Changelog
Changelog
  • 3 868
  • 1 169 756
Threat hunter in the machine (Friends)
Adam & Jerod catch up with our ol’ friend, Suz Hinton! It’s been a couple years since Suz was a regular on JS Party. Since then, she moved back to Australia, earned a degree in cyber security & won a fidget spinner from the NSA… but that’s not all!
Leave us a comment (changelog.com/friends/58/discuss)
Changelog++ (changelog.com/++) members save 10 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
• Supabase (supabase.com/launchweek) - Supabase just finished their 12th launch week! Check it out (supabase.com/launchweek)

• Speakeasy (speakeasy.com/) - Production-ready, enterprise-resilient, best-in-class SDKs crafted in minutes. Speakeasy takes care of the entire SDK workflow to save you significant time, delivering SDKs to your customers in minutes with just a few clicks! Create your first SDK for free! (speakeasy.com/)

• Test Double (link.testdouble.com/hnh) - Find out more about Test Double’s software investment problem solvers at testdouble.com (testdouble.com) .

• Socket (socket.dev/?) - Secure your supply chain and ship with confidence. Install the GitHub app (socket.dev/features/github?) , book a demo (socket.dev/demo?) or learn more (socket.dev/features?)

Featuring:
• Suz Hinton - Mastodon (toot.cafe/@noopkat) , Twitter ( noopkat) , GitHub (github.com/noopkat)

• Jerod Santo - Mastodon (changelog.social/@jerod) , Twitter ( jerodsanto) , GitHub (github.com/jerodsanto) , LinkedIn (www.linkedin.com/in/jerodsanto)

• Adam Stacoviak - Mastodon (changelog.social/@adam) , Twitter ( adamstac) , GitHub (github.com/adamstac) , LinkedIn (www.linkedin.com/in/adamstacoviak) , Website (adamstacoviak.com/)

Show Notes:

• Suz on Changelog pods (changelog.com/person/noopkat)

• Suz on freeCodeCamp pod (www.freecodecamp.org/news/how-suz-hinton-went-from-dev-to-white-hat-hacker-podcast-126/)

• Suz Live coding: OSCON edition (www.oreilly.com/radar/live-coding-oscon-edition/)

• Lego Cooking - UA-cam (www.youtube.com/@LEGOCOOKING)

• New Kids On The Block - Hangin’ Tough - UA-cam (ua-cam.com/video/By86PcLufOU/v-deo.html)

• NSA Codebreaker Challenge (nsa-codebreaker.org/resources)

Something missing or broken? PRs welcome! (github.com/thechangelog/show-notes/blob/master/friends/changelog--friends-58.md)
Переглядів: 82

Відео

MySQL performance
Переглядів 724 години тому
Silvia Botros joins Justin & Autumn for a phenomenal conversation about databases, her career path & the ins/outs of writing High Performance MySQL. Leave us a comment (changelog.com/shipit/118/discuss) Changelog (changelog.com/ ) members save 9 minutes on this episode because they made the ads disappear. Join today! Sponsors: • Cronitor (cronitor.io) - Cronitor helps you understand your cron j...
There be a11y dragons
Переглядів 667 годин тому
Eric Bailey joins Jerod to discuss everything Dungeons & Dragons taught him about writing alt text, building accessible websites, Primer, the problem with a11y overlays & more. Leave us a comment (changelog.com/jsparty/335/discuss) Changelog (changelog.com/ ) members save 3 minutes on this episode because they made the ads disappear. Join today! Sponsors: • Porkbun (porkbun.com/JSParty24) - Go ...
Threat modeling LLM apps
Переглядів 1727 годин тому
If you have questions at the intersection of Cybersecurity and AI, you need to know Donato at WithSecure! Donato has been threat modeling AI applications and seriously applying those models in his day-to-day work. He joins us in this episode to discuss his LLM application security canvas, prompt injections, alignment, and more. Leave us a comment (changelog.com/practicalai/283/discuss) Changelo...
Flavors of Ship It! (Interview)
Переглядів 929 годин тому
Flavors of Ship It on The Changelog - if you’re not subscribed to Ship It yet, do so at shipit.show (shipit.show) or by searching for “Ship it” wherever you listen to podcasts. Every week Justin Garrison and Autumn Nash explore everything that happens after git push - and today’s flavors include running infrastructure in space, managing millions of machines at Meta, and what it takes to control...
⚡ Lightning Talk life ⚡
Переглядів 1369 годин тому
This episode focuses on the art of delivering concise Lightning Talks, a popular format at conferences worldwide where speakers present in a short timeframe. Joined by some of this year’s GopherCon Lightning Talkers, we’ll discuss their experiences, challenges & tips for effective communication within a limited time. Leave us a comment (changelog.com/gotime/327/discuss) Changelog (changelog.com...
Practices of reliable software design (News)
Переглядів 15314 годин тому
Chris Stjernlöf got nerd-sniped and ended up writing down his practices of reliable software design, Ben Visness has had enough with the npm community’s propensity to pull in micro-libraries to suit every need, “Stay SaaSy” makes three metaphors for problem solving categories, Troy Hunt takes us inside the “3 billion people” National Public Data breach & Dasel is one data tool to rule them all....
Unpopular opinion! Rust is just... meh
Переглядів 51014 годин тому
Kris Brandow shares his (potentially) unpopular opinion on the "Go Time" podcast. Full audio 👉 gotime.fm/319 Subscribe for more! 👇 Apple: gotime.fm/apple Spotify: gotime.fm/spotify Android: gotime.fm/android Overcast: gotime.fm/overcast Email: gotime.fm/email Twitter: gotimefm Mastodon: changelog.social/@gotime #podcast #golang #software #programming #softwareengineering
tmux is cool so let's convince Adam that tmux is cool
Переглядів 51719 годин тому
@NickJanetakis & Jerod Santo sell Adam Stacoviak on tmux on the "Changelog & Friends" podcast. Full audio 👉 changelog.com/friends/53 Subscribe for more! 👇 Apple: podcasts.apple.com/us/podcast/changelog-friends/id1689835993 Spotify: open.spotify.com/show/7FMvLrjNSAh12Njjqakora Android: www.subscribeonandroid.com/changelog.com/friends/feed Overcast: overcast.fm/itunes1689835993/changelog-friends ...
Cloud-centric security logging
Переглядів 9921 годину тому
Justin & Autumn are joined by Steven Wu from Scanner. Scanner built logging infrastructure focused on security teams and occasional querying. We dive deep into how architectural decisions affect your business. Leave us a comment (changelog.com/shipit/117/discuss) Changelog (changelog.com/ ) members save 5 minutes on this episode because they made the ads disappear. Join today! Sponsors: • Bitwa...
Remember when OpenAI was an open, transparent, non-profit research lab?
Переглядів 87День тому
Remember when OpenAI was an open, transparent, non-profit research lab?
Forging Minecraft's scripting API
Переглядів 157День тому
Forging Minecraft's scripting API
Why we need Ladybird (Interview)
Переглядів 358День тому
Why we need Ladybird (Interview)
Only as good as the data
Переглядів 342День тому
Only as good as the data
Big shoes to fill
Переглядів 294День тому
Big shoes to fill
Unpopular opinion! Learning Go is NOT easy
Переглядів 217День тому
Unpopular opinion! Learning Go is NOT easy
The best, worst codebase (News)
Переглядів 183День тому
The best, worst codebase (News)
Maybe it's time to disband the analytics team
Переглядів 23214 днів тому
Maybe it's time to disband the analytics team
The Zookeeper of jujutsu
Переглядів 10614 днів тому
The Zookeeper of jujutsu
Picking a database should be simple (Friends)
Переглядів 31514 днів тому
Picking a database should be simple (Friends)
OpenAPI & API design
Переглядів 39514 днів тому
OpenAPI & API design
Why enterprises are adopting WebAssembly (Bailey Hayes)
Переглядів 22814 днів тому
Why enterprises are adopting WebAssembly (Bailey Hayes)
Into the Bobiverse (Interview)
Переглядів 17614 днів тому
Into the Bobiverse (Interview)
Ready or not, here comes AI Red Teams
Переглядів 2 тис.14 днів тому
Ready or not, here comes AI Red Teams
Gaudi processors & Intel's AI portfolio
Переглядів 33314 днів тому
Gaudi processors & Intel's AI portfolio
Unpopular opinion! Backend devs are more security conscious than frontenders
Переглядів 35414 днів тому
Unpopular opinion! Backend devs are more security conscious than frontenders
80% of professional programmers are unhappy (News)
Переглядів 34314 днів тому
80% of professional programmers are unhappy (News)
LLMs aren't the end-all and be-all of AI
Переглядів 12214 днів тому
LLMs aren't the end-all and be-all of AI
From Chef to System Initiative (Friends)
Переглядів 30121 день тому
From Chef to System Initiative (Friends)

КОМЕНТАРІ

  • @NickThunnda
    @NickThunnda 4 години тому

    I was writing COBOL between 1982 and 2000, when they decided they didn't need so many of us any more. Honestly I don't know if I would have preferred the last 24 years as a fully employed static corporate coder or the poor but happy free soul I am now. Maybe I would have died of boredom and bad air conditioning.🤔

  • @steveoc64
    @steveoc64 День тому

    My 2c take is that it’s actually dangerous and will lead to a trainwreck of massive proportions It’s too easy for management to use Rust “safety” as a crutch - hire cheap and inexperienced web devs to cobble together a thousand dependencies, use LLMs to generate code, and trust that “if it compiles it works” Everything that Rust “achieves” in terms of safety it does by removing control from the programmer. What could possibly go wrong ?

  • @XxXgabbO95XxX
    @XxXgabbO95XxX День тому

    This guy clearly doesn't know anything about how the web should work... And as anyone like him, he farts his own opinion thinking it's infused gold. "I don't like CSS zen garden because that's just not how i want to write web pages" lmao is that your argument? Really? Not exactly rock solid. He's missing the main point of this which is that there should be a separation of concerns between the presentation on the content. But he completely ignores that, and shits his own opinion thinking he's edgy or something... I'm puking!

  • @hamza201183
    @hamza201183 2 дні тому

    Full interview? :)

  • @istdomistgut
    @istdomistgut 5 днів тому

    Ummm Flutter??!

  • @sashogs
    @sashogs 6 днів тому

    So first time watching you guys talk, have to say, you guys sound younger than you look, but take that as a compliment because I am either the same age or slightly older :D

  • @MrAverageViewer
    @MrAverageViewer 6 днів тому

    Brandow's explanation is rather "Meh".

  • @mattbillenstein
    @mattbillenstein 6 днів тому

    I agree - more tooling doesn't get you good software - but all the security vulnerabilities out in the wild do deserve some consideration - if it can make not-great programmers unable to create huge exploits that affect the entire internet - maybe that's a big thing. At least it's one layer or piece of the problem.

    • @krumbergify
      @krumbergify 6 днів тому

      Sure, using seatbelts doesn’t make you a good driver, but it sure helps when shit hits the fan.

    • @TheAxeForgetsTheTreeRemembers
      @TheAxeForgetsTheTreeRemembers 6 днів тому

      @@krumbergify good analogy 👍

  • @vruz
    @vruz 6 днів тому

    I agree, one big MEH.

  • @justwanderin847
    @justwanderin847 7 днів тому

    I retired 2 years ago, but would consider 250K !!!

  • @justwanderin847
    @justwanderin847 7 днів тому

    ua-cam.com/video/uKG0IEyeZb0/v-deo.html

  • @chriswarren-smith62
    @chriswarren-smith62 8 днів тому

    Completey agree music discovery is still broken, maybe more so with Spotify. But today is your lucky day. Search for Cold Chisel and the singers Jimmy Barnes and Ian Moss. Start with their self titled album from 1978.

  • @luizgrocco
    @luizgrocco 8 днів тому

    After implementing a small Signals library in TS I describe Signals as just the Observer Pattern with automatic dependency acquirement. How does this automatic behavior happens? Simple. To use the value a signal holds, you are actually calling a function that returns the value, (in solid.js this is explicit, other frameworks might hide this fact behind a proxy) this function call does not simply return the value it also first checks to see if the signal is being used inside an "effect" (createEffect) or "computed value" (createMemo) and if that's the case then it adds this effect/computed value to its observers list. Whenever you setState, or setSignal, thereby mutating the signal's value, it has that list of observers that it acquired in the previous step and it notifies all its observers about the mutation. The observers in turn will do as they please with this notification, eg. effects will run an effect, computed values will simply recalculate their own value based on the signals new value. Computed values (createMemo) are special because they are both an effect and a signal themselves, meaning when they get notified of a change, they will change their own internal value AND notify other computed values or effects of this change causing a cascade of updates. That's it. Nothing more. It boils down to the Observer Pattern, but since signals automatically register themselves as subjects to their observers, the dependency acquirement process seems "automatic" to the user.

    • @luizgrocco
      @luizgrocco 8 днів тому

      Of course, in modern frameworks, a lot more optimizations are going on as Ryan talks about in the video, but if you just want to understand the idea of signals and how they create an useful reactive model, all you need is what I explained above. Also, frontend frameworks use this idea to hook up your dom elements to this reactive system, I was only describing the reactive system itself not the rendering process.

  • @Yakes99
    @Yakes99 9 днів тому

    This isn't an unpopular opinion, it's just a fact.

  • @hduston
    @hduston 9 днів тому

    I have been waiting for the COBOL developer shortage for a over a decade now. I worked in non mainframe COBOL from 1986 to 1998. I transitioned to Oracle PL/SQL in 1999 and that's where I've been ever since.

  • @deputorswann
    @deputorswann 9 днів тому

    Some people just like the sound of their voice.

  • @midnattsol6207
    @midnattsol6207 9 днів тому

    0:06 rare occasion nerds and normies both relate

  • @bigutubefan2738
    @bigutubefan2738 10 днів тому

    Pepperidge farm remembers.

    • @Changelog
      @Changelog 9 днів тому

      They're so good at remembering stuff!

  • @sortof3337
    @sortof3337 11 днів тому

    we need new browser engine period. very impressed with what Andreas and chris have been doing. thank you bringing these legends for interview.

    • @Changelog
      @Changelog 10 днів тому

      Happy to hear you enjoyed it!

  • @HELLDOZER
    @HELLDOZER 11 днів тому

    Pretty neat

  • @shaddiegradyorielly6380
    @shaddiegradyorielly6380 11 днів тому

    started out with COBOL in 1979. ended up with .net. just retired at 62. it was a fun ride.

  • @dus10dnd
    @dus10dnd 12 днів тому

    Yeah, your opinion sucks. It scales fine. Seriously, Google uses it with a massive monorepo. If you're doing something that doesn't work, you're the one making a mistake. Dude, GitHub runs off of libgit2... an open source library implementation of Git. Your opinion is wrong because you have proven that you're uninformed. Repos are cheap, as well.... who cares if they have tons of repos.

  • @cubernetes
    @cubernetes 12 днів тому

    It's an unpopular opinions because it's a wrong interpretation of what people mean when they say easy. Everything labelled as "easy" or "hard" is relative. Difficulty is not an intrinsic property. Python (or Go, w.l.o.g.) is "easy" only because it is easier than many other languages. If you take a large enough random sample of people from the earth (including non-programmers), and let one group learn python and another group learn rust (or even assembly), then you will see very quickly that the people learning python will produce software orders of magnitude more functional or elaborate and the people learning a "difficult" language. Nothing is intrinsically easy. And everything that is indeed "easy" can present itself to be endlessly difficult the deeper you go. The generalization that every programming language is difficult is an empty statement with no relation to reality, you could take anything in this world that is unanimously labelled "easy" and elaborate on how this thing could be very hard. Humans are lazy, so they say "easy" instead of "easier than most other languages". But it's the latter that is implicitly meant most of the time

  • @vruz
    @vruz 12 днів тому

    Wrong. Learning Go is easy. TEACHING GO is different and you can't approach it the same way as other languages. We don't have bad Go students, we have bad Go teachers. And people who don't understand the first thing about programming language education as well, apparently.

  • @Crftbt
    @Crftbt 13 днів тому

    Video starts at 2:25

  • @zaneearldufour
    @zaneearldufour 13 днів тому

    Yeah this is wrong. Q/ZMK are huge productivity boosters

  • @jackgarrett7349
    @jackgarrett7349 13 днів тому

    You can convert all of your Mainframe pieces to a server now with no loss of function or speed. In fact, it will run faster and cheaper than dealing with IBM. COBOL is NEVER going away.

  • @PaulSebastianM
    @PaulSebastianM 13 днів тому

    Sorry but didn't make any clear sense to me

  • @Rockmanexe6
    @Rockmanexe6 14 днів тому

    i don't understand the hate comments? Git is very a old technology ,people just become used to git existing problem and its still isn't going to change anytime soon.

  • @pratikmadrecha
    @pratikmadrecha 15 днів тому

    Love the show!! Please add chapters though

  •  16 днів тому

    Folks like to spend money on stupid shit. We just see the same thing on GitHub. Trust me, we’ll end up where Idiocracy projected us.

    •  16 днів тому

      I mean, seriously, in the idiocracy intro there’s this scene where humanity is already dumbing down and scientists are busy with prolonging erections instead of solving the IQ problem. Here, tech companies and individuals seem to value cute rainbow generators more than security.

  • @krumbergify
    @krumbergify 16 днів тому

    Isn’t it a matter of diminishing return? Basic data analysis is really useful for understanding your business, but you might not be able to extract that much more knowledge by crunching even more data?

  • @glen1555
    @glen1555 16 днів тому

    Was in Cobol from 1977 to 2000. After Y2K the job market dried up, Oh we don't need you anymore! So like a lot of Cobol programmers I went and did something else, I ended up as a manager of a big box store.

  • @montyp4952
    @montyp4952 17 днів тому

    This isn't an unpopular opinion 🥲

  • @5I6
    @5I6 18 днів тому

    I realized what was behind that laugh...

  • @joyrida
    @joyrida 18 днів тому

    No way, I love me some Bobiverse! Thanks for all the great books Dennis Taylor, can't wait for the next one to drop soon! Oh yeah, first!

  • @ChatGpt-bl8xc
    @ChatGpt-bl8xc 19 днів тому

    I am a Canadian citizen, with 5 years of experience in Micro Focus COBOL programming, and I need to find a job, can someone help with that

  • @quintenkamphuis
    @quintenkamphuis 19 днів тому

    This really helped me!

  • @nexovec
    @nexovec 19 днів тому

    The only people who think this is unpopular opinion are frontend devs 🤣

    • @w3debugger
      @w3debugger 19 днів тому

      I'm FE and I don't think it's unpopular 😁

  • @shattereddnb3268
    @shattereddnb3268 20 днів тому

    I recently started to work on a Tauri app with Next, and setting up the frontend was a breeze, everything just works! But then I wanted to set up a simple local database and realised I would probably have to spend the better part of a decade to learn arguably the most difficult language around to make anything useful on the backend (maybe a slight overstatement, but not by much!) If you happen to be a frontend developer that also knows Rust, Tauri is for you! But the other 99.9 % of developers should probably stick with Electron

  • @WmJames-rx8go
    @WmJames-rx8go 20 днів тому

    I have an idea and observation I would like to share with you. It's about developing a particular type of neural network to be used in large language models. In many neural networks each input is mapped to each node in the hidden layer and each hidden layer is mapped to another adjacent hidden layer until the output layer. I propose that the hidden layers be partitioned into groups and that in between input layer and the hidden layers there are placed logical circuits or the equivalent thereof. And that their output would be sent to the adjacent hidden layer, etc.. By training on a network with this type of configuration each partition of the neural network would take on qualities that are specific to a category of sorts. So if for example an XOR circuit came between two partitioned layers it would be able to prevent both layers from operating at the same time, because of course, XOR is equivalent to saying statement A or statement B but not both. Of course you would want to consider using any logical circuit such as , NAND, OR, NOT, AND. As you well know any logical circuit can be built from any of these logical components so it would not necessarily be useful to mix all the components, however, it would probably be a considerable help to be able to mix them so that when the analysis of the neural network was done you would have some clue as to what section was working and choosing to produce the output and why it may have done so. This concept is very similar to a famous NSAT problem, although it is strictly different as you are aware. However, it does have some of that flavor. As an extremely simple visual aid I ask that you picture a neural network divided into sections and separated by a NOT circuit. If I were training the circuit with an input, "a cartoon of a dog is not an actual dog", the NOT circuit would prevent a section of the neural network from outputting something like, "a cartoon is an actual object". Note: Emailed to various parties developing neural networks including, Open AI, Google, Meta, Anthropic, Amazon and various comment sections on the internet. Second note. Many of these companies make it difficult to contact any person. If for some reason this idea should prove useful but did not reach your company, I hate to be so straightforward and bold, but I say it's all on you.

  • @valentineni208
    @valentineni208 20 днів тому

    Hi can u pls provide example of providing summaries to clients considering they can use chargpt

    • @Changelog
      @Changelog 20 днів тому

      Build the integration for them into their existing software/workflows or use Llama or some other locally-hosted tool for orgs that don't want to send their business data to OpenAI

  • @NomadicBrian
    @NomadicBrian 21 день тому

    Did COBOL for 17 years then newer languages for the last 15 years. I've only been on two projects that converted COBOL to Java or .NET. I was the spelunker diving into the COBOL code and wrote out the specs for Java developers or did it myself. I keep hearing there is a shortage. I offered to do COBOL part time remote. But stubborn clients won't compromise. I do prefer Java, C#.NET and Python but so long as I am having fun and being challenged I'm good. OK so I don't want to use ISPF editors. Hope that is not still around. We were doing Micro Focus COBOL last time I worked with it.

  • @thehibbi
    @thehibbi 22 дні тому

    I didn't quite get the point (even though I have used and like Elixir). If the point is, that the BEAM can utilize all cores, so can optimized low level frameworks. And since Elixir isn't that good at number crunching, shouldn't the Machine Learning part use native code anyways? And if that is the case, what prevents me from using this native code in other environments outside of Elixir? I do understand the point about the distrubuted GPU machines. But I think that doesn't make Elixir "a great match", I could just use a simple API to communicate with a GPU machine in environments outside of Elixir.

  • @ErickCarty
    @ErickCarty 23 дні тому

    "unless you have a reason to" - the reason varies depending on if it's your personal project, community project, working at a startup, enterprise or operating in a regulated industry. As always, the answer is: "It depends.."

  • @daddysbunny1959
    @daddysbunny1959 23 дні тому

    I’m one at my company.

  • @davidriveros5422
    @davidriveros5422 25 днів тому

    Neovim + Kickstart.nvim 10/10

  • @krumbergify
    @krumbergify 25 днів тому

    I do because if API:s change gradually it tends to be much easier to adapt to each smaller change than to port from version 1 to version 10.

  • @cvoskuil
    @cvoskuil 26 днів тому

    I retired from the grind almost five years ago. I really enjoyed developing mainframe applications, which I would lie to do again. But, any positions I find are 24/7 support. There is no way I want to clean up after the kids. And management is another problem. I've had hot-shots tell me that I've forgotten my skills ad can't perform. You don't forget 30+ years of mainframe. Why do I want to get back into the field?

  • @andy12829
    @andy12829 27 днів тому

    Legend ❤