Lmst

Złośliwa paczka w NuGet podszywała się pod Stripe i kradła klucze API

Badacze z ReversingLabs odkryli złośliwą paczkę w NuGet (menedżer pakietów do .NET), która podszywa się pod Stripe[.]net – oryginalny pakiet, który został pobrany ponad 70 milionów razy. TLDR: Stripe to popularna bramka obsługująca wiele metod płatności, takich jak karty kredytowe czy subskrypcje. Ułatwia wdrażanie monetyzacji w wielu usługach/aplikacjach. Firma dostarcza...

#Aktualności #Dotnet #ŁańcuchDostaw #Stripe

https://sekurak.pl/zlosliwa-paczka-w-nuget-podszywala-sie-pod-stripe-i-kradla-klucze-api/

Złośliwa paczka w NuGet podszywała się pod Stripe i kradła klucze API https://sekurak.pl/zlosliwa-paczka-w-nuget-podszywala-sie-pod-stripe-i-kradla-klucze-api/ #Aktualnoci #Dotnet #acuchdostaw #Stripe

Today I achieved a working cross-platform interop between #dotnet and Haskell. I build a shared library (.dll/.so/.dylib) with GHC and use it from .NET via Haskell FFI.

Was quite a busy work to get it to build properly on Linux (of all things!), but in the end it all works, with tests on Haskell and .NET side: https://github.com/ForNeVeR/tabularius

Now, having that sorted, I can finally get to the implementation of the actual app features in the project.

Natural Keys in the Critter Stack https://jeremydmiller.com/2026/03/16/natural-keys-in-the-critter-stack/

#dotnet #marten #wolverine

Dot Net North is tomorrow night, in Manchester. We’ve got an interesting talk on Analytics, plus complimentary pizza and drinks. From 6pm. RSVP over on Meetup https://www.meetup.com/dotnetnorth/events/313540437/ #dotNET #TechEvents #MVPBuzz

Blogged: Things That Caught My Attention Last Week - March 15 https://bit.ly/47yi50G #dotnet

(1/2) My first foray into OpenTelemetry was disappointing. The UI's and broken tools are a mess.

- Bad consistency
- Dozens of packages required
- Spans seem to work 50% of the time

Notice just "postgresql". No details. I have to expand it to see them. Compare with the second screenshot where I see ACTUAL details without needing to expand.

As for spans, look at that "=> 4.41s". If I'm using OT that should be a Span instead of polluting the log entries?

#dotnet #programming #opentelemetry

Time you can fake, tests you can trust. This drop breaks down TimeProvider, plus a neat Aspire patch, zero-install .NET demos in the browser, and a swappable local voice AI pipeline. #dotnet #csharp #aspire

.NET drip - Saturday, March 14...