What dev-related stuff have you been up to?

[Exadra37]

@Cellane

So you know how last week, one of the old root certificates for Let’s Encrypt expired?

Did it caused issues with mobile apps certificate pinning?

[Caleb]

I’ve been learning Elixir - it’s very different than any other programming language I’ve learned before

[mantyjaska]

@Cellane

Apparently, turns out that for back-ends written in Swift/Vapor, it doesn’t even matter what sort of root certificates are trusted by the OS, but rather what version of libssl was the server binary linked to… or something like that. Anyhow, thanks to this forum, I could become a superhero for a few hours

I think this is true on most backends (well, at least Java). The OS has less to do with it than the actual SSL libraries used.

But nice work Be sure to ask for a raise

[OvermindDL1]

@Cellane

Apparently, turns out that for back-ends written in Swift/Vapor, it doesn’t even matter what sort of root certificates are trusted by the OS, but rather what version of libssl was the server binary linked to… or something like that. Anyhow, thanks to this forum, I could become a superhero for a few hours

Nice!

Yeah old version of openssl only looked at the first result of a certificate instead of multiple. ^.^;

[Cellane]

@Exadra37

Did it caused issues with mobile apps certificate pinning?

Nope! The issue was on the side of our server, which acts as a middle-man/proxy between the client and some sort of third-party service. The certificate that is exposed to the mobile clients did not need any adjustments, it was just a trust issue on the server.

@mantyjaska

I think this is true on most backends (well, at least Java). The OS has less to do with it than the actual SSL libraries used.

TIL, thank you! Raise would’ve been nice

@OvermindDL1

Yeah old version of openssl only looked at the first result of a certificate instead of multiple. ^.^;

Oh, that’s the root cause, thank you for telling me! I’ll share that with the team responsible for that service.

As for my dev-related update, I’m just counting down hours and minutes to ElixirConf US 2021! So hyped, though I wonder how well will I deal with the timezone difference between Japan and Texas The talks start at around midnight every day, so for the next four days, I’ll revert back to my university days of working during night and sleeping during day

[DevotionGeo]

Today I’m trying FastAPI. Let’s see how many pomodoros can I survive.

[crc]

Installing vim pluggin to vcode

[OvermindDL1]

@Cellane

Oh, that’s the root cause, thank you for telling me! I’ll share that with the team responsible for that service.

Yeah OpenSSL is NOT ever something you want to be running an old version of. The version with that bug (and older) is pretty old, so if it was in use then it might be time to look over things and make sure its updated everywhere (especially since I’m pretty sure there were some pretty serious security issues back then)…

[Cellane]

@OvermindDL1

Yeah OpenSSL is NOT ever something you want to be running an old version of. The version with that bug (and older) is pretty old, so if it was in use then it might be time to look over things and make sure its updated everywhere (especially since I’m pretty sure there were some pretty serious security issues back then)…

Ooh, scary… Though do you mind if I ask something? Although of course, installing updates (especially security ones) is clearly a good thing, let’s say that in this case, OpenSSL & the server binary were a part of a Docker container running in Fargate, hidden behind a load balancer, never to be accessed “directly”. Do you think that the danger of an attack is lower in a situation like that?

(I don’t know if that was the actual setup in this case as it was a different branch’s project, but this is the setup we regularly use in our team.)

[OvermindDL1]

@Cellane

Do you think that the danger of an attack is lower in a situation like that?

If its exposed publicly then there’s still an attack surface.

Through a load balancer is still public, less surface area there, but it still talks.

[Ted]

I’ve been making time to re-read Getting Clojure.

Getting Clojure Book Portal | Devtalk

It’s as enjoyable as I remember and now I’m giving Clojure another whirl, this time with the Cursive IDE, which I like very much so far and seems to run fine on my wimpy Windows laptop.

I think my next steps are to get more comfortable and ergonomic with REPL-driven programming with Cursive and then take Sean Corfield’s advice by taking baby steps with a web app:

What do beginners struggle with?

At any rate, I’m having fun staying up past my bed time slinging some LISP.

[Cellane]

Last week, I was lucky enough to be able to join ElixirConf US 2021 It was my first time joining an Elixir conference, and I had a blast! The talks were amazing as expected (still catching up on replays!), but this was the first conference where I tried to overcome my social awkwardness and socialize with other participants – and boy it was amazing! Also, I got to talk briefly to José Valim!

[andrea]

Working on a small React project now, but hoping to learn Kotlin before the year ends.

[brennan]

Currently on an ASP.NET Core project, plus Blazor

[kodepett]

I’ve been going through phoenix liveview and mastering Elixir.
A few challenges have been encountered as the liveview version used in the book is old.
I’m learning a lot from mastering Elixir, I rushed through learning elixir and I feel now is the time to hone my skills.

[DevotiousDev]

I’m going to switch jobs by the end of the year. Programming languages wise, it’s more of the same (Kotlin, React) but I’m really looking forward to their more mature devops environment compared to my current job.

[Rainer]

Crosspost from the elixirforum:
I’m building a remote control for my model train with nerves

RailDwarf remote test

[Maartz]

Reading @tonyhammond 's book about Graphs. Can’t wait for the paperback edition so I bought the digital one… obviously waiting for the paper one next year

[Cellane]

I haven’t had much time to read recently due to moving houses, but I picked up Seven Languages in Seven Weeks during Black Friday sale and so far managed to dig through the Ruby chapter, and oh boy does it start good! I can’t wait to meet all the languages in the book!

[Aetherus]

I’m trying learning Rust by reading the book Practical Machine Learning with Rust.