Datei-Uploads sind oft unterschätzte Angriffspunkte in #Java Webanwendungen. Path Traversal, unsichere temporäre Dateien & fehlendes #Logging öffnen Tür & Tor.
Lerne, wie @svenruppert gezielt mit #Vaadin Flow absichert: https://javapro.io/de/erstellen-einer-einfachen-datei-up-download-anwendung-mit-vaadin-flow/
Where do the weapons & mercenaries come from, those that destabilise the Sub-Saharan Sahel region in Africa?
Who trains the troops of warlords?
Who runs the gold, diamond & rare earths mines that employ child labour?
Who controls logging companies destroying huge swathes of Africa's rain forests?
That's right: The Wagner group, from Russia.
https://www.youtube.com/watch?v=0HgL23XDGyE
#africa #wagner #sahel #russia #mining #childlabour #logging #nafo
Mid-day at the Wrecks, looking east towards Comox across the old booming ground. I knew men who worked here in the 1940s and 1950s. This is where the Comox Valley old growth forest was dumped off railcars and boomed up for Fraser Mills in Vancouver. I knew these men when I was a boy and they were old, white-haired loggers who worked with my father.
#bxw #photography #vancouverisland #logging #forestry #oldgrowth
Nature on the run in 2025.
#forest #nature #wildlife #logging
#victoria #australia
Victoria’s Environment Minister just ruled out a new Great Forest National Park to the relief of destructive logging, hunting, mineral prospecting, bush-whacking dirt bike groups. Because hiking camping, animal & bird watching in national parks is not the right kind of recreation 🤪 @PHuntAgri The Weekly Times
this will happen to #nsw Great Koala Park 🐨
Noch nie von #CWE-22, CWE-377, CWE-778 gehört? Dann könnte dein nächster Datei-Upload in #Java zur Sicherheitslücke werden.
@svenruppert hat praktische Abhilfe parat.
Jetzt absichern: https://javapro.io/de/erstellen-einer-einfachen-datei-up-download-anwendung-mit-vaadin-flow/
#WebDev #DevSecOps #Vaadin #SecureCoding #Logging #FileUpload
Логирование в конвейере дебетовых карт: как мы сделали его удобным для себя
Статья о том, как мы улучшали логи внедрением сквозных идентификаторов и не только. Делали это для того, чтобы упростить и ускорить разбор возникающих ошибок. Это в разы сократило время разбора. Статья может быть полезна backend-разработчикам, лидам, тестировщикам, аналитикам, которые проектируют и разрабатывают сложные системы. Код написан на java и соседних технологиях, но подходы, я уверен, универсальны. Они упростят жизнь при разборе ошибок на проде и на тестовых стендах.
https://habr.com/ru/companies/otpbank/articles/923584/
#java #springboot #logging #opensearch #финтех #разработка #банк #дебетовые_карты #тестирование #код
Refactored my audit logging to use strongly typed audit messages — now I log successes and failures with full context and clarity. It’s like giving the system a memory.
If you visit Mohonk Mountain House right now you'll notice that dozens of large trees surrounding Lake Mohonk have been cut down, presumably to provide a better view of the iconic summer houses from the hotel. The clearcutting is a jarring change for regulars but what I found super annoying is the text on the signs they've situated near all the stumps: "reforestation in progress please stay on marked path." Reforestation?? #NewPaltz #NewYork #trees #forest #logging #gazebos #mohonk
I spent some time researching exporting JSON logs from various applications on my #pfSense router. I came across a lot of "just use syslog-ng" in forums. I decided to put together notes with the details on how to do that in case you don't want to think about it yourself:
🔍 Will there be a #VictoriaTraces?
We have #VictoriaMetrics for metrics and #VictoriaLogs for logs. Now we're exploring the third pillar of #observability: distributed tracing.
See our development notes and how a potential VictoriaTraces could stack up.
👉 Learn more: https://hubs.li/Q03rq73W0
Hat hier jemand Meinungen zu OTel Collector vs #Grafana Alloy um Metriken und Logs in #VictoriaMetrics/Loki zu bekommen? Ich hab zwei Junior #DevOps Menschen die sich die Köpfe einschlagen welches besser ist und meiner Meinung nach ist es scheiß egal, weil Telegraf eh flexibler ist 😆
#followerpower #askFedi #monitoring #logging #telemetry #linux #server #SaaS #observability
Second day at the annual @opensuse conference in Nürnberg, wearing another syslog-ng t-shirt :-) I'll stay at #oSC25 most of the day, and happy to answer your #logging questions.
https://youtube.com/watch?v=cmRJ8Y7clbA&si=jks7K9G3470YkgUA
Great video on roadless areas around #lassenpark in #EasternCalifornia by a forest manager and cartographer.
Logging risked areas may not help with fire and land management. There's a lot of nuance that goes into proper stewardship of forests, highly managed forests of dense monocrop trees burn hotter than less continuous and varied stands actively managed with prescribed fire.
#USFS #logging #LandManagement #ProtectOurPublicLands #forestry #GIS
Last chance to upload to Logbook of the World before they shut down for a systems upgrade. What was the ARRL thinking? Field Day is basically here. If this were my client, we would dual-upload, test, and schedule a date to cut over painlessly.
You want young and middle-aged people to get involved? Great, I will, if I can recommend we not shut down for ham radio’s biggest “holiday” of the year. Even AI could recommend that.
#ARRL #LotW #LogbookOfTheWorld #AmateurRadio #HamRadio #logging #radio
