Bram Verburg

Your periodic reminder that Erlang distribution protocol is cool, but it is not cool to expose it to the internet: erlef.org/blog/security/…

Our Working Groups had worked hard this year! 👏 🔍Take a look at some great initiatives of the Security WG: - They have published its “Web Application Security Best Practices for BEAM languages”: erlef.github.io/security-wg/we… - They have sponsored an EEF stipend to develop and certify an OpenID Connect client library, along with supporting libraries for integration with Cowboy, Plug and Phoenix. For next year, they would like to: expand Web App Best Practices document to other BEAM-based web frameworks; help push forward other educational resources; improve security tooling for BEAM languages and renew efforts to provide solid SBoM (software bill-of-materials) tooling support for BEAM projects. There is a lot to be done and they are always looking for contributors! More info about this WG: erlef.org/wg/security #WeBeamTogether #Erlang #MyElixiStatus

To those unfamiliar, the Security Working Group of the @TheErlef does a fantastic work documenting the best security practices of both Erlang and Elixir, web and non-web: erlef.github.io/security-wg/ 👏👏👏 #MyElixirStatus

🚨 Attention, Community! 🚨 The EEF's Security Working Group has just released a new document detailing best practices for secure development of web applications using BEAM languages. Don't miss it! shorturl.at/hwEQ5 #Erlang #MyElixirStatus

I just release v1.1 with Rebar3 build support and an Erlang API module, for instance for use with the ‘pgo’ Postgres driver

And if your AWS RDS connections so work with OTP 26 it probably means you did not enable SSL; go and fix that!

Reminder: if your AWS RDS database connections fail after upgrading to Erlang/OTP 26 it is probably due to certificate validation, and fixing that is just one Hex package away

Excited to be speaking at #GOTOaar 2023! I'll be exploring the security benefits and potential of concurrency oriented functional languages such as #erlang and #elixir. Get 10% off your conference pass with my code: bram10. See you there!

I released a Hex package for verification of AWS RDS server certificates. More info in this post: elixirforum.com/t/aws-rds-cast…

Client-Side Enforcement of LiveView Security - a classical web app vulnerability making a comeback? blog.voltone.net/post/31

Episode 134: We get a glimpse into @TheErlef’s Security Working Group with @voltonez. We learn about existing resources and get hints of the future. Bram shares some cool security tips and insights as well! #Erlang #ElixirLang @ElixirLang @erlang_org podcast.thinkingelixir.com/134

@bobrusche @TiVre_Utrecht Shit, ik moet toch echt beter gaan opletten. Als ik dat anderhalf uur geleden had geweten… Enjoy!

Anderhalf uur geleden wist ik nog van niets. Nu ben ik ineens bij Einstürzende Neubauten @TiVre_Utrecht

@bobrusche @TiVre_Utrecht Shit, had ik bijna gemist. Gelukkig nog kaartjes beschikbaar. Ook zin in!

Nauwelijks bekomen van Caterina Barbieri gisteren, dient vandaag de volgende zich aan in de concertenreeks: Trentemøller in @TiVre_Utrecht! Zin in! tivolivredenburg.nl/agenda/trentem…

@gausby Ok, that’s a separate issue of app integration into the OS. But RCS as a network protocol is “open”, for some definition of open. It is also an unwieldy mess of a protocol, of course, and I hope it fails miserably (as it seems to be doing)

@voltonez Thank you! That is good to know—I just heard on a podcast that google has replaced SMS on Android with [their] RCS implementation, making it hard for message applications that previously could be set as the default messaging app, without providing an API for this RCS thing.

I just learned that Google is pushing something called RCS as a replacement for SMS—and that is all I know about it. I'd say don't use it, don't adopt it. We got other actors in the field, and the best bet is in my book Signal. Google shouldn't own any communication protocol.

@bobrusche @Concertzender Helemaal verslaafd aan Dub Taylor sinds deze uitzending, dank!

X-Rated @Concertzender gemist? Met Dub Taylor, Ross Harper, Brandt Brauer Frick, Dopplereffekt, Krishna Goineau, Rasmus Hedlund, Deepchord, Linnéa Talp, Maxime Denuc, Death In June, Monnik, Adeptus Mechanicus, Oureboros, Onasander, New Risen Throne, Nest. concertzender.nl/programma/xrat…

Finally another Elixir meetup happening in NL! meetu.ps/e/LvtwX/9Dn6d/i featuring @voltonez and @peerstr ! #myelixirstatus

@bobrusche @dbs_utrecht Zoals ik na K&D al zei, als de NS je laat staan mag je mij altijd om een lift vragen. Geen enkel probleem!

Ik had me erg verheugd op de Belgische krautrockers Motor!k in @dbs_utrecht vanavond, maar er vallen continue treinen uit. Er rijdt meer niet dan wel, dus kom ik er wel, en kom ik nog terug? Dan maar het nieuwste album draaien... #NSstaking #bah motork.bandcamp.com

@bobrusche Dank! Dan ben ik daar ook. Voor een biertje, of twee…

@voltonez Prima, je bent de eerste. Ik ben rond 20:15 in de hal van Tivoli/Vredenburg, als jij daar dan ook bent is het kaartje voor jou. Voor een biertje 🍺 Ik heb een Therapy? t-shirt aan.

Niemand?