Author: drweb

Ubuntu Livepatch is a feature that applies kernel security fixes while the system is still running, so you do not need to reboot immediately after every kernel update. Ubuntu Livepatch is useful mainly on servers, where rebooting is not always convenient because it can interrupt services, disconnect users, or require a maintenance window. Livepatch reduces the gap between a security fix being released and it actually protecting the running system. The Linux kernel sits at the core of the system and is a frequent target for security issues, because when Canonical releases a kernel update, you would normally install it…

Read More

A vulnerability in Anthropic’s Claude Code development tool could have been exploited by threat actors to expose credentials and other secrets within CI/CD workflows, the latest example of the security risks to software development pipelines posed by such AI coding agents.Microsoft security researchers Dor Edry and Amit Eliahu wrote in a report that the now-patched flaw in Claude Code GitHub Action could have been manipulated through a prompt injection attack in which the bad actor inserts malicious commands that an AI agent would follow, exposing secrets such as issue bodies, pull request descriptions, and comments.This form of a prompt injection…

Read More

Internal developer platforms have become a tangled web of orchestration tools, CI runners and deployment systems that rarely speak the same language. Every new integration adds another translation layer, and as AI-driven automation starts to plug into those pipelines, the lack of a shared vocabulary for what is actually happening across the software delivery lifecycle becomes a real bottleneck. Without a consistent way to describe build, test and deploy events, both humans and agents are left stitching together logs and webhooks from systems that were never designed to interoperate.Dadisi Sanyika of the Continuous Delivery Foundation sat down with Mike Vizard…

Read More

In previous articles on this website, you learned how to extract EXIF data from JPG image files. This week, you will learn how to get similar data from the TIFF image format. The TIFF format also has its metadata. Pillow provides a similar dictionary for TIFF images in its TiffTags module. If you need a TIFF image, you can use this one, which is a cover from one of the author’s other books on ReportLab: You can create your own TIFF metadata extractor utility by making a new file named tiff_metadata.py and adding this code to it: # tiff_metadata.py from PIL import Image from…

Read More

Let’s say you’ve got some interactive element. This element works perfectly fine in just HTML, which is the foundation of progressive enhancement. And now, in your JavaScript, the functionality this button provides isn’t really necessary anymore, and your plan is to hide this element. What is the best way to accomplish this? I think it’s good to think of this abstractly, but if what I’ve presented above is so abstract that it makes it hard to think about, here are some examples: A “Load More” anchor link that loads the next set of items (i.e. Load More) which you don’t…

Read More

Datadog this week significantly extended the reach of its Bits artificial intelligence (AI) framework to enable DevOps teams to automatically discover and resolve issues based on the telemetry data collected by its observability platform.Announced at the company’s DASH 2026 conference, Datadog is now embedding an AI coding tool, dubbed Bits Code, across its entire portfolio that proposes remediations and generates the code to resolve issues based on the data residing in the Datadog observability platform.There is also a Bits Release agent that verifies every code change by analyzing the intended impact of the change, including generating a validation plan, running…

Read More

I’m just hearing about the closedby=”any” attribute/value for <dialog>. HTML popovers have this “light dismiss” behavior where you can “click outside” to close them, but not dialogs (until this). I forked a previous demo to try it and it works great (in Chrome & Firefox, just waiting for Safari). I’ve been using a custom <ClickOutsideDetector /> element for ages, so this is a welcome feature. CodePen Embed Fallback

Read More
SQL

While wandering around the documentation looking for some Question of the Day topics, I learned something new about the money data type. This post discusses what I learned.Another post for me that is simple and hopefully serves as an example for people trying to get blogging as #SQLNewBloggers.The Money TypeDid you know that you can add a currency symbol to the money data type for assignment? I didn’t. This isn’t in the documentation, but it’s something I need to submit as a PR.In any case, I can assign money like this:DECLARE @YenAmount MONEY; SET @YenAmount = ¥1500; SELECT @YenAmount AS…

Read More

I was a big fan of Coil back when it existed. The surface story of Coil was it was a browser extension you could install and you’d hook it up to an “online wallet” (with currency in it). Then websites could put a (or ?) tag on their website that was essentially a public key to their online wallet. You’d tell Coil how much money you were good for and it would sprinkle out your funds automatically to sites you visited that had this set up. It was a little “thanks for making a website that I visit, here’s a…

Read More

I had this (bad) idea. It’s related to popovers and anchor-positioned menus. I love this pairing: with only HTML and CSS we can make a button that opens/closes anything we want. A tooltip or a menu is a wonderful use-case. This isn’t a terribly difficult thing to do, but, you have to remember a bunch of stuff and put certain unique values on certain elements exactly. Remember the right command attribute value on the button Put a unique id on the menu. Match up the commandfor attribute on the button to that id. Make sure the button has an unique…

Read More