Code Culture

xz CVE-2024-3094 FEEDBACK UND RÜCKBLICK * Dürer under your skin: Tattoo art | Albrecht-Dürer-Haus [https://museen.nuernberg.de/duererhaus/kalender-details/duerer-under-your-skin-2410] * perplexity.ai [https://www.perplexity.ai/] * Redis’ license change and forking are a mess that everybody can feel bad about [https://arstechnica.com/information-technology/2024/04/redis-license-change-and-forking-are-a-mess-that-everybody-can-feel-bad-about/] NEWS WEB * Verknüpfung zu Mastodon & Co.: Threads führt Anbindung ans Fediverse vor [https://www.heise.de/news/Verknuepfung-zu-Mastodon-Co-Threads-fuehrt-Anbindung-ans-Fediverse-vor-9660185.html] AI * Facebook Is Making Insane AI-Generated Fever Dreams Go Viral for Gullible Boomers [https://futurism.com/facebook-ai-generated-images-viral] * A ChatGPT for Music Is Here. Inside Suno, the Startup Changing Everything [https://www.rollingstone.com/music/music-features/suno-ai-chatgpt-for-music-1234982307/?ueid=af57ec3cc3cd7cfbf38a3686cfda3f34] * AI bots hallucinate software packages and devs download them [https://www.theregister.com/2024/03/28/ai_bots_hallucinate_software_packages/] HARDWARE * OB–4 the magic radio [https://teenage.engineering/products/ob-4] MNA * With Affinity acquisition, Canva should be able to compete better with Adobe's creative tools | TechCrunch [https://techcrunch.com/2024/03/26/with-affinity-acquisition-canva-should-be-able-to-compete-better-with-adobes-creative-tools/?utm_source=tldrdesign] * Gravis wird dichtgemacht: Mittlerweile offiziell bestätigt [https://www.appgefahren.de/gravis-wird-dichtgemacht-mittlerweile-offiziell-bestaetigt-354411.html] * The Disney Plus-Hulu merger is way more than a streaming bundle [https://www.theverge.com/2024/3/27/24112747/disney-plus-hulu-tile-app-streaming] * 1Password Acquires Kolide [https://www.kolide.com/blog/1password-acquires-kolide] THEMA DER WOCHE: XZ ATTACK * xz Backdoor CVE-2024-3094 [https://openssf.org/blog/2024/03/30/xz-backdoor-cve-2024-3094/] * What we know about the xz Utils backdoor that almost infected the world [https://arstechnica.com/security/2024/04/what-we-know-about-the-xz-utils-backdoor-that-almost-infected-the-world/] * research!rsc: Timeline of the xz open source attack [https://research.swtch.com/xz-timeline] CODE DER WOCHE * Yet Another Dotfiles Manager [https://yadm.io/#] NO-CODE DER WOCHE * HeyForm: The best open-source form builder [https://heyform.net/] VERABSCHIEDUNG * exentra sucht EntwicklerInnen (m/w/d) [https://exentra.de/karriere] * buymeacoffe.com/codeculture [https://www.buymeacoffee.com/codeculture]

News, News, News FEEDBACK UND RÜCKBLICK * htmx ~ Examples [https://htmx.org/examples/] * github.com/Kotlin/kotlinx.html [https://github.com/Kotlin/kotlinx.html] * Monsieur Cuisine smart [https://www.monsieur-cuisine.com/de] * Entdecke die Funktion „Meine Kreationen“ – Cookidoo® – das offizielle Thermomix®-Rezept-Portal [https://cookidoo.de/foundation/de-DE/pages/discover-created-recipes] * Dürer under your skin: Tattoo art | Albrecht-Dürer-Haus [https://museen.nuernberg.de/duererhaus/kalender-details/duerer-under-your-skin-2410] * AirUp [https://de.air-up.com/pages/not-your-regular-water-bottle-1?bottle=bottle-set-hot-pink&step=start] * Neuer Hackerspace eingeweiht [https://www.tvingolstadt.de/mediathek/video/neuer-hackerspace-eingeweiht/] * Hyprland: Dynamic tiling window compositor with the looks [https://hyprland.org/] * Console 1 Channel Mk III [https://www.softube.com/products/console-1-channel-mk-iii] NEWS WEB * Diese EU-Strafe soll Apple und die anderen Tech-Riesen abschrecken [https://www.faz.net/aktuell/wirtschaft/unternehmen/diese-eu-strafe-soll-apple-und-die-anderen-tech-riesen-abschrecken-19562760.html] * The Getty Makes Nearly 88,000 Art Images Free to Use However You Like [https://www.openculture.com/2024/03/the-getty-makes-nearly-88000-art-images-free-to-use-however-you-like.html] * The J. Paul Getty Museum Collection [https://www.getty.edu/art/collection/search?open_content=true] AI * Google pauses Gemini’s ability to generate AI images of people after diversity errors [https://www.theverge.com/2024/2/22/24079876/google-gemini-ai-photos-people-pause] * Fig [https://fig.io/] * Devin: Introducing the World’s First Ever AI Software Engineer [https://opencv.org/blog/devin-ai-software-engineer/] * Measuring GitHub Copilot’s Impact on Productivity [https://dl.acm.org/doi/pdf/10.1145/3633453] * Introducing the next generation of Claude \ Anthropic [https://www.anthropic.com/news/claude-3-family] SECURITY * Wyze says camera breach let 13,000 customers briefly see into other people’s homes [https://www.theverge.com/2024/2/19/24077233/wyze-security-camera-breach-13000-customers-events] * Bundeswehrspionage: Wie konnte das Taurus-Gespräch abgehört werden? [https://www.zeit.de/digital/datenschutz/2024-03/bundeswehr-spionage-webex-mitschnitt-taurus] APPS * Apple Announces Ability to Download iPhone Apps From Websites in EU [https://www.macrumors.com/2024/03/12/apple-announces-app-downloads-from-websites/] * Mehr Sideloading: Apps dürfen künftig direkt auf EU-iPhones [https://www.heise.de/news/Mehr-Sideloading-Apps-duerfen-kuenftig-direkt-auf-EU-iPhones-9652318.html] HARDWARE * MacBook Air 13-inch and MacBook Air 15-inch [https://www.apple.com/macbook-air/?afid=p239|482924&cid=aos-us-aff-ir-482924] * Sheeran Loopers Looper X [https://www.thomann.de/de/sheeran_loopers_looper_x.htm?lid=fpjgaqadn1jv&offid=1&affid=1739&subid2=looper_080324_dach] CODE DER WOCHE * Charm [https://charm.sh/apps/] NO-CODE DER WOCHE * Matty Vogel — Digital Resources for Creatives [https://store.mattyvogel.com/] VERABSCHIEDUNG * exentra sucht EntwicklerInnen (m/w/d) [https://exentra.de/karriere] * buymeacoffe.com/codeculture [https://www.buymeacoffee.com/codeculture]

Endorse and Regret FEEDBACK UND RÜCKBLICK * QueryDSL 6.0 [https://github.com/OpenFeign/querydsl/releases/tag/6.0] * PINAKOTHEK DER MODERNE - Ein Haus, 4 Museen [https://www.pinakothek-der-moderne.de/] NEWS SOFTWARE & APPS * VEA (Voice Enhancement Assistant) | Audio enhancer [https://www.izotope.com/en/products/vea.html] * A Fresh Start for Castro [https://castro.fm/blog/castro-is-back] * Universal Music Group plans to pull song catalog from TikTok | TechCrunch [https://techcrunch.com/2024/01/30/universal-music-group-plans-to-pull-song-catalog-from-tiktok/] * The Iconfactory Launches Project Tapestry, a Kickstarter Campaign to Create a Universal Inbox for RSS, Social Media, and More [https://www.macstories.net/news/the-iconfactory-launches-project-tapestry-a-kickstarter-campaign-to-create-a-universal-inbox-for-rss-social-media-and-more/] * 2024: announcing the year of the OpenStreetMap vector maps [https://blog.openstreetmap.org/2024/02/11/2024-announcing-the-year-of-the-openstreetmap-vector-maps/] AI * Bard becomes Gemini: Try Ultra 1.0 and a new mobile app today [https://blog.google/products/gemini/bard-gemini-advanced-app/] * Sora: Creating video from text [https://openai.com/sora] * Google stellt verbesserte Gemini-KI mit 1 Million Token vor [https://www.golem.de/news/version-1-5-google-stellt-verbesserte-gemini-ki-mit-1-million-token-vor-2402-182273.html] * Air Canada must honor refund policy invented by airline’s chatbot [https://arstechnica.com/tech-policy/2024/02/air-canada-must-honor-refund-policy-invented-by-airlines-chatbot/] MNA * Amazon terminates iRobot deal, Roomba maker to lay off 31% of staff [https://www.cnbc.com/2024/01/29/amazon-terminates-irobot-deal-vacuum-maker-to-lay-off-31percent-of-staff.html] * Exclusive: Reddit seeks to launch IPO in March [https://www.reuters.com/markets/deals/reddit-seeks-launch-ipo-march-sources-2024-01-18/] * Sony’s Crunchyroll Erasure Of Funimation Anime Libraries Is Inexcusable [https://www.forbes.com/sites/paultassi/2024/02/08/sonys-crunchyroll-erasure-of-funimation-anime-libraries-is-inexcusable/] SECURITY * How a mistakenly published password exposed Mercedes-Benz source code | TechCrunch [https://techcrunch.com/2024/01/26/mercedez-benz-token-exposed-source-code-github/] THEMA DER WOCHE: ENDORSE OR REGRET Regeln: FOSS oder weniger als 40k pro Jahr für eine Firma unserer Größe * GitHub [https://github.com/] - Neutral * GitLab [https://gitlab.com/] - Endorse * Jenkins [https://www.jenkins.io/] - Endorse * Maven [https://maven.apache.org/] - Endorse * Gradle - Endorse :) * Quarkus [https://quarkus.io/] - Endorse * Spring [https://spring.io/] - Neutral * SBOM und Dependency Track [https://dependencytrack.org] - Neutral * Pact [https://docs.pact.io/] - Neutral * Kogito [https://kogito.kie.org] - Neutral * Selenium [https://www.selenium.dev/] - Regret * Grafana + Prometheus [https://grafana.com/] - Endorse * Kubernetes [https://kubernetes.io/] - Endorse * Docker [https://www.docker.com/] - Endorse * Atlassian [https://www.atlassian.com/] - Neutral * Gitea [https://gitea.io/] - Regret * Bitwarden/Vaultwarden [https://bitwarden.com/] - Endorse * Secrets (Hemmelig/Yopass) [https://hemmelig.app/] - Endorse * Nginx Proxy Manager [https://nginxproxymanager.com/] - Endorse * Slack [https://slack.com/] - Regret * Self Hosted Email - Regret * Microsoft 365 [https://www.microsoft.com/en-us/microsoft-365] - Neutral * Helm [https://helm.sh/] - Endorse * Harbor [https://goharbor.io/] - Endorse * Renovate [https://www.whitesourcesoftware.com/free-developer-tools/renovate] - Endorse * Making the switch from on-prem AD to AAD / Entra ID - No Regrets * Cert manager [https://cert-manager.io/] - Endorse * Eclipse IDE [https://www.eclipse.org/ide/] - Regret * IntelliJ [https://www.jetbrains.com/idea/] - Endorse * Using IntelliJ for DevOps - No Regrets! * Switching to cloud managed infrastructure with Hetzner [https://www.hetzner.com/cloud] - No Regrets * Switching from OpenVPN to Wireguard - No regrets * Using M1/2/3 MacBooks - No regrets * Sticking with MacOS as our development OS - No regrets CODE DER WOCHE * Pkl [https://pkl-lang.org/] * koekeishiya/yabai: A tiling window manager for macOS based on binary space partitioning [https://github.com/koekeishiya/yabai] * React Email - React Email [https://react.email/docs/introduction] NO-CODE DER WOCHE * The fediverse, explained [https://www.theverge.com/24063290/fediverse-explained-activitypub-social-media-open-protocol] VERABSCHIEDUNG * exentra sucht EntwicklerInnen (m/w/d) [https://exentra.de/karriere] * buymeacoffe.com/codeculture [https://www.buymeacoffee.com/codeculture]

News FEEDBACK & RÜCKBLICK * Self-Hosted Podcast [https://selfhosted.show/] * Immich [https://immich.app/] * Universphere [http://universphere.cloud/] * Apple TV 4K [https://www.apple.com/de/apple-tv-4k/] * NVIDIA SHIELD TV PRO with 4K HDR [https://www.nvidia.com/de-de/shield/shield-tv-pro/] * Deutschlandticket: DB verlangt Bankkonto-Bestätigung bei Lastschrift-Kauf [https://www.heise.de/news/Deutsche-Bahn-Wer-ein-Abo-per-Lastschrift-zahlt-muss-Bankkonto-bestaetigen-9578677.html] * Brakence [https://www.brakence.com/] * Instagram (@1kurtains) [https://www.instagram.com/1kurtains/?hl=de] * Porsche Design | Honor Magic V2 RSR erster Eindruck [https://www.youtube.com/watch?v=FjNrn4ytOpo] NEWS DEVELOPER * MySQL Introduces Javascript Support in Preview [https://www.infoq.com/news/2024/01/mysql-javascript-procedures/] * apache/incubator-kie-kogito-runtimes [https://github.com/apache/incubator-kie-kogito-runtimes] SOFTWARE UND APPS * The Castro podcast app and its website are down [https://www.theverge.com/2024/1/7/24028955/castro-podcast-player-shut-down-rumor-ios-app] * Hey Calendar [https://www.hey.com/calendar/] * Notion Calendar [https://www.notion.so/de-de/product/calendar] * Slack’s Catch Up feature is like Tinder for your work messages [https://www.theverge.com/2024/1/10/24026571/slack-catch-up-mobile-messaging-app] * Einstellung der Creative Cloud-Dateisynchronisation [https://helpx.adobe.com/de/creative-cloud/kb/end-of-life-creative-cloud-synced-files.linkfree.html?trackingid=7JJ168FT&mv=email] MNA * Baden-Württemberg: Akademie "Deutsche Pop" ist pleite: Studierende sind verzweifelt [https://www.tagesschau.de/inland/regional/badenwuerttemberg/swr-akademie-deutsche-pop-ist-pleite-studierende-sind-verzweifelt-100.html] * Duolingo cuts 10% of its contractor workforce as the company embraces AI | TechCrunch [https://techcrunch.com/2024/01/09/duolingo-cut-10-of-its-contractor-workforce-as-the-company-embraces-ai/?guccounter=1] * Shutting down Artifact [https://medium.com/artifact-news/shutting-down-artifact-1e70de46d419] * Flattr | Service No Long Exists [https://flattr.com/] HARDWARE * Apple Vision Pro available in the U.S. on February 2 [https://www.apple.com/newsroom/2024/01/apple-vision-pro-available-in-the-us-on-february-2/] * The Apple Vision Pro’s Missing Apps [https://stratechery.com/2024/the-apple-vision-pros-missing-apps/] * The Rabbit R1 is an AI-powered gadget that can use your apps for you [https://www.theverge.com/2024/1/9/24030667/rabbit-r1-ai-action-model-price-release-date] * SEQTRAK - Yamaha [https://de.yamaha.com/de/products/music_production/music-production-studios/seqtrak/index.html] * Revolutionärer Gesundheitscheck für zu Hause - BeamO | Withings [https://www.withings.com/de/de/beam-o] AI * Lazy use of AI leads to Amazon products called “I cannot fulfill that request” [https://arstechnica.com/ai/2024/01/lazy-use-of-ai-leads-to-amazon-products-called-i-cannot-fulfill-that-request/] * Custom GPTs | New Marketplace by OpenAI: Tutorial [https://thecreatorsai.com/p/custom-gpts-new-marketplace-by-openai?utm_source=substack&utm_medium=email] * Microsoft’s new Copilot Pro brings AI-powered Office features to the rest of us [https://www.theverge.com/2024/1/15/24038711/microsoft-copilot-pro-office-ai-apps] * Sascha Lobo on LinkedIn: #wef [https://www.linkedin.com/feed/update/urn:li:activity:7153744183113986048/] SECURITY * Trello: Mehr als 15 Millionen Datensätze aufgetaucht [https://www.heise.de/news/Trello-Mehr-als-15-Millionen-Datensaetze-aufgetaucht-9605372.html] CODE DER WOCHE * /apache/maven-mvnd [https://github.com/apache/maven-mvnd] NO-CODE DER WOCHE * Palworld [https://store.steampowered.com/app/1623730/Palworld/] VERABSCHIEDUNG * exentra sucht EntwicklerInnen (m/w/d) [https://exentra.de/karriere] * buymeacoffe.com/codeculture [https://www.buymeacoffee.com/codeculture]

Hobbyprojekte FEEDBACK UND RÜCKBLICK * Markus Herhoffer (@d135_1r43@mastodon.social) [https://mastodon.social/@d135_1r43] * MASCHINE [https://www.native-instruments.com/de/products/maschine/production-systems/maschine/] * Albrecht-Dürer-Haus [https://museen.nuernberg.de/duererhaus] * Thermomix® Sensor [https://www.vorwerk.com/de/de/c/home/landingpages/thermomix/sensor] NEWS AI * NY Times sues Open AI, Microsoft over copyright infringement [https://arstechnica.com/tech-policy/2023/12/ny-times-sues-open-ai-microsoft-over-copyright-infringement/] * Microsoft Copilot [https://apps.apple.com/de/app/microsoft-copilot/id6472538445?l=en-GB] * Database of 16,000 Artists Used to Train Midjourney AI, Including 6-Year-Old Child, Garners Criticism [https://www.artnews.com/art-news/news/midjourney-ai-artists-database-1234691955/] APPS * iOS 17.2 arrives with new Journal app and spatial video capture support [https://www.theverge.com/2023/12/11/23990347/ios-17-2-released-iphone-update-journal-app-spatial-video] PLATTFORMÖKONOMIE * Epic win: Jury decides Google has illegal monopoly in app store fight [https://www.theverge.com/23994174/epic-google-trial-jury-verdict-monopoly-google-play] * Valve responds to antitrust lawsuit, defends Steam's 30% cut [https://www.pcgamer.com/valve-responds-to-antitrust-lawsuit-defends-steams-30-cut/] WEB * How Plane, an open-source alternative to Jira, got to the #1 in project management on GitHub in less than a year [https://plane.so/blog/how-we-got-to-20k-github-stars] * Threads launches for nearly half a billion more users in Europe [https://www.theverge.com/2023/12/14/23953986/threads-european-union-launch-eu-meta-twitter-rival] * Amazon Prime Video will start showing ads on January 29th [https://www.theverge.com/2023/12/26/24015595/amazon-prime-video-ads-coming-january-29] M&A * AtomicJar is now part of Docker! - AtomicJar [https://www.atomicjar.com/2023/12/atomicjar-is-now-part-of-docker/] * Figma and Adobe are abandoning our proposed merger | Figma Blog [https://www.figma.com/de/blog/figma-adobe-abandon-proposed-merger/] * VanMoof 2.0: a new hope [https://www.theverge.com/24009091/vanmoof-scooter-next-steps-parts-service-e-bikes] HARDWARE * Apple to pull Apple Watch Series 9 and Ultra 2 this week due to ITC ban [https://www.theverge.com/2023/12/18/24006080/apple-watch-ban-series-9-ultra-2-itc-import] * Apple resumes Apple Watch sales after ban is paused [https://www.theverge.com/2023/12/27/24016684/apple-watch-on-sale-again-import-sales-bans-paused] SECURITY * October Customer Support Security Incident - Update and Recommended Actions [https://sec.okta.com/harfiles] THEMA DER WOCHE: HOBBYPROJEKTE MARKUS * Opus Iræ [https://opus-irae.com/] * SvelteKit [https://kit.svelte.dev/] * The Backend to Build Anything or Everything | Directus [https://directus.io/] * github.com/d135-1r43/opus-irae.com [https://github.com/d135-1r43/opus-irae.com] * github.com/d135-1r43/mensabot [https://github.com/d135-1r43/mensabot] LUCAS * Buy me a Spezi [https://buymeaspezi.com/en] * Keyruu [https://keyruu.de/] * Nuxt: The Intuitive Vue Framework [https://nuxt.com/] * github.com/calcom/cal.com [https://github.com/calcom/cal.com] * Rallly - Schedule Group Meetings [https://rallly.co/] * mailcow: dockerized - Blog [https://mailcow.email/de/] * Nextcloud - Open source Kollaborationslösung [https://nextcloud.com/de/] * Roundcube - Free and Open Source Webmail Software [https://roundcube.net/] * SnappyMail, your webmail client - SnappyMail [https://snappymail.eu/] CODE DER WOCHE * Heynote [https://heynote.com/] NO-CODE DER WOCHE * Der Hobbit Hörspiel [https://www1.wdr.de/radio/hoerspiel/podcast/hobbit/index.html] VERABSCHIEDUNG * exentra sucht EntwicklerInnen (m/w/d) [https://exentra.de/karriere] * buymeacoffe.com/codeculture [https://www.buymeacoffee.com/codeculture]