Jason McGee Avatar The Changelog #311  – Pinned

Istio service mesh and microservices

Adam and Jerod talk with Jason McGee, VP and CTO of IBM Cloud Platform about Istio — an open platform that provides a uniform way to connect, secure, control, and observe microservices. They cover what service mesh is, why its suddenly so interesting, who’s involved in Istio, their involvement with the CNCF, getting started, and what's next for Istio.

read more...

Flavio Copes flaviocopes.com

A short and simple guide to Babel

Just getting started with Babel? Read this guide from Flavio Copes — it's short, so maybe 2-3 minutes to skim or 10 minutes to read. Babel is an awesome tool, and it’s been around for quite some time, but nowadays almost every JavaScript developer relies on it, and this will continue going on, because Babel is now indispensable and has solved a big problem for everyone. Babel is a compiler: it takes code written in one standard, and it transpiles it to code written into another standard.

read more...

GoCD Icon GoCD – Sponsored

Why should you use GoCD over Jenkins?

Jekins is the incumbent option, not to mention, open source. GoCD is also open source and supports Kubernetes and can be installed with Helm Charts. GoCD provides its core value out of the box. Maybe you will add a few integration plugins to make GoCD fit better in your environment. Jenkins will require many plugins to deliver value. You will need to understand the plugins, how they interoperate, and how to upgrade them. GoCD will feel more stable. Jenkins will feel more hackable. Which is a better match to your needs and philosophy? Learn how to setup your first pipeline, or check out their enterprise plugins and support.

read more...
logged by @logbot permalink

Matt Klein Medium

The (broken) economics of OSS

In response to the post from Paul Dix on the misunderstandings going on around Redis and the Common Clause license — Matt Klein tweeted: Won't defend Redis Labs, this is a dead end move, but there needs to be more recognition that the economics of OSS are fundamentally broken. In his post he starts by saying... I want to provide a long form discussion of my two Twitter threads as this topic is nuanced and quite interesting. Note: this post is heavy on opinion and light on facts/references backing up those opinions. Thus, preface everything that follows with “IMO.” Matt goes on to share some history of open source software and his opinions on modern expectations of software being free and open, startups and open source, and who pays...

read more...

Martin Fowler martinfowler.com

The state of agile software in 2018

Martin Fowler reflects on the journey of agile software development... Our challenge at the moment isn't making agile a thing that people want to do, it's dealing with what I call faux-agile: agile that's just the name, but none of the practices and values in place. Ron Jeffries often refers to it as "Dark Agile", or specifically "Dark Scrum". This is actually even worse than just pretending to do agile, it's actively using the name "agile" against the basic principles of what we were trying to do, when we talked about doing this kind of work in the late 90s at Snowbird. The three main challenges we should focus on are: fighting the Agile Industrial Complex and its habit of imposing process upon teams, raising the importance of technical excellence, and organizing our teams around products (rather than projects).

read more...

Henry Zhu babeljs.io

Babel 7 released

After almost 2 years, 4k commits, over 50 pre-releases, and a lot of help we are excited to announce the release of Babel 7. It's been almost 3 years since the release of Babel 6! There's a lot of moving parts so please bear with us in the first weeks of release. Babel's role in the JavaScript ecosystem... Babel is fundamental to JavaScript development today. There are currently over 1.3 million dependent repos on GitHub, 17 million downloads on npm per month, and hundreds of users including many major frameworks (React, Vue, Ember, Polymer), and companies (Facebook, Netflix, Airbnb). It has become such a foundation for JavaScript development that many people don't even know that it is being used. Even if you aren't using it yourself, it's highly likely your dependencies are using Babel.

read more...

Steven J. Vaughan-Nichols zdnet.com

Will Commons Clause destroy open source?

There is a big debate underway over Commons Clause and its recent application to certain Redis enterprise add-ons. The Commons Clause license is open source and was drafted by Heather Meeker — whom you might remember from Request for Commits #9. This language from the license forbids the ability to sell the software (similar to the the Elastic License discussed on The Changelog #292). ...the grant of rights under the License will not include, and the License does not grant to you, the right to Sell the Software. Steven J. Vaughan-Nichols writes for ZDNet: Redis Labs has been unsuccessful in monetizing Redis, or at least not as successful as they'd like. Their executives were discovering, like the far more well-known Docker, that having a great open-source technology did not mean you'd be making millions. Redis' solution was to embrace Commons Clause. This license forbids you from selling the software. It also states you may not host or offer consulting or support services as "a product or service whose value derives, entirely or substantially, from the functionality of the software". I'm really curious to see how this tread plays out as more and more organizations see service providers (cloud hosting, SaaS, etc.) and consultants (support contracts, etc.) "getting rich" off of the projects they work so hard to maintain as open source, while they struggle to find a sustainable model for funding the efforts to keep the open source ship afloat.

read more...

Tidelift Icon Tidelift – Sponsored

Download Tidelift’s 2018 professional open source survey report

With more than 1,200 responses from people across the globe representing professional users and open source developers — Tidelift's 2018 professional open source survey report uncovered 9 key insights on how to make open source work better for everyone. Over the past couple of months, we’ve been reviewing the data from this survey to find answers to questions like: What do professional users of open source care about most? How much would professional users be willing to pay for supported open source? What work would maintainers do if they were paid to maintain their software? Download the final report which highlights 9 key insights that stood out to Tidelift.

read more...
logged by @logbot permalink

Eric Berry Avatar Founders Talk #56

Eric Berry is funding open source with CodeFund

Eric Berry started Code Sponsor a year ago because of his passion for finding ways to sustain and fund open source developers. He ultimately had to shutdown due to potential legal issues with GitHub, but was given new life as CodeFund when he went to work for ConsenSys and Gitcoin. We talked through the backstory of this idea, why he's so passionate about funding open source, ethical advertising, being unapologetically focused on your mission, the value of honesty and openness, and the future direction of CodeFund.

read more...

Bash github.com

A standard library and boilerplate framework for writing tools using Bash

The aim of Bash Infinity is to maximize readability of bash scripts, minimize the amount of code repeat and create a central repository for a well-written, and a well-tested standard library for bash. It seems to me that by the time you need something as fancy/full-featured as this, maybe the task at hand has outgrown Bash? Cool, nonetheless. 👍

read more...

Gervasio Marchand g3rv4.com

Making Slack better with BetterSlack

Does BetterSlack make Slack better? ...there are 2 or 3 things about Slack I think can be made better. That’s why I built BetterSlack. It’s a Chrome extension that injects javascript into your Slack environments to add (or remove) features. Hide certain users, generate hangout links, move reactions to the right, threads on channel by default, hide status emojis ... Gervasio has a 3 minute demo to explain things in more detail...

read more...

Josh Comeau Medium

Lessons learned as a conference speaker

How do you develop an idea for a talk, determine the conferences to pitch, actually deliver the talk, and whether or not it's even worth doing? Joshua Comeau writes on Medium: I’m still very much at the beginning of my career. I’m only ~5 years into what will likely be a 40-year career, so I’m only about 1/8th through! That thought is simultaneously liberating and dizzying; it means I don’t have to feel rushed when it comes to making the most of every available opportunity, but it also means I have no clue what’s ahead. Conference-speaking is a worthwhile endeavor, but it’s one heck of a bumpy ride, and not always worth it. I’ll continue to prepare talks — as long as folks still want to hear what I have to say... Joshua ends with an invitation ... 👏 I encourage you to give it a shot. Feel free to reach out to me, I’m always happy to give your proposal a quick read :)

read more...

iOS github.com

A book on getting to the #1 spot in the App Store

If this book intrigues you (like it does me), start nowhere else but the "How to Read This Book": A successful iOS game makes $4,000 annually (this goes for any app frankly). A successful Android game makes one seventh of that (one third at best). You are not a large multi-million dollar company (at least I don't think you are given that you're reading this book). So you don't have the customer acquisition/marketing budget to beat this $4,000 annual average. Period. Brutal. What's a dev to do, then? Make lots of niche, high quality games.

read more...

Fedor Indutny darksi.de

HashWick V8 vulnerability

Get the backstory on the Hash Seed guessing game and HashWick from Fedor Indutny: About one year ago, I've discovered a way to do a Denial-of-Service (DoS) attack on a local Node.js instance. The process involved sending huge amounts of data to the HTTP server running on the same machine as the attacker, and measuring the timing differences between various payloads. Given that the scope of attack was limited to the same machine, it was decided by V8 team and myself that the issue wasn't worth looking in yet. Nevertheless, a blog post was published. This year, I had a chance to revisit the Hash Seed guessing game with restored enthusiasm and new ideas. The results of this experiment are murky, and no fix is available yet in V8. Thus all V8 release lines are vulnerable to the HashWick attack. Fedor also mentioned that this issue was disclosed responsibly and this blog post was published 90+ days after the initial report.

read more...

Bob Mitro getpublii.com

Publii - Open source CMS for static websites

Bob Mitro, Owner of Publii: Unlike static-site generators that are often unwieldy and difficult to use, Publii provides an easy-to-understand UI much like server-based CMSs such as WordPress or Joomla!, where users can create posts and other site content, and style their site using a variety of built-in themes and options. I love static-site generators, my favorite being Jekyll. The performance and security benefits are pretty amazing. Still, I have to agree with Bob here, they're not always easy to use for non-developers. Publii looks like a nice option for clients or those of us who prefer a nice UI.

read more...

Paul Dix InfluxData Blog

It’s time for the open source community to get real

Paul Dix shared his thoughts on the subject of Redis and the misunderstandings going on around Redis Common Clause Licensing. Paul writes on the InfluxData blog: The accusation that RedisLabs did a bait and switch is entirely unfair. They’ve been funding open source Redis development for years and that work is now and will be in the future under the liberal BSD license. It’s not like they tricked a bunch of people into using Redis and pulled the rug out from under them. I’m sure that more than 99.99% of the Redis users are completely unaffected by this. And for those others, it’s not like the code that’s already out there is unusable. To my knowledge they can’t retroactively apply the license. So we’re really only talking about forward development to specific modules (not Redis core). Paul also shares how he favors open core, and the issues he has with other models to sustain the development of open source at scale. Open core is a fairly honest way to go about developing open source software. As long as you’re clear about what is open and what is closed. Bradley Kuhn, Executive Director and President of Software Freedom Conservancy, also shared some thoughts on "Commons Clause" style licenses. Update 2018/08/24 @ 15:09 — this Twitter thread is a nice read too.

read more...

Our podcasts

No matter where you are on your hacker path, we have a podcast for you. This community cares about the past, present, and future hacker generation. We're about lifting people up, not putting people down.

0:00 / 0:00