Reddit Programming
199 subscribers
1.22K photos
127K links
I will send you newest post from subreddit /r/programming
Download Telegram
@redhat-cloud-services publish pipeline is compromised today and shipped a signed, trusted, malicious npm package
https://www.reddit.com/r/programming/comments/1ttt4p4/redhatcloudservices_publish_pipeline_is/

<!-- SC_OFF -->patch-client@4.0.4 (mailto:patch-client@4.0.4) went out through the project's own github action OIDC trusted publisher today and not any stolen token or a typosquat anything, we saw that the actual release pipeline produced it. this runs on npm install, steals cloud creds and self propagates by injecting fake CodeQL workflows into repository the stolen tokens can reach. 32 packages is currently sharing the same publisher so the window of exposure isn not only just a single package.
if you have anything from related to /redhat-cloud-services in your tree, 4.0.3 is the last clean version. <!-- SC_ON --> submitted by /u/BattleRemote3157 (https://www.reddit.com/user/BattleRemote3157)
[link] (https://safedep.io/redhat-cloud-services-hit-by-mini-shai-hulud-npm-worm/) [comments] (https://www.reddit.com/r/programming/comments/1ttt4p4/redhatcloudservices_publish_pipeline_is/)
How Fast Can You Parse 1 Billion Rows in Java? – Insane Speed Test • Roy van Rijn
https://www.reddit.com/r/programming/comments/1tvo6ij/how_fast_can_you_parse_1_billion_rows_in_java/

<!-- SC_OFF -->Join me in this deep dive where I'll explain all the code changes and tricks that took me from the reference implementation which processes the billion records in 4+ minutes, to processing everything in under 2 seconds. Who knew Java could be this fast? <!-- SC_ON --> submitted by /u/goto-con (https://www.reddit.com/user/goto-con)
[link] (https://youtu.be/pHZF-zJ3Bpg?list=PLEx5khR4g7PINwOsYrkwz3lTTJUYoXC53) [comments] (https://www.reddit.com/r/programming/comments/1tvo6ij/how_fast_can_you_parse_1_billion_rows_in_java/)