Episode Archives

OffHeap 73. Live from DevNexus 2022 in Atlanta

So we did it! We got together at the DevNexus Conference and produced a live show! With Okta’s super famous Matt Raible, and of course our own Danno Hinojosa (and Bob and I), we got together and talked Security (what does it mean to be secure in today’s day and age and how it has changed from 10 years ago)

So come and enjoy one of our most livelier shows as we quiz Matt and Danno on the most notorious vulnerabilities that has happened in the past 15 years! In all a very fun episode that we get to do live!

https://www.javaoffheap.com/datadog
We thank DataDogHQ for sponsoring this podcast episode

DO follow us on twitter @offheap
http://www.twitter.com/offheap

OffHeap 72. There’s a war going on…what does it mean for tech?

So there are slow news month, and there are some months where there’s so much news that is hard to comprehend. For one hand, we have seen the world opening up little by little again. There seems to be a good uptick of new in-person conferences and the Java ecosystem keeps moving on!

On the other hand, the world is changing rapidly and unexpectedly, and we find ourselves watching a new war unfold. There are ripples that happen in all parts of the world, and tech is not exempt. In this episode we talk about what’s happening in the tech space as the war between Russia and Ukraine unfolds (including companies stopping doing business, and open source vulnerabilities among others)

http://www.javaoffheap.com/datadog
We thank DataDogHQ for sponsoring this podcast episode

DO follow us on twitter @offheap
http://www.twitter.com/offheap

Conferences:
Oracle Live (Java Innovation March 22/24)
https://t.co/QaacSmzwAV

DevNexus (Apr 11)
https://www.devnexus.com

J on the Beach (Apr 22)
https://jonthebeach.com/speakers

SpringOne Tour
Chicago April 26-27
Toronto June 7-8
New York June 28-29
Seattle July 12-13
Bangalore September 13-14
Atlanta October 4-5
Amsterdam October 11-12

JFokus (May 2) (hybrid)
https://www.jfokus.se/

Microsoft JDConf (May 4) (online)
https://docs.microsoft.com/en-us/events/learntv/jdconf-2022/

GeeCon Krakow (May 11) (in person)
https://www.geecon.org/

Devoxx UK (May 11) (In person)
https://www.devoxx.co.uk/

jPrime (May 25) (in person)
https://jprime.io/

Spring I/O Barcelona May 26-27 (in person)
https://2022.springio.net/

Jnation (June 7) (in person)
https://2022.jnation.pt/

JBCN Conference (July 18) (in person)
https://www.jbcnconf.com/2022/

JavaZone (9/7) (in person)
https://2022.javazone.no/#/

SpringOne (12/6)
https://springone.io/

NetBeans 13 Released
https://netbeans.apache.org/download/nb13/index.html

Jakarta EE 10 Coming Soon
https://eclipse-ee4j.github.io/jakartaee-platform/jakartaee10/JakartaEE10ReleasePlan

JDK 18 Release (3/22)
https://jdk.java.net/18/release-notes

Google Sunsets Legacy G Suite
https://techcrunch.com/2022/01/28/google-will-let-legacy-g-suite-users-migrate-to-free-google-accounts/

Daylight Savings Time permanent?
https://www.cnn.com/2022/03/15/politics/senate-daylight-saving-time-permanent/index.html

Discussion:

Tech companies that left
https://www.cnet.com/news/politics/what-companies-have-left-russia-see-the-list-across-tech-entertainment-and-financial-institutions/

OffHeap 71. Hold on now, you mean I can JIT programs in the Cloud?

Ok, so the fun part about being in the Java Ecosystem is that it’s always trying new things, and the interesting new “thing” that seems to be happening is the ability to offload your “JIT” (Just In Time) compilation into the Cloud!

We discuss how this changes (or maybe not?) things, but is interesting to see how we are enhancing our regular “code, build, deploy” to have more complex workflows behind-the-scenes that allow you to become “faster”, and more performant (and ultimately save some Cloud $)

We also comb over the news, with the big NVIDIA / ARM deal falling through, costing around 1.25 billion dollars (insert Dr. Evil theme here) since it was done as a deposit for a successful transaction. Our local curdmudgeon offered his services as an money-holder and arbitrer for future NVidia / ARM contracts! (for a much much smaller sum than 1.25 billion).

http://www.javaoffheap.com/datadog
We thank DataDogHQ for sponsoring this podcast episode

DO follow us on twitter @offheap
http://www.twitter.com/offheap

Conferences:
JavaLand (Bruehl Germany 3/15-17)
https://www.javaland.eu/en/home/

Devnexus (4/11 User Group Summit; 4/12-14 Conference)
https://devnexus.com/

J On the Beach (4/27-29 in Malaga Spain):
https://jonthebeach.com/

Jfokus (5/2 – 5/4 Stockholm Sweden):
https://www.jfokus.se/

SpringOne 2022 (December 6-8 in San Francisco):
https://springone.io/

Spring I/O Barcelona (May 26-27):

News:

Groovy 4.0.0 Released:
http://groovy-lang.org/releasenotes/groovy-4.0.html

JDK 18 in RC stage and general availability 3/22:
https://openjdk.java.net/projects/jdk/18/

JDK 19 EA
https://jdk.java.net/19/

GraalVM 22.0:
https://www.graalvm.org/release-notes/22_0/

Deal for ARM crashes
https://www.cnn.com/2022/02/08/tech/nvidia-arm-deal-softbank-intl-hnk/index.html

Discussion
Azul Java Cloud Compiler:
https://www.infoq.com/news/2022/02/azul-cloud-compiler/

OffHeap 70. Buy, Sell, Or Skip! Looking at NFTs (forever code, and ransom in Open Source!)

There are times when there’s something in tech that starts brewing, and creating huge waves. We are just going through those times with Bitcoins and now the newly created Non-Fungible-Tokens (or NFT for short). If you have been surrounded by “bored apes”, or “lucky goats” and wanted to understand what NFTs are (or aren’t), then take a listen!

In addition we revisit the big npm-libs-colors debacle on which an open source contributor single-handedly sent the javascript world scrambling as he poisoned-pill his own work (what does it mean to rely on open source dependencies from individual contributors?). It’s a tough topic because we are really built most of our technology on open source.

We thank DataDogHQ for sponsoring this podcast episode

DO follow us on twitter @offheap
http://www.twitter.com/offheap

News
Devnexus
https://devnexus.org/

jChampions – January 2022
https://jchampionsconf.com/schedule.html

npm Lib corruption
https://www.bleepingcomputer.com/news/security/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps/

Spring Boot 3.0.0.M.1 Released/
https://spring.io/blog/2022/01/20/spring-boot-3-0-0-m1-is-now-available

Spring Framework 6.0.0.M2 Released
https://spring.io/blog/2021/09/02/a-java-17-and-jakarta-ee-9-baseline-for-spring-framework-6

Tomee 9.0.0 – Jakarta EE 9.1 Web Profile Certified
https://tomee.apache.org/

Discussion

NFTs
https://en.wikipedia.org/wiki/Non-fungible_token

NFT Music Video (by @fguime)
https://www.youtube.com/watch?v=UBnSK3txVGo

The Web3 Fraud (Opinion Nicholas Weaver)
https://www.usenix.org/publications/loginonline/web3-fraud

OffHeap 69. Ok, so the internet burned down with Log4J.

Hopefully you have had some time to R&R, but if you were in tech around Dec 2020, you heard that there was this massive security incident around Log4j. It affected almost everyone, from large to small companies, and if you work in Java, chances are that you might’ve to work on it too (and if you haven’t, it’s a good idea to double-check your code)

It has a severity of “10”, which is rare, and what makes it hard to ignore. If you want to understand what it was about, and how it got there, then take a listen. Learn how to patch against it, as we travel and dive into the mechanics and the missed opportunities that happened.

http://www.javaoffheap.com/datadog
We thank DataDogHQ for sponsoring this podcast episode

DO follow us on twitter @offheap
http://www.twitter.com/offheap

News
MicroProfile 5.0:
https://microprofile.io/

Eclipse IDE Release
https://www.eclipse.org/downloads/packages/release/2021-12/r

NetBeans 12.6 Release
https://netbeans.apache.org/download/nb126/index.html

Spring Native 0.11 Release
https://docs.spring.io/spring-native/docs/current/reference/htmlsingle/

Discussion

Log4j2
https://www.lunasec.io/docs/blog/log4j-zero-day/

It made CNN:
https://www.cnn.com/2021/12/13/politics/us-warning-software-vulnerability/index.html

OffHeap 68. Facebook is in hot-water…again (very Meta)

So we are technologist, and we create technology, and we live on it… technology on its own is neither good or evil…but what happens when a corporation dives into that gray are of how technology is used? We discuss what it means to have such a big influence in how people get their news, interact with each other, and at what point you can’t just say “I don’t want to interfere”

A very pundit-adept topic, we discuss what could possibly be done to help the issue of misinformation while also balancing the need to be heard.

http://www.javaoffheap.com/datadog
We thank DataDogHQ for sponsoring this podcast episode

DO follow us on twitter @offheap
http://www.twitter.com/offheap

October 2021
Events:
EclipseCon – October 25-28
https://www.eclipsecon.org/2021

Reactive Summit – November 2-3
https://www.reactivesummit.org/

Jakarta One – December 7
https://jakartaone.org/

Jconf.dev – December 8 – 10
https://2021.jconf.dev/

jChampions – January 2022
https://jchampionsconf.com/

DevNexus – April 2022
https://devnexus.com/

News:
JReleaser 0.7.0
https://foojay.io/today/jreleaser-0-7-0-released/

JDK 18 Shaping Up (JEP 408)
https://openjdk.java.net/jeps/408

Jakarta EE 10 Release Update
https://eclipse-ee4j.github.io/jakartaee-platform/jakartaee10/JakartaEE10ReleasePlan

Eclipse Ide 2021-09 Supports JDK 17
https://www.infoq.com/news/2021/10/eclipse-ide-java-17/?topicPageSponsorship=ef2f32ea-8615-496e-9ac7-58dffbfe1766

Raspberry Pi price increase
https://uk.pcmag.com/old-desktop-pcs/136394/raspberry-pi-suffers-first-ever-price-increase

Future of Play Framework
https://www.lightbend.com/blog/on-the-future-of-play-framework

Facebook Change to Metaverse
https://www.theverge.com/2021/10/19/22735612/facebook-change-company-name-metaverse

OffHeap 66. Faster LTS releases? And A new Java license you say? How…peculiar

So aside from being all giddy about Java 17 LTS release, we take now a deep dive on the changes that Oracle announced on their release schedule and Licensing. WANL (We are not Lawyers) but that didn’t stop us from discussing what could it mean, and where would it go!

Faster LTS, we are onboard. It’s fun to be able to jump from LTS to LTS, but what does that mean for older releases and maintainability (as Oracle longstanding policy is to sunset the “oldest” of LTS when a new one comes out). We see the interesting dynamics on this with the new “Oracle No Fee Terms and Conditions”, and what does that mean for Big Red’s plan for our favorite programming language.

In all, an interesting episode to pay attention to (and to know what’s important). Like all Licenses, do talk to a real lawyer before adopting a new license (we really are just code monkeys that managed to wrestle a microphone). Or go with another Java open source binary provider on the standard licenses (Like Adoptium!)

http://www.javaoffheap.com/datadog
We thank DataDogHQ for sponsoring this podcast episode

DO follow us on twitter @offheap
http://www.twitter.com/offheap

Events:
SpringOne Videos Available
https://springone.io/

EclipseCon – October 25-28
https://www.eclipsecon.org/2021

Jakarta One – December 7
https://jakartaone.org/

Jconf.dev – December 8 – 10
https://2021.jconf.dev/

The new Dev.java
https://dev.java/

FooJay.io
https://foojay.io/

Intellij Updates
https://www.jetbrains.com/idea/whatsnew/

Netbeans 12.5 Released
https://netbeans.apache.org/download/nb125/index.html

Reactive Summit – November 2-3
https://www.reactivesummit.org/

Oracle Developer Live – October 26-27
https://developer.oracle.com/developer-live/java-innovations-sep-2021/

jChampions – January 2022
https://jchampionsconf.com/

DevNexus – April 2022
https://devnexus.org/

Java Is Still Free!
https://medium.com/@javachampions/java-is-still-free-3-0-0-ocrt-2021-bca75c88d23b

Oracle Java 17 Licenses
https://www.oracle.com/java/technologies/javase/jdk-faqs.html

OffHeap 65. Helping your Boss Help You

Allright, on this OffHeap Episode, we invited no other than @kenkousen to talk us about his new book. Helping your Boss Help You! As most of us are really underlings and have managers that we report to, Ken walk us through the things that he discovered work well (and shared stories of what didn’t work so well) in a full-on, completely stuffed episode of OffHeap.

We also dive into some of our tech news around Project Loom and Apple Surveillance. All in all, a very interesting, possibly life-changing episode of OffHeap

https://www.javaoffheap.com/datadog
We thank DataDogHQ for sponsoring this podcast episode

DO follow us on twitter @offheap
http://www.twitter.com/offheap

Upgrade your Maven Version
https://foojay.io/today/why-you-should-upgrade-to-maven-version-3-8-1-today-or-very-soon/

Apple Surveillance
https://www.technologyreview.com/2021/08/06/1030852/apple-child-abuse-scanning-surveillance/

Project Loom
https://twitter.com/ptrthomas/status/1422780344701317122?s=21

Ken’s Book: HELP YOUR BOSS HELP YOU
https://www.amazon.com/gp/new-releases/books/491578/ref=zg_bsnr_nav_b_4_491580

Pragmating Programmer’s version
https://pragprog.com/titles/kkmanage/help-your-boss-help-you/ (Prags site for ebooks)

Ken’s preview of the book
https://medium.com/pragmatic-programmers/micromanagers-ken-kousen-93c1a97f29d7

OffHeap 64. Autobots…Rollout to the Bar!

Color me jealous! Most of the OffHeap crew (excepting me, Freddy) went back to our roots, and recorded Java Off Heap at the RoundHouse! (The local bar, where Episode 1 was recorded!). It was a great opportunity to be mostly zoom-less and let the conversation flow whenever it wants to flow!

In addition we got Cedric Hurst (@divideby0) to join us there! In all an interesting evening, with libations, Boston Dynamics Acquisition, a deep discussion on the “Right to Repair”, and the implications of GitHub Copilot (the auto-filler AI-powered, FOSS trained helper) on this field!

http://www.javaoffheap.com/datadog
We thank DataDogHQ for sponsoring this podcast episode

DO follow us on twitter @offheap
http://www.twitter.com/offheap

JAX London 10/4 – 10/7 (hybrid)
https://jaxlondon.com/blog/java-conference/

EclipseCon 10/25 – 10/28 (online)
https://www.eclipsecon.org/2021

Jakarta One LiveStream 12/7 (online)
https://jakartaone.org/

Jconf.dev (In person) 12/8 – 12/10
https://2021.jconf.dev/

Boston Dynamics Acquisition
https://www.bostondynamics.com/hyundai-motor-group-completes-acquisition

Microsoft Pentagon contract cancelled
https://www.cnn.com/2021/07/06/tech/defense-department-cancels-jedi-contract-amazon-microsoft/index.html

Big MS Security Update
https://www.cnn.com/2021/07/07/tech/microsoft-security-update/index.html

Github Co-Pilot
https://twitter.com/kellabyte/status/1411449622288076801?s=21

Ruling on Google Gender Bias lawsuit
https://www.latimes.com/business/story/2021-05-27/google-gender-bias-class-action-lawsuit-women?_amp=true

Right to Repair –
https://petapixel.com/2021/07/07/president-biden-will-order-ftc-to-create-right-to-repair-rules-report/

OffHeap 63. Don’t forget to do your backup kids

So new things are happening! Jakarta EE 9.1 was released, GraalVM got to 21.1, and Spring Native is now at 0.10.

We also get a new LightBend CEO (what does this mean?), and the favorite developer Copy-Paste Website (StackOverflow) got bought for (insert Dr. Evil voice here) ONE (.8) BILLION DOLLARS. You didn’t hear it first here, BUT we sure talk about what does this mean! (Remember ExpertsExchange?)

Lastly we dive into a deep discussion on Ransomware and security and how all these things we work everyday can, and are affected by it. Why some companies are keeping up, others are letting security slide, and more importantly, for us as Developers, what kind of role we play on these things.

A passionate discussion on which we touch many points and explore our involvement on this field!

http://www.javaoffheap.com/datadog
We thank DataDogHQ for sponsoring this podcast episode

DO follow us on twitter @offheap
http://www.twitter.com/offheap

GlassFish 6.2 Released
https://projects.eclipse.org/projects/ee4j.glassfish/downloads

GraalVM 21.1.0
https://www.graalvm.org/release-notes/21_1/

Stackoverflow is acquired
https://stackoverflow.blog/2021/06/02/prosus-acquires-stack-overflow/

Meat Packer Cyberattack
https://www.bbc.com/news/world-us-canada-57318965

Colonial Cyber Attack
https://en.wikipedia.org/wiki/Colonial_Pipeline_cyber_attack

BadB Promotional Cartoon (NOTE! NOT SAFE FOR WORK)
https://www.youtube.com/watch?v=EtcKavgS_2k