position:package manager

#IPFS, Again
▻https://macwright.org/2019/06/08/ipfs-again.html

https://macwright.org/images/2019-06-08-ipfs-again-thumbnail-image.png

Here are the recommendations

First, make recommendations. I went down the IPNS rabbit hole because the documentation sent me, and only by a chance encountered did I learn that it’s almost universally avoided. There’s no shame in saying that a project’s not ready. Recommending unusable projects burns goodwill. Recommend paths that work.

Second, fix your words. Words are work, and that work is not happening. Finish a glossary, standardize usage and meaning, and cull unnecessary jargon. Treat new bits of jargon like technical debt, because that’s what they are.

Third, set realistic goals and make realistic statements. IPFS.io still has a web-centric message and promises that it’s useful here and now. It promises ‘fast performance’, and support for ‘huge datasets’. These are goals, not realities. An effort to put 300TB of data was met with mixed results and notes about adding and retrieving data being extremely slow.

Fourth, set a goal. This is a slightly different question than the last one. A core question is: is IPFS trying to be an internet? The website would say yes, and some of the documentation. But the 2019 goals punt the ‘decentralized web’ to 2020+, instead focusing on NPM on IPFS. Which then leads us to entropic, the most promising distributed package manager, which has a discussion about using IPFS that immediately brings up its performance problems.

Maybe I’m being too tough on IPFS. But this isn’t 2014. IPFS isn’t a new project, and it isn’t resource-limited. Protocol Labs has raised over 300 million dollars, and has been around for 5 years. That’s a lot of money to pay a lot of smart people.

So a few scenarios are possible. Maybe most IPFS users are using it for file storage and as an API backend, kind of like textile. I’m the odd one out expecting it to be useful for websites. Which would explain the haphazardness of DNSLink and IPNS, but not the performance issues. Or maybe I’m misjudging the arc of history – that Protocol Labs is a 20 year project, not a 10 year one. But really I suspect that some of the hype exists because folks are talking about IPFS but they don’t rely on it it. People excited about the potential of FileCoin and otherwise hyped on crypto technology want to imagine uses and combinations of technology without being tethered by the reality of what doesn’t work.

I hope that Protocol Labs sets a goal and achieves it. The IPFS future is exciting. But we aren’t there yet, and I’m not sure we will be.

Building a Progressive Blog App with #apollo and Cosmic JS
▻https://hackernoon.com/building-a-progressive-blog-app-with-apollo-and-cosmic-js-aaaccd24966f?s

https://cdn-images-1.medium.com/max/527/1*IRdI9l980gmFfdkx7ai2hw.png

Hello stranger.Come with me on a short adventure as we build a fast, simple interface for publishing blog style articles. Something sensible. It should look clean and simple yet have the ability to perform powerful resource fetching with some query magic. I’m talking about #graphql, the query language built with web APIs in mind. And speaking of web APIs, we will also be using our handy Content Management Service: Cosmic JS, to Create and Store our Blog Data.TLDR:Progressive Apollo BlogProgressive Apollo Blog Codebase0.0 Before You StartBefore you go any further make sure you have the required developer tools installed on your machine. Mainly you will need Node JS, its accompanying package manager: npm, and git. Git is semi optional and will only be used to code storage and deployment if (...)

#react #cosmic-js #javascript

#helm from the trenches
▻https://hackernoon.com/helm-from-the-trenches-17f87859ee47?source=rss----3a8144eabfe3---4

https://cdn-images-1.medium.com/max/500/1*9mJCHusRXGq9PViqeajcZw.png

If you are working with #kubernetes then you should use Helm to be able to easily change the YAML resources for your applications. Helm is like a package manager for deploying applications on a cluster, it gives you a list of already created apps (charts) ready to install and you can also start creating your own and publish them in your own chart museum. Like on an operating system, life without a package manager would be much harder.Helm charts for an easier Kubernetes installation (image source: ▻https://helm.sh)I am using Helm day by day, and these are the things I found out while creating new charts or modifying existing ones. If I knew all these before starting with helm than things would have been smoother and I would of wasted less time searching error messages and solutions to (...)

#cloud-native #devops #cloud

Developer’s Toolkit: 4 #linux #command-line tools for debugging everyday issues that all developers…
▻https://hackernoon.com/4-linux-command-line-tools-for-debugging-issues-every-software-developer

https://cdn-images-1.medium.com/max/1024/1*z9EJeDLr7atvFEXrolPbhQ.png

Developer’s Toolkit: 4 linux command-line tools for debugging everyday issues that all developers should knowWe spend a large proportion of our lives debugging issues. Sometimes we just need an answer to a very simple question but getting that answer is a real struggle and can be time-consuming. On occassions I’ve seen a complicated 3rd party piece of technology thrown at the problem but often in these sorts of scenarios, linux already has you covered. Many of these command-line utilties either already come with a standard linux distribution or are one line away from an install from your specific distro’s preferred package manager. Here’s a list of command-line tools I think all developers should know how to use to answer simple questions.psFor answering the question:What’s running on my (...)

#software-engineering #developer-tools #software-development

Meeting C++ and Meeting Embedded trip report—Conan C/C++ Package Manager
▻http://isocpp.org/feeder/?FeederAction=clicked&feed=All+Posts&seed=http%3A%2F%2Fisocpp.org%2Fblog%2F2

https://pbs.twimg.com/media/Dr9G-LDX4AAJe-o.jpg

Were you there?

Meeting C++ and Meeting Embedded trip report by Conan C/C++ Package Manager

From the article:

On Wednesday, before Meeting C++, we attended and presented a talk at Meeting Embedded, a new conference about many topics related to embedded systems. C++ and C had a relevant role in this conference, obviously (accordingly to Dan Saks statistics around 60% in embedded code is C, then around 20% is C++, followed by assembly), but where other topics presented, like Rust, protocols for embedded (MQTT), academic and professional education, real-time systems. We did our own talk Continuous Integration of C/C++ for embedded and IoT with Jenkins, Docker and Conan, which went quite well, especially considering that we were running a real demo, live updating the (...)

#News,Articles&_Books,_Events,

What is #helm and why you should love it?
▻https://hackernoon.com/what-is-helm-and-why-you-should-love-it-74bf3d0aafc?source=rss----3a8144

https://cdn-images-1.medium.com/max/1024/1*6p1-xdR5rNV7uDAh1gN43w.jpeg

Helm is the first application package manager running atop #kubernetes. It allows describing the application structure through convenient helm-charts and managing it with simple commands.Why is Helm important? Because it’s a huge shift in the way the server-side applications are defined, stored and managed. Adoption of Helm might well be the key to mass adoption of #microservices, as using this package manager simplifies their management greatly.Why are microservices so important? They have quite a few uses:When there are several microservices instead of a monolithic application, each microservice can be managed, updated and scaled individuallyIssues with one microservice do not affect the functionality of other components of the applicationNew application can be easily composed of (...)

#docker #devops

Firefox exploit found in the wild | Mozilla Security Blog
►https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild

Firefox exploit found in the wild

Yesterday morning, August 5, a Firefox user informed us that an advertisement on a news site in Russia was serving a Firefox exploit that searched for sensitive files and uploaded them to a server that appears to be in Ukraine. This morning Mozilla released security updates that fix the vulnerability. All Firefox users are urged to update to Firefox 39.0.3. The fix has also been shipped in Firefox ESR 38.1.1.

The vulnerability comes from the interaction of the mechanism that enforces JavaScript context separation (the “same origin policy”) and Firefox’s PDF Viewer. Mozilla products that don’t contain the PDF Viewer, such as Firefox for Android, are not vulnerable. The vulnerability does not enable the execution of arbitrary code but the exploit was able to inject a JavaScript payload into the local file context. This allowed it to search for and upload potentially sensitive local files.

The files it was looking for were surprisingly developer focused for an exploit launched on a general audience news site, though of course we don’t know where else the malicious ad might have been deployed. On Windows the exploit looked for subversion, s3browser, and Filezilla configurations files, .purple and Psi+ account information, and site configuration files from eight different popular FTP clients. On Linux the exploit goes after the usual global configuration files like /etc/passwd, and then in all the user directories it can access it looks for .bash_history, .mysql_history, .pgsql_history, .ssh configuration files and keys, configuration files for remina, Filezilla, and Psi+, text files with “pass” and “access” in the names, and any shell scripts. Mac users are not targeted by this particular exploit but would not be immune should someone create a different payload.

Update Firefox to the latest version | Firefox Help
▻https://support.mozilla.org/en-US/kb/update-firefox-latest-version

If you use your Linux distribution’s packaged version of Firefox, you will need to wait for an updated package to be released to its package repository. This article only applies if you installed Firefox manually (without using your distribution’s package manager).

Ne pas utiliser #firefox avant d’avoir la 39.0.3 . Je suis sous ubuntu et on est à la 39.0.0 ce matin .

Faille concernant windows et linux (pas mac visiblement)

#security #faille

twitter/bower
►https://github.com/twitter/bower

A package manager for the web

Cool, but obscure unix tools :: KKovacs
►http://kkovacs.eu/cool-but-obscure-unix-tools

A little collection of cool unix terminal/console/curses tools

Just a list of 20 (now 28) tools for the command line. Some are little-known, some are just too useful to miss, some are pure obscure — I hope you find something useful that you weren’t aware of yet! Use your operating system’s package manager to install most of them.