, we're rendering some html. Cool. We understand how it works. It's, it's a known, known problem. We can debug it. Like there's nothing to even debug most of the time. Right. And so, I, I don't know, I think the industry has to get to a place where you can reason about the software, where you have the calculator, right. And you don't have to figure out how the calculator works. You just can trust that it's gonna work for you. How Sentry's stack has become more complex over time [00:51:35] Jeremy: so kind of. Shifting over a little bit to Sentry's internals. You, you said that Sentry started in, was it 2008 you said? [00:51:47] David: Uh, the open source project was in 2008. Yeah. [00:51:50] Jeremy: The stack that's used in Sentry has evolved. Like I remembered that there was a period where I think you could run it with a pretty minimal stack, like I think it may have even supported SQLite. [00:52:02] David: Yeah. [00:52:03] Jeremy: And so it was something that people could run pretty easily on their own. But things have, have obviously changed a lot. And so I, I wonder if you could speak to sort of the evolution of that process. Like when do you decide like, Hey, this thing that I built in 2008, Is, you know, not gonna cut it. And I really need to re-architect what this system is. [00:52:25] David: Yeah, so I don't know if that's actually the reality of why things have changed, that it's like, oh, this doesn't work anymore. We've definitely introduced complexity in the sense of like, probably the biggest shift for Sentry was like, it used to be everything, and it was a SQL database, and everything was kind of optional. I think half that was maintainable because it was mostly built by. And so I could maintain like an architectural vision that kept it minimal. I had the experience to figure it out and duct tape the right things. Um, so that was one thing. And I think eventually, you know, that doesn't scale as you're trying to do more and build more into the product. So there's some complexity there. but for the most part you can, it can still

#DataOops
Episode 29 : TPCH MSSQL entre dans la danse + ChatGpt Premiers tests

#DataOops

Play Episode Listen Later Apr 27, 2023 81:36


TPCH : nouveaux tests avec SQL Server et influence de la collation sur les performances. Autres Tests TPCH SF100 : DuckDB & Hyper sur un laptop vs, Snowflake (XS to 4xLarge). Quelques mots sur nos premiers essais avec ChatGPT

Modernize or Die ® Podcast - CFML News Edition
Modernize or Die® - CFML News Podcast for December 27th, 2022 - Episode 177

Modernize or Die ® Podcast - CFML News Edition

Play Episode Listen Later Dec 27, 2022 39:29


2022-12-27 Weekly News - Episode 177Watch the video version on YouTube at https://youtu.be/EtTWj20ThRYHosts:  Eric Peterson - Senior Developer at Ortus Solutions Daniel Garcia - Senior Developer at Ortus Solutions Thanks to our Sponsor - Ortus SolutionsThe makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. A few ways  to say thanks back to Ortus Solutions: Like and subscribe to our videos on YouTube.  Help ORTUS reach for the Stars - Star and Fork our ReposStar all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github  Subscribe to our Podcast on your Podcast Apps and leave us a review Sign up for a free or paid account on CFCasts, which is releasing new content every week BOXLife store: https://www.ortussolutions.com/about-us/shop Buy Ortus's Books 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips) Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes  Patreon Support ( prodigious )Goal 1 - We have 43 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions. Goal 2 - We are 39% of the way to fully fund the hosting of ForgeBox.io Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Current Roles - More in the job section Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -  https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/ Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/  News and AnnouncementsICYMI - CFML Blog Aggregator - CFBlogs.org 2.0 ReleasedThe new version of CFBlogs ColdFusion Blog Aggregator has been released.This version displays all of the blog posts in an attractive three-column card layout and displays the open graph image or a site image at the top of the post. The card images should allow the user to quickly convey the author of the post. Users can sort the grids by author by clicking on the card image.https://www.gregoryalexander.com/blog/2022/12/5/CFBlogsorg-20-Released ICYMI - ColdBox Master Class - Completely Free until the end of the Year!Want to learn about modern web apps in ColdFusion (CFML)? We have our ColdBox Master Class for FREE until the end of the year!  A gift to the community, so we can all build amazing apps together! Watch all the videos!  Binge Coding Anyone? Enjoy! https://www.cfcasts.com/series/cb-master-class?utm_source=podcast&utm_medium=PODCAST&utm_campaign=LM-PODCAST Webinar / Meetups and WorkshopsOrtus Event Calendar for Googlehttps://calendar.google.com/calendar/u/0?cid=Y181NjJhMWVmNjFjNGIxZTJlNmQ4OGVkNzg0NTcyOGQ1Njg5N2RkNGJiNjhjMTQwZjc3Mzc2ODk1MmIyOTQyMWVkQGdyb3VwLmNhbGVuZGFyLmdvb2dsZS5jb20 Ortus Fridays are back in Full Effect in 2023 Ortus Office Hours - Jan 6th, 2023 Software Craftsmanship Book Club - Jan 13th, 2023 Ortus Webinar - Jan 20th 2023 Koding with the Kiwi - Jan 27th, 2023 CFCasts Content Updateshttps://www.cfcasts.comRecent Releases ITB - 12 Days of Xmas - ITB 2022 - All videos released to subscribers Software Craftsmanship Book Club - Clean Code - Chapter 2 https://cfcasts.com/series/ortus-software-craftsmanship-book-club---clean-code/videos/ortus-software-craftsmanship-book-club-clean-code-2  ColdBox Master Class - ddFREE for 4 more days 2022 ForgeBox Module of the Week Series - 1 new Video https://cfcasts.com/series/2022-forgebox-modules-of-the-week 2022 VS Code Hint tip and Trick of the Week Series - 1 new Video https://cfcasts.com/series/2022-vs-code-hint-tip-and-trick-of-the-week  Coming Soon More ForgeBox and VS Code Podcast snippet videos Box-ifying a 3rd Party Library from Gavin ColdBox Elixir from Eric Getting Started with ContentBox from Daniel Brad with more CommandBox Videos  Conferences and TrainingCF Summit Online All the webinars, all the speakers from Adobe ColdFusion Summit 2022 – brought right to your screen. All sessions will soon be streamed online, for your convenience. Stay tuned for more! MODERNIZING THROUGH EVOLUTION NOT REVOLUTIONGuust NieuwenhuisJanuary 10, 2023 | 15:00 - 16:00 EST (1 hour)Our company has grown over a quarter of a century, and across those years we have matured as developers and IT companies, refining both our tools and practices to a degree that the past seems hardly recognizable. Counter to this are the inevitable compromises, products of constrained timeframes, limited client budgets or strained resources. Projects inevitably lean more towards growth and depth than general modernization, to the point that they become difficult to maintain. So, what happens when the bugs add up and the monster emerges? Refactor? Rewrite from scratch? We've been involved in many such projects, internally and inherited both, and have learned there is no simple answer to the question “how do we move forward?” Through case studies and anecdotes I will explain what to look out for, from both a technical and business perspective.EASIER API DEVELOPMENT AND TESTING - USE POSTMAN, WEBHOOK.SITE, AND NGROK TO ENHANCE YOUR WORKFLOWDaniel GarciaJanuary 12, 2023 | 12:00 - 13:00 EST (1 hour)Postman, Webhook.site, and ngrok are great tools that can really enhance your API development and testing workflow. PostMan is a cross-platform API Testing Tool with lots of awesome features, Webhook.site allows you to easily inspect, test, and automate any incoming HTTP request or e-mails, and ngrok enables you to expose a web server running on your local machine to the internet. These are must-have tools for any API developer (either creating or consuming). In short, these tools solve problems and best of all, they all have free versions which allow you to be very productive. My goal is that after this conference, you will start using at least one, if not all three, tools when you get home. I'm not saying using these tools will be life-changing, but I am also not not saying that eitherSPREADSHEET MAGICKevin WrightJanuary 19 | 12:00 - 13:00pm EST (1 hour)Microsoft Office is the 'de facto' standard in most business environments. In this session we will look at different ways of integrating with one of the most used applications of the MS office suite, Excel. Come learn how to create, access and manipulate spreadsheets programmatically with the CFSPREADSHEET tag in ColdFusion. We will go beyond basic read and write features, and will delve into more advanced techniques like working with formulas and formatting, and creating multiple sheets. We will also look at examples of more complex types of spreadsheets by using lookups and even creating and embedding dynamic charts. FORMAT: Presentation with slides / live code reviewOPPORTUNITIES FOR BLOCKCHAIN TECHNOLOGY AND NFTS IN THE REAL WORLDMasha Edelen and Nick JuntillaJanuary 24 | 14:00 - 15:00pm EST (1 hour)Understanding the value and practical use cases of Non-Fungible Tokens in modern business applications. Learn how to get started using the blockchain and building your Web 3 strategy.Website for CF Summit Onlinehttps://cfsummit-online.meetus.adobeevents.com/VUE.JS NATION CONFERENCEJanuary 25th & 26th 2023 https://vuejsnation.com/VUEJS AMSTERDAM 20239-10 February 2023, Theater AmsterdamWorld's Most Special and Largest Vue ConferenceCALL FOR PAPERS AND BLIND TICKETS AVAILABLE NOW!Call for Papers: https://forms.gle/GopxfjYHfpE8fKa57 Blind Tickets: https://eventix.shop/abzrx3b5 https://vuejs.amsterdam/ Dev NexusApril 4-6th in AtlantaGeorgia World Congress Center285 Andrew Young International Blvd NWAtlanta, GA 30313USAApril 4th – 6th, 2023https://devnexus.com/ VueJS Live MAY 12 & 15, 2023ONLINE + LONDON, UKCODE / CREATE / COMMUNICATE35 SPEAKERS, 10 WORKSHOPS10000+ JOINING ONLINE GLOBALLY300 LUCKIES MEETING IN LONDONGet Early Bird Tickets: https://ti.to/gitnation/vuejs-london-2022  Watch 2021 Recordings: https://portal.gitnation.org/events/vuejs-london-2021 https://vuejslive.com/ Into the Box 2023 - 10th EditionMay 17-19, 2023 The conference will be held in The Woodlands (Houston), TexasThis year we will continue the tradition of training and offering a pre-conference hands-on training day on May 17th and our live Mariachi Band Party! However, we are back to our Spring schedule and beautiful weather in The Woodlands! Also, this 2023 will mark our 10 year anniversary. So we might have two live bands and much more!!!We are pleased to announce the call for speakers for the Into The Box Conference for 2023 is now officially open.CFP CLOSES IN 3 DAYS!https://www.intothebox.org/blog/into-the-box-2023-call-for-speakers https://itb2023.eventbrite.com/CFCamp is backJune, 22-23rd 2023Marriott Hotel Munich Airport, FreisingCall for Speakers coming in the New yearhttps://www.cfcamp.org/ More conferencesNeed more conferences, this site has a huge list of conferences for almost any language/community.https://confs.tech/https://github.com/scraly/developers-conferences-agenda Blogs, Tweets, and Videos of the Week 12/26/22 - Blog - Ben Nadel - Setting And Clearing Nullable Values In A Data Access Layer In ColdFusionAs much as possible, I try to avoid NULL values in my database schema design. But, sometimes, NULL is actually helpful in reducing schema complexity. Unfortunately, ColdFusion only has partial support for null values (by default); which makes it a bit tricky to pass a "required-but-null arguments" into a data access layer (DAL) method. To play nicely with both ColdFusion and SQL, I've been leaning on "magic values" when interacting with the my data gateways.https://www.bennadel.com/blog/4375-setting-and-clearing-nullable-values-in-a-data-access-layer-in-coldfusion.htm Full Null Support in Lucee and ACF Quick has a concept of `nullValue` to work around this as well  12/27/22 - Blog - Ben Nadel - Considering Nullable Date Columns As A Representation Of State In SQLIn my post yesterday on clearing NULLable database values in ColdFusion, I was using the concept of "Task Management" as my exploratory context. And, in the task database table that I created for the demo, I included both an isComplete column and a completedAt column. In theory, I could have written the demo using a single column, completedAt, since a non-NULL value within the completedAt column would indicate that the Task in question had been completed. But, I ended up using two columns because I believe they actually answer two different semantic questions.https://www.bennadel.com/blog/4376-considering-nullable-date-columns-as-a-representation-of-state-in-sql.htm “Similar” is not “the same” Quick Scopes solve the semantic issue nicely DRY is about Knowledge https://verraes.net/2014/08/dry-is-about-knowledge/  12/22/22 - Blog - Fusion Reactor - How AI Impacts APMAI is rapidly transforming how businesses operate; our article “3 Ways To Achieve Digital Transformation With AI” explains that the technology simulates human intelligence to execute capabilities like learning, problem-solving, optical recognition, speech recognition, and planning.One key area that AI is transforming is application performance monitoring (APM) software. Websites, mobile apps, and business software use APMs to monitor performance metrics. It ensures that your networks, servers, and database execute their functions without error. Such is the demand that the global market for APM software is projected to be worth $13.3 Billion by 2027. With more businesses taking advantage of the performance capabilities of AI, many are using it to improve their APM software. Below are three ways AI is making APM more efficienthttps://www.fusion-reactor.com/blog/how-ai-impacts-apm/ 12/21/22 - Blog - Ben Nadel - Fixing GitHub Gist's Sudden Case Of Line WrappingYesterday, when I was giving my post on pagination using LIMIT and OFFSET in MySQL a once-over, I noticed that my code samples - which are powered by GitHub Gists - were rendering super wonky. When I inspected the runtime styles of the page, it appears that GitHub made a recent breaking change to the white-space property used within their "line of code" CSS class. To "fix" this (ie, turn off "word wrap" for my code snippets), I had to upload a CSS override to my blog. https://www.bennadel.com/blog/4373-fixing-github-gists-sudden-case-of-line-wrapping.htm 12/21/22 - Blog - Jim Priest - Visual Studio Code ExtensionsMainly posting this for my own reference. I used Sublime Text for years and blogged about it quite a bit. A few years ago I finally bit the bullet and started using Visual Studio Code. I still think the CFML plugin in Sublime is the best for editing ColdFusion code, but when editing anything else besides CFML VSCode wins and switching between them isn't really realistic (I tried). I'm setting up a new computer and thought I'd make a list of my favorite VSCode extensions, settings, etc.https://www.thecrumb.com/posts/2022-12-21-my-vscode-extensions/ 12/22/22 - Gist - James Moberg - mergeQbSqlBindingsCFML UDF to be used with QB parameterized SQL string & binding array to generate reusable SQL https://gist.github.com/JamoCA/bb681afd2eb1a0d6d380f3b714ccc138 12/22/22 - Tweet - James Moberg - cf_dump custom tagRegarding using cfdump/writedump with strings, I prefer Lucee's #cfml approach over #ColdFusion.An even better solution IMHO is the cf_dump CFTag by @Kwaschny. It encapsulates, identifies type, hints at length & has leading/trailing space indicators.https://twitter.com/gamesover/status/1605985349234094080https://github.com/kwaschny/cf_dumpA reminder that in Lucee you can hover over a dump output to see the file and line that outputed the dump. 12/20/22 - Tweet - Brad Wood - cfdump eval attribute#TIL @lucee_server's CFDump has an "eval" attribute you can use instead of "var" which also defaults the "label" attribute to show you what it is dumping.which is the same as:https://twitter.com/bdw429s/status/1605289984319279114 CFML JobsSeveral positions available on https://www.getcfmljobs.com/Listing over 37 ColdFusion positions from 25 companies across 22 locations in 5 Countries.0 new jobs listed this weekPatreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well. We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution. Current Roles in detail All roles: https://www.tomorrows.co.uk/jobs.cfm Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -  https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/-  Minimum three years' experience with ColdFusion-  Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019-  Familiarity with Git-  Flexible skillset covering a wide range of development Automation Test Engineer – UK Only | Remote | Permanent | Circa £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/-  Minimum three years experience with automated testing-  Experience with automated testing tools such as selenium-  Experience with API test tools such as Postman/Fiddler etc Benefits of both roles:-  £4,000 per annum discretionary company bonus scheme-  25 days annual leave + bank holidays-  6% employer pension contribution-  Access to free perks and discounts through Perkbox-  Long Service Awards-  Cycle to Work Scheme-  Company and Team nights outOther Job Links Ortus Solutions https://www.ortussolutions.com/about-us/careers  There is a jobs channel in the CFML slack team, and in the box team slack now too ForgeBox Module of the WeekPassifierBy Michael BornA password strength checker based on zxcvbn4j. Measures the strength of a password and can give feedback or show how long the password would take to crack.https://forgebox.io/view/passifierVS Code Hint Tips and Tricks of the WeekCode GPTBy Daniel SanUsing the official OpenAI API inside the IDE with Code GPT you can improve your code.Features: Ask CodeGPT: CodeGPT will open a new Editor and respond the question Explain CodeGPT: CodeGPT will open a new Editor and explain the code Refactor CodeGPT: CodeGPT will open a new Editor and refactor the code Document CodeGPT: CodeGPT will open a new Editor and Document the code Find Problems CodeGPT: CodeGPT will open a new Editor and find problems in the code https://marketplace.visualstudio.com/items?itemName=DanielSanMedium.dscodegptThank you to all of our Patreon SupportersThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox. You can support us on Patreon here https://www.patreon.com/ortussolutionsDon't forget, we have Annual Memberships, pay for the year and save 10% - great for businesses. Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription. All Patreon supporters have a Profile badge on the Community Website All Patreon supporters have their own Private Forum access on the Community Website All Patreon supporters have their own Private Channel access BoxTeam Slack Live Stream Access to streams like “Koding with the Kiwi + Friends” and Ortus Software Craftsmanship Book Club https://community.ortussolutions.com/ Patreons John Wilson - Synaptrix Tomorrows Guides Jordan Clark Gary Knight Mario Rodrigues Giancarlo Gomez David Belanger  Dan Card Jeffry McGee - Sunstar Media Dean Maunder Nolan Erck  Wil De Bruin Abdul Raheen Don Bellamy Joseph Lamoree Jonathan Perret Jan Jannek Laksma Tirtohadi Brian Ghidinelli - Hagerty MotorsportReg Carl Von Stetten Jeremy Adams Didier Lesnicki Matthew Clemente Scott Steinbeck - Agri Tracking Systems Daniel Garcia Ben Nadel  Richard Herbet Brett DeLine Kai Koenig Charlie Arehart Jason Daiger Shawn Oden Ross Phillips Matthew Darby Edgardo Cabezas Patrick Flynn Stephany Monge Kevin Wright John Whish Peter Amiri Cavan Vannice John Nessim Tia You can see an up to date list of all sponsors on Ortus Solutions' Websitehttps://ortussolutions.com/about-us/sponsors Thanks everyone!!! ★ Support this podcast on Patreon ★

Modernize or Die ® Podcast - CFML News Edition
Modernize or Die® - CFML News Podcast for December 20th, 2022 - Episode 176

Modernize or Die ® Podcast - CFML News Edition

Play Episode Listen Later Dec 20, 2022 72:16


2022-12-20 Weekly News - Episode 176Watch the video version on YouTube at https://youtu.be/Ez5BTHOjv84  Hosts: Gavin Pickin - Senior Developer at Ortus Solutions Brad Wood - Senior Developer at Ortus Solutions Thanks to our Sponsor - Ortus SolutionsThe makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. A few ways  to say thanks back to Ortus Solutions: Like and subscribe to our videos on YouTube.  Help ORTUS reach for the Stars - Star and Fork our ReposStar all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github  Subscribe to our Podcast on your Podcast Apps and leave us a review Sign up for a free or paid account on CFCasts, which is releasing new content every week BOXLife store: https://www.ortussolutions.com/about-us/shop Buy Ortus's Books 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips) Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes  Patreon Support ( substantial )Goal 1 - We have 43 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions.Goal 2 - We are 39% of the way to fully fund the hosting of ForgeBox.io Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector.  Current Roles - More in the job section Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -  https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/ Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/ News and AnnouncementsReal ColdFusion is in the NewsThe U.S. Department of Energy said Sunday it would announce a "major scientific breakthrough" this week, after media reported a federal laboratory had recently achieved a major milestone in nuclear fusion research. The Financial Times reported Sunday that scientists in the California-based Lawrence Livermore National Laboratory (LLNL) had achieved a "net energy gain" from an experimental fusion reactor.https://www.cbsnews.com/news/nuclear-fusion-energy-breakthrough-us-expected-announcement-zero-carbon-power/ Meet ColdFusion on Amazon Web ServicesBuild high-performing, enterprise-ready applications that scale dynamically to meet your business needs. Easily create interactive web applications by leveraging unique built-in HTML5 support. Make your websites more secure with formidable security standards. https://www.adobe.com/products/coldfusion-amazon-web-services.html 12 Days of Xmas - ITB 2022 Video Releases are in ProgressIt's that time of year again. Trees are lit, presents are being wrapped, and relatives are coming to visit. That's right, it's time again for the 12 days of Christmas-- 2022 ITB Video Release Edition! https://www.ortussolutions.com/blog/category/12-days-of-christmas-itb-2022-video-releasehttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-2-new-moduleshttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-3-moduleshttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-4-coldbox-modules-featureshttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-5-commandboxhttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-6-contentboxhttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-7-reactive-uis-cbwire-vuejs-and-alpinejshttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-8-modern-cfmlhttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-9-debugging-cfml-applications Adobe ColdFusion Fortuna AlphaSignup for the pre-releasehttps://www.adobeprerelease.com/beta/C0A219A0-A127-417A-D0D3-A7B5B3C5A0AE/participate/C3B4F4DC-8662-4610-D2B1-EE8FAD396648 Advent of Codehttps://adventofcode.com/CFML Slack Leaderboard: `1574707-be30db8f`Box Team Leaderboard: `26416-a4842ce2`ICYMI - CFML Blog Aggregator - CFBlogs.org 2.0 ReleasedThe new version of CFBlogs ColdFusion Blog Aggregator has been released.This version displays all of the blog posts in an attractive three-column card layout and displays the open graph image or a site image at the top of the post. The card images should allow the user to quickly convey the author of the post. Users can sort the grids by author by clicking on the card image.https://www.gregoryalexander.com/blog/2022/12/5/CFBlogsorg-20-Released ICYMI - ColdBox Master Class - Completely Free until the end of the Year!Want to learn about modern web apps in ColdFusion (CFML)? We have our ColdBox Master Class for FREE until the end of the year!  A gift to the community, so we can all build amazing apps together! Watch all the videos!  Binge Coding Anyone? Enjoy!https://www.cfcasts.com/series/cb-master-class?utm_source=podcast&utm_medium=PODCAST&utm_campaign=LM-PODCAST New Releases and UpdatesICYMI - MasaCMS Security Vulnerability FixIf you're on Masa CMS 7.3, you should update to version 7.3.10 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.https://github.com/MasaCMS/MasaCMS/discussions/143 https://github.com/MasaCMS/MasaCMS/releases/tag/7.3.10 ICYMI - CommandBox 5.7.0 Released!We are pleased to announce the release of CommandBox 5.7.0, which comes with a handful of new features and some important library updates.https://www.ortussolutions.com/blog/commandbox-570-released  ICYMI - CommandBox Docker v3.6.3 Images ReleasedToday we are pleased to announce the release of version 3.6.3 of our CommandBox Docker images.This release upgrades the CommandBox binary to 5.7.0. Read the Release Notes for this version here. Also added in this version, are new distro builds for the RHEL Universal Base Image. These images may be utilized by using the ubi9 in the image tag in the same way the alpine base images currently do. https://www.ortussolutions.com/blog/commandbox-docker-v363-images-released Webinar / Meetups and WorkshopsOrtus Event Calendar for Googlehttps://calendar.google.com/calendar/u/0?cid=Y181NjJhMWVmNjFjNGIxZTJlNmQ4OGVkNzg0NTcyOGQ1Njg5N2RkNGJiNjhjMTQwZjc3Mzc2ODk1MmIyOTQyMWVkQGdyb3VwLmNhbGVuZGFyLmdvb2dsZS5jb20 Ortus Fridays are back in Full Effect in 2023 Ortus Office Hours - Jan 6th, 2023 Software Craftsmanship Book Club - Jan 13th, 2023 Ortus Webinar - Jan 20th 2023 Koding with the Kiwi - Jan 27th, 2023 ICYMI - Docker - Community All-Hands 7 -  Winter editionJoin the 7th the Community All-Hands, a quarterly online event that brings the Docker community together!This global meetup features community news, company and product updates, demos, and language-specific sessions.Thursday, December the 15th, 8:00 AM Pacific Time. A more interactive first day, featuring talks of exciting trends like WASM and Docker Extensions, interviews and the traditional Docker updates and Community Awards!Friday, December the 16th, 8:00 AM Pacific Time. Workshops day! Learn how to use Docker with your favorite programming language.https://docker.github.io/community-all-hands/ CFCasts Content Updateshttps://www.cfcasts.comRecent Releases ITB - 12 Days of Xmas - ITB 2022 - 9 days + counting Software Craftsmanship Book Club - Clean Code - Chapter 2 https://cfcasts.com/series/ortus-software-craftsmanship-book-club---clean-code/videos/ortus-software-craftsmanship-book-club-clean-code-2  ColdBox Master Class - Now FREE 2022 ForgeBox Module of the Week Series - 1 new Video https://cfcasts.com/series/2022-forgebox-modules-of-the-week 2022 VS Code Hint tip and Trick of the Week Series - 1 new Video https://cfcasts.com/series/2022-vs-code-hint-tip-and-trick-of-the-week  Coming Soon More ForgeBox and VS Code Podcast snippet videos Box-ifying a 3rd Party Library from Gavin ColdBox Elixir from Eric Getting Started with ContentBox from Daniel Brad with more CommandBox Videos  Conferences and TrainingCF Summit Online All the webinars, all the speakers from Adobe ColdFusion Summit 2022 – brought right to your screen. All sessions will soon be streamed online, for your convenience. Stay tuned for more! NATIVE MOBILE APPS WITH MONACA.IO & ADOBE COLDFUSION 2021Mark TakataDecember 22, 2022 | 12:00 - 13:00 EST (1 hour)Have you always wanted to build native mobile apps, but didn't want to learn Swift or ObjectiveC? Monaca.io uses the power of Apache Cordova and a richly featured online cloud IDE to help you build out native applications quickly and easily, with just basic JavaScript knowledge. In this talk Mark will build an Adobe ColdFusion 2021 powered back end using mySQL, exposed as an API, which will be consumed by a native mobile app written and built inside of the Monaca.io ecosystem.And many more in Dec and Jan… Website for CF Summit Onlinehttps://cfsummit-online.meetus.adobeevents.com/ VUE.JS NATION CONFERENCEJanuary 25th & 26th 2023https://vuejsnation.com/VUEJS AMSTERDAM 20239-10 February 2023, Theater AmsterdamWorld's Most Special and Largest Vue ConferenceCALL FOR PAPERS AND BLIND TICKETS AVAILABLE NOW!Call for Papers: https://forms.gle/GopxfjYHfpE8fKa57Blind Tickets: https://eventix.shop/abzrx3b5 https://vuejs.amsterdam/ Dev NexusApril 4-6th in AtlantaGeorgia World Congress Center285 Andrew Young International Blvd NWAtlanta, GA 30313USAApril 4th – 6th, 2023https://devnexus.com/ VueJS Live MAY 12 & 15, 2023ONLINE + LONDON, UKCODE / CREATE / COMMUNICATE35 SPEAKERS, 10 WORKSHOPS10000+ JOINING ONLINE GLOBALLY300 LUCKIES MEETING IN LONDONGet Early Bird Tickets: https://ti.to/gitnation/vuejs-london-2022  Watch 2021 Recordings: https://portal.gitnation.org/events/vuejs-london-2021https://vuejslive.com/ Into the Box 2023 - 10th EditionMay 17-19, 2023 The conference will be held in The Woodlands (Houston), TexasThis year we will continue the tradition of training and offering a pre-conference hands-on training day on May 17th and our live Mariachi Band Party! However, we are back to our Spring schedule and beautiful weather in The Woodlands! Also, this 2023 will mark our 10 year anniversary. So we might have two live bands and much more!!!We are pleased to announce the call for speakers for the Into The Box Conference for 2023 is now officially open. https://www.intothebox.org/blog/into-the-box-2023-call-for-speakers https://itb2023.eventbrite.com/CFCamp is backJune, 22-23rd 2023Marriott Hotel Munich Airport, FreisingCall for Speakers coming in the New yearhttps://www.cfcamp.org/ More conferencesNeed more conferences, this site has a huge list of conferences for almost any language/community.https://confs.tech/https://github.com/scraly/developers-conferences-agenda Blogs, Tweets, and Videos of the Week 12/20/22 - Blog - Ben Nadel - Paging Through Data Using LIMIT And OFFSET In MySQL And ColdFusionWhen I render a data-grid for a user, I usually use pagination to allow the user to iterate through some relatively finite amount of records. The other day, however, I had to build an administrative UI (user interface) that surfaced a tremendous amount of data - possibly hundreds-of-thousands of records. With so much data, standard pagination didn't seem like a meaningful solution. Instead, I switched over to using LIMIT and OFFSET in my MySQL, which allows the admin to page through the data one slice at a time. I don't use this technique that often, so I thought a ColdFusion demo would be fun.https://www.bennadel.com/blog/4371-paging-through-data-using-limit-and-offset-in-mysql-and-coldfusion.htm 12/19/22 - Blog - Jim Preist - TheCrumb - Counting Lines of Code with clocSooner or later your project manager will approach you mumbling something about metrics, lines of code and accountability.Much like tabs vs spaces there are people who are both for and against using lines of code as some sort of measurement. I won't get into that argument but I will show you a fantastic tool to make this easy: cloccloc counts blank lines, comment lines, and physical lines of source code in many programming languages.It's available for Windows, Mac and Linux.https://www.thecrumb.com/posts/2022-12-19-counting-lines-of-code/ 12/19/22 - Blog - Ortus Solutions - The 12 Days of Christmas - ITB 2022 Video Release— Day 8 - Modern CFMLToday, Day 8's Videos from Into the Box 2022 Conference, 5 sessions on modern CFML concepts, including using Java with your CFML Apps, Aspect Oriented Programming, Web Components, Feature Flags and using Queues in CFML with Rabbit MQ.https://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-8-modern-cfml 12/19/22 - Blog - Ortus Solutions - Form Validation with CBWIREForm validation is something we as developers have to deal with all the time, and there are plenty of ways to go about it, some elegant and others not so much. ColdBox has a validation module called cbValidation for powerful form validation. We have this available to us in CBWIRE as well, which allows us to build forms with instant validation and messaging for the user without any page refreshing.https://www.ortussolutions.com/blog/form-validation-with-cbwire  12/18/22 - Blog - Ben Nadel - Using INSERT INTO SELECT To Duplicate Rows In MySQL And Lucee CFMLLast week, as part of a duplication workflow, I had to duplicate a bunch of rows in one table while changing one of the column values (think, the conceptual "foreign key" column). To do this, I used MySQL's INSERT INTO SELECT syntax which provides a bulk INSERT API that is powered by a SELECT statement. I'd never actually done this in a production application before; so, I thought it might be worth a quick MySQL and ColdFusion demo.https://www.bennadel.com/blog/4370-using-insert-into-select-to-duplicate-rows-in-mysql-and-lucee-cfml.htm  12/16/22 - Blog - Ben Nadel - Breaking An IPv4 Address Range Up Into CIDR Ranges In Lucee CFML 5.3.9.141The other day, this blog was being attacked by a malicious actor in Australia. I identified 38 unique IP addresses that were all poking and prodding the application, looking for weaknesses. Thankfully, this caused zero issues for the site itself or its visitors. However, in the heat of the moment, as I was adding these IPs to Cloudflare's Web Application Firewall (WAF) rules, I realized that my understanding of how IP addresses work was quite lacking. I needed to create CIDR ranges for the WAF; but, wasn't sure how to do that. As such, I wanted to take a moment and play around with IP addresses, taking a given range and breaking it up into the tightest possible CIDR ranges in Lucee CFML.https://www.bennadel.com/blog/4369-breaking-an-ipv4-address-range-up-into-cidr-ranges-in-lucee-cfml-5-3-9-141.htm 12/16/22 - Blog - Ortus Solutions - The 12 Days of Christmas - ITB 2022 Video Release— Day 7 - Reactive UIs - CBWire, VueJS and AlpineJSToday, Day 7's Videos from Into the Box 2022 Conference, 4 sessions related to reactive UIs, which are reacted with CBWire, VueJS and AlpineJS.https://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-7-reactive-uis-cbwire-vuejs-and-alpinejs 12/15/22 - Blog - Ortus Solutions - The 12 Days of Christmas - ITB 2022 Video Release— Day 6 - ContentBox Today, Day 6's Videos from Into the Box 2022 Conference, 3 sessions related to ContentBox. Getting started with ContentBox 101, Headless CMS and then deploying to the cloud.https://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-6-contentbox  12/14/22 - Podcast - Working Code Podcast - Episode 105: No Effort DecemberWelcome to the start of No Effort December! As Adam explained to me, that's the time of the year in which we gather 'round the mics and talk about whatever the heck comes to mind. We just passed two years on the Working Code podcast - woot woot!, it's the holidays, and we've been peopling super hard with our families — we all need a little jolly, no-effort relaxation. On today's show, Carol wonders if she can use Hackathons as a means to "improve community outreach" - one of her team's new OKR (Objectives and Key Results). And, I discuss the difference between deploying on Friday vs. deploying during the holiday (and why these are not the same thing and why you shouldn't be a jerk-face to your co-workers).https://www.bennadel.com/blog/4368-working-code-podcast-episode-105-no-effort-december.htm 12/14/22 - Blog - Ortus Solutions - The 12 Days of Christmas - ITB 2022 Video Release— Day 5 - CommandBoxToday, Day 5's Videos from Into the Box 2022 Conference, 3 sessions related to CommandBox, hidden gems, building modules for CommandBox and Securing CommandBox servers for Production.https://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-5-commandbox CFML JobsSeveral positions available on https://www.getcfmljobs.com/Listing over 37 ColdFusion positions from 25 companies across 22 locations in 5 Countries.2 new jobs listed this weekFull-Time - ColdFusion Developer at Remote - United KingdomDec 16https://www.getcfmljobs.com/jobs/index.cfm/united-kingdom/ColdFusion-Developer-at-Remote/11541 Full-Time - ColdFusion Developer at Remote - United KingdomDec 14https://www.getcfmljobs.com/jobs/index.cfm/united-kingdom/ColdFusion-Developer-at-Remote/11540 Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well. We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution. Current Roles in detail All roles: https://www.tomorrows.co.uk/jobs.cfm Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -  https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/ -  Minimum three years' experience with ColdFusion-  Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019-  Familiarity with Git-  Flexible skillset covering a wide range of development Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/-  Minimum three years experience with automated testing-  Experience with automated testing tools such as selenium-  Experience with API test tools such as Postman/Fiddler etc  Benefits of both roles:-  £4,000 per annum discretionary company bonus scheme-  25 days annual leave + bank holidays-  6% employer pension contribution-  Access to free perks and discounts through Perkbox-  Long Service Awards-  Cycle to Work Scheme-  Company and Team nights outOther Job Links Ortus Solutions https://www.ortussolutions.com/about-us/careers  There is a jobs channel in the CFML slack team, and in the box team slack now too ForgeBox Module of the WeekIPIFY API ModuleThis module allows you to tap into the ipify API: https://www.ipify.org/ : A Simple Public IP Address API, to get the IP address of where you made the call from; your public IP Address.https://www.forgebox.io/view/ipify VS Code Hint Tips and Tricks of the WeekLucee DebugBy David Rogers luceedebug is a step debugger for Lucee.There are two components:A Java agentA VS Code extensionThe java agent needs a particular invocation and needs to be run as part of JVM/CF server startup.The VS Code client extension is available as luceedebug when searching in the VS Code extensions panehttps://github.com/softwareCobbler/luceedebug https://marketplace.visualstudio.com/items?itemName=DavidRogers.luceedebug Thank you to all of our Patreon SupportersThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox. You can support us on Patreon here https://www.patreon.com/ortussolutionsDon't forget, we have Annual Memberships, pay for the year and save 10% - great for businesses. Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription. All Patreon supporters have a Profile badge on the Community Website All Patreon supporters have their own Private Forum access on the Community Website All Patreon supporters have their own Private Channel access BoxTeam Slack Live Stream Access to streams like “Koding with the Kiwi + Friends” and Ortus Software Craftsmanship Book Club https://community.ortussolutions.com/ Patreons John Wilson - Synaptrix Tomorrows Guides Jordan Clark Gary Knight Mario Rodrigues Giancarlo Gomez David Belanger Dan Card Jeffry McGee - Sunstar Media Dean Maunder Nolan Erck  Wil De Bruin Abdul Raheen Don Bellamy Joseph Lamoree  Jonathan Perret Jan Jannek  Laksma Tirtohadi  Brian Ghidinelli - Hagerty MotorsportReg Carl Von Stetten Jeremy Adams Didier Lesnicki Matthew Clemente Scott Steinbeck - Agri Tracking Systems Daniel Garcia Ben Nadel  Richard Herbet Brett DeLine Kai Koenig Charlie Arehart Jason Daiger Shawn Oden Ross Phillips Matthew Darby Edgardo Cabezas Patrick Flynn Stephany Monge  Kevin Wright John Whish Peter Amiri Cavan Vannice John Nessim Tia You can see an up to date list of all sponsors on Ortus Solutions' Websitehttps://ortussolutions.com/about-us/sponsors Thanks everyone!!! ★ Support this podcast on Patreon ★

Modernize or Die ® Podcast - CFML News Edition
Modernize or Die® - CFML News Podcast for December 13th, 2022 - Episode 175

Modernize or Die ® Podcast - CFML News Edition

Play Episode Listen Later Dec 13, 2022 57:54


2022-12-13 Weekly News - Episode 175Watch the video version on YouTube at https://youtu.be/jZ0y_ko4omE Hosts:  Gavin Pickin - Senior Developer at Ortus Solutions Dan Card  - Senior Developer at Ortus Solutions Thanks to our Sponsor - Ortus SolutionsThe makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. A few ways  to say thanks back to Ortus Solutions: Like and subscribe to our videos on YouTube.  Help ORTUS reach for the Stars - Star and Fork our ReposStar all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github  Subscribe to our Podcast on your Podcast Apps and leave us a review Sign up for a free or paid account on CFCasts, which is releasing new content every week BOXLife store: https://www.ortussolutions.com/about-us/shop Buy Ortus's Books 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips) Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes  Patreon Support ( phenomenal )Goal 1 - We have 43 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions. Goal 2 - We are 39% of the way to fully fund the hosting of ForgeBox.io Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector.  Current Roles - More in the job section Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -  https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/ Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/ News and Announcements12 Days of Xmas - ITB 2022 Video Releases are in ProgressIt's that time of year again. Trees are lit, presents are being wrapped, and relatives are coming to visit. That's right, it's time again for the 12 days of Christmas-- 2022 ITB Video Release Edition! https://www.ortussolutions.com/blog/category/12-days-of-christmas-itb-2022-video-release CFML Blog Aggregator - CFBlogs.org 2.0 ReleasedThe new version of CFBlogs ColdFusion Blog Aggregator has been released.This version displays all of the blog posts in an attractive three-column card layout and displays the open graph image or a site image at the top of the post. The card images should allow the user to quickly convey the author of the post. Users can sort the grids by author by clicking on the card image.https://www.gregoryalexander.com/blog/2022/12/5/CFBlogsorg-20-Released Adobe ColdFusion Fortuna AlphaSignup for the pre-release - Special things happening which I can't talk abouthttps://www.adobeprerelease.com/beta/C0A219A0-A127-417A-D0D3-A7B5B3C5A0AE/participate/C3B4F4DC-8662-4610-D2B1-EE8FAD396648 Advent of Codehttps://adventofcode.com/CFML Slack Leaderboard: `1574707-be30db8f`Box Team Leaderboard: `26416-a4842ce2`ICYMI - ColdBox Master Class - Completely Free until the end of the Year!Want to learn about modern web apps in ColdFusion (CFML)? We have our ColdBox Master Class for FREE until the end of the year!  A gift to the community, so we can all build amazing apps together! Watch all the videos!  Binge Coding Anyone? Enjoy! https://www.cfcasts.com/series/cb-master-class?utm_source=podcast&utm_medium=PODCAST&utm_campaign=LM-PODCAST New Releases and UpdatesMasaCMS Security Vulnerability FixIf you're on Masa CMS 7.3, you should update to version 7.3.10 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.https://github.com/MasaCMS/MasaCMS/discussions/143 https://github.com/MasaCMS/MasaCMS/releases/tag/7.3.10 CommandBox 5.7.0 Released!We are pleased to announce the release of CommandBox 5.7.0, which comes with a handful of new features and some important library updates.https://www.ortussolutions.com/blog/commandbox-570-released CommandBox Docker v3.6.3 Images ReleasedToday we are pleased to announce the release of version 3.6.3 of our CommandBox Docker images.This release upgrades the CommandBox binary to 5.7.0. Read the Release Notes for this version here. Also added in this version, are new distro builds for the RHEL Universal Base Image. These images may be utilized by using the ubi9 in the image tag in the same way the alpine base images currently do. https://www.ortussolutions.com/blog/commandbox-docker-v363-images-released Webinar / Meetups and WorkshopsOrtus Event Calendar for Googlehttps://calendar.google.com/calendar/u/0?cid=Y181NjJhMWVmNjFjNGIxZTJlNmQ4OGVkNzg0NTcyOGQ1Njg5N2RkNGJiNjhjMTQwZjc3Mzc2ODk1MmIyOTQyMWVkQGdyb3VwLmNhbGVuZGFyLmdvb2dsZS5jb20 Ortus Webinar - Skipping December - Lots of great ITB Videos to watch on CFCasts.comDocker - Community All-Hands 7 -  Winter editionJoin the 7th the Community All-Hands, a quarterly online event that brings the Docker community together!This global meetup features community news, company and product updates, demos, and language-specific sessions.Thursday, December the 15th, 8:00 AM Pacific Time. A more interactive first day, featuring talks of exciting trends like WASM and Docker Extensions, interviews and the traditional Docker updates and Community Awards!Friday, December the 16th, 8:00 AM Pacific Time. Workshops day! Learn how to use Docker with your favorite programming language.https://docker.github.io/community-all-hands/ Last Week - Ortus Software Craftsmanship Book Club - Patreon OnlyFriday, December 9th at 2pm CDT - 2nd Friday of the MonthClean Code: A Handbook of Agile Software Craftsmanship by Robert Martin (Uncle Bob)Focus - Chapter 2 - Naming Conventions - 1 of the 2 hardest things in programming, along with cache invalidation and off by 1 errors ;) Recording - https://cfcasts.com/series/ortus-software-craftsmanship-book-club---clean-code/videos/ortus-software-craftsmanship-book-club-clean-code-2 CFCasts Content Updateshttps://www.cfcasts.comRecent Releases ITB - 12 Days of Xmas - ITB 2022 - starting Thursday 12/8/22 until Xmas Eve https://cfcasts.com/series/itb-2022 Software Craftsmanship Book Club - Clean Code - Chapter 2 https://cfcasts.com/series/ortus-software-craftsmanship-book-club---clean-code/videos/ortus-software-craftsmanship-book-club-clean-code-2  ColdBox Master Class - Now FREE 2022 ForgeBox Module of the Week Series - 1 new Video https://cfcasts.com/series/2022-forgebox-modules-of-the-week 2022 VS Code Hint tip and Trick of the Week Series - 1 new Video https://cfcasts.com/series/2022-vs-code-hint-tip-and-trick-of-the-week  Coming Soon More ForgeBox and VS Code Podcast snippet videos Box-ifying a 3rd Party Library from Gavin ColdBox Elixir from Eric Getting Started with ContentBox from Daniel  Conferences and TrainingCF Summit Online All the webinars, all the speakers from Adobe ColdFusion Summit 2022 – brought right to your screen. All sessions will soon be streamed online, for your convenience. Stay tuned for more! NATIVE MOBILE APPS WITH MONACA.IO & ADOBE COLDFUSION 2021Mark TakataDecember 22, 2022 | 12:00 - 13:00 EST (1 hour)Have you always wanted to build native mobile apps, but didn't want to learn Swift or ObjectiveC? Monaca.io uses the power of Apache Cordova and a richly featured online cloud IDE to help you build out native applications quickly and easily, with just basic JavaScript knowledge. In this talk Mark will build an Adobe ColdFusion 2021 powered back end using mySQL, exposed as an API, which will be consumed by a native mobile app written and built inside of the Monaca.io ecosystem.And many more in Dec and Jan… Website for CF Summit Onlinehttps://cfsummit-online.meetus.adobeevents.com/ ICYMI - Into the Box Latam 2022 - Sold Out - Big Success!Dec 7th, 2022 - 8am - 5pm2 tracks - 1 set of sessions, 1 set of deep dive workshop sessionsPricing $9-$29 USDLocation: Hyatt Centric Las Cascadas Shopping Center,Merliot, La Libertad 99999 El Salvadorhttps://latam.intothebox.org/ VUE.JS NATION CONFERENCEJanuary 25th & 26th 2023https://vuejsnation.com/VUEJS AMSTERDAM 20239-10 February 2023, Theater AmsterdamWorld's Most Special and Largest Vue ConferenceCALL FOR PAPERS AND BLIND TICKETS AVAILABLE NOW!Call for Papers: https://forms.gle/GopxfjYHfpE8fKa57 Blind Tickets: https://eventix.shop/abzrx3b5 https://vuejs.amsterdam/ Dev NexusApril 4-6th in AtlantaGeorgia World Congress Center285 Andrew Young International Blvd NWAtlanta, GA 30313USAhttps://devnexus.com/ VueJS Live MAY 12 & 15, 2023ONLINE + LONDON, UKCODE / CREATE / COMMUNICATE35 SPEAKERS, 10 WORKSHOPS10000+ JOINING ONLINE GLOBALLY300 LUCKIES MEETING IN LONDONGet Early Bird Tickets: https://ti.to/gitnation/vuejs-london-2022  Watch 2021 Recordings: https://portal.gitnation.org/events/vuejs-london-2021 https://vuejslive.com/ Into the Box 2023 - 10th EditionMay 17-19, 2023 The conference will be held in The Woodlands (Houston), TexasThis year we will continue the tradition of training and offering a pre-conference hands-on training day on May 17th and our live Mariachi Band Party! However, we are back to our Spring schedule and beautiful weather in The Woodlands! Also, this 2023 will mark our 10 year anniversary. So we might have two live bands and much more!!!We are pleased to announce the call for speakers for the Into The Box Conference for 2023 is now officially open. https://www.intothebox.org/blog/into-the-box-2023-call-for-speakers https://itb2023.eventbrite.com/CFCamp is backJune, 22-23rd 2023Marriott Hotel Munich Airport, FreisingCall for Speakers coming in the New yearhttps://www.cfcamp.org/ More conferencesNeed more conferences, this site has a huge list of conferences for almost any language/community.https://confs.tech/https://github.com/scraly/developers-conferences-agenda Blogs, Tweets, and Videos of the Week 12/13/22 - Blog - Ortus Solutions - The 12 Days of Christmas - ITB 2022 Video Release— Day 4 - ColdBox Modules & FeaturesIt's that time of year again. Trees are lit, presents are being wrapped, and relatives are coming to visit. That's right, it's time again for the 12 days of Christmas-- 2022 ITB Video Release Edition! Today, Day 4's Videos from Into the Box 2022 Conference, 3 sessions related to ColdBox modules and Features. CBValidation, CBFuture and ColdBox Task Scheduling.https://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-4-coldbox-modules-features 12/12/22 - Blog - Ortus Solutions - The 12 Days of Christmas - ITB 2022 Video Release— Day 3 - ModulesIt's that time of year again. Trees are lit, presents are being wrapped, and relatives are coming to visit. That's right, it's time again for the 12 days of Christmas-- 2022 ITB Video Release Edition! Today, Day 3's Videos from Into the Box 2022 Conference, 3 sessions related to modules. What are they, how do you build them, and a new module.https://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-3-modules 12/9/22 - Blog - Ben Nadel - Serving Secure Files With CFContent Tag's File Attribute In ColdFusionThe other day, when considering which files live inside the wwwroot folder on the ColdFusion server, I mentioned that "secure files" live outside the wwwroot folder; but, can be made accessible to the user via ColdFusion. There are many ways to do this; but, perhaps the easiest way is to use the CFContent tag's file attribute. This attribute allows any physical file on your server to be sent to the user, regardless of where it lives.https://www.bennadel.com/blog/4367-serving-secure-files-with-cfcontent-tags-file-attribute-in-coldfusion.htm 12/9/22 - Blog - Ortus Solutions - The 12 Days of Christmas - ITB 2022 Video Release— Day 2 - New ModulesIt's that time of year again. Trees are lit, presents are being wrapped, and relatives are coming to visit. That's right, it's time again for the 12 days of Christmas-- 2022 ITB Video Release Edition! Today, Day 2's Videos from Into the Box 2022 Conference, are all newly announced modules.https://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-2-new-modules 12/9/22 - Tweet - Giancarlo Gomez - AI says CF is not Dead.Ladies and Gentlemen, the AI has spoken and it also agrees that ColdFusion IS NOT DEAD!!!! #ChatGPT @coldfusion #coldfusionisnotdead #cfmlrockshttps://twitter.com/GiancarloGomez/status/1601336549521559553 https://twitter.com/GiancarloGomez 12/8/22 - Blog - Jon Clausen - Ortus Solutions - CommandBox Docker v3.6.3 Images ReleasedToday we are pleased to announce the release of version 3.6.3 of our CommandBox Docker images.This release upgrades the CommandBox binary to 5.7.0. Read the Release Notes for this version here. Also added in this version, are new distro builds for the RHEL Universal Base Image. These images may be utilized by using the ubi9 in the image tag in the same way the alpine base images currently do. https://www.ortussolutions.com/blog/commandbox-docker-v363-images-released 12/8/22 - Blog - Ben Nadel - Dynamic Tab-Size Demo Using CSS Custom Properties In JavaScriptThe other day, I pontificated on the wildly subjective nature of programming. We all have things that we like and don't like; and, it seems almost futile to try and persuade people to move against their own realities. And yet, we - as a community - seem to want to keep doing that. Case-in-point, this post on tab-size that I am writing right now! To be clear, this is not a Tabs vs. Spaces article. In this case, I am using "tab size" to generally refer to indentation, having nothing to do with your mode of indication. This is a post about quantity of indentation. I wanted to put together a JavaScript demo that would allow people to quickly and easily adjust indentation in a live example.https://www.bennadel.com/blog/4366-dynamic-tab-size-demo-using-css-custom-properties-in-javascript.htm 12/8/22 - Blog - James Moberg - Caching Repetitive UDF Access to Request Scope Using Argument Stringified+Hashed KeyWhile viewing FusionReactor logs for a ColdFusion app, I noticed lots of repetitive JDBC entries in a request that contained the same exact SQL statement and was taking 42ms per execution. I checked the UDF that was performing the query (using QB) and the query was configured to be cached for 5 minutes... but overhead-wise, it was still taking 42ms each time. The "Number of Queries" for the request was 57 and most of the queries were similar cached 40ms lookups and it started adding up to 1,452ms overall. I wondered if there was anything I could do to add self-contained caching to UDFs that could benefit from them. I didn't want to save the response to the session (YIKES! I've seen some code that does this) or use cachePut/cacheGet since the caching only needs to live for a single request of "repetitive access".https://dev.to/jamoca/caching-repetitive-udf-access-to-request-scope-using-argument-stringifiedhashed-key-3lln 12/8/22 - Blog - The 12 Days of Christmas - ITB 2022 Video Release— Day 1It's that time of year again. Trees are lit, presents are being wrapped, and relatives are coming to visit. That's right, it's time again for the 12 days of Christmas-- 2022 ITB Video Release Edition!For the next 12 business days up until Christmas, we'll be releasing a series of related videos each day on the CFCasts site for our CFCasts Subscribers, and a announcement with titles, descriptions, and links to the videos, right here on the Ortus blog. Consider it our early Christmas gift to you.We were planning on releasing the videos on Dec 24th, but we couldn't wait any longer.https://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-1 12/7/22 - Blog - Brad Wood Ortus Solutions - CommandBox 5.7.0 Released!We are pleased to announce the release of CommandBox 5.7.0, which comes with a handful of new features and some important library updates.https://www.ortussolutions.com/blog/commandbox-570-released 12/7/22 - Blog - Ben Nadel - What Files Should Live In The WwwRoot Folder?As much as I live, love, and breathe web application development, I almost never start brand new websites. Instead, I spend decades maintaining and evolving existing web properties (think this blog, think InVision). As such, my instinct for what to do on "Day 1" of a new ColdFusion web application is a bit rusty. And, now that I'm on the precipice of taking my BigSexy Poems Angular utility and fleshing-it-out into a legit ColdFusion application, I wanted to take a moment and think about the most fundamental part of a web server: the wwwroot folder.https://www.bennadel.com/blog/4365-what-files-should-live-in-the-wwwroot-folder.htm CFML JobsSeveral positions available on https://www.getcfmljobs.com/Listing over 34 ColdFusion positions from 23 companies across 21 locations in 5 Countries.Since August 1st.1 new jobs listed this weekFull-Time - ColdFusion Developer (Remote) at Fort Washington, PA - United States Dec 09https://www.getcfmljobs.com/jobs/index.cfm/united-states/ColdFusionDev-RemoteUS/11539 Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well. We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution. Current Roles in detail All roles: https://www.tomorrows.co.uk/jobs.cfm Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -  https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/-  Minimum three years' experience with ColdFusion-  Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019-  Familiarity with Git-  Flexible skillset covering a wide range of development Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/-  Minimum three years experience with automated testing-  Experience with automated testing tools such as selenium-  Experience with API test tools such as Postman/Fiddler etc Benefits of both roles:-  £4,000 per annum discretionary company bonus scheme-  25 days annual leave + bank holidays-  6% employer pension contribution-  Access to free perks and discounts through Perkbox-  Long Service Awards-  Cycle to Work Scheme-  Company and Team nights outOther Job LinksOrtus Solutionshttps://www.ortussolutions.com/about-us/careers There is a jobs channel in the CFML slack team, and in the box team slack now tooForgeBox Module of the WeekWireBox VisualizerThis module creates a nifty visual representation of all the CFCs in your application that WireBox manages as well as what they have injected into them.Installationinstall wirebox-visualizer --saveDevNext, reinitialize your application to pick up the new module.Usage - In order to view the visualizer, hit your app at this route:http://localhost/wireboxVisualizer/https://www.forgebox.io/view/wirebox-visualizer VS Code Hint Tips and Tricks of the WeekVue Language Features (Volar)Vue Language Features is a language support extension built for Vue, Vitepress and petite-vue. this is based on @vue/reactivity to calculate everything on-demand, to implement native TypeScript language service level performance.https://marketplace.visualstudio.com/items?itemName=Vue.volar Thank you to all of our Patreon SupportersThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox. You can support us on Patreon here https://www.patreon.com/ortussolutionsDon't forget, we have Annual Memberships, pay for the year and save 10% - great for businesses. Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription. All Patreon supporters have a Profile badge on the Community Website All Patreon supporters have their own Private Forum access on the Community Website All Patreon supporters have their own Private Channel access BoxTeam Slack Live Stream Access to streams like “Koding with the Kiwi + Friends” and Ortus Software Craftsmanship Book Club https://community.ortussolutions.com/ Patreons John Wilson - Synaptrix Tomorrows Guides Jordan Clark Gary Knight Mario Rodrigues Giancarlo Gomez David Belanger Dan Card Jeffry McGee - Sunstar Media Dean Maunder Nolan Erck  Wil De Bruin Abdul Raheen Don Bellamy Joseph Lamoree Jonathan Perret Jan Jannek  Laksma Tirtohadi  Brian Ghidinelli - Hagerty MotorsportReg Carl Von Stetten Jeremy Adams Didier Lesnicki Matthew Clemente Scott Steinbeck - Agri Tracking Systems Daniel Garcia Ben Nadel  Richard Herbet Brett DeLine Kai Koenig Charlie Arehart Jason Daiger Shawn Oden Ross Phillips Matthew Darby Edgardo Cabezas Patrick Flynn Stephany Monge Kevin Wright John Whish Peter Amiri Cavan Vannice John Nessim Tia You can see an up to date list of all sponsors on Ortus Solutions' Websitehttps://ortussolutions.com/about-us/sponsors Thanks everyone!!! ★ Support this podcast on Patreon ★

Modernize or Die ® Podcast - CFML News Edition
Modernize or Die® - CFML News Podcast for December 6th, 2022 - Episode 174

Modernize or Die ® Podcast - CFML News Edition

Play Episode Listen Later Dec 6, 2022 37:26


2022-12-06 Weekly News - Episode 174Watch the video version on YouTube at https://youtu.be/TLt1L1HzqZQ Hosts:  Gavin Pickin - Senior Developer at Ortus Solutions Eric Peterson - Senior Developer at Ortus Solutions Thanks to our Sponsor - Ortus SolutionsThe makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. A few ways  to say thanks back to Ortus Solutions: Like and subscribe to our videos on YouTube.  Help ORTUS reach for the Stars - Star and Fork our ReposStar all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github  Subscribe to our Podcast on your Podcast Apps and leave us a review Sign up for a free or paid account on CFCasts, which is releasing new content every week BOXLife store: https://www.ortussolutions.com/about-us/shop Buy Ortus's Books  102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips) Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes  Patreon Support ( stupendous  )Goal 1 - We have 43 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions. Goal 2 - We are 39% of the way to fully fund the hosting of ForgeBox.io Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector.  Current Roles - More in the job section Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -  https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/ Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/ News and AnnouncementsWe've Made It!Scraped as “Update or Pass away®”https://updates4devs.com/update-or-pass-away-cfml-information-podcast-for-november-29th-2022-episode-173/?feed_id=1459&_unique_id=6387bc888f2d6Adobe ColdFusion Fortuna AlphaSignup for the pre-release - Special things happening which I can't talk abouthttps://www.adobeprerelease.com/beta/C0A219A0-A127-417A-D0D3-A7B5B3C5A0AE/participate/C3B4F4DC-8662-4610-D2B1-EE8FAD396648 Advent of Codehttps://adventofcode.com/CFML Slack Leaderboard: `1574707-be30db8f`Box Team Leaderboard: `26416-a4842ce2`ICYMI - ColdBox Master Class - Completely Free until the end of the Year!Want to learn about modern web apps in ColdFusion (CFML)? We have our ColdBox Master Class for FREE until the end of the year!  A gift to the community, so we can all build amazing apps together! Watch all the videos!  Binge Coding Anyone? Enjoy! https://www.cfcasts.com/series/cb-master-class?utm_source=podcast&utm_medium=PODCAST&utm_campaign=LM-PODCAST New Releases and UpdatesICYMI - Lucee released 5.3.10One of the most exciting features in 5.3.10+97, which should make everyone's life easier when deploying Lucee servers, is improved, still experimental, native support for CFconfig.https://dev.lucee.org/t/lucee-5-3-10-97-stable-release/11540 Webinar / Meetups and WorkshopsThis Week - Ortus Software Craftsmanship Book Club - Patreon OnlyFriday, December 9th at 2pm CDT - 2nd Friday of the MonthClean Code: A Handbook of Agile Software Craftsmanship by Robert Martin (Uncle Bob)Focus - Chapter 2 - Naming Conventions - 1 of the 2 hardest things in programming, along with cache invalidation and off by 1 errors ;) We will meet monthly on Zoom, and we'll use the Ortus Community Forum for Patreon to discuss the book.https://community.ortussolutions.com/t/ortus-software-craftsmanship-book-club-clean-code/9432 We will also be rewriting the code from Java to CFML as we proceed through the book.The final result will be here https://github.com/gpickin/clean-code-book-cfml-examples You can get a copy of the book at one of the below links, or your favorite bookstorehttps://amzn.to/3TIrmKm or https://www.audible.com/pd/Clean-Code-Audiobook/B08X7KL3TF?action_code=ASSGB149080119000H&share_location=pdp&shareTest=TestShare Zoom link will be posted in Patreon Slack Channel and Patreon Community ForumSignup to Patreon to join live: https://www.patreon.com/ortussolutions Ortus Event Calendar for Googlehttps://calendar.google.com/calendar/u/0?cid=Y181NjJhMWVmNjFjNGIxZTJlNmQ4OGVkNzg0NTcyOGQ1Njg5N2RkNGJiNjhjMTQwZjc3Mzc2ODk1MmIyOTQyMWVkQGdyb3VwLmNhbGVuZGFyLmdvb2dsZS5jb20 ColdFusion Security Training - Writing Secure CFML with Pete Freitag from FoundeoWhen: Tuesday December 13, 2022 @ 11am-2pm & Wednesday December 14 @ 11am-2pm(Eastern Standard Time, UTC -5) - 6 hours in total.A hands-on CFML / ColdFusion Security Training class for developers. Learn how to identify and fix security vulnerabilities in your ColdFusion / CFML applications.The class will be recorded, so if you cannot attend it fully online you will have access to a recording.Where: Online / Web ConferenceWho: Taught by Pete FreitagCost: $999/student $899/student (Early Bird Discount)Register: https://foundeo.com/consulting/coldfusion/security-training/ CFCasts Content Updateshttps://www.cfcasts.comRecent Releases ITB - 12 Days of Xmas - ITB 2022 - starting Thursday 12/8/22 until Xmas Eve ColdBox Master Class - Now FREE 2022 ForgeBox Module of the Week Series - 1 new Video https://cfcasts.com/series/2022-forgebox-modules-of-the-week 2022 VS Code Hint tip and Trick of the Week Series - 1 new Video https://cfcasts.com/series/2022-vs-code-hint-tip-and-trick-of-the-week  Coming Soon More ForgeBox and VS Code Podcast snippet videos Box-ifying a 3rd Party Library from Gavin ColdBox Elixir from Eric Getting Started with ContentBox from Daniel Conferences and TrainingCF Summit Online All the webinars, all the speakers from Adobe ColdFusion Summit 2022 – brought right to your screen. All sessions will soon be streamed online, for your convenience. Stay tuned for more! MINING ELECTRONIC DOCUMENTS FOR FUN AND PROFIT (AND OTHER BUSINESS CRITICAL NEEDS)Raymond Camden December 7 | 12:00 to 13:00 EST (1 hour)BELOW THE SURFACE: WEB VULNERABILITIES HIDING IN YOUR APPLICATIONSBrian ReillyDecember 9, 2022 | 12:00 - 13:00 EST (1 hour)EXPLORING AWS JAVA SDK DEVELOPER FEATURES USING CFJAVABrian BockholdDecember 12, 2022 | 12:00 - 13:00 EST (1 hour)And many more in Dec and Jan… Website for CF Summit Onlinehttps://cfsummit-online.meetus.adobeevents.com/ Into the Box Latam 2022 - TOMORROWDec 7th, 2022 - 8am - 5pm2 tracks - 1 set of sessions, 1 set of deep dive workshop sessionsPricing $9-$29 USDLocation: Hyatt Centric Las Cascadas Shopping Center,Merliot, La Libertad 99999 El Salvadorhttps://latam.intothebox.org/ VUEJS AMSTERDAM 20239-10 February 2023, Theater AmsterdamWorld's Most Special and Largest Vue ConferenceCALL FOR PAPERS AND BLIND TICKETS AVAILABLE NOW!Call for Papers: https://forms.gle/GopxfjYHfpE8fKa57 Blind Tickets: https://eventix.shop/abzrx3b5 https://vuejs.amsterdam/ Dev NexusApril 4-6th in AtlantaGeorgia World Congress Center285 Andrew Young International Blvd NWAtlanta, GA 30313USAApril 4th – 6th, 2023Begin: 09:00  Your local time: 06:00End: 18:00  Your local time: 15:00https://devnexus.com/ VueJS Live MAY 12 & 15, 2023ONLINE + LONDON, UKCODE / CREATE / COMMUNICATE35 SPEAKERS, 10 WORKSHOPS10000+ JOINING ONLINE GLOBALLY300 LUCKIES MEETING IN LONDONGet Early Bird Tickets: https://ti.to/gitnation/vuejs-london-2022  Watch 2021 Recordings: https://portal.gitnation.org/events/vuejs-london-2021 https://vuejslive.com/ Into the Box 2023 - 10th EditionMay 17-19, 2023 The conference will be held in The Woodlands (Houston), TexasThis year we will continue the tradition of training and offering a pre-conference hands-on training day on May 17th and our live Mariachi Band Party! However, we are back to our Spring schedule and beautiful weather in The Woodlands! Also, this 2023 will mark our 10 year anniversary. So we might have two live bands and much more!!!We are pleased to announce the call for speakers for the Into The Box Conference for 2023 is now officially open. https://www.intothebox.org/blog/into-the-box-2023-call-for-speakers CFCamp is backJune, 22-23rd 2023Marriott Hotel Munich Airport, FreisingCall for Speakers coming in the New yearhttps://www.cfcamp.org/ More conferencesNeed more conferences, this site has a huge list of conferences for almost any language/community.https://confs.tech/https://github.com/scraly/developers-conferences-agenda Blogs, Tweets, and Videos of the Week 12/6/22 - Blog - Grant Copley - CBWIRE ExamplesConstructing reactive, modern CFML applications is a breeze with our module CBWIRE. To make sure users can take advantage of the features we've added to CBWIRE, I have created an examples repository that includes Getting Started, Forms, Template Directives, Advanced, and Alpine sections.https://www.ortussolutions.com/blog/cbwire-examples 12/5/22 - Blog - Ben Nadel - I'm Beginning To Think That Much Of Programming Is Wildly SubjectiveFrom what I've seen and heard, a large portion of the programming community - myself often included - feels that much of what goes into programming is objectively good or bad. We all seem to have hills that we're willing to die on because we believe that said hills are objectively the right choice. Vim vs an IDE; tabs vs spaces; functional vs object oriented; relational databases vs document stores; single-file components vs separation of concerns; single-letter variables vs intuitive variables; ORM vs SQL; Go vs ColdFusion; Angular vs React; single-quotes vs double-quotes; idiomatic vs pragmatic; monoliths vs microservices; REST vs GraphQL; the list goes on and on ad infinitum.https://www.bennadel.com/blog/4363-im-beginning-to-think-that-much-of-programming-is-wildly-subjective.htm 12/1/22 - Blog - Brad Wood - Improving Lucee's QoQ Support Again- now 200% fasterTwo years ago, I published this post detailing how I had refactored the Query of Query support in Lucee to be much better and also much faster:https://www.codersrevolution.com/blog/improving-lucees-query-of-query-supportI removed the single-threaded HSQLDB callback for grouped/aggregate and distinct selects and tuned the performance.  QoQ's are a bit of a polarizing feature in CFML.  They've suffered in the past from poor support and poor performance which has caused a lot of people to avoid them.  There are certainly places where queryMap(), queryFilter(), and queryReduce() are the best approach, but there are also times where you simply can't beat the readability and conciseness of an ordered,  aggregated select.  I know developers who tell me they never use "reduce" higher order functions because they are too confusing, but I've never met a developer who didn't understand "GROUP BY department"! https://www.codersrevolution.com/blog/improving-lucees-qoq-support-again-now-200-faster 11/29/22 - Blog - Charlie Arehart - ColdFusion Portal - Recordings of CF Summit Online sessions, finding them posted after each sessionInterested in finding the recordings of the Online version of the 2022 CF Summit?TLDR: recordings of the CF Summit Online are now being posted on the Adobe CF team Youtube channel, andwe can expect to see soon other places listing all the recordings for the event, as a single playlist.https://coldfusion.adobe.com/2022/11/recordings-of-cf-summit-online/ CFML JobsSeveral positions available on https://www.getcfmljobs.com/Listing over 34 ColdFusion positions from 23 companies across 21 locations in 5 Countries.Since August 1st.1 new jobs listed this weekFull-Time - Remote ColdFusion Developer at North Philadelphia, PA - United States Dec 01https://www.getcfmljobs.com/jobs/index.cfm/united-states/Remote-CFDeveloper/11538 Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well. We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution. Current Roles in detail All roles: https://www.tomorrows.co.uk/jobs.cfm Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -  https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/-  Minimum three years' experience with ColdFusion-  Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019-  Familiarity with Git-  Flexible skillset covering a wide range of development Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/-  Minimum three years experience with automated testing-  Experience with automated testing tools such as selenium-  Experience with API test tools such as Postman/Fiddler etc Benefits of both roles:-  £4,000 per annum discretionary company bonus scheme-  25 days annual leave + bank holidays-  6% employer pension contribution-  Access to free perks and discounts through Perkbox-  Long Service Awards-  Cycle to Work Scheme-  Company and Team nights outOther Job Links Ortus Solutions https://www.ortussolutions.com/about-us/careers  There is a jobs channel in the CFML slack team, and in the box team slack now too ForgeBox Module of the WeekOrtus PDF ToolsBy Ortus SolutionsThe Ortus PDF Lucee Extension adds to any Lucee engine the missing PDF capabilities you were longing for and enhancing some PDF capabilities as well. The extension contains several new CFML built-in tags and functions (coming soon) that will help you manipulate and work with PDF documents. You can read more about this extension here: https://www.ortussolutions.com/products/ortuspdf The following are the implemented tags that bring compatibility from Adobe ColdFusion to Lucee. You can see much more detailed information about these tags here: https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-tags/tags-p-q/cfpdfform.html cfpdfform - https://cfdocs.org/cfpdfform cfpdfformparam - https://cfdocs.org/cfpdfformparam https://www.forgebox.io/view/ortuspdf-extension VS Code Hint Tips and Tricks of the WeekVscode-petsPets for your VS CodePuts a small, bored cat, an enthusiastic dog, a feisty snake, a rubber duck, or Clippy in your code editor to boost productivity.https://marketplace.visualstudio.com/items?itemName=tonybaloney.vscode-pets Thank you to all of our Patreon SupportersThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox. You can support us on Patreon here https://www.patreon.com/ortussolutionsDon't forget, we have Annual Memberships, pay for the year and save 10% - great for businesses. Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription. All Patreon supporters have a Profile badge on the Community Website All Patreon supporters have their own Private Forum access on the Community Website All Patreon supporters have their own Private Channel access BoxTeam Slack Live Stream Access to streams like “Koding with the Kiwi + Friends” and Ortus Software Craftsmanship Book Club https://community.ortussolutions.com/ Patreons John Wilson - Synaptrix Tomorrows Guides Jordan Clark Gary Knight Mario Rodrigues Giancarlo Gomez David Belanger Dan Card Jeffry McGee - Sunstar Media Dean Maunder Nolan Erck  Wil De Bruin Abdul Raheen Don Bellamy Joseph Lamoree Jonathan Perret Jan Jannek  Laksma Tirtohadi Brian Ghidinelli - Hagerty MotorsportReg Carl Von Stetten Jeremy Adams Didier Lesnicki Matthew Clemente Scott Steinbeck - Agri Tracking Systems Daniel Garcia Ben Nadel  Richard Herbet Brett DeLine Kai Koenig Charlie Arehart Jason Daiger Shawn Oden Ross Phillips Matthew Darby Edgardo Cabezas Patrick Flynn Stephany Monge  (Monghee) Kevin Wright John Whish Peter Amiri Cavan Vannice John Nessim Tia You can see an up to date list of all sponsors on Ortus Solutions' Websitehttps://ortussolutions.com/about-us/sponsors Thanks everyone!!! ★ Support this podcast on Patreon ★

Modernize or Die ® Podcast - CFML News Edition
Modernize or Die® - CFML News Podcast for November 29th, 2022 - Episode 173

Modernize or Die ® Podcast - CFML News Edition

Play Episode Listen Later Nov 29, 2022 62:33


2022-11-29 Weekly News - Episode 173Watch the video version on YouTube at https://youtu.be/0AzQBM1qmqo Hosts:  Gavin Pickin - Senior Developer at Ortus Solutions Dan Card - Senior Developer at Ortus Solutions Thanks to our Sponsor - Ortus SolutionsThe makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. A few ways  to say thanks back to Ortus Solutions: Like and subscribe to our videos on YouTube.  Help ORTUS reach for the Stars - Star and Fork our ReposStar all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github  Subscribe to our Podcast on your Podcast Apps and leave us a review Sign up for a free or paid account on CFCasts, which is releasing new content every week BOXLife store: https://www.ortussolutions.com/about-us/shop Buy Ortus's Book - 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)  Patreon Support Goal 1 - We have 43 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions. Goal 2 - We are 39% of the way to fully fund the hosting of ForgeBox.io Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector.  Current Roles - More in the job section Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -  https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/ Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/ News and AnnouncementsICYMI - Kai announced CF Camp 2023 officially on the PodcastKai was our special guest on the last episode with the background, and the announcement. So get your Passports ready, CF Camp, in Germany June 2023.CF Camp 2023June 22/23, 2023Freising, Germanyhttps://www.cfcamp.org/ Adobe ColdFusion Fortuna AlphaSignup for the pre-releasehttps://www.adobeprerelease.com/beta/C0A219A0-A127-417A-D0D3-A7B5B3C5A0AE/participate/C3B4F4DC-8662-4610-D2B1-EE8FAD396648 ICYMI - ColdBox Master Class - Completely Free until the end of the Year!Want to learn about modern web apps in ColdFusion (CFML)? We have our ColdBox Master Class for FREE until the end of the year!  A gift to the community, so we can all build amazing apps together! Watch all the videos!  Binge Coding Anyone? Enjoy! https://www.cfcasts.com/series/cb-master-class?utm_source=podcast&utm_medium=PODCAST&utm_campaign=LM-PODCAST New Releases and UpdatesLucee released 5.3.10One of the most exciting features in 5.3.10, which should make should make everyone's life easier when deploying Lucee servers, is improved, still experimental, native support for CFconfig.https://dev.lucee.org/t/lucee-5-3-10-97-stable-release/11540 ICYMI - Spreadsheet-cfml V3.7.0 releasedSpreadsheet CFML 3.7.0 released with new option to read visible/formatted instead of raw valuesJames filed a bug for the ACF2021 issue. He's posted 3 bugs in 30 days with Adobe.https://github.com/cfsimplicity/spreadsheet-cfml Webinar / Meetups and WorkshopsOrtus Event Calendar for Googlehttps://calendar.google.com/calendar/u/0?cid=Y181NjJhMWVmNjFjNGIxZTJlNmQ4OGVkNzg0NTcyOGQ1Njg5N2RkNGJiNjhjMTQwZjc3Mzc2ODk1MmIyOTQyMWVkQGdyb3VwLmNhbGVuZGFyLmdvb2dsZS5jb20 Ortus Office HoursA new  initiative where some Ortusians will be on a Zoom call and answer whatever questions people have. We are going to start less structured and see how things develop. December 2nd at 11am CDT - 1st Friday of the MonthDaniel Garcia will host a variety of Ortus people Office Hours questions & requests form availableRegister in advance for this meeting:https://us02web.zoom.us/meeting/register/tZYvcO-hrz8iHNS0C3o0aw2x3JMtmBrKwzfA Ortus Software Craftsmanship Book Club - Patreon OnlyFriday, December 9th at 2pm CDT - 2nd Friday of the MonthClean Code: A Handbook of Agile Software Craftsmanship by Robert Martin (Uncle Bob)Focus - Chapter 2 - Naming Conventions - 1 of the 2 hardest things in programming, along with cache invalidation and off by 1 errors ;) We will meet monthly on Zoom, and we'll use the Ortus Community Forum for Patreon to discuss the book.https://community.ortussolutions.com/t/ortus-software-craftsmanship-book-club-clean-code/9432 We will also be rewriting the code from Java to CFML as we proceed through the book.The final result will be here https://github.com/gpickin/clean-code-book-cfml-examples You can get a copy of the book at one of the below links, or your favorite bookstorehttps://amzn.to/3TIrmKm or https://www.audible.com/pd/Clean-Code-Audiobook/B08X7KL3TF?action_code=ASSGB149080119000H&share_location=pdp&shareTest=TestShare Zoom link will be posted in Patreon Slack Channel and Patreon Community ForumSignup to Patreon to join live: https://www.patreon.com/ortussolutions ICYMI - TONIGHT - Mid Michigan CFUG - Nick Kwiatkowski is presenting on API's and ColdFusionNovember 15th, 7pm ETNick is going to show how he builds REST endpoints using the native Adobe ColdFusion and Lucee REST endpoint connector.  He's also planning on doing a deep dive into Postman showing all its features. Meeting URL: https://tinyurl.com/2s3mdcrrA recording will be available on our group's YouTube channel in a few days at https://youtube.com/@cfml Recording: https://youtu.be/FUrwMKN9mmUICYMI - CF Hawaii Meetup - Managing All your ColdFusion Servers with CommandBox with Brad WoodFriday, November 18, 2022 at 2:00 PM PST CommandBox is a standalone, native tool for Windows, Mac, and Linux that will provide you with a Command Line Interface (CLI) for developer productivity, tool interaction, package management, embedded CFML server, application scaffolding, and sweet ASCII art. It seamlessly integrates to work with any of Ortus Solutions *Box products, but it is also open for extensibility for any ColdFusion (CFML) project as it is written in ColdFusion (CFML) using our concepts of CommandBox Commands.CommandBox also functions as a package management tool which integrates seamlessly with ForgeBox. During this meeting Brad will give you an introduction to CommandBox to mange your ColdFusion Server as well as CF Config to Manage the CF Admin.https://www.meetup.com/hawaii-coldfusion-meetup-group/events/289489609/Recording: https://hawaiicoldfusionusergroup.adobeconnect.com/pzejiulvw4cu/ ColdFusion Security Training - Writing Secure CFML with Pete Freitag from FoundeoWhen: Tuesday December 13, 2022 @ 11am-2pm & Wednesday December 14 @ 11am-2pm(Eastern Standard Time, UTC -5) - 6 hours in total.A hands-on CFML / ColdFusion Security Training class for developers. Learn how to identify and fix security vulnerabilities in your ColdFusion / CFML applications.The class will be recorded, so if you cannot attend it fully online you will have access to a recording.Where: Online / Web ConferenceWho: Taught by Pete FreitagCost: $999/student $899/student (Early Bird Discount)Register: https://foundeo.com/consulting/coldfusion/security-training/ CFCasts Content Updateshttps://www.cfcasts.comRecent Releases ColdBox Master Class - Now FREE Ortus Software Craftsmanship Book Club - Clean Code - 1 https://cfcasts.com/series/ortus-software-craftsmanship-book-club---clean-code/videos/ortus-software-craftsmanship-book-club-clean-code-1  2022 ForgeBox Module of the Week Series - 1 new Video https://cfcasts.com/series/2022-forgebox-modules-of-the-week 2022 VS Code Hint tip and Trick of the Week Series - 1 new Video https://cfcasts.com/series/2022-vs-code-hint-tip-and-trick-of-the-week  Coming Soon More ForgeBox and VS Code Podcast snippet videos ITB Videos will be released Dec for those who are not ITB Ticket Holders Box-ifying a 3rd Party Library from Gavin ColdBox Elixir from Eric Getting Started with ContentBox from Daniel  Conferences and TrainingCF Summit Online All the webinars, all the speakers from Adobe ColdFusion Summit 2022 – brought right to your screen. All sessions will soon be streamed online, for your convenience. Stay tuned for more! MESSAGE QUEUES WITH RABBITMQBrad WoodNovember 30, 2022 | 12:00 - 13:00 EST (1 hour)ONE-HOUR WORKSHOP: BUILD A COMPLETE DEVELOPMENT, DEPLOYMENT PIPELINE, AND PRODUCTION ENVIRONMENT FOR YOUR CODE!David ByersDecember 1, 2022 | 15:00 - 16:00 EST (1 hour)GOOGLE CLOUD FOR THE COLDFUSION COMMUNITYTerrence RyanDecember 2 | 12:00 to 13:00 EST (1 hour)TAMING THE TOP 25 MOST DANGEROUS SOFTWARE WEAKNESSESPete FreitragDecember 6 | 13:00 to 14:00 EST (1 hour)And many more in Dec and Jan… Website for CF Summit Onlinehttps://cfsummit-online.meetus.adobeevents.com/ ICYMI - Deploy from Digital OceanNovember 15-16, 2022The virtual conference for global buildersSubtract Complexity,Add Developer HappinessJoin us on the mission to simplify the developer experience.https://deploy.digitalocean.com/ Into the Box Latam 2022 - NEXT WEEK Dec 7th, 2022 - 8am - 5pm2 tracks - 1 set of sessions, 1 set of deep dive workshop sessionsPricing $9-$29 USDLocation: Hyatt Centric Las Cascadas Shopping Center,Merliot, La Libertad 99999 El Salvadorhttps://latam.intothebox.org/ VUEJS AMSTERDAM 20239-10 February 2023, Theater AmsterdamWorld's Most Special and Largest Vue ConferenceCALL FOR PAPERS AND BLIND TICKETS AVAILABLE NOW!Call for Papers: https://forms.gle/GopxfjYHfpE8fKa57 Blind Tickets: https://eventix.shop/abzrx3b5 https://vuejs.amsterdam/ Dev NexusApril 4-6th in AltantaGeorgia World Congress Center285 Andrew Young International Blvd NWAtlanta, GA 30313USAApril 4th – 6th, 2023Begin: 09:00  Your local time: 06:00End: 18:00  Your local time: 15:00https://devnexus.com/ VueJS Live MAY 12 & 15, 2023ONLINE + LONDON, UKCODE / CREATE / COMMUNICATE35 SPEAKERS, 10 WORKSHOPS10000+ JOINING ONLINE GLOBALLY300 LUCKIES MEETING IN LONDONGet Early Bird Tickets: https://ti.to/gitnation/vuejs-london-2022 Watch 2021 Recordings: https://portal.gitnation.org/events/vuejs-london-2021 https://vuejslive.com/ Into the Box 2023 - 10th EditionMay 17-19, 2023 The conference will be held in The Woodlands (Houston), TexasThis year we will continue the tradition of training and offering a pre-conference hands-on training day on May 17th and our live Mariachi Band Party! However, we are back to our Spring schedule and beautiful weather in The Woodlands! Also, this 2023 will mark our 10 year anniversary. So we might have two live bands and much more!!!We are pleased to announce the call for speakers for the Into The Box Conference for 2023 is now officially open. https://www.intothebox.org/blog/into-the-box-2023-call-for-speakers CFCamp is backJune 22 and 23rd, 2023https://www.cfcamp.org/ More conferencesNeed more conferences, this site has a huge list of conferences for almost any language/community.https://confs.tech/https://github.com/scraly/developers-conferences-agenda Blogs, Tweets, and Videos of the Week 11/28/22 - Tweet - Brad Wood - Lucee Roadmap@lucee_server has released a roadmap for their next 5.4 release which is designed to squash all remaining libraries with known vulnerabilities that ship by default.  For all of us working with Corporate and Government clients, this is great news. #CFML #ColdFusionhttps://twitter.com/bdw429s/status/1597338877093617665https://twitter.com/bdw429s 11/26/22 - Blog - Ben Nadel - EventSource And Generating Server-Sent Events In ColdFusion / Lucee CFMLMany years ago, I took at look at the long-polling technique in ColdFusion. Long-polling creates a persistent HTTP connection that blocks-and-waits for data to be sent down over the network to the client. Eventually, this pattern became codified within the browser's native functionality using EventSource. I've never actually played with the EventSource object; so, I thought it would be fun to put together a simple ColdFusion demo.https://www.bennadel.com/blog/4359-eventsource-and-generating-server-sent-events-in-coldfusion-lucee-cfml.htm 11/25/22 - Blog - Ortus Solutions - Black Friday Deals are HereMake 2023, the year you finally start modernizing your CFML projects with our Black Friday deals!Don't waste any more time trying to find solutions, we got everything you need to rock your projects and learn new skills that will save you time and money while delivering a quality service.https://www.ortussolutions.com/blog/ortus-black-friday-deals-are-here 11/22/22 - Tweet - Brad Wood - Lucee Vulnerable LibrariesBeen working through a large list of vulnerable libraries found in @lucee_server from a government scanluceeserver.atlassian.net/browse/LDEV-42…I'm very excited that Lucee 5.3.10 will fix a huge number of these and there is movement to resolve the others as well! #CFML #infosechttps://twitter.com/bdw429s/status/1595121711355432961https://twitter.com/bdw429s 11/18/22 - Tweet - James Moberg - SQL Keyword CheckerWhenever I need to add new columns to a database, I like to ensure that I'm not using a reserved #ColdFusion or SQL word.My favorite place for SQL is the "SQL Reserved Words Checker" by @pfreitaghttps://www.petefreitag.com/tools/sql_reserved_words_checker/ https://twitter.com/gamesover/status/1593708661914079234https://twitter.com/gamesover 11/17/22 - Blog - Ben Nadel - Using A Closure To Encapsulate CFThread Execution And Error Handling In ColdFusionIn ColdFusion, I'm a huge fan of using Closures to create a clean separation of concerns between the business logic and the low-level mechanics required to execute a given algorithm. I've used closures for things like managing temp directories, pulling resources out of a connection pool, and implementing distributed locks. And, when it comes to executing CFThread tags, I almost always split my asynchronous code from my business logic. However, it wasn't until the other day that it occurred to me that I could probably use Closures to simplify the execution of asynchronous CFThread tags in ColdFusion.https://www.bennadel.com/blog/4356-using-a-closure-to-encapsulate-cfthread-execution-and-error-handling-in-coldfusion.htm 11/16/22 - Tweet James Moberg - Trivial Priority on a real BUG?Adobe just flagged this bug with a "trivial" priority.https://tracker.adobe.com/#/view/CF-4215809 Are there any #ColdFusion developers using the new CF2023 Alpha? If this bug made it to the next version, could you upvote it? (ie, invalid #cfml should throw an error.)https://twitter.com/gamesover/status/1592933360099524608https://twitter.com/gamesover CFML JobsSeveral positions available on https://www.getcfmljobs.com/Listing over 36 ColdFusion positions from 22 companies across 20 locations in 5 Countries. Since August 1st.3 new jobs listed this weekFull-Time - ColdFusion Application Developer at Hyderabad, Telangana - India Nov 24https://www.getcfmljobs.com/jobs/index.cfm/india/ColdFusion-Application-Developer-at-Hyderabad-Telangana/11537 Full-Time - ColdFusion Application Lead at Noida, Uttar Pradesh - India Nov 17https://www.getcfmljobs.com/jobs/index.cfm/india/ColdFusion-Application-Lead-at-Noida-Uttar-Pradesh/11535 Full-Time - ColdFusion Application Developer at Mumbai, Maharashtra - India Nov 17https://www.getcfmljobs.com/jobs/index.cfm/india/ColdFusion-Application-Developer-at-Mumbai-Maharashtra/11536 Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well. We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution. Current Roles in detail All roles: https://www.tomorrows.co.uk/jobs.cfm Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -  https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/-  Minimum three years' experience with ColdFusion-  Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019-  Familiarity with Git-  Flexible skillset covering a wide range of development Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/-  Minimum three years experience with automated testing-  Experience with automated testing tools such as selenium-  Experience with API test tools such as Postman/Fiddler etc  Benefits of both roles:-  £4,000 per annum discretionary company bonus scheme-  25 days annual leave + bank holidays-  6% employer pension contribution-  Access to free perks and discounts through Perkbox-  Long Service Awards-  Cycle to Work Scheme-  Company and Team nights outOther Job Links Ortus Solutions https://www.ortussolutions.com/about-us/careers  There is a jobs channel in the CFML slack team, and in the box team slack now too ForgeBox Module of the Weekcbq A protocol-based queueing system for ColdBoxQueue ConnectionA queue connection defines how to connect to a backend service like Redis, RabbitMQ, or even a database. Any given queue connection can have multiple "queues" which are named stacks of queued jobs or messages to be delivered.QueueA named stack of jobs or messages to be delivered. A queue connection must have at least one queue which is usually "default". A queue connection can have as many queues as desired. This is mostly used later when defining queue workers to scale different queues at different priorities.Queue ProviderA queue provider is how a queue connection connects to a backend service like Redis, RabbitMQ, or a database. It implements the necessary interface to send the jobs and to work the queues. A queue provider can be used multiple times in a single application to define multiple queue connections with different configuration options.https://www.forgebox.io/view/cbq VS Code Hint Tips and Tricks of the WeekIn Your FaceYou can see faces that change with the number of source code errors.https://marketplace.visualstudio.com/items?itemName=TTOOWA.in-your-face-incredibleThank you to all of our Patreon SupportersThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox. You can support us on Patreon here https://www.patreon.com/ortussolutionsDon't forget, we have Annual Memberships, pay for the year and save 10% - great for businesses. Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription. All Patreon supporters have a Profile badge on the Community Website All Patreon supporters have their own Private Forum access on the Community Website All Patreon supporters have their own Private Channel access BoxTeam Slack Live Stream Access to streams like “Koding with the Kiwi + Friends” and Ortus Software Craftsmanship Book Club https://community.ortussolutions.com/ Patreons John Wilson - Synaptrix Tomorrows Guides Jordan Clark Gary Knight Mario Rodrigues Giancarlo Gomez David Belanger Dan Card Jeffry McGee - Sunstar Media Dean Maunder Nolan Erck  Wil De Bruin Abdul Raheen Don Bellamy Joseph Lamoree Jonathan Perret Jan Jannek Laksma Tirtohadi Brian Ghidinelli - Hagerty MotorsportReg Carl Von Stetten Jeremy Adams Didier Lesnicki Matthew Clemente Scott Steinbeck - Agri Tracking Systems Daniel Garcia Ben Nadel  Richard Herbet Brett DeLine Kai Koenig Charlie Arehart Jason Daiger Shawn Oden Ross Phillips Matthew Darby Edgardo Cabezas Patrick Flynn Stephany Monge Kevin Wright John Whish Peter Amiri Cavan Vannice John Nessim Tia You can see an up to date list of all sponsors on Ortus Solutions' Websitehttps://ortussolutions.com/about-us/sponsors Thanks everyone!!! ★ Support this podcast on Patreon ★

Modernize or Die ® Podcast - CFML News Edition
Modernize or Die® - CFML News Podcast for November 15th, 2022 - Episode 172

Modernize or Die ® Podcast - CFML News Edition

Play Episode Listen Later Nov 15, 2022 98:24


2022-11-15 Weekly News - Episode 172Watch the video version on YouTube at https://youtu.be/aeWRQKi3tN0 Hosts:  Gavin Pickin - Senior Developer at Ortus Solutions Kai Koenig - Software Architect at Ventego Creative - CFML Community Member, Conference Speaker Thanks to our Sponsor - Ortus SolutionsThe makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. A few ways  to say thanks back to Ortus Solutions: Like and subscribe to our videos on YouTube.  Help ORTUS reach for the Stars - Star and Fork our ReposStar all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github  Subscribe to our Podcast on your Podcast Apps and leave us a review Sign up for a free or paid account on CFCasts, which is releasing new content every week BOXLife store: https://www.ortussolutions.com/about-us/shop Buy Ortus's Book - 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)  Patreon SupportGoal 1 - We have 43 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions. Goal 2 - We are 39% of the way to fully fund the hosting of ForgeBox.io Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well. We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution. Current Roles in detail All roles: https://www.tomorrows.co.uk/jobs.cfm Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -  https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/-  Minimum three years' experience with ColdFusion-  Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019-  Familiarity with Git-  Flexible skillset covering a wide range of development Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/-  Minimum three years experience with automated testing-  Experience with automated testing tools such as selenium-  Experience with API test tools such as Postman/Fiddler etc Benefits of both roles:-  £4,000 per annum discretionary company bonus scheme-  25 days annual leave + bank holidays-  6% employer pension contribution-  Access to free perks and discounts through Perkbox-  Long Service Awards-  Cycle to Work Scheme-   Company and Team nights outNews and Announcements CFCamp is back in 2023Given we've been taunting everyone with cancellations and postponements and dangling carrots in front of people since 2020 now, both Michi Hnat and I felt it'd be great to give you an exclusive! Breaking news kind of thing. So: without further ado! CF Camp will be back in June 2023.We have a date - 22 and 23rd of June 2023 for the main conference event. That is gonna be a Thursday and Friday and as in the past there will be additional pre events on the Tuesday and Wednesday. I would expect the Ortus team to run some training workshops for instance, I heard that the Preside CMS team is looking at doing a mini Preside-con day as well and we'll see what else might be happening.Venue is unchanged, we'll be again in the Marriott Munich Airport, which is NOT at the airport but in the lovely little ancient town of Freising. Michi has booked the hotel, so it's as official as it gets at this stage.If you go to cfcamp.org now, you'll find there is a “Save the date” and more will be coming soon. We're currently working on the Sponsorship documents, and have started to think about the Call for Papers and what we want to be looking for from a session and topic point of view. It'll be an open and transparent process again via Papercall or Sessionize and we'll again try to do our best to increase diversity and help to get underrepresented groups in the tech industry out there.At this stage I'd expect the call for Papers to open in early Jan, not sure if we'll manage to squeeze it onto this side of the end of year holidays.CF Camp 2023June 22/23, 2023  Freising, Germany  https://www.cfcamp.org/ Adobe ColdFusion Fortuna (Codename for CF2023) AlphaI am opening up the Alpha testing group for Adobe ColdFusion 2023 (Codename: Fortuna). Please sign up here to be set up for access to the alpha testing site on Adobe Prerelease: https://www.adobeprerelease.com/beta/C0A219A0-A127-417A-D0D3-A7B5B3C5A0AE/participate/C3B4F4DC-8662-4610-D2B1-EE8FAD396648 Related - Adobe Bug Tracker Went MADAs they released the Alpha, all of the tickets were moved to beta. People got a lot of emails, some people (ADAM CAMERON) got millions as every bug got moved from Alpha to Beta. The weird part was all the links to the issues were broken, I assume because of the Internal vs External Jira connection. At least we know they use the bug tracker - right :) Into the Box 2023 Call for Speakers is now OpenWe are pleased to announce the call for speakers for the Into The Box Conference for 2023 is now officially open. The conference will be held in The Woodlands (Houston), Texas on May 17-19, 2023 . This year we will continue the tradition of training and offering a pre-conference hands-on training day on May 17th and our live Mariachi Band Party! However, we are back to our Spring schedule and beautiful weather in The Woodlands! Also, this 2023 will mark our 10 year anniversary. So we might have two live bands and much more!!!https://www.intothebox.org/blog/into-the-box-2023-call-for-speakers ICYMI - OpenSSL VulnerabilitiesPete has had several people asking me about the openssl vulnerabilities that were patched this week: CVE-2022-3602 and CVE-2022-3786 aka Spooky SSL.https://www.petefreitag.com/item/1000.cfm ICYMI - ColdBox Master Class - Completely Free until the end of the Year!Want to learn about modern web apps in ColdFusion (CFML)? We have our ColdBox Master Class for FREE until the end of the year!  A gift to the community, so we can all build amazing apps together! Watch all the videos!  Binge Coding Anyone? Enjoy! https://www.cfcasts.com/series/cb-master-class?utm_source=podcast&utm_medium=PODCAST&utm_campaign=LM-PODCAST Kai: I've recommended this to everyone in my team, TOTALLY WORTH WATCHING IT!!!!!ICYMI - CommandBox vNext supports providing SSL certs in PFX formatCommandBox vNext finally supports providing SSL certs in PFX format, which is a single file containing the public and private key as opposed to needing those in two separate files.https://ortussolutions.atlassian.net/browse/COMMANDBOX-1499 New Releases and UpdatesSpreadsheet-cfml V3.7.0 releasedSpreadsheet CFML 3.7.0 released with new option to read visible/formatted instead of raw valuesJames filed a bug for the ACF2021 issue. He's posted 3 bugs in 30 days with Adobe. https://github.com/cfsimplicity/spreadsheet-cfml RayGun4CFML v1.5.0 releaseWhat is RayGun Kai???feature: Added .sendAsync() entry point wrapping the HTTP call into its own thread.feature: Supports groupingKey nowfix: Improving handling of getHTTPRequestData in RaygunRequestMessagechore: Regorganisation of code in RaygunClientchore: Changed HTTP endpoint to .com https://github.com/MindscapeHQ/raygun4cfml/releases/tag/1.5.0 S3SDK@BE - Now supports Encrypting files at RestJust finished adding support for encrypting files "at rest" in S3 in the CFML S3SDK.  You can let AWS manage the keys or provide your own AES256 key.  Remember, the S3SDK also does NOT require ColdBox to use it

Modernize or Die ® Podcast - CFML News Edition
Modernize or Die® - CFML News Podcast for November 8th, 2022 - Episode 171

Modernize or Die ® Podcast - CFML News Edition

Play Episode Listen Later Nov 8, 2022 84:11


2022-11-08 Weekly News - Episode 171Watch the video version on YouTube at https://youtu.be/teJ4cpNvYOY Hosts:  Gavin Pickin - Senior Developer at Ortus Solutions Brad Wood - Senior Developer at Ortus Solutions Thanks to our Sponsor - Ortus SolutionsThe makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. A few ways  to say thanks back to Ortus Solutions: Like and subscribe to our videos on YouTube.  Help ORTUS reach for the Stars - Star and Fork our ReposStar all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github  Subscribe to our Podcast on your Podcast Apps and leave us a review Sign up for a free or paid account on CFCasts, which is releasing new content every week BOXLife store: https://www.ortussolutions.com/about-us/shop Buy Ortus's Book - 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips) Patreon Support Goal 1 - We have 42 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions. Goal 2 - We are 38% of the way to fully fund the hosting of ForgeBox.io Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well. We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution. Current Roles in detail All roles: https://www.tomorrows.co.uk/jobs.cfm Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k - https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/-  Minimum three years' experience with ColdFusion-  Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019-  Familiarity with Git-  Flexible skillset covering a wide range of development Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/-  Minimum three years experience with automated testing-  Experience with automated testing tools such as selenium-  Experience with API test tools such as Postman/Fiddler etc Benefits of both roles:-  £4,000 per annum discretionary company bonus scheme-  25 days annual leave + bank holidays-  6% employer pension contribution-  Access to free perks and discounts through Perkbox-  Long Service Awards-  Cycle to Work Scheme-   Company and Team nights outNews and AnnouncementsOpenSSL VulnerabilitiesPete has had a several people asking me about the openssl vulnerabilities that were patched this week: CVE-2022-3602 and CVE-2022-3786 aka Spooky SSL.https://www.petefreitag.com/item/1000.cfm ColdBox Master Class - Completely Free until the end of the Year!Want to learn about modern web apps in ColdFusion (CFML)? We have our ColdBox Master Class for FREE until the end of the year!  A gift to the community, so we can all build amazing apps together! Watch all the videos!  Binge Coding Anyone? Enjoy! https://www.cfcasts.com/series/cb-master-class?utm_source=podcast&utm_medium=PODCAST&utm_campaign=LM-PODCAST Wirebox DelegatesWireBox supports the concept of object delegation in a simple expressive DSL.  In object-oriented programming, delegation refers to the evaluating a member (property or method) of one object (the receiver) to the context of another object (the sender).  Basically a way to proxy calls from one object to the other and avoid the overuse of inheritance, avoid runtime mixins or traits.  WireBox provides a set of rules for method lookup and method dispatching that will allow you to provide delegation easily in your CFML applications.https://ortussolutions.notion.site/WireBox-Delegators-8608752a03d345ad80f8c1a1b441a428 CommandBox vNext supports providing SSL certs in PFX formatCommandBox vNext finally supports providing SSL certs in PFX format, which is a single file containing the public and private key as opposed to needing those in two separate files.https://ortussolutions.atlassian.net/browse/COMMANDBOX-1499 New Releases and UpdatesLucee released 5.3.9.166 StableThis a minor bug fix release, which addresses a few bugs listed below, mainly relating to concurrency or errors under heavy load.Anyone running 5.3.9.160 is encouraged to update to this release.https://dev.lucee.org/t/lucee-5-3-9-166-stable-release/11319 Restoring the CF Admin logviewer removed in Oct 2022 CF updates, at your own riskAs of the Oct 2022 CF updates (CF2021 update 5 and CF2018 update 15), Adobe has chosen to remove the CF Admin feature to view, search, download, and delete CF logs, due to asserted (but as-yet undocumented) security concerns.What if you want it back? In this post, I explain what changed, why, and how to get the functionality back--albeit at your own risk. For more, read on.https://www.carehart.org/blog/2022/11/3/restoring_admin_logviewer ICYMI - CBWIRE v2.1 ReleasedCBWIRE, our ColdBox module that makes building reactive, modern CFML apps delightfully easy, just dropped its 2.1 release. This release contains mostly bug fixes and also the ability to create your UI templates directly within your CBWIRE component using the onRender() method.We've added an example of using onRender() to our ever growing CBWIRE-Examples Repo that you can run on your machine locally. https://github.com/grantcopley/cbwire-examples https://www.ortussolutions.com/blog/cbwire-2-1-released Webinar / Meetups and WorkshopsOrtus Event Calendar for Googlehttps://calendar.google.com/calendar/u/0?cid=Y181NjJhMWVmNjFjNGIxZTJlNmQ4OGVkNzg0NTcyOGQ1Njg5N2RkNGJiNjhjMTQwZjc3Mzc2ODk1MmIyOTQyMWVkQGdyb3VwLmNhbGVuZGFyLmdvb2dsZS5jb20 Embeddable Link: https://calendar.google.com/calendar/embed?src=c_562a1ef61c4b1e2e6d88ed7845728d56897dd4bb68c140f773768952b29421ed%40group.calendar.google.com&ctz=America%2FLos_Angeles Ortus Software Craftsmanship Book Club - Patreon OnlyFriday, November 11th at 2pm CDT - 2nd Friday of the MonthClean Code: A Handbook of Agile Software Craftsmanship by Robert Martin (Uncle Bob)We will meet monthly on Zoom, and we'll use the Ortus Community Forum for Patreon to discuss the book.https://community.ortussolutions.com/t/ortus-software-craftsmanship-book-club-clean-code/9432 We will also be rewriting the code from Java to CFML as we proceed through the book.The final result will be here https://github.com/gpickin/clean-code-book-cfml-examples You can get a copy of the book at one of the below links, or your favorite bookstorehttps://amzn.to/3TIrmKm or https://www.audible.com/pd/Clean-Code-Audiobook/B08X7KL3TF?action_code=ASSGB149080119000H&share_location=pdp&shareTest=TestShare Ortus Webinar - Daniel Garcia - API Testing with PostManFriday, November 18th  at 11am CDT - 3rd Friday of the Monthhttps://us06web.zoom.us/meeting/register/tZYqc-uuqzMqGtAO7tQ6qCsN8bR0LyBf8DNP CF Hawaii Meetup - Managing All your ColdFusion Servers with CommandBox with Brad WoodCommandBox is a standalone, native tool for Windows, Mac, and Linux that will provide you with a Command Line Interface (CLI) for developer productivity, tool interaction, package management, embedded CFML server, application scaffolding, and sweet ASCII art. It seamlessly integrates to work with any of Ortus Solutions *Box products, but it is also open for extensibility for any ColdFusion (CFML) project as it is written in ColdFusion (CFML) using our concepts of CommandBox Commands.CommandBox also functions as a package management tool which integrates seamlessly with ForgeBox. During this meeting Brad will give you an introduction to CommandBox to mange your ColdFusion Server as well as CF Config to Mange the CF Admin.https://www.meetup.com/hawaii-coldfusion-meetup-group/events/289489609/CF Summit Online Adobe announced today that the “ColdFusion Summit Online” will begin soon, where they will be having presenters offer their sessions again from the CF Summit last month, to be live-streamed and recorded since that couldn't be done in Vegas.https://coldfusion.adobe.com/2022/11/coldfusion-summit-online/ All the webinars, all the speakers from Adobe ColdFusion Summit 2022 – brought right to your screen. All sessions will soon be streamed online, for your convenience. Stay tuned for more! Charlie Arehart - “How the Adobe CF Docker Images Have Evolved”Wednesday November 16 at 12pm – 1pm EST.Since Adobe's original 2018 release of Docker images for CF (initially for cf2018 and cf2016), the configurability features built into them have improved in significant ways, especially with cf2021, which is much smaller, faster, and whose admin settings can be configured via json. In this talk, veteran CF consultant Charlie Arehart will review and demonstrate those feature changes for the CF images, as well as the images for the CF Performance Monitoring Toolkit (PMT) and the CF Enterprise API Manager–all available at Dockerhub since 2021.Register: https://how-the-cf-docker-images-evolved.meetus.adobeevents.com/ Brad Wood - Message Queues with RabbitMQ1pm to 2pm ET on Nov 30Get to know about RabbitMQ – a tool used for worker queues, topic distribution, synch RPC invocations, and even web socket pushes to your web app in this session. Using the RabbitSDK for ColdFusion, you can get started today with queues and bring your apps to the next level. Stop thinking about API calls and start thinking about sending messages, thanks to this popular and robust queue.Ortus Office HoursA new  initiative where some Ortusians will be on a Zoom call and answer whatever questions people have. We are going to start less structured and see how things develop. December 2nd at 11am CDT - 1st Friday of the MonthDaniel Garcia will host a variety of Ortus people Office Hours questions & requests form availableRegister in advance for this meeting:https://us02web.zoom.us/meeting/register/tZYvcO-hrz8iHNS0C3o0aw2x3JMtmBrKwzfA ColdFusion Security Training - Writing Secure CFML with Pete Freitag from FoundeoWhen: Tuesday December 13, 2022 @ 11am-2pm & Wednesday December 14 @ 11am-2pm(Eastern Standard Time, UTC -5) - 6 hours in total.A hands-on CFML / ColdFusion Security Training class for developers. Learn how to identify and fix security vulnerabilities in your ColdFusion / CFML applications.The class will be recorded, so if you cannot attend it fully online you will have access to a recording.Where: Online / Web ConferenceWho: Taught by Pete FreitagCost: $999/student $899/student (Early Bird Discount)Register: https://foundeo.com/consulting/coldfusion/security-training/ Adobe Workshops & WebinarsJoin the Adobe ColdFusion Workshop to learn how you and your agency can leverage ColdFusion to create amazing web content. This one-day training will cover all facets of Adobe ColdFusion that developers need to build applications that can run across multiple cloud providers or on-premise.https://coldfusion.adobe.com/2022/10/upcoming-adobe-webinar-on-preview-of-cf2023-date-and-title-change/  WEBINAR - WEDNESDAY, NOVEMBER 23, 2022 - New Date - New Name10:00 AM PSTThe Road to FortunaMark Takatahttps://winter-special-preview-of-cf2023.meetus.adobeevents.com/ WEBINAR - THURSDAY, DECEMBER 22, 202210:00 AM PSTBuilding Native Mobile Applications with Adobe ColdFusion & Monaco.ioMark Takatahttps://building-native-mobile-apps-with-cf-monaco-io.meetus.adobeevents.com/ FREE :)Full list - https://meetus.adobeevents.com/coldfusion/ CFCasts Content Updateshttps://www.cfcasts.comJust Released Ortus Webinar - Gavin Pickin on Step up your Testing https://cfcasts.com/series/ortus-webinars-2022/videos/gavin-pickin-on-step-up-your-testing  Every video from ITB - For ITB Ticket Holders Only - Will be released for Subscribed in December 2022 ForgeBox Module of the Week Series - 1 new Video https://cfcasts.com/series/2022-forgebox-modules-of-the-week 2022 VS Code Hint tip and Trick of the Week Series - 1 new Video https://cfcasts.com/series/2022-vs-code-hint-tip-and-trick-of-the-week  Coming Soon -  More ForgeBox and VS Code Podcast snippet videos Box-ifying a 3rd Party Library from Gavin ColdBox Elixir from Eric Getting Started with ContentBox from Daniel ITB Videos will be released Dec for those who are not ITB Ticket Holders Conferences and TrainingDeploy from Digital OceanNovember 15-16, 2022The virtual conference for global buildersSubtract Complexity,Add Developer HappinessJoin us on the mission to simplify the developer experience.https://deploy.digitalocean.com/ Into the Box Latam 2022Dec 7th, 2022 - 8am - 5pm2 tracks - 1 set of sessions, 1 set of deep dive workshop sessionsPricing $9-$29 USDLocation: Hyatt Centric Las Cascadas Shopping Center,Merliot, La Libertad 99999 El Salvadorhttps://latam.intothebox.org/ VUEJS AMSTERDAM 20239-10 February 2023, Theater AmsterdamWorld's Most Special and Largest Vue ConferenceCALL FOR PAPERS AND BLIND TICKETS AVAILABLE NOW!Call for Papers: https://forms.gle/GopxfjYHfpE8fKa57 Blind Tickets: https://eventix.shop/abzrx3b5 https://vuejs.amsterdam/ Dev NexusApril 4-6th in AltantaEARLY BIRD CONFERENCE PASS - APRIL 5-6 (AVAILABLE UNTIL NOVEMBER 20) (Approx 40% off)If you are planning to speak, please submit often and early. The CALL FOR PAPERS is open until November 15WORKSHOPS WILL BE ON JAVA, JAVA SECURITY, SOFTWARE DESIGN, AGILE, DEVOPS, KUBERNETES, MICROSERVICES, SPRING ETC. SIGN UP NOW, AND YOU WILL BE ABLE TO CHOOSE A WORKSHOP, LATER ON,https://devnexus.com/ VueJS Live MAY 5 & 8, 2023ONLINE + LONDON, UKCODE / CREATE / COMMUNICATE35 SPEAKERS, 10 WORKSHOPS10000+ JOINING ONLINE GLOBALLY300 LUCKIES MEETING IN LONDONGet Early Bird Tickets: https://ti.to/gitnation/vuejs-london-2022 Watch 2021 Recordings: https://portal.gitnation.org/events/vuejs-london-2021 https://vuejslive.com/ Into the Box 2023 - 10th EditionMay 17, 18, and 19th, 2022.Middle of May - start planning.Final dates will be released as soon as the hotel confirms availability.Call for Speakers - this weekCFCampNo CFCAMP 2022, we're trying again for summer 2023TLDR is that it's just too hard and there's too much uncertainty right now.More conferencesNeed more conferences, this site has a huge list of conferences for almost any language/community.https://confs.tech/Blogs, Tweets, and Videos of the Week 11/8/22 - Tweet - Luis Majano - Ortus Solutions WireBox 7 - DelegatesThe power of the new WireBox 7 Delegates! Traits for #coldfusion #cfml are here! Composable reusability to modernize your CFCs! https://ortussolutions.notion.site/WireBox-Delegators-8608752a03d345ad80f8c1a1b441a428   #modernizeOrDie #wirebox #coldboxhttps://twitter.com/lmajano/status/1589934986991378433 11/8/22 - Tweet - Luis Majano - CbSecurity V3 is coming - including new Security Firewall VizualizerThe new ColdBox Security v3 is almost done! Brand new Security Firewall visualizer, basic auth, included user storage, rule simulator, ColdBox 7 delegates, jwt, new firewall blocks, reporting, fluent configuration and so much more! #secureAllThings #coldbox #modernizeOrDiehttps://twitter.com/lmajano/status/1589931501411598338https://twitter.com/lmajano 11/7/22 - Ortus Solutions - The holiday season is almost here and we want to give you an early present!For the first time ever, enjoy our "ColdBox Master Class" for FREE until Dec 31st, and start building secure and modern CFML web applications with up-to-date tools and methodologies that will help you increase your development productivity!Whether you are a ColdBox master or a beginner, this course will give you the tools and guidance you need to learn everything about this open-source modular web application framework from start to finish. Let's get started, modernize your web development projects today and optimize your services by getting the best out of our ColdBox MVC framework.https://www.ortussolutions.com/blog/become-a-coldbox-master-for-free 11/7/22 - Blog - Ben Nadel - Proxying Gravatar Images For Better Avatar Caching In ColdFusionWhen readers leave a comment on this blog, I render an avatar next to their authorship information. This avatar is served from Gravatar, which is (probably) the most popular avatar system on the web (brought to us by the same people who built WordPress). Unfortunately, serving avatars from Gravatar was hurting my Chrome LightHouse scores due to Gravatar's very short caching controls (5-mins). To help improve my LightHouse score, I'm starting to proxy the Gravatar images on my ColdFusion server, applying a custom Cache-Control HTTP header.https://www.bennadel.com/blog/4351-proxying-gravatar-images-for-better-avatar-caching-in-coldfusion.htm 11/5/22 - Linked In Post - Luis Majano - J on the Beach Meetup in Malaga Spain We had a great time!!! Our European Grass Roots events have started!! #cfml #coldfusion #coldbox #ortusYesterday we had a great meetup led by Jorge Reyes Bendeck from Ortus Solutions, Corp learning about all the different licenses available for #OpenSource software.https://www.linkedin.com/feed/update/urn:li:share:6994607593453162496/ 11/5/22 - Blog - Charlie Arehart - ColdFusion Portal - Enabling CF to switch to using Java's regex engineIf you may ever encounter problems trying to use regular expressions in CFML (which are actually PERL regex's), did you know that you can tell CF to use Java regex's instead? This has been possible since 2019, but you could have missed when the change was introduced via CF2018 update 5 in Sep 2019–and of course the option is also built into CF 2021.This is one of those settings which can be enabled/controlled at either:the server level: via the CF Admin “Settings” page, and its “Use Java as Regex Engine” optionor the application level: via the this.useJavaAsRegexEngine in application.cfc (or an attribute of the same name in cfapplication, if using application.cfm)https://coldfusion.adobe.com/2022/11/switching-cf-to-use-java-regex-engine/  11/5/22 - Blog - Charlie Arehart - ColdFusion Portal - Come learn “How the Adobe CF Docker Images Have Evolved”, launching CF Summit onlineThe first session for the Adobe ColdFusion Summit Online has been announced. I had reported here last week that Adobe was going to start having all the speakers from Adobe's CF Summit (in Vegas last month) offer their talks online, to be live-streamed and recorded. Well, it looks like I'm the lead-off batter.https://coldfusion.adobe.com/2022/11/come-learn-how-adobe-cf-docker-images-have-evolved/ 11/4/22 - Blog - Nolan Erck - Free ColdBox Training For The Rest Of 2022CFML developers that still say "I don't know how to use ColdBox", your excuses are now officially invalid. ;)The ColdBox Master Class video training series that I produced for Ortus Solutions is FREE for the rest of the year!https://southofshasta.com/blog/free-coldbox-training-for-the-rest-of-2022/ 11/4/22 - Blog - Pete Freitag - OpenSSL and ColdFusion / Lucee / TomcatPete have had a several people asking me about the openssl vulnerabilities that were patched this week: CVE-2022-3602 and CVE-2022-3786 aka Spooky SSL.https://www.petefreitag.com/item/1000.cfm 11/4/22 - Tweet - Pete Miller - Lost RespectI lost a lot of respect in a past job sticking with #CFML even to point I was moved sideways and new project manager came in with #PHP for new project. I left and 7 years later the #CFML runs their business and the #PHP project is dead and buried.https://twitter.com/millerpete/status/1588660303986036738https://twitter.com/millerpete 11/4/22 - Tweet - Brad Wood - Ortus - Microsoft 365's removal of plain text passwordsIf anyone is caught out by Microsoft 365's removal of plain text passwords to check Exchange mail, I've recently setup an Oauth flow using the GraphAPI for a client and posted some example code here in the Lucee forum to help you out: https://dev.lucee.org/t/check-email-on-o365-with-oauth/11389/5?u=bdw429s 11/4/22 - Blog - Zac Spitzer - Lucee - Lucee released 5.3.9.166 StableThis a minor bug fix release, which addresses a few bugs listed below, mainly relating to concurrency or errors under heavy load.Anyone running 5.3.9.160 is encouraged to update to this release.https://dev.lucee.org/t/lucee-5-3-9-166-stable-release/11319 11/3/22 - Blog - Charlie Arehart - Restoring the CF Admin logviewer removed in Oct 2022 CF updates, at your own riskAs of the Oct 2022 CF updates (CF2021 update 5 and CF2018 update 15), Adobe has chosen to remove the CF Admin feature to view, search, download, and delete CF logs, due to asserted (but as-yet undocumented) security concerns.What if you want it back? In this post, I explain what changed, why, and how to get the functionality back--albeit at your own risk. For more, read on.https://www.carehart.org/blog/2022/11/3/restoring_admin_logviewer 11/3/22 - Podcast - Michela Light - CFAlive - 123 State of CF Union Survey Analysis (part 2) with Gavin PickinGavin Pickin talks about “State of CF Union Survey Analysis (part 2)” in this episode of ColdFusion Alive Podcast with host Michaela Light.“we're going to be doing our second part on the state of the ColdFusion survey results. And we've got some very interesting data that we found we've done Gavin put together some really cool graphs show it so if you're watching on video, be able to see those if you're not on video, you can go to the show notes page on teratech.com to have a look at the graphs when we get to those.”https://teratech.com/podcast/state-cf-union-survey-analysis-part-2-with-gavin-pickin/ CFML JobsSeveral positions available on https://www.getcfmljobs.com/Listing over 145 ColdFusion positions from 80 companies across 66 locations in 5 Countries.2 new jobs listed this weekFull-Time - Senior ColdFusion Developer at London - United Kingdom Nov 03https://www.getcfmljobs.com/jobs/index.cfm/united-kingdom/Senior-ColdFusion-Developer-at-London/11532 Full-Time - Coldfusion Developer at London - United Kingdom Nov 03https://www.getcfmljobs.com/jobs/index.cfm/united-kingdom/Coldfusion-Developer-at-London/11531 Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well. We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution. Current Roles in detail All roles: https://www.tomorrows.co.uk/jobs.cfm Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -  https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/-  Minimum three years' experience with ColdFusion-  Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019-  Familiarity with Git-  Flexible skillset covering a wide range of development Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/-  Minimum three years experience with automated testing-  Experience with automated testing tools such as selenium-  Experience with API test tools such as Postman/Fiddler etc  Benefits of both roles:-  £4,000 per annum discretionary company bonus scheme-  25 days annual leave + bank holidays-  6% employer pension contribution-  Access to free perks and discounts through Perkbox-  Long Service Awards-  Cycle to Work Scheme-   Company and Team nights outOther Job Links Ortus Solutions https://www.ortussolutions.com/about-us/careers  There is a jobs channel in the CFML slack team, and in the box team slack now too ForgeBox Module of the WeekSwagger Redoc UI for ColdBoxThis is the Swagger Redoc UI module for ColdBox applications. It was inspired by the cbSwaggerUI module. By default, it looks in the /cbswagger location for the OpenAPI Swagger file.The UI is available at /redoc - where you will see a visual representation of your Swagger docs.Based on: https://github.com/Redocly/redoc Online Demo: https://redocly.github.io/redoc/ https://www.forgebox.io/view/cbswagger-redoc VS Code Hint Tips and Tricks of the WeekProject ManagerBy Alessandro FragnaniIt helps you to easily access your projects, no matter where they are located. Don't miss those important projects anymore.You can define your own Projects (also called Favorites), or choose for auto-detect Git, Mercurial or SVN repositories, VSCode folders, or any other folder.Here are some of the features that Project Manager provides: Save any folder or workspace as a Project Auto-detect Git, Mercurial or SVN repositories Organize your projects using Tags Open projects in the same or new window Identify deleted/renamed projects A Status Bar which identifies the current project A dedicated Side Bar https://marketplace.visualstudio.com/items?itemName=alefragnani.project-managerThank you to all of our Patreon SupportersThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox. You can support us on Patreon here https://www.patreon.com/ortussolutionsNew Patreon - Tomorrows GuidesDon't forget, we have Annual Memberships, pay for the year and save 10% - great for businesses. Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription. All Patreon supporters have a Profile badge on the Community Website All Patreon supporters have their own Private Forum access on the Community Website All Patreon supporters have their own Private Channel access BoxTeam Slack Live Stream Access to streams like “Koding with the Kiwi + Friends” and Ortus Software Craftsmanship Book Club https://community.ortussolutions.com/ Patreons John Wilson - Synaptrix Jordan Clark Gary Knight Mario Rodrigues Giancarlo Gomez David Belanger Dan Card Jonathan Perret Jeffry McGee - Sunstar Media Dean Maunder Nolan Erck  Abdul Raheen Wil De Bruin Joseph Lamoree  Don Bellamy Jan Jannek Laksma Tirtohadi  Brian Ghidinelli - Hagerty MotorsportReg Carl Von Stetten Jeremy Adams Didier Lesnicki Matthew Clemente Daniel Garcia Scott Steinbeck - Agri Tracking Systems Ben Nadel  Richard Herbet Brett DeLine Kai Koenig Charlie Arehart Jason Daiger Shawn Oden Matthew Darby Ross Phillips Edgardo Cabezas Patrick Flynn Stephany Monge Kevin Wright John Whish Peter Amiri Cavan Vannice John Nessim You can see an up to date list of all sponsors on Ortus Solutions' Websitehttps://ortussolutions.com/about-us/sponsors Thanks everyone!!! ★ Support this podcast on Patreon ★

#DataOops
Episode 21 : REX sur crash databases mssql + AWS AppRunner + les Certifications IT

#DataOops

Play Episode Listen Later Oct 10, 2022 91:52


Episode 21 : Rex sur un crash d'une infrastructure virtuelle et l'impact sur les bases de données (MSSQL). Découverte de AWS App Runner et discussions sur les certifications IT

VisualMakers
Bubble.io App DSGVO-konform machen? Faktoren & Tipps

VisualMakers

Play Episode Listen Later Jul 25, 2022 18:38


"Wie mache ich meine Bubble App DSGVO konform?" - ist eine der häufigsten Fragen, die wir gestellt bekommen. Nach der gekippten Privacy Shield Vereinbarung der EU & USA ist das Verarbeiten und Speichern von personenbezogenen Daten auf US-Servern nicht mehr DSGVO-konform. In dieser Folge möchten wir das Thema einmal aufgreifen und dir Möglichkeiten aufzeigen, wie du Bubble trotzdem für dich nutzen kannst. Dabei geht es konkret um die Themen Datenbank, Authentifizierung und Tracking / Cookies. Datenbanken: MySQL & PostgreSQL: https://cloud.ionos.de/managed/database Anbieter für MSSQL: https://www.fritz.gmbh/de/cloud-mssql-datenbank-hosting.htm https://www.ovhcloud.com/de/web-hosting/options/start-sql/ Anbieter für MongoDB: https://www.mongodb.com/de-de/pricing https://cloud.ionos.de/managed/database Mehr zu SeaTable: http://seatable.io Mehr zu Ninox: http://ninox.com Mehr zu Xano: http://xano.com Mehr zu Backendless: http://backendless.com Authentifizierung Mehr zu Auth0: Plugin: https://forum.bubble.io/t/new-plugin-auth0-integration/46458/16 https://auth0.com/blog/schrems-2-eu-us-privacy-shield-ruled-invalid/ Tracking Cookies: Mehr zu usercentrics:*https://bit.ly/3zfYhNN Mehr zu CookieFirst: http://cookiefirst.com Mehr zu CookieBot: http://cookiebot.com Fathom Analytics (DSGVO-konformes Website-Tracking)*:https://bit.ly/3JeRzMI Make lernen bei VisualMakers: https://visualmakers.de/make Bubble lernen bei VisualMakers: https://visualmakers.de/bubble Tritt unserer kostenlosen No-Code Community bei: https://visualmakers.de --- VisualMakers.de ist eine Lernplattform und Community für den Bereich NoCode. Lerne mit uns, wie du Webseiten, Web-Apps & Mobile-Apps bauen und Prozesse automatisieren kannst, ohne eine Zeile Programmiercode schreiben zu müssen. Mit * gekennzeichnete Links sind Provisionslinks. Dein Kaufpreis bleibt unverändert. Nutze diese gerne, wenn du das Projekt VisualMakers unterstützen möchtest. Vielen Dank!

Modernize or Die ® Podcast - CFML News Edition
Modernize or Die® - CFML News Podcast for July 19th, 2022 - Episode 157

Modernize or Die ® Podcast - CFML News Edition

Play Episode Listen Later Jul 19, 2022 59:02


2022-07-19 Weekly News - Episode 157Watch the video version on YouTube at https://youtu.be/UGyXU0RzMxQ Hosts:  Gavin Pickin- Senior Developer at Ortus Solutions Eric Peterson - Senior Developer at Ortus Solutions Thanks to our Sponsor - Ortus SolutionsThe makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there.  A few ways  to say thanks back to Ortus Solutions: BUY SOME ITB TICKETS - COME TO THE CONFERENCE - Have a few laughs! Like and subscribe to our videos on YouTube.  Help ORTUS reach for the Stars - Star and Fork our Repos Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github  Subscribe to our Podcast on your Podcast Apps and leave us a review Sign up for a free or paid account on CFCasts, which is releasing new content every week BOXLife store: https://www.ortussolutions.com/about-us/shop Buy Ortus's Book - 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)  Patreon SupportGoal 1 - We have 37 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions. Goal 2 - We are 44% of the way to fully fund the hosting of ForgeBox.io News and AnnouncementsHow does CFML really perform compared to other languages?I've talked about the TechEmpower performance benchmarks before, but I wanted to highlight them again. They are the closest thing the internet has to a giant cage match between nearly every language and framework out there. The benchmarks have a suite of tests, such as run 20 queries on a page and output some data, and every language and framework implements the same logic in their syntax and style. The tests literally take days to run in full and spin up each combination of language and framework in docker containers where they are hammered with oodles of traffic and then the juicy stats are recorded for sweet graphical comparisons.https://community.ortussolutions.com/t/how-does-cfml-really-perform-compared-to-other-languages/9325 Adobe Developer Week is this week! July 18-22ndThe Adobe ColdFusion Developer Week is back - bigger and better than ever! This year, our experts are gearing up to host a series of webinars on all things ColdFusion. This is your chance to learn with them, get your questions answered, and build cloud-native applications with ease.Gavin and Luis presented Monday - more great content to comeWhat are you waiting for? Register now!https://adobe-coldfusion-devweek-2022.attendease.com/registration/form Java 10 added a var keyword that is quite different from that in CFMLDid you know that Java 10 (and above) has added use of a "var" keyword in variable declaration? Note that it's quite different from CFML's var keyword.This is NOT something that CF developers NEED to know, and it WILL NOT affect anyone's CFML code.I just thought I'd share news of it as I happened to learn of it today (though Java 10 came out nearly 5 years ago). More than anything, I thought it worth mentioning for the sake of either CF folks or Java folks who may come to work with CFML, to help each group understand how that Java var keyword is so very different from the one used in ColdFusion, for better or worse.https://www.carehart.org/blog/client/index.cfm/2022/7/15/java_10_var_keyword_differs_from_CFMLs New Releases and UpdatesLucee 6 beta coming soon?Webinar / Meetups and WorkshopsICYMI - Live Stream Series - Koding with the Kiwi + Friends - Special Guest - Wil De Bruin - Talking about CBValidationLast Friday July 15th, at 1pm PDTIn this last session, Gavin was joined by Wil De Bruin. Wil De Bruin works a lot with CBValidation, contributed to the project, blogged a lot, and even presented at Into the Box in the past. They looked at different ways to validate your api input, your models, where to store your constraints, and helper methods to cut down on your API handler boilerplate. They discussed using validate() vs validateOrFail() and how you can make your own helper to make your api's even more fluent. Join them as they validate the API Endpoints for Developer Feud Quiz API which Gavin presented at Adobe Developer Week!Recording: https://cfcasts.com/series/koding-with-the-kiwi-+-friends/videos/20220719-koding-with-the-kiwi-+-friends-wil-de-bruin-validation Code: https://github.com/gpickin/koding-kiwi-developer-feud/releases/tag/2022-07-15 https://github.com/gpickin/2022-acf-dw-dev-feud-presentation July 2022 Seattle ColdFusion User Group Meeting - Hello ColdFusion! by Leon O'DanielThursday, July 21, 2022 at 5:00 PMThis introduction to ColdFusion answers the what and why for using ColdFusion, plus includes some demos that you can incorporate into your web site right away. How do I output today's date and today's year onto a web page? How do I output data onto my web page from a database? How can I display content from an RSS feed on my web page? https://www.meetup.com/seattle-coldfusion-user-group/events/286888783/ Ortus Webinar - July - Legacy Migration Follow Up: Using Coldbox with an Existing Code BaseJuly 29th 2022: Time 11:00 AM Central Time ( US and Canada )Dan Card will be presenting a follow up to his June webinar: Getting started with the Legacy Migration. Dan received some good questions, so July's Webinar: Legacy Migration Follow Up: Using Coldbox with an Existing Code Base with Dan Card. If you have a more traditional / legacy codebase, and are wanting to modernize with ColdBox, but don't know where to start, this webinar is just for you!with Dan Cardhttps://us02web.zoom.us/meeting/register/tZArde-srjgiGtUVIWhhVRmMpSgang6yqCzA Adobe WorkshopsJoin the Adobe ColdFusion Workshop to learn how you and your agency can leverage ColdFusion to create amazing web content. This one-day training will cover all facets of Adobe ColdFusion that developers need to build applications that can run across multiple cloud providers or on-premiseTUESDAY, AUGUST 9, 20229.00 AM - 4.30 PM AESTColdFusion WorkshopBrian Sappeyhttps://coldfusion-1-day-training.meetus.adobeevents.com/ WEBINAR - THURSDAY, AUGUST 18, 202210:00 AM PDTMaking Games with Adobe ColdFusionMark Takatahttps://making-games-with-adobe-coldfusion.meetus.adobeevents.com/FREE :)Full list - https://meetus.adobeevents.com/coldfusion/ CFCasts Content Updateshttps://www.cfcasts.comJust Released Koding with the Kiwi + Friends - https://cfcasts.com/series/koding-with-the-kiwi-+-friends2022-07-15 - Koding with the Kiwi + Friends - Wil De Bruin - Talking about Validation https://cfcasts.com/series/koding-with-the-kiwi-+-friends/videos/20220719-koding-with-the-kiwi-+-friends-wil-de-bruin-validation LogBox 101 - 3 new videos - https://cfcasts.com/series/logbox-101  Episode 6 - EmailAppender -  https://cfcasts.com/series/logbox-101/videos/emailappender Episode 7 - FileAppender and RollingFileAppender -  https://cfcasts.com/series/logbox-101/videos/fileappender-and-rollingfileappender  Episode 8 - ScopeAppender - https://cfcasts.com/series/logbox-101/videos/scopeappender  2022 ForgeBox Module of the Week Series - 1 new Videohttps://cfcasts.com/series/2022-forgebox-modules-of-the-week 2022 VS Code Hint tip and Trick of the Week Series - 1 new Video https://cfcasts.com/series/2022-vs-code-hint-tip-and-trick-of-the-week  Coming Soon LogBox 101 from Eric Peterson Koding with the Kiwi + Friends More ForgeBox and VS Code Podcast snippet videos Box-ifying a 3rd Party Library from Gavin ColdBox Elixir from Eric Conferences and TrainingAdobe Developer Week 2022 - This Week!!!!July 18-22, 2022Online - Virtual - FreeThe Adobe ColdFusion Developer Week is back - bigger and better than ever! This year, our experts are gearing up to host a series of webinars on all things ColdFusion. This is your chance to learn with them, get your questions answered, and build cloud-native applications with ease.Speakers have been announcedAgenda has been announcedhttps://adobe-coldfusion-devweek-2022.attendease.com/registration/form THAT ConferenceHowdy. We're a full-stack, tech-obsessed community of fun, code-loving humans who share and learn together.We geek-out in Texas and Wisconsin once a year but we host digital events all the time.WISCONSIN DELLS, WI / JULY 25TH - 28TH, 2022A four-day summer camp for developers passionate about learning all things mobile, web, cloud, and technology.https://that.us/events/wi/2022/ Our very own Daniel Garcia is speaking there Easier API Development and Testing - Use PostMan, Webhook.site, and ngrok to Enhance Your Workflowhttps://that.us/activities/sb6dRP8ZNIBIKngxswIt ICYMI - VueJS Forge This Week - July 13th-14th Organized by Vue School _The largest hands-on Vue.js Event Team up with 1000s of fellow Vue.js devs from around the globe to build a real-world application in just 2 days in this FREE hackathon-style event. Make connections. Build together. Learn together. Sign up as an Individual or signup as a company Company Deal - $2000 for a team of 5, includes VueSchool annual membership and guaranteed seat at the workshops at VueJS Forge as well… and you can pick your team Project: Project Management SAAS Apphttps://vuejsforge.com/Into The Box 2022September 6, 7 and 8, 2022 in Houston, TexasOne day workshops before the two day conference!Sign up for the workshops before they fill up - couple are almost filledConference Website:https://intothebox.orgITB Blog has new updates!CF Summit - OfficialMirageOct 3rd & 4th - CFSummit ConferenceOct 5th - Adobe Certified Professional: Adobe ColdFusion Certification Classes & Testshttps://cfsummit.adobeevents.com/ https://www.adobe.com/products/coldfusion-family/certificate.html Registrations are now open.For just $99! Grab your early-bird tickets before June 30 - Still open!!!Call for Speakers is now Open - Supposed to close June 30th - Submit now!!!!Ortus CF Summit Training WorkshopColdBox Zero to MegaHero : REST APIs + VueJS Mobile AppOct 5th and 6th - After CF Summit ConferenceLead by Luis Majano & Gavin PickinPrice: $799 - Early bird pricinghttps://www.eventbrite.com/e/ortus-cf-summit-training-workshop-tickets-375306340367Location: Aria - In the luxurious Executive Hospitality Suite like 2019The suite doubled it's prices but we're working hard to keep the costs to the attendees the sameInto the Box Latam 2022Dec 5th or 7thMore information is coming very soon.CFCampNo CFCAMP 2022, we're trying again for summer 2023TLDR is that it's just too hard and there's too much uncertainty right now.More conferencesNeed more conferences, this site has a huge list of conferences for almost any language/community.https://confs.tech/Blogs, Tweets, and Videos of the Week 7/19/22 - Blog - Ben Nadel - Using Strict Type Decision Methods In ColdFusionHistorically, one the nicest features of ColdFusion is the fact that it is loosely typed. And, that the language will - in most cases - happily and transparently cast one data type to another in order to get the job done. As the language has continued to modernize, however, some of its loose behaviors can cause unexpected errors. As such, I was proposing yesterday, on the Lucee CFML developer forums, that the language might introduce some Strict decision functions.https://www.bennadel.com/blog/4299-using-strict-type-decision-methods-in-coldfusion.htm 7/18/22 - Blog - James Moberg - CustomTag CFScript "Nuance"I still have some CustomTags that we've used in production for years and, now that I'm writing more cfscript, I thought I'd continue using some of them (for now) using the following syntax that I learned about on StackOverflow.https://dev.to/gamesover/customtag-cfscript-nuance-4nig7/16/22 - Blog - Ben Nadel - Validating Complex, Nested, Dynamic Data Structures In ColdFusionLast week, I looked at building-up complex objects using form POSTs in ColdFusion. I then took that same technique and used it to create a multi-step form wizard that doesn't require any data persistence. All of that was in service of creating a feature flag system for my blog (see my Tweet). But, building-up a complex object is one thing - validating and persisting that complex object is whole other beast. And, to be honest, I don't have a go-to method for validating complex, nested structures in ColdFusion. As such, I've spent the last week playing around with an approach that I would like to share.https://www.bennadel.com/blog/4298-validating-complex-nested-dynamic-data-structures-in-coldfusion.htm 7/15/22 - Blog - Charlie Arehart - Java 10 added a var keyword that is quite different from that in CFMLDid you know that Java 10 (and above) has added use of a "var" keyword in variable declaration? Note that it's quite different from CFML's var keyword.This is NOT something that CF developers NEED to know, and it WILL NOT affect anyone's CFML code.I just thought I'd share news of it as I happened to learn of it today (though Java 10 came out nearly 5 years ago). More than anything, I thought it worth mentioning for the sake of either CF folks or Java folks who may come to work with CFML, to help each group understand how that Java var keyword is so very different from the one used in ColdFusion, for better or worse.https://www.carehart.org/blog/client/index.cfm/2022/7/15/java_10_var_keyword_differs_from_CFMLs 7/15/22 - Blog - Ortus Content Digest for week of July 15thIt's July 15th... what has Ortus been publishing this week? We have the CFML News Podcast, some CFCasts and YouTube Videos, lots of Ortus and ITB Blog Posts. We have a lot more planned for next week as well.https://www.ortussolutions.com/blog/ortus-content-digest-for-week-of-july-15th/?utm_medium=referral&utm_source=contentstudio.io 7/14/22 - Blog - Integrating ColdBox with Existing Code Series - 1 - ColdBox TourRecently I did a webinar on Refactoring Legacy Code and the question came up about whether or not it was possible to use Coldbox with existing code without converting everything to a Coldbox module or making changes to the existing codebase. The answer is yes and there are many ways to do it. The method you choose depends on what the goals are for the conversion. Do you need to simply keep the exact same site but start moving toward Coldbox routes? Are you putting a new look to existing functionality but need to keep an existing site up and running in the meantime? Both these and several other scenarios are possible. We'll take this blog series to walk through some of them.https://www.ortussolutions.com/blog/integrating-coldbox-with-existing-code-series-1-coldbox-tour/?utm_medium=referral&utm_source=contentstudio.io 7/13/22 - Post - Brad Wood - Ortus Community - How does CFML really perform compared to other languages?I've talked about the TechEmpower performance benchmarks before, but I wanted to highlight them again. They are the closest thing the internet has to a giant cage match between nearly every language and framework out there. The benchmarks have a suite of tests, such as run 20 queries on a page and output some data, and every language and framework implements the same logic in their syntax and style. The tests literally take days to run in full and spin up each combination of language and framework in docker containers where they are hammered with oodles of traffic and then the juicy stats are recorded for sweet graphical comparisons.https://community.ortussolutions.com/t/how-does-cfml-really-perform-compared-to-other-languages/9325  7/13/22 - Issue / Post - James Moberg - Parameterized Query is Magnitudes Slower When Using LIKEI was troubleshooting a MSSQL query that used LIKE. If inline SQL was used, the result was returned within 400-550 ms. QB (or even using QueryExecute w/bind parameters) was taking ~27,000 ms by comparison.While researching the issue, I came across a SQL resource with good advicehttps://github.com/coldbox-modules/qb/issues/224 https://eloquent-course.reinink.ca/7/13/22 - Blog - Ortus Solutions - Recap: Online ColdFusion Meetup July 7th - "Planning and Building my Developer Feud Quiz API" with Gavin PickinGavin appeared on the Online ColdFusion Meetup July 7th. The session the start of an Building an API Series, the recording and slides are now available.Topic Description: In this session, we are going to plan and build our very own Developer Feud Quiz. To do this, we will analyze and plan our app, starting with the User Stories, and then mapping that to Database, Models, and we can start building out our API, using CRUDDY by Design philosophies. We'll shell out our TDD style Tests, and then create a couple of resources and routes.https://www.ortussolutions.com/blog/recap-online-coldfusion-meetup-july-7th-planning-and-building-my-developer-feud-quiz-api-with-gavin-pickin/?utm_medium=referral&utm_source=contentstudio.io CFML JobsSeveral positions available on https://www.getcfmljobs.com/Listing over 110 ColdFusion positions from 61 companies across 53 locations in 5 Countries.3 new jobs listedFull-Time - Specialist Development, ColdFusion at Gurgaon, Haryana - India Jul 18https://www.getcfmljobs.com/jobs/index.cfm/india/Specialist-Development-ColdFusion-at-Gurgaon-Haryana/11497 Full-Time - ColdFusion Developers at Bengaluru, Karnataka - India Jul 15https://www.getcfmljobs.com/jobs/index.cfm/india/ColdFusion-Developers-at-Bengaluru-Karnataka/11496 Full-Time - Oracle / ColdFusion Developer at Washington, DC - United States Jul 15https://www.getcfmljobs.com/jobs/index.cfm/united-states/Oracle-ColdFusion-Developer-at-Washington-DC/11495 Other Job Links Ortus Solutions https://www.ortussolutions.com/about-us/careers  John Hopkins University with Brian Klass - https://jobs.jhu.edu/job/Baltimore-Sr_-Programmer-Analyst-MD-21205/905668200/         More Information: https://twitter.com/brian_klaas/status/1544653220244590592  Clear Capital - Carol from Working Code Podcast - https://bit.ly/3Ocu5Zz  There is a jobs channel in the cfml slack team, and in the box team slack now too ForgeBox Module of the Weektwilio-sdk v2.2.1This module is a CFML SDK to interact with the Twilio APIIncludes lookup and SMS and phoneCall methodshttps://www.forgebox.io/view/twilio-sdk VS Code Hint Tips and Tricks of the Week:emojisense:Adds suggestions and autocomplete for emojiAdds suggestions and autocomplete for emoji to VS Code.https://marketplace.visualstudio.com/items?itemName=bierner.emojisense Thank you to all of our Patreon SupportersThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox. You can support us on Patreon here https://www.patreon.com/ortussolutionsDon't forget, we have Annual Memberships, pay for the year and save 10% - great for businesses. Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription. All Patreon supporters have a Profile badge on the Community Website All Patreon supporters have their own Private Forum access on the Community Website All Patreon supporters have their own Private Channel access BoxTeam Slack Live Stream Access to Koding with the Kiwi + Friends https://community.ortussolutions.com/ Patreons John Wilson - Synaptrix Brian Ghidinelli - Hagerty MotorsportReg   Jordan Clark Eric Hoffman Gary Knight Mario Rodrigues Giancarlo Gomez David Belanger Dan Card Jonathan Perret Jeffry McGee - Sunstar Media Dean Maunder Wil De Bruin Joseph Lamoree Don Bellamy Jan Jannek Laksma Tirtohadi Carl Von Stetten Jeremy Adams Didier Lesnicki Matthew Clemente Daniel Garcia Scott Steinbeck - Agri Tracking Systems Ben Nadel  Brett DeLine Kai Koenig Charlie Arehart Jonas Eriksson Jason Daiger Shawn Oden Matthew Darby Ross Phillips Edgardo Cabezas Patrick Flynn Stephany Monge John Whish Kevin Wright Peter Amiri You can see an up to date list of all sponsors on Ortus Solutions' Websitehttps://ortussolutions.com/about-us/sponsors ★ Support this podcast on Patreon ★

Modernize or Die ® Podcast - CFML News Edition
Modernize or Die® - CFML News Podcast for July 12th, 2022 - Episode 156

Modernize or Die ® Podcast - CFML News Edition

Play Episode Listen Later Jul 12, 2022 76:41


2022-07-12 Weekly News - Episode 156Watch the video version on YouTube at https://youtu.be/Lon8ghRKRvQHosts:  Gavin Pickin- Senior Developer at Ortus Solutions Dan Card - Senior Developer at Ortus Solutions Thanks to our Sponsor - Ortus SolutionsThe makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. A few ways  to say thanks back to Ortus Solutions: BUY SOME ITB TICKETS - COME TO THE CONFERENCE - Have a few laughs! Like and subscribe to our videos on YouTube.  Help ORTUS reach for the Stars - Star and Fork our ReposStar all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github  Subscribe to our Podcast on your Podcast Apps and leave us a review Sign up for a free or paid account on CFCasts, which is releasing new content every week BOXLife store: https://www.ortussolutions.com/about-us/shop Buy Ortus's Book - 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)  Patreon SupportGoal 1 - We have 36 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions. Goal 2 - We are 43% of the way to fully fund the hosting of ForgeBox.io News and AnnouncementsGithub Co-Pilot works with CFMLWe specifically designed GitHub Copilot as an editor extension to make sure nothing gets in the way of what you're doing. GitHub Copilot distills the collective knowledge of the world's developers into an editor extension that suggests code in real time, to help you stay focused on what matters most: building great software.Adam Tuttle confirmed in this Twitter thread https://twitter.com/gamesover/status/1545098071041724416 https://github.blog/2022-06-21-github-copilot-is-generally-available-to-all-developers/#:~:text=We're%20making%20GitHub%20Copilot,of%20popular%20open%20source%20projects.Working Code Podcast discussed Github Co-pilot: https://www.bennadel.com/blog/4295-working-code-podcast-episode-82-github-charging-for-copilot.htm CommandBox vNext supports enabling basic auth only for certain folders#CommandBox vNext supports enabling basic auth only for certain folders, making it easier to wrap additional security around your administrators and other sensitive folders in production. ortussolutions.atlassian.net/browse/COMMAND… #CFML #ColdFusionhttps://ortussolutions.atlassian.net/browse/COMMANDBOX-1419 AWS Identity and Access Management introduces Roles Anywhere for workloads outside of AWSAWS Identity and Access Management (IAM) now enables workloads that run outside of AWS to access AWS resources using IAM Roles Anywhere. IAM Roles Anywhere allows your workloads such as servers, containers, and applications to use X.509 digital certificates to obtain temporary AWS credentials and use the same IAM roles and policies that you have configured for your AWS workloads to access AWS resources. https://aws.amazon.com/about-aws/whats-new/2022/07/aws-identity-access-management-iam-roles-anywhere-workloads-outside-aws/ INTO THE BOX - UpdatesInto the Box Early Bird ticket pricing is over!We extended it for the 4th of July, but that is now over. ITB In Person Schedule Finalized on the Website New Speaker Added - John Farrar New sessions from Speakers Workshops are starting to fill up - don't miss your chance.https://intothebox.org/ New Releases and UpdatesNew Monitoring Solution? - MonikaMentioned by James Moberg on TwitterA #ColdFusion Taffy API was timing out due to 3rdparty MSSQL table locks. I started using @hyperjump_tech Monika to log performance every 60 seconds to expose impact. monika.hyperjump.tech #CFML Metrics are logged to SQLite DB. #opensource #portable #yaml #notificationsMonika is an open source synthetic monitoring command line application. It is actively developed and completely free!Loads of integrations.https://monika.hyperjump.tech/ ICYMI - Adobe ColdFusion Builder (VS Code) BetaDo you want to help us test and improve our upcoming Adobe ColdFusion Builder Extension for VS Code? Well, the time is nearly here. We are collecting emails of interested users.We are starting with a very small closed beta just to shake any lingering bugs out. This is happening over the weekend.Once we feel comfortable, users who have signed up for this beta (form link below) will slowly begin getting invites for a pre-release forum dedicated to the full closed beta program. This is likely to occur early to mid next week.We need people who are fired up, willing to put in time testing and provide us with solid, informative feedback. The full, open launch of the product is coming shortly after Dev Week but this is your opportunity to get a chance to see it early, test it and help us make it as awesome as possible.Please note: There may be bugs. This should not be used in production during the time of the beta testing. I shouldn't have to tell you that lol. But here we are. I use this tool already in my day to day. But your workflow might be different. We will be adding people slowly, so if you don't get an email early next week, just give it a moment. The earlier you sign up, the more likely you get in.Sign up here: https://forms.office.com/Pages/ResponsePage.aspx?id=Wht7-jR7h0OUrtLBeN7O4VmPZrcheetIstWzdVorFtxURjVKSE5KNFZSSzg4MzdHUzRaOTZBQ1Q3SS4u&fbclid=IwAR3eZ4hD9cSXJKuME2mIeOYp8c4j-LT0mr_iCzPnSU52NkBdBxU-Az5abLg Webinar / Meetups and WorkshopsLive Stream Series - Koding with the Kiwi + Friends - Special Guest - Wil De Bruin - Talking about CBValidationFriday July 15th, at 1pm PDTPatreon's check your email, there will be an email sent Wednesday with the registration link for the zoom call… or keep an eye out in the Patreon Only BoxTeam Slack channel or the Ortus Community Forum section.Not a patreon? Sign up today or wait for us to release the recording on CFCasts after the session.Adobe Developer Week is Next week! July 18-22ndThe Adobe ColdFusion Developer Week is back - bigger and better than ever! This year, our experts are gearing up to host a series of webinars on all things ColdFusion. This is your chance to learn with them, get your questions answered, and build cloud-native applications with ease.What are you waiting for? Register now!https://adobe-coldfusion-devweek-2022.attendease.com/registration/form Legacy Migration Follow Up: Using Coldbox with an Existing Code BaseJuly 29th 2022: Time 11:00 AM Central Time ( US and Canada )Dan Card will be presenting a follow up to his June webinar: Getting started with the Legacy Migration. Dan received some good questions, so July's Webinar: Legacy Migration Follow Up: Using Coldbox with an Existing Code Base with Dan Card. If you have a more traditional / legacy codebase, and are wanting to modernize with ColdBox, but don't know where to start, this webinar is just for you!with Dan Cardhttps://us02web.zoom.us/meeting/register/tZArde-srjgiGtUVIWhhVRmMpSgang6yqCzA ICYMI - Online CF Meetup - "Planning and Building my Developer Feud Quiz API", with Gavin PickinThursday, July 7, 20229:00 AM to 10:00 AM PDTIn this session, we are going to plan and build our very own Developer Feud Quiz. To do this, we will analyze and plan our app, starting with the User Stories, and then mapping that to Database, Models, and we can start building out our API, using CRUDDY by Design philosophies. We'll shell out our TDD style Tests, and then create a couple of resources and routes.Recording: https://www.youtube.com/watch?v=UCqxiaR5BWM&list=PLG2EHzEbhy0-QirMKgSxhjkUyTSSTvHjL Slides: https://t.co/NJZbjr3NTRMeetup Link: https://www.meetup.com/coldfusionmeetup/events/286853927/Adobe WorkshopsJoin the Adobe ColdFusion Workshop to learn how you and your agency can leverage ColdFusion to create amazing web content. This one-day training will cover all facets of Adobe ColdFusion that developers need to build applications that can run across multiple cloud providers or on-premiseTUESDAY, AUGUST 9, 20229.00 AM - 4.30 PM AESTColdFusion WorkshopBrian Sappeyhttps://coldfusion-1-day-training.meetus.adobeevents.com/ WEBINAR - THURSDAY, AUGUST 18, 202210:00 AM PDTMaking Games with Adobe ColdFusionMark Takatahttps://making-games-with-adobe-coldfusion.meetus.adobeevents.com/FREE :)Full list - https://meetus.adobeevents.com/coldfusion/ CFCasts Content Updateshttps://www.cfcasts.comJust Released 2022 ForgeBox Module of the Week Series - 1 new Videohttps://cfcasts.com/series/2022-forgebox-modules-of-the-week 2022 VS Code Hint tip and Trick of the Week Series - 1 new Videohttps://cfcasts.com/series/2022-vs-code-hint-tip-and-trick-of-the-week  Coming Soon Last video for Gavin Pickin - Publish Your First ForgeBox Package LogBox 101 from Eric Peterson Koding with the Kiwi + Friends More ForgeBox and VS Code Podcast snippet videos Box-ifying a 3rd Party Library from Gavin Conferences and TrainingICYMI - Quasar ConfPlease let us know about you and what you'd like to speak about in all things Quasar or Vue!!!Conference Date: Saturday, July 9th, 2022 - 3 p.m. GMTRecording: https://www.youtube.com/watch?v=CkHM8VLxuus THAT ConferenceHowdy. We're a full-stack, tech-obsessed community of fun, code-loving humans who share and learn together.We geek-out in Texas and Wisconsin once a year but we host digital events all the time.WISCONSIN DELLS, WI / JULY 25TH - 28TH, 2022A four-day summer camp for developers passionate about learning all things mobile, web, cloud, and technology.https://that.us/events/wi/2022/ Our very own Daniel Garcia is speaking there Easier API Development and Testing - Use PostMan, Webhook.site, and ngrok to Enhance Your Workflowhttps://that.us/activities/sb6dRP8ZNIBIKngxswIt Adobe Developer Week 2022July 18-22, 2022Online - Virtual - FreeThe Adobe ColdFusion Developer Week is back - bigger and better than ever! This year, our experts are gearing up to host a series of webinars on all things ColdFusion. This is your chance to learn with them, get your questions answered, and build cloud-native applications with ease.Speakers have been announcedAgenda has been announcedhttps://adobe-coldfusion-devweek-2022.attendease.com/registration/form VueJS Forge This Week - July 13th-14th Organized by Vue School _The largest hands-on Vue.js Event Team up with 1000s of fellow Vue.js devs from around the globe to build a real-world application in just 2 days in this FREE hackathon-style event. Make connections. Build together. Learn together. Sign up as an Individual or signup as a company Company Deal - $2000 for a team of 5, includes VueSchool annual membership and guaranteed seat at the workshops at VueJS Forge as well… and you can pick your team Project: Project Management SAAS Apphttps://vuejsforge.com/Into The Box 2022September 6, 7 and 8, 2022 in Houston, TexasOne day workshops before the two day conference!Sign up for the workshops before they fill up - couple are almost filledConference Website:https://intothebox.orgITB Blog has new updates!CF Summit - OfficialMirageOct 3rd & 4th - CFSummit ConferenceOct 5th - Adobe Certified Professional: Adobe ColdFusion Certification Classes & Testshttps://cfsummit.adobeevents.com/ https://www.adobe.com/products/coldfusion-family/certificate.html Registrations are now open.For just $99! Grab your early-bird tickets before June 30 - Still open!!!Call for Speakers is now Open - Supposed to close June 30th - Submit now!!!!From Slack re Adobe Certified ProfessionalThe Adobe Certified Professional: Adobe ColdFusion cert is a totally different, MUCH more difficult and comprehensive certification than the CF Specialist previously offered. Mark Takata, Nolan and Dave F + the CF engineering team, Elishia and Kishore all spent a week together building the new one and it is HARD. I highly recommend it as a test of your skills, I guarantee everyone will learn something new.Yes, but there's also over 100 hours of video to go over before the 1 day lecture + cert. So you watch videos, sit in class, then take the exam there. It is no joke, definitely challenging, but super satisfying to pass.Plus you get access to those videos for a year, which is nice for going back and reviewing things down the line.Ortus CF Summit Training WorkshopColdBox Zero to MegaHero : REST APIs + VueJS Mobile AppOct 5th and 6th - After CF Summit ConferenceLead by Luis Majano & Gavin PickinPrice: $799 - Early bird pricinghttps://www.eventbrite.com/e/ortus-cf-summit-training-workshop-tickets-375306340367Location: Aria - In the luxurious Executive Hospitality Suite like 2019The suite doubled it's prices but we're working hard to keep the costs to the attendees the sameInto the Box Latam 2022Dec 5th or 7thMore information is coming very soon.CFCampNo CFCAMP 2022, we're trying again for summer 2023TLDR is that it's just too hard and there's too much uncertainty right now.More conferencesNeed more conferences, this site has a huge list of conferences for almost any language/community.https://confs.tech/Blogs, Tweets, and Videos of the Week7/11/22 - Blog - Grae Desmond - ColdFusion Portal - Don't forget the built in web serverI was reading Mark's CLI Installation blog post and remembered when I was testing ColdFusion 2021. I was doing it on my desktop and I did not have a webserver on my machine. Now I could've tested using CommandBox but I wanted to mirror how I would be...https://coldfusion.adobe.com/?p=11180 7/11/22 - Blog - Grae Desmond - ColdFusion Portal - Sometimes its ok to have trust issuesI was working on an API call recently and everything was humming along till I ran into an edge case with a request and everything just stopped working. Nothing changed except the value I was sending to the API. What did change was that the value I wa...https://coldfusion.adobe.com/?p=11163 7/11/22 - Blog - Grae Desmond - ColdFusion Portal - Letting your non development colleagues update text on your site with a simple JSON fileI previously talked about how I leveraged using variables in queries to help with a site I was recently tasked to build. As a quick refresher each page on this site would look the same with a right sidebar with some definitions and descriptions, then…https://coldfusion.adobe.com/?p=11072 7/11/22 - Blog - Grae Desmond - ColdFusion Portal - Adding an Emergency Shutoff Switch to Your ApplicationsHave you ever been to a gas station and noticed the emergency shut off switch? It's usually near the door to go inside the gas station and bright red to grab your attention. That button is for emergencies, like say a fire, and will shut off all elect...https://coldfusion.adobe.com/?p=11117 7/12/22 - Blog - Charlie Arehart - What's new FusionReactor 8.8.0, just released?Good news for FusionReactor users: a new version, 8.8.0, has just been released. You can see a list of several bullet points about it in the release notes.TLDR: If it's enough for you to know that FR is now updated and those bullets may suffice, you now have what you need to know. :-) In this post, I want to expand on those to give more context. I have no inside info or advanced knowledge of the release: this comes from my own assessment of things as I just applied the update this morning. As such, I could be wrong on some points, or may need to come back to clarify something. But in the meantime, I hope this overview may help folks, as sometimes the single bullets in the release notes can leave you wondering. :-)https://www.carehart.org/blog/client/index.cfm/2022/7/12/whats_new_FusionReactor_8_8_0/ 7/11/22 - Tweet - James Moberg - New Monitoring ToolA #ColdFusion Taffy API was timing out due to 3rdparty MSSQL table locks. I started using @hyperjump_tech Monika to log performance every 60 seconds to expose impact. monika.hyperjump.tech #CFML Metrics are logged to SQLite DB. #opensource #portable #yaml #notificationshttps://twitter.com/gamesover/status/1546662581640876034https://twitter.com/gamesover 7/10/22 - Tweet - James Moberg - encodeForHTMLAttributeHey #ColdFusion & #CFML devs, what function do you use to safely repopulate an INPUT value attribute? I've used htmlEditFormat, but it's deprecated in CF11. Use encodeForHTMLAttribute? Docs state "use in HTML attribute, such as table width or image height". No mention of "value".https://twitter.com/gamesover/status/1546172791652745218https://twitter.com/gamesover 7/10/22 - Blog - Ales Nesetril - commandbox-jasper: the third partA few cool new things have been added thanks to Eric Peterson.It is easy to create a jasper site through the command line. Inside an empty directory, jasper init will create a scaffold of jasper-cli. Tip of the hat to Eric.https://kisdigital.com/post/commandbox-jasper-the-third-part Part 1 - Commandbox-jasper SSG generator - https://kisdigital.com/post/commandbox-jasper-ssg-generatorPart 2 - Commandbox-jasper Part Deux - https://kisdigital.com/post/commandbox-jasper-part-deux 7/10/22 - Tweet - Ben Nadel - Feature Flags for his BlogOver the last 2 weeks, been spending my free time building a Feature Flag system for my #ColdFusion blog. My blog doesn't really need it; but, heck if I don't love finding reasons to play with #CFML (and feature flags for that matter). Will post git repo when a bit more polished.https://twitter.com/BenNadel/status/1546125460840538114https://twitter.com/BenNadel 7/6/22 - Blog - James Moberg - Use Exiv2 to extract GPS data from Images using CFMLI mentioned Exiv2 on a blog post from 2 years ago regarding Supporting ColdFusion with Command Line Programs. Someone in the Adobe ColdFusion Forum recently inquired how to "use ImageGetEXIFMetaData to try to get gps coordinates of an image".https://dev.to/gamesover/use-exiv2-to-extract-gps-data-from-images-using-cfml-3maa 7/7/22 - Blog - Ben Nadel - Building-Up A Complex Objects Using A Multi-Step Form Workflow In ColdFusionEarlier this week, I looked at using form POST-backs to build up complex objects in ColdFusion. That technique allowed for deeply-nested data to be seamlessly updated using dot-delimited "object paths". My previous demo used a single page to render the form. As a fast-follow, I wanted to break the demo up into a multi-step form workflow in which each step manages only a portion of the complex object.https://www.bennadel.com/blog/4296-building-up-a-complex-objects-using-a-multi-step-form-workflow-in-coldfusion.htm CFML JobsSeveral positions available on https://www.getcfmljobs.com/Listing over 106 ColdFusion positions from 58 companies across 49 locations in 5 Countries.3 new jobs listedFull-Time - Senior ColdFusion Developer at Birmingham - United Kingdom Jul 12https://www.getcfmljobs.com/jobs/index.cfm/united-kingdom/Senior-ColdFusion-Developer-at-Birmingham/11493 Full-Time - Senior ColdFusion Developer at London - United Kingdom Jul 12https://www.getcfmljobs.com/jobs/index.cfm/united-kingdom/Senior-ColdFusion-Developer-at-London/11492 Full-Time - Frontend Software Developer-ColdFusion/Angular at Memphis, T.. - United States Jul 05https://www.getcfmljobs.com/jobs/index.cfm/united-states/Frontend-Software-DeveloperColdFusionAngular-at-Memphis-TN/11491 Other Job Links Ortus Solutions - https://www.ortussolutions.com/about-us/careers  John Hopkins University with Brian Klass - https://jobs.jhu.edu/job/Baltimore-Sr_-Programmer-Analyst-MD-21205/905668200/ More Information: https://twitter.com/brian_klaas/status/1544653220244590592  Clear Capital - Carol from Working Code Podcast - https://bit.ly/3Ocu5Zz  Nolan Erck - South of Shasta - Part-time CFML developer wantedSouth of Shasta is looking for a part-time mid to senior level developer that can assist with some projects for our clients over the next few months, possibly longer.https://southofshasta.com/blog/part-time-cfml-developer-wanted/  There is a jobs channel in the cfml slack team, and in the box team slack now too ForgeBox Module of the Weekcommandbox-jasperA static site generator implemented in CommandboxLast year I wrote a static site generator called Jasper. So far I have built Jasper using ColdBox as well as FW1. I am going to take things one step further and I will implement Jasper as a CommandBox module. Apparently I really enjoy writing SSGs.I decided to split the project into two main parts: the jasper-cli blog scaffold and the jasper command that handles generating the static site.Read more on the blog: https://kisdigital.com/post/how-i-use-commandbox-with-my-blog https://kisdigital.com/post/commandbox-jasper-ssg-generator https://www.forgebox.io/view/commandbox-jasper VS Code Hint Tips and Tricks of the WeekEmoji SnippetsEmoji Snippets helps developers to insert emoji on their files. You can use these emoji in PHP,HTML,JS,CSS,React and more !!!https://marketplace.visualstudio.com/items?itemName=devzstudio.emoji-snippetsThank you to all of our Patreon SupportersThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox. You can support us on Patreon here https://www.patreon.com/ortussolutionsDon't forget, we have Annual Memberships, pay for the year and save 10% - great for businesses.Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription.All Patreon supporters have a Profile badge on the Community WebsiteAll Patreon supporters have their own Private Forum access on the Community WebsiteAll Patreon supporters have their own Private Channel access BoxTeam SlackLive Stream Access to Koding with the Kiwi + Friendshttps://community.ortussolutions.com/ Patreons John Wilson - Synaptrix Brian Ghidinelli - Hagerty MotorsportReg   Jordan Clark Eric Hoffman Gary Knight Mario Rodrigues Giancarlo Gomez David Belanger Dan Card Jonathan Perret Jeffry McGee - Sunstar Media Dean Maunder Wil De Bruin Joseph Lamoree Don Bellamy Jan Jannek Laksma Tirtohadi Carl Von Stetten Jeremy Adams Didier Lesnicki Matthew Clemente Daniel Garcia Scott Steinbeck - Agri Tracking Systems Ben Nadel  Brett DeLine Kai Koenig Charlie Arehart Jonas Eriksson Jason Daiger Shawn Oden Matthew Darby Ross Phillips Edgardo Cabezas Patrick Flynn Stephany Monge John Whish Kevin Wright Peter Amiri You can see an up to date list of all sponsors on Ortus Solutions' Websitehttps://ortussolutions.com/about-us/sponsors ★ Support this podcast on Patreon ★

Cyber and Technology with Mike
19 May 2022 Cyber and Tech News

Cyber and Technology with Mike

Play Episode Listen Later May 19, 2022 7:53


In today's podcast we cover four crucial cyber and technology topics, including: 1.Spain arrests over dozen individuals involved in cyber fraud ring 2.Microsoft details new campaign targeting MSSQL servers 3.WordPress plugins Jupiter Theme and JupiterX flawed, being exploited 4.Bank of Zambia responds to ransomware operators following attack I'd love feedback, feel free to send your comments and feedback to  | cyberandtechwithmike@gmail.com

Security Journey's hi/5
Python Repos, Advanced SQL, NPM corruption, and more

Security Journey's hi/5

Play Episode Listen Later Apr 12, 2022 2:32


5% of 666 Python repos had comma typos (including Tensorflow, PyTorch, Sentry, and V8)​Out of a group of GitHub repositories that had been checked, 5% had a comma problem. Either too few or too many commas somewhere in the library. Advanced SQL Injection Cheatsheet​ This repository contains an advanced methodology of all types of SQL Injection.​ MySQL, PostgreSQL, Oracle, and MSSQL​10 Threats ebookRead about the eBook on 10 Greatest Threats to Your Application's Security 2021 version. Dev corrupts NPM libs ‘colors' and ‘faker' breaking thousands of apps ​The colors library receives over 20 million weekly downloads on npm alone and has almost 19,000 projects relying on it. Whereas, faker receives over 2.8 million weekly downloads on npm, and has over 2,500 dependents. How I Discovered Thousands of Open Databases on AWS​My journey on finding and reporting databases with sensitive data about Fortune-500 companies, Hospitals, Crypto platforms, Startups during due diligence, and more.

The Cloud Pod
142: The Cloud Pod spends the Weekend at the Google Data Lakehouse

The Cloud Pod

Play Episode Listen Later Nov 13, 2021 72:59


On The Cloud Pod this week, the team wishes for time-traveling data. Also, GCP announces Data Lakehouse, Azure hosts Ignite 2021, and Microsoft is out for the metaverse.  A big thanks to this week's sponsors: Foghorn Consulting, which provides full-stack cloud solutions with a focus on strategy, planning and execution for enterprises seeking to take advantage of the transformative capabilities of AWS, Google Cloud and Azure. JumpCloud, which offers a complete platform for identity, access, and device management — no matter where your users and devices are located.  This week's highlights

Webbidevaus.fi
116: Astro, tietorakenteet ja kesä

Webbidevaus.fi

Play Episode Listen Later Jul 19, 2021 48:02


Tässä jaksossa pikakatsaus staattisien sivujen generointiin Astrolla. Lisäksi vastataan kysymyksiin tietorakenteiden tärkeydestä webbikehityksessä, riittävistä taidoista ensimmäistä työpaikkaa hakiessa ja tärkeimmistä asioista etätyössä. Rentouttavaa kesää kaikille! ☀️LinkitCSS-Tricks: A look at buiding with AstroAstro GithubissaAstro.buildKysymyksetMiksi jaksojen sivuilla (esim https://webbidevaus.fi/102) ei ole title-tägiä?Miten tärkeänä pidette, että osaa tunnetuimpia tietorakenteita ja algoritmejä, kun kyse webbikehityksestä? (Tomi)Mitä mieltä ootte Storybook? (MaijaXD)Olen liiketalouden ohella opiskellut koodaamista nyt n. vuoden ajan. Olisi mukava kuulla teiltä hieman syventävää pohdintaa millaisia odotuksia/taitoja ohjelmoinnin osalta vaaditaan ensimmäistä työpaikkaa hakiessa. Itselleni tutuksi on tullut mm. C#, javascript, HTML, CSS, mySQL, MSSQL, React, Git ja python alkeet. Uskaltaisiko näillä eväillä jo hakea työpaikkaa?Mitä koette tärkeiksi asioiksi devaustiimin nykymaailman etätyössä, kun etänä työskentelee tiimeissä myös useimmat niistäki joilla siitä ei oo aiempaa kokemusta?Jakson valinnatAntti: Phoenix Wright: Ace Attorney TrilogyRiku: Pirkka Toukkis

Bella In Your Business: Pet Industry Business Podcast
Episode 212: How To Start A Podcast

Bella In Your Business: Pet Industry Business Podcast

Play Episode Listen Later Oct 1, 2020 17:46


pod   How To Start A Podcast   Chris Laning is a Voice Over Artist, Podcast and Dailicast Producer and Host, Audio Editor, Audiobook Narrator, and a Creative Writer. He is a former Web Developer (primarily ColdFusion, Javascript, MSSQL) who is as comfortable behind a mic as a voice-over artist (everything from commercials to character […]

Microsoft Mechanics Podcast
How to migrate SQL Server databases to Azure

Microsoft Mechanics Podcast

Play Episode Listen Later Aug 17, 2020 13:31


Running SQL Server on-premises and looking to move to Azure? Review your best options for assessment and migration. Bob Ward, SQL Server database expert and engineering lead, joins host Jeremy Chapman to walk through different migration options for moving your SQL Databases into the cloud, and then shows how to perform a migration end-to-end. Whether you need to increase your capacity, take advantage of built-in high availability in disaster recovery, or reduce your operational costs, moving to Azure is the next logical step. In fact, you can bring your existing SQL licenses to the Cloud with Azure Hybrid Benefit. And with that benefit, you can actually bring your on-premises licenses into Azure to save on subscription costs, as well. Check out migration options: • Lift and shift your SQL Servers to Azure VMs instead of your own infrastructure • Migrate to Azure SQL Managed Instance, which is a fully-managed SQL Server • Migrate to Azure SQL Database, which is the best for modern database applications and gives you maximum PaaS-managed capabilities Find tools to migrate to a Managed Instance or to Azure SQL database: Data Migration Assistant (DMA) helps detect compatibility issues that can impact database functionality in your new version of SQL Server or Azure SQL. And it helps you right-size your deployment for the appropriate Azure service tier. Data Migration Service (DMS) gives a holistic view of your data state after your initial assessment, and is used for live migration for zero downtime. Link References: Download the Data Migration Assistant (DMA) tool for free at https://aka.ms/DMAdownload. Learn more about DB Compat at https://aka.ms/dbcompat. See how to apply database schemas before you migrate at https://aka.ms/AzureSqlMigrate. Migrating a large number of databases? Go to https://aka.ms/DMAPowerShell to learn more. Check out the rest of our Azure Migration series at https://aka.ms/MechanicsAzureMigrate. If you are unfamiliar with Microsoft Mechanics, we are Microsoft’s official video series for IT. You can watch and share valuable content and demos of current and upcoming tech from the people who build it at #Microsoft. Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries?sub_confirmation=1 Follow us on Twitter: https://twitter.com/MSFTMechanics Follow us on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ Follow us on Facebook: https://facebook.com/microsoftmechanics/ #Azure #SQLserver

DotNet & More
#35 выпуск подкаста DotNet&More: .Net Summit и не только

DotNet & More

Play Episode Listen Later Jul 7, 2020 130:54


В этом году все конференции перевели в онлайн формат, а значит мы можем теперь "посетить" их все. Предлагаем вам познакомиться с .Net Summit, крупнейшей конференции от .Net User Group (Minks). В новом выпуске подкаста мы пригласили членов программного комитета, узнали всю подноготную предстоящего события и разобрали актуальные, на момент записи, доклады. Вы можете посетить .Net Summit бесплатно! Участвуйте в нашем конкурсе: в форме обратной связи (см. ниже) напишите идею для выпуска подкаста, с подробностями. Участник, предложивший самую интересную идею, получит билет на конференцию. Дедлайн: 1 августа. Дедлайн: 10 августа. Ну и конечно, у нас есть промокод на 15% скидку для слушателей подкаста: DOTNETANDMORE15. Форму обратной связи: https://forms.gle/Aswnwy1h6fz4SuxU8 Спасибо всем кто нас слушает. Не стесняйтесь оставлять обратную связь и предлагать свои темы. Ссылка для скачивания: https://dotnetmore.ru/wp-content/uploads/2020/07/DotNetAndMore-35-DotNetSummit.mp3 Shownotes: - [0:01:03] Почему стоит посетить .Net Summit - [0:04:41] Почему все конференции проходят онлайн? - [0:07:06] Развлечения помимо докладов - [0:13:06] Online vs offline - [0:17:38] Правила конкурса - [0:19:37] Dylan Beattie - [0:21:36] Michael Staib - Building real-time applications with Blazor and GraphQL - [0:26:00] Irina Scurtu - Forget about HTTP - [0:35:16] Florian Verdonck - Formatting F# source code - [0:43:57] Roberto Freato - 100 machines do 100s work in 1s - [0:52:52] Michael Yarichuk - Why Databases Cry At Night - [0:59:53] Vagif Abilov - Event journal in Azure (no Cosmos inside) - [1:02:21] Loek Duys - Running a real-world mission-critical system on Azure - [1:05:23] Antonio Cobo Cuenca - Impostor syndrome in the IT world from a conference speaker's perspective - [1:20:16] Aleksandr Senichkin - Roslyn for teamlead. If something takes more than 5 minutes - write a script. - [1:31:57] Daniele Fontani - Write an Opensource Headless CMS to learn ASP. NET Core best practices - [1:34:13] Dan Patrascu-Baba - Architecting Blazor applications – An Angular inspired approach - [1:37:21] Oleg Karasik - Bugs?! Where do they come from? - [1:40:06] Niels Tanis - The Rise of Software Supply-Chain Attacks – How Secure is your .NET Application? - [1:49:16] Alexey Golub - Fallacies of Unit Testing - [1:59:39] Alex Thissen - Dapr for building distributed .NET Core applications - [2:05:13] Daniel Marbach - DIY Async Message Pump: Lessons from the trenches Ссылки: - https://dotnetsummit.by/: .Net Summit - https://github.com/dotnet/format: утилита dotnet-format - https://habr.com/en/company/piter/blog/352742/: Книга "с кабанчиком" - https://docs.microsoft.com/en-us/sql/relational-databases/performance/cardinality-estimation-sql-server?view=sql-server-ver15: Внутренности MSSQL - https://youtu.be/PAjZYgK4Kpw: AR/VR: Дмитрий Валяев - Мобильный AR на Unity Engine: нюансы разработки и интересы бизнеса - https://youtu.be/wnJuSqvWvIg: Peter Milne - Achieving High Load in Advertising Technology Не забывайте оставлять комментарии: https://vk.com/dotnetmore?w=wall-175299940_248

Collective Defense
Going After New Threats, Binaries, and Malware with Peter Rydzynski

Collective Defense

Play Episode Listen Later Apr 6, 2020 35:33


In this episode of the Collective Defense Podcast we are jumping into honeypots, honeynets, and how emerging threats can be proactively detected with Peter Rydzynski. On the new front we analyzed a number of stories including the most recent Marriott breach, zoombombs and WarDialz, and of course more insecure Wordpress plugins. Software Mentioned in this episode: SELKS https://www.stamus-networks.com/scirius-open-source (https://www.stamus-networks.com/scirius-open-source) Both live and installable Network Security Management ISO based on Debian Complete Suricata IDS/IPS ecosystem with its own graphic rule manager From start to analysis of IDS/IPS and NSM events in 30 sec Major components: Suricata Elasticsearch Logstash Kibana Moloch Scirius Community Edition EveBox Cowrie https://github.com/cowrie/cowrie (https://github.com/cowrie/cowrie) Cowrie is a medium to high interaction SSH and Telnet honeypot designed to log brute force attacks and the shell interaction performed by the attacker. In medium interaction mode (shell) it emulates a UNIX system in Python, in high interaction mode (proxy) it functions as an SSH and telnet proxy to observe attacker behavior to another system. Cowrie is maintained by Michel Oosterhof. Dionaea https://github.com/DinoTools/dionaea (https://github.com/DinoTools/dionaea) This low-interaction honeypot written in C and Python uses the Libemu library to emulate the execution of Intel x86 instructions and detect shellcodes. In addition, we can say it’s a multi-protocol honeypot that offers support for protocols such as FTP, HTTP, Memcache, MSSQL, MySQL, SMB, TFTP, etc. Protocols blackhole epmap ftp http memcache mirror mqtt mssql mysql pptp sip smb tftp upnp Logging fail2ban hpfeeds log_json log_sqlit Netcat http://netcat.sourceforge.net/ (http://netcat.sourceforge.net/) Netcat is a featured networking utility which reads and writes data across network connections, using the TCP/IP protocol. It is designed to be a reliable "back-end" tool that can be used directly or easily driven by other programs and scripts. At the same time, it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need and has several interesting built-in capabilities. It provides access to the following main features: Outbound and inbound connections, TCP or UDP, to or from any ports. Featured tunneling mode which allows also special tunneling such as UDP to TCP, with the possibility of specifying all network parameters (source port/interface, listening port/interface, and the remote host allowed to connect to the tunnel. Built-in port-scanning capabilities, with randomizer. Advanced usage options, such as buffered send-mode (one line every N seconds), and hexdump (to stderr or to a specified file) of trasmitted and received data. Optional RFC854 telnet codes parser and responder. Modern Honey Network https://github.com/pwnlandia/mhn (https://github.com/pwnlandia/mhn) MHN is a centralized server for management and data collection of honeypots. MHN allows you to deploy sensors quickly and to collect data immediately, viewable from a neat web interface. Honeypot deploy scripts include several common honeypot technologies, including Snort, Cowrie, Dionaea, and glastopf, among others. Features MHN is a Flask application that exposes an HTTP API that honeypots can use to: Download a deploy script Connect and register Download snort rules Send intrusion detection logs It also allows system administrators to: View a list of new attacks Manage snort rules: enable, disable, download

Day[0] - Zero Days for Day Zero
A New PWK/OSCP, Election Hacking, Kernel Exploits, and Fuzzing

Day[0] - Zero Days for Day Zero

Play Episode Listen Later Feb 18, 2020 125:12


Is the new OSCP worth-it? Can election apps be made secure? We'll talk about those questions and several kernel exploits and a few cool fuzzing innovations. [00:00:23] PWK and the OSCP Certification | Offensive Security [00:16:24] Rescheduling Root KSK Ceremony 40 [00:20:15] The Ballot is Busted Before the Blockchain:A Security Analysis of Voatz https://blog.voatz.com/?p=1209 [00:49:26] Lateral movement via MSSQL: a tale of CLR and socket reuse [00:55:51] Fix for CVE-2018-12122 can be bypassed via keep-alive requests [01:00:28] A Trivial Privilege Escalation Bug in Windows Service Tracing (CVE-2020-0668) https://googleprojectzero.blogspot.com/2018/08/windows-exploitation-tricks-exploiting.html [01:05:01] Intel CSME Escalation of Privilege [01:07:41] Project Zero: A day^W^W Several months in the life of Project Zero [01:18:54] Project Zero: Mitigations are attack surface, too https://packetstormsecurity.com/files/156316/Samsung-Kernel-PROCA-Use-After-Free-Double-Free.html [01:33:42] Samsung SEND_FILE_WITH_HEADER Use-After-Free [01:35:52] Samsung /dev/tsmux Heap Out-Of-Bounds Write [01:39:55] Exploiting a Linux kernel vulnerability in the V4L2 subsystem (CVE-2019-18683) [01:45:10] KOOBE: Towards Facilitating Exploit Generation of Kernel Out-Of-Bounds Write Vulnerabilities [01:54:06] HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing [01:58:14] HYPER-CUBE: High-Dimensional Hypervisor Fuzzing [02:02:21] FIDO2 Deep Dive: Attestations, Trust model and Security [02:03:04] Hypervisor Necromancy; Reanimating Kernel Protectors Watch the DAY[0] podcast live on Twitch (@dayzerosec) every Monday afternoon at 12:00pm PST (3:00pm EST) Or the video archive on Youtube (@DAY[0])

AT&T ThreatTraq
10/25/19 Turla Hacks OilRig; Smart Spy Apps; MSSQL Backdoor; Internet Weather

AT&T ThreatTraq

Play Episode Listen Later Oct 25, 2019 29:33


10/25/19 Turla Hacks OilRig; Smart Spy Apps; MSSQL Backdoor; Internet Weather

InfoSec Overnights - Daily Security News
Best Western leak, Trend Micro runs malware, Alexa, what’s my password?, and more.

InfoSec Overnights - Daily Security News

Play Episode Listen Later Oct 22, 2019 2:58


A daily look at the relevant information security news from overnight.Episode 179 - 22 October 2019Best Western leak - https://www.zdnet.com/article/autoclerk-database-leaked-customer-government-and-military-personal-records/Trend Micro rund malware - https://www.theregister.co.uk/2019/10/21/flaw_trend_micro/Gustuff new look - https://threatpost.com/gustuff-android-banker-switches-technical-approach/149403/Winnti skip-2.0 - https://www.scmagazine.com/home/security-news/gaming/skip-2-0-backdoor-malware-provides-magic-password-to-access-mssql-accounts/Alexa, what’s my password? - https://threatpost.com/new-way-found-to-use-alexa-google-to-voice-phish-and-eavesdrop-on-users/149352/

Connect with Remedy Monthly Webinar Series
Connect with BMC Helix ITSM and Remedy - Database Considerations for the Remedy Platform Solution webinar

Connect with Remedy Monthly Webinar Series

Play Episode Listen Later Jul 31, 2019


Replay of the Connect with BMC Helix ITSM and Remedy - Database Considerations for the Remedy Platform Solution webinar on July 24, 2019.In this session, Rajeev will cover database considerations for the Remedy Platform Solution in July’s monthly webinar.This presentation will discuss various database considerations based on your Remedy deployment to optimize performance. The following topic areas will be included:* Oracle Case Insensitivity and the LIKE operator* Oracle cursor_sharing & Remedy 9.x/18/x versions* Oracle SQL Plan Directives, 12c optimizer features & Remedy* Oracle optimizer_features_enable parameter and Remedy* MSSQL’s PARAMETERIZATION & Remedy 9.x, 18.x, and 19.x versions* MSSQLs Maximum Degree of Parallelism and the Cost Threshold for Parallelism parameters for tuning* MSSQL’s Schema Binding and Indexing of ViewsRajeev Patel is a Lead Product DeveloperFor more information on the monthly webinar series please visit Connect with BMC Helix ITSM and Remedy Monthly Webinar Series

TechSNAP
394: All About Azure

TechSNAP

Play Episode Listen Later Jan 10, 2019 26:09


Wes is joined by a special guest to take a look back on the growth and development of Azure in 2018 and discuss some of its unique strengths. Special Guest: Chad M. Crowell.

TechnoPillz
TechnoPillz | Ep.92 "Si scrive SQL, si legge "Siquel""

TechnoPillz

Play Episode Listen Later Mar 22, 2018 40:54


Inizia oggi una serie di puntate dedicate (da Alex?) alla realizzazione di un’applicazione che necessita di un database distribuito (o, per lo meno, accessibile in cloud) con aggiornamento realtime.Talmente tanta ciccia al fuoco che oggi parliamo anche solo di database SQL…Oh, in bocca al pupo!Ad ogni modo mi trovate qui:https://t.me/technopillzriothttps://twitter.com/alxgihttp://www.alexraccuglia.netSe volete sostenere l'Alex Raccuglia SENZA SPENDERE UN SOLDO ma regalando un 5 per mille, fate i vostri acquisti su Amazon partendo da questo link: http://bit.ly/RakkuAmazonSostenete Runtime Radio:http://runtimeradio.it/ancheio/

TechnoPillz
TechnoPillz | Ep.92 "Si scrive SQL, si legge "Siquel""

TechnoPillz

Play Episode Listen Later Mar 22, 2018 40:54


Inizia oggi una serie di puntate dedicate (da Alex?) alla realizzazione di un’applicazione che necessita di un database distribuito (o, per lo meno, accessibile in cloud) con aggiornamento realtime.Talmente tanta ciccia al fuoco che oggi parliamo anche solo di database SQL…Oh, in bocca al pupo!Ad ogni modo mi trovate qui:https://t.me/technopillzriothttps://twitter.com/alxgihttp://www.alexraccuglia.netSe volete sostenere l'Alex Raccuglia SENZA SPENDERE UN SOLDO ma regalando un 5 per mille, fate i vostri acquisti su Amazon partendo da questo link: http://bit.ly/RakkuAmazonSostenete Runtime Radio:http://runtimeradio.it/ancheio/

しがないラジオ
sp.20b【ゲスト: YutamaKotaro】楽しいReact NativeとエンジニアのLT文化

しがないラジオ

Play Episode Listen Later Mar 14, 2018 93:06


ユータマこたろうさんをゲストにお迎えして、React Native、Monorepo、Storybook、React Native Japan、LT文化、などについて話しました。 【Show Notes】 React Native · A framework for building native apps using React Lerna · A tool for managing JavaScript projects with multiple packages. Lerna を使って、 Babel や React が採用している monorepo を試してみる - Qiita Storybook - UI dev environment you'll love to use Express - Node.js Web アプリケーション・フレームワーク Koa - next generation web framework for node.js Manual | Sequelize | The node.js ORM for PostgreSQL, MySQL, SQLite and MSSQL FuseBox - Blazing fast js bundler/loader with super powers TypeScript - JavaScript that scales. Flow: A Static Type Checker for JavaScript React Native Japan - connpass 【名古屋城】React Native Meetup in 名古屋城 - connpass Native mobile apps with Angular, TypeScript, JavaScript - NativeScript Monaca - HTML5ハイブリッドアプリ開発プラットフォーム Apache Cordova We Are JavaScripters! - connpass 故・雑兵MeetUp - connpass LightningTalkLovers - connpass Tech系Podcast しがないラジオ忘年会を開催しました - zuckey_17's blog React Native as a Service - rnjapan - BOOTH(同人誌通販・ダウンロード) 配信情報はtwitter ID @shiganaiRadio で確認することができます。 フィードバックは(#しがないラジオ)でつぶやいてください! 感想、話して欲しい話題、改善して欲しいことなどつぶやいてもらえると、今後のポッドキャストをより良いものにしていけるので、ぜひたくさんのフィードバックをお待ちしています。 【パーソナリティ】 gami@jumpei_ikegami zuckey@zuckey_17 【ゲスト】 ユータマこたろう@YutamaKotaro 【機材】 Blue Micro Yeti USB 2.0マイク 15374

ControlTalk Now  The Smart Buildings Podcast
Episode 219: ControlTalk NOW — Smart Buildings VideoCast|PodCast for Week Ending Mar 19, 2017

ControlTalk Now The Smart Buildings Podcast

Play Episode Listen Later Mar 20, 2017 59:31


Episode 219: ControlTalk NOW — Smart Buildings VideoCast|PodCast for week ending Mar 19, 2017 Congratulates Distech Controls, Honeywell Spyder, Blue Ridge Technologies, and EasyIO. We bring you AHR Coverage of Functional Devices and Siemens’ 2017 Automation Partner Summit from San Antonio, TX. Don’t miss the latest updates from Vykon Enterprise Security, EasyIO CPT, and Lynxspring. Sporting a 10-gallon Stetson cowboy hat, Josh Felperin, Siemens’ Senior Sales Manager, tells us what’s in store for the 350-plus Summit partners attending the 3-day Siemens Partner Summit. Featuring DXR training; golfing at the on-site JW Marriott TPC course; various breakout business sessions and technical sessions, mixed with major league fun and evening entertainment, this is the Siemens event of the year. The 2016 ControlTrends Awards VAV Controller of The Year — Goes to Distech Controls. Who makes the best VAV Controllers on the planet? According to the global ControlTrends Community that would be Honeywell and Distech. Congratulations to these two fine companies for being selected as co-winners of the 2016 ControlTrends Awards VAV controller of the year. ControlTrends watches on at the busy Siemens’ Talon Partner Vendor Show as Bob Byron demos the latest features of Siemens’ RDY2000 commercial thermostat. When used with the Siemens QPA CO2 sensor, the RDY2000 can provide a very well-priced, yet very effective solution to meet ASHRAE’s minimum fresh air requirements. VYKON Enterprise Security Supervisor Updates. Dear VYKON Partner, Tridium has issued a software patch for a recently discovered technical issue affecting VYKON Enterprise Security Supervisors that use an MSSQL database. When updating these VYKON Enterprise Security Supervisors to version 2.3.19.5, the update does not complete, and the MSSQL database is rendered unusable. Siemens’ Senior Sales Director, Building Automation, Scott Hamilton shares with us that this is the 20th Siemens Partner Summit, celebrating the accomplishments of the best integrators and control contractors in the country and how grateful Siemens is for their partnerships and success. Later, at the Awards Banquet, these high-performers would be recognized for their continued growth and success. Scott must be getting it right — he’s already got a boulevard named after him! EasyIO March Newsletter — Updates for CPT Tools and FG firmware. CPT Tools and the firmware of our FG series got a major update. In this newsletter we will share the most important things of that update with you. By clicking on the blue buttons below, you will be able to download the latest versions. If you are interested in more details, you can have a look at the change log. Blue Ridge Technologies Wins Lighting Control Solution of the Year. Congratulations to Bill Dunkleberger and the team from Blue Ridge Technologies for being Awarded the 2016 ControlTrends Awards Lighting Controls Solution of the Year by the global ControlTrends Community. Bill and his team provide a very powerful and easy to use lighting solution. Blue Ridge has developed an approach called Unified Lighting Control. Unified Lighting Control completes the BAS, incorporating lighting and HVAC controls on the same network. This network consolidation eliminates surplus hardware required for stand-alone and gateway lighting control. 30 Minutes with Lynxspring Webinar Series — Niagara 4 Hierarchies. Join Lynxspring for the next “30 Minutes with Lynxspring”, their monthly webinar series hosted by Lynxspring subject matter experts and special guests scheduled. Due to schedules, this month’s session will take place on Wednesday, March 22nd at 12:00 PM CST. Amanda Toomey, IEC Developer and a member of Lynxspring’s Training Team will look at Niagara 4 Hierarchies. Amanda will examine all facets of creating a user-friendly data-model-based navigation tree in Niagara 4, using the new hierarchies feature. Check out new products from Functional Devices Functional Devices Rocks the 2017 AHR Show. Ken stopped by the Functional Devices booth at the 2017 AHR Show and spoke with Maggie Talbert, Functional Devices‘ North East Sales Manager, Inc. Maggie reviews several new products including the PSH550-UPS-BC. Functional Devices, Inc. a leading manufacturer of high quality, contractor-friendly products since 1969, was a co-winner of the 2016 ControlTrends Peripheral Product of the Year The post Episode 219: ControlTalk NOW — Smart Buildings VideoCast|PodCast for Week Ending Mar 19, 2017 appeared first on ControlTrends.

CenturyLink Labs Podcast
CenturyLink Cloud Podcast: Relational Database

CenturyLink Labs Podcast

Play Episode Listen Later Jun 8, 2016 15:29


Jon Townsend (Content Team) and Christine Parr (Relational DB Product Owner) talk about Relational Database while focusing on a. Our team is responsible for building out the database as a service product with a focus on relational database engines like: MySQL, MSSQL and Oracle. The team released its first database engine in late January of this year (2016), which is a MySQL-compatible Relational DB product.

CenturyLink Labs Podcast
CenturyLink Cloud Podcast: Relational Database

CenturyLink Labs Podcast

Play Episode Listen Later Jun 8, 2016 15:29


Jon Townsend (Content Team) and Christine Parr (Relational DB Product Owner) talk about Relational Database while focusing on a. Our team is responsible for building out the database as a service product with a focus on relational database engines like: MySQL, MSSQL and Oracle. The team released its first database engine in late January of this year (2016), which is a MySQL-compatible Relational DB product.