Reddit Programming
211 subscribers
1.22K photos
124K links
I will send you newest post from subreddit /r/programming
Download Telegram
I'm making a Go CLI that generates automatic commit messages based on changes
https://www.reddit.com/r/programming/comments/1kgl2pe/im_making_a_go_cli_that_generates_automatic/

<!-- SC_OFF -->Easy Commit Hi guys, I developed a CLI tool called EasyCommit that generates commit messages automatically using AI (OpenAI, Gemini) Example usage:
> easycommit
(It analyzes your staged changes and suggests a commit message) I'm starting to work with golang and this is one of my first projects, it's open-source and you can contribute to it, and if you can, give me tips and help with the source code Whether you are a beginner or an experienced professional, you can contribute to the project and we can learn together. Repo: github.com/GabrielChaves1/easycommit (https://github.com/GabrielChaves1/easycommit)
Feedback is appreciated! <!-- SC_ON --> submitted by /u/RefrigeratorSimple78 (https://www.reddit.com/user/RefrigeratorSimple78)
[link] (https://github.com/GabrielChaves1/easycommit) [comments] (https://www.reddit.com/r/programming/comments/1kgl2pe/im_making_a_go_cli_that_generates_automatic/)
[AJUDA][CleanCode] Poderiam assistir um vídeo sobre clean code e me dar um feedback do que acharam?
https://www.reddit.com/r/programming/comments/1kgl5g3/ajudacleancode_poderiam_assistir_um_v%C3%ADdeo_sobre/

<!-- SC_OFF -->Boa noite, pessoal. Estou fazendo alguns testes de didática e gostaria de ajuda de vocês para assistir um vídeo meu e me dar um feedback se poderem por favor. O link está relacionado ao post <!-- SC_ON --> submitted by /u/mugenku (https://www.reddit.com/user/mugenku)
[link] (https://youtu.be/W5zNVVdaw9c) [comments] (https://www.reddit.com/r/programming/comments/1kgl5g3/ajudacleancode_poderiam_assistir_um_v%C3%ADdeo_sobre/)
RATatouille: Popular NPM project backdoored with Remote Access Trojan (RAT)
https://www.reddit.com/r/programming/comments/1kgu2rh/ratatouille_popular_npm_project_backdoored_with/

<!-- SC_OFF -->First of all, I apologies for the Dad Pun, I really can't help it. TL;DR: rand-user-agent npm package was backdoored. RAT hidden via whitespace in dist/index.js. Executes on import: remote shell, file upload, PATH hijack. Affected versions: 1.0.110, 2.0.83, 2.0.84. npm token compromise — not GitHub. On May 6 (yesterday) we detected the NPM package rand-user-agent had some crazy weird obfuscated code in dist/index.js. The package (~45k weekly downloads) had been backdoored with a Remote Access Trojan (RAT). It was first turned malicious 10 days ago so unfortunately it almost certainly has had some impact. This one was really hard to spot, firstly the attackers took a tip from our friends at Lazarus and hid the code off screen in NPM code viewer box by adding a bunch of white spaces. A stupid but effective method of hiding malware. The malicious code was so long (on one line) that you could barely see the scroll bar to give you any indication anything was wrong. Secondly the code was dynamically obfuscated 3 times meaning it was quite hard to get it back to anything resembling a readable version. <!-- SC_ON --> submitted by /u/Advocatemack (https://www.reddit.com/user/Advocatemack)
[link] (https://www.aikido.dev/blog/catching-a-rat-remote-access-trojian-rand-user-agent-supply-chain-compromise) [comments] (https://www.reddit.com/r/programming/comments/1kgu2rh/ratatouille_popular_npm_project_backdoored_with/)
json, protobuf, avro, SQL - why do we have 30 schema languages?
https://www.reddit.com/r/programming/comments/1kh18ej/json_protobuf_avro_sql_why_do_we_have_30_schema/

<!-- SC_OFF -->I was reading this blog about schema-driven development with Kafka which I thought detailed pretty well why Protobuf should be king (https://buf.build/blog/kafka-schema-driven-development#toc-we-think-that-schema-language-should-be-protobuf). Note the company behind it is a protobuf company, so they're obviously biased, but I think it makes sense. It seems like JSON schema is very popular today, but I believe it has more limitations (verbose, hard to read, no good defauts, type system doesn't match to languages well) It got me thinking - why hasn't the world standardized on a single interface definition language? (IDL) Similar - why haven't we standardized to a single schema definition language? It makes sense to have different ways to serialize the same schema - a serialized byte representation optimized for few-message passing through an RPC call is different than the serialized byte representation of a columnar big data Parquet file - but do we really need to all of these have their own syntax and different language support? In theory, you should be able to serialize the same schema definition in different ways. (I posted a version of this yesterday and it got off to a good discussion, but the mods erroneously banned it on the grounds of the "not a support forum" rule. I am not asking for support - I'm starting a discussion.) <!-- SC_ON --> submitted by /u/2minutestreaming (https://www.reddit.com/user/2minutestreaming)
[link] (https://buf.build/blog/kafka-schema-driven-development) [comments] (https://www.reddit.com/r/programming/comments/1kh18ej/json_protobuf_avro_sql_why_do_we_have_30_schema/)