Hiring – Jupiter Broadcasting

AWS 411: Christophe Limpalair | Jupiter Extras 53

Wes Payne — Fri, 07 Feb 2020 04:00:00 +0000

Show Notes: extras.show/53

The post AWS 411: Christophe Limpalair | Jupiter Extras 53 first appeared on Jupiter Broadcasting.

Toxic Licensing | CR 264

chris — Thu, 06 Jul 2017 16:13:58 +0000

RSS Feeds:

MP3 Feed | Video Feed | Torrent Feed | iTunes Audio | iTunes Video

Become a supporter on Patreon:

— Show Notes: —

Hoopla

Update on Mike’s Move

Part of me really wants to jump on a skateboard or BMX bike, pump the Blink-182 / Greenday and try to capture my mispent youth.

— Michael Dominick (@dominucco) July 6, 2017

Jody wrote in asking :

I’d like to hear how you’re transitioning your software business to FL?

Mike’s Special Project in FL

If you’re near the Tampa / Plant City FL area are a student or recent grad looking to get into the development space, drop me a line. I am looking for some interns / entry level folks for a new venture in the bot space. I need developers, QA, and BizDev.

System 76 PopOS Conversation Cont.

Botched Sega Forever launch blighted by poor emulation

Sega’s performance issues stem from the use of a new emulator based in Unity. Older mobile versions of retro Sega games were either direct ports—as in the case of Sonic the Hedgehog and Sonic CD—or used a native emulator, instead of one passed through Unity.

Outside of AI, Companies are doing less Research and more Dev

RD for Developers

Is there value in trying purely speculative technologies?
What does a longshot really offer?
How do you balance the benefits of experimentation with the need for focus

Feedback

Should one get punished for working more effectively than his co-workers?

I had terrible RSI

The post Toxic Licensing | CR 264 first appeared on Jupiter Broadcasting.

Coder Profiling | CR 226

chris — Mon, 10 Oct 2016 13:43:41 +0000

RSS Feeds:

Become a supporter on Patreon:

— Show Notes: —

Debate Night Live with Mike and Chris:

#Debate Night Round 2 Full Unfilter Live Commentary

Hoopla

Just shut up and let your devs concentrate, advises Stack Overflow CEO Joel Spolsky

If you want to attract and keep developers, don’t emphasize ping-pong tables, lounges, fire pits and chocolate fountains. Give them private offices or let them work from home, because uninterrupted time to concentrate is the most important and scarcest commodity.

Why I hate iOS as a developer m

Dealing with iOS (and really Apple in general) is like trying to have a conversation with a paranoid robot working as a soviet border officer in a Kafka novel.

Apple Has Removed Dash from the App Store

Earlier today, Apple cancelled my developer account and has removed Dash from the App Store.

KDevelop for Windows: Official 5.0.1 beta installer available now | KDevelop

Today, we are happy to announce the availability of the first official KDevelop installer for Microsoft Windows. The installer is for the stable KDevelop 5.0.1 release, but we still release it as a beta, since there might be Windows-specific issues.

We primarily support C/C++ development, but also have great plugins for Python and PHP development (shipped in the Windows installer by default).

KDevelop itself is based on a plugin-based architecture where language support as such is just yet another plugin. There are other plugins (cppcheck, clang-tidy, etc.) not distributed on Windows (yet).

Congressional App Challenge 2016 – Connecting today’s Congress with tomorrow’s coders.

The post Coder Profiling | CR 226 first appeared on Jupiter Broadcasting.

Fair-use Frustrations | CR 208

chris — Mon, 06 Jun 2016 16:08:29 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Mike & Chris have very different opinions on how interview tests should be conducted & this week they try to come to some common ground. Plus the real reasons to develop software on Linux are not the ones often cited, bit more on Google’s fair use & the master plan to get Mike to move to the west coast.

Thanks to:

Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

Become a supporter on Patreon:

— Show Notes: —

Hoopla

Hiring a programmer? Ditch the coding interview and get back to basics

So before we go any further, let’s establish one very simple truth: coding interviews are worthless.

Why Develop Software On Linux

From my point of view, Linux is indeed a superior platform for developers, and that is becoming increasingly so due to a number of critical factors that have improved in the last ten years. Every year, our toolset srengthens, and does so at an exponential rate in comparison to the relatively stagnant Apple and Microsoft ecosystems.

Flatpak is gaining momentum

The Xdg App project has been renamed to Flatpak to get an easy-to-remember name and reflect that after almost two years of development it’s finally ready for broader adoption.

Google’s fair use victory is good for open source

Hurst is wrong in asserting that Google’s fair use victory means that anyone can freely appropriate whatever they want from open source and other programs. All that the jury verdict means is that Google made fair use of the Java API packages. Anyone else who appropriates elements from another firm’s software would have to defend a legal challenge on much the same grounds that Google did: either by claiming that the elements appropriated were not within the scope of protection that copyright law provides to software developers or that the appropriation of those elements was fair use.

The Google/Oracle decision was bad for copyright and bad for software

Though Android shares important elements with Java, Android is not a Java platform; it does not pass the tests that Sun and Oracle developed, and it is not designed to do so. Google deliberately chose to reject elements of Java’s design that it didn’t like, leaving a hodge-podge that is Java in some places but not-Java in others.

That lack of interest in interoperability means, in my view, that Google’s use of the Java APIs should not qualify as fair use.

Mike Moves to the West?

Software for the marijuana industry set to yield high returns

The post Fair-use Frustrations | CR 208 first appeared on Jupiter Broadcasting.

Apple Future vs Pebble Past | CR 144

chris — Mon, 09 Mar 2015 14:30:23 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

We revisit some of the audience’s favorite editors, then discuss the reality of terrible engineers.

Then Chris spends the weekend with a smartwatch & believes he’s discovered their purpose. We examine the audience for smartwatch apps in light of the Apple Watch announcement today.

Thanks to:

Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

Become a supporter on Patreon:

Show Notes:

Feedback / Followup

DevOps Is Bullshit: Why One Programmer Doesn’t Do It Anymore

Hoopla

Watching for Apple Watch Opportunities.

App V Extensions?
Who’s the customer?
Pricing?

The post Apple Future vs Pebble Past | CR 144 first appeared on Jupiter Broadcasting.

Get Back to the ’50s | CR 130

chris — Mon, 01 Dec 2014 16:30:48 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

That tech worker “shortage” Facebook and Microsoft keep telling you about is bogus. We’ll go over the study and reports that back that claim up. Then we dig into the rather understandable reasons why developers wages are being pushed down & more!

Thanks to:

Get Paid to Write for DigitalOcean

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

Become a supporter on Patreon:

— Show Notes: —

Feedback / Follow Up:

Dev Hoopla:

The Tech Worker Shortage Doesn’t Really Exist

“There’s no evidence of any way, shape, or form that there’s a shortage in the conventional sense,” says Hal Salzman, a professor of planning and public policy at Rutgers University. “They may not be able to find them at the price they want. But I’m not sure that qualifies as a shortage, any more than my not being able to find a half-priced TV.”

The post Get Back to the '50s | CR 130 first appeared on Jupiter Broadcasting.

Is That a Weave? | CR 99

chris — Mon, 28 Apr 2014 15:31:39 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

We double down on your follow up. Working remotely, scratching your itch while at your current job, why we missed Heartbleed & the video that will make you never again complain about how hard something is.

Plus why you should write code every day, the hard numbers about mobile games & more!

Thanks to:

Direct Download:

MP3 Audio | OGG Audio | Video | Torrent | YouTube

RSS Feeds:

— Show Notes: —

Follow up / Feedback

Dev Hoopla

Weaving software into core memory by hand – YouTube
Episode 100 plans

The post Is That a Weave? | CR 99 first appeared on Jupiter Broadcasting.

Battle of the Bots | TechSNAP 97

chris — Thu, 14 Feb 2013 17:29:31 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

A researcher stumbles into the middle of a botnet war, and documents what he finds. Plus a Facebook mistake took down countless sites around the web.

Then it’s huge batch of your questions, our answers, and much much more!

Thanks to:

GoDaddy.com

Use our code tech295 to get a .COM for $2.95.

Something else in mind? Use go28off2 to save 28% on your entire order!

Pick your code and save:
techsnap7: $7.49 .com
techsnap10: 10% off
techsnap11: $1.99 hosting for the first 3 months
techsnap20: 20% off 1, 2, 3 year hosting plans
techsnap40: $10 off $40
techsnap25: 25% off new Virtual DataCenter plans
techsnapx: 20% off .xxx domains

Direct Download:

RSS Feeds:

Support the Show:

Purchase anything at Amazon.com
Purchase anything at Think Geek using this link
Purchase anything at Newegg using this link
Contribute directly on our donation page or check out our advertising options and reach millions of amazing people!
Grab our Chrome Extension and auto-tag your shopping session for us!

Fill out my Wufoo form!

Show Notes:

Get TechSNAP on your Android:

Browser Affiliate Extension:

Jupiter Broadcasting Affiliate Extensions for Chrome and Firefox

TechSNAP 100 Limited Edition Shirt:

Limited time left on our limited run TechSNAP 100 T-shirt!

Adobe releases critical flash update APSB13–04

CVE–2013–0633 – A buffer overflow allowing remote code execution – reported by Kaspersky Labs – CVSS 9.3
CVE–2013–0634 – Remote code execution and memory corruption – Reported by Shadowserver Foundation and Lockheed Martin Computer Incident Response Team – CVSS 9.3
Both vulnerabilities were being exploited in the wild during February 2013
Both CVE numbers were allocated December 18th, 2012. “The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE”
Both vulnerabilities were used in malicious SWF code embedded in Microsoft Word documents that users were tricked into opening
CVE–2013–0634 was also used as a direct attach via SWFs hosted on websites
Reaction to seeing Lockheed Martin in a vulnerability announcement

ShadowServer Foundation Blog reports on script injection in botnet C&C server

While analyzing the commands received by bots that were part of a botnet (ShadowServer runs a large honeypot where it monitors the activities of the bots), they noticed a disturbing pattern
The bot commands included javascript code to inject an iframe causing your browser to load a malicious site that would attempt Java and ActiveX exploits against you
Once the exploit is successful, it drops a password stealer, which attempts to steal saved credentials from apps such as CuteFTP, FlashFXP, FileZilla, SmartFTP, TurboFTP, Firefox and more
It then encrypts that information and sends it to a different C&C server
Researchers at the ShadowServer Foundation originally thought it was a clever attack against researchers, attempting to exploit their scanning and reporting interfaces, which are usually custom built and lack some input sanitization
It also appeared that the malware that was dropped by the exploit had already been submitted to malware analysis sites such as VirusTotal and Malwr.com
Searching further, he found that an earlier version of the malware, with a much better detection ratio (number of virus scanners that detect the malware) had been uploaded by the same person a few days previous
This led to speculation that the author may have been uploading various revisions of his malware and working to make it less detectable
An update posted later suggestions that it appears to be one Botmaster attempting to exploit another Botmaster and take over his botnet
It still suggests an interesting concept, where the Botmaster who is being observed, reverses the roles and begins observing the activities of the watcher

Error at Facebook takes out large number of major sites

Some type of error or mistake in the code for Facebook Connect caused users trying to visit any site with Facebook Connect to be redirected to a Facebook error page that contained nothing but a very generic message “An error occurred. Please try again later.”
The issue only seemed to affect those who were logged in to Facebook
Logging out of Facebook seems to have prevented you from being redirected
The outage caused huge dips in traffic to major sites including:
ABC, BuzzFeed, Capital.fm, CNN, DailyMail, ESPN, Etsy, Fox News, Gawker, Geico, HBO, Hollywood.com, The Huffington Post, Hulu, InfoWorld, MSNBC.com, NBC News, News.com.au, NFL, OKCupid, People, Pinterest, Reddit, Slate, Smallworlds, SwagBucks, The Sydney-Melbourne Herald, TED, The Los Angeles Times, The New Zealand Herald, The Washington Post, Vulture, Weather.com, WikiAnswers, WordPress, XOJane, Yahoo, and YugaTech
Additional Coverage
It just goes to show the risk involved in relying on 3rd party services for basic mechanisms like authentication, and the risk of embedding 3rd party code that can change without notice

Vulnerability in libcurl POP3 and SMTP protocll handlers

libcURL is a library for handling HTTP URLs and many other web protocols
It is very commonly found on web servers and in php scripts where it is used to access remote sites via protocols such as HTTP(S), FTP(S), SSH, SCP/SFTP, POP3/SMTP, IMAP, RTSP, RTMP
The problem stems from the way cURL handles certain headers in the POP3 protocol while negotiating SASL DIGEST-MD5 authentication
cURL reads the response into a fixed length buffer, assuming that the response will be no longer than 128 bytes, however a malicious server could return a longer response, allowing it to overwrite memory outside of the buffer, possibly leading to remote code execution
The most common vector for the attack is that by default cURL follows HTTP redirects, so when cURL attempts to load a URL (possibly provided by the user/attacker), it receives an HTTP redirect to pop3://username:password@evil.pop3-server.com/. and then gets exploited
If you don’t expect to ever receive a redirect, you can tell cURL or libcURL not to follow redirects, or you can tell it to follow follow redirects for a list of protocols via CURLOPT_REDIR_PROTOCOLS
An updated version of cURL/libcURL has been released to resolve this vulnerability
Vulnerability Announcement
Affected versions: < 7.26.0 and >= 7.29.0

Feedback:

How Redhat hires people
- Redhat is looking to hire almost 1000 more software engineers, technical support engineers, and salespeople this year
SSL @ home
- OpenSSL comes with a perl script for managing your own CA
“Correct horse battery staple” really a strong password?
Whiteboard Wednesday – Password Security
Bought a domain for us!
Backing up Gmail?
NoPriv.py – Easy IMAP email backup to HTML archive. – Raymii.org
A few questions…
FreeBSD 9.1 bsdinstall hardware issues
Getting started with OwnCloud
Zero to ownCloud in Minutes!
Download | ownCloud
OwnCloud Webdav on GoDaddy shared Linux hosting

Round-Up:

The post Battle of the Bots | TechSNAP 97 first appeared on Jupiter Broadcasting.