Jake Wharton @jw@jakewharton.com

New Coil release! 2.3.0 includes baseline profiles and a new coil-test artifact, which should help a lot with screenshot testing. Also a few assorted bug fixes. Check it out!

https://github.com/coil-kt/coil/blob/main/CHANGELOG.md#230---march-25-2023

I built my own memory profiler (in #Rust, on #Linux)

And lived to tell the story in video form, apparently:
https://www.youtube.com/watch?v=DpnXaNkM9_M

heyooooooo new article: "A world to win: WebAssembly for the rest of us" https://wingolog.org/archives/2023/03/20/a-world-to-win-webassembly-for-the-rest-of-us

Of interest if you wonder: why does it seem like only rust and C are winning with WebAssembly? what is the deal with garbage collection? how would you compile scheme to wasm? how can I win with my weirdo altlang? also, is WebAssembly haunted? guaranteed success or your money back!

The Effective Interview ⚡️ with @jw is finally out 🚀

Go give it a read! 👇 lots of learnings and advice on this one.

https://effectiveandroid.substack.com/p/effective-interviews-jake-wharton

Java 20 / JDK 20: General Availability: https://mail.openjdk.org/pipermail/jdk-dev/2023-March/007517.html #java20 #jdk20 #openjdk #java

"Exploiting aCropalypse: Recovering Truncated PNGs"

My writeup on exploiting CVE-2023-21036 (un-cropping Android screenshots!)

https://www.da.vidbuchanan.co.uk/blog/exploiting-acropalypse.html

The ongoing Docker drama left me wanting to control my Docker image hosting, so I went digging into the API traffic of 'docker pull'.

Turns out it's easy to use your own domain as the hostname for Docker images, all without having to self-host your own full registry: https://httptoolkit.com/blog/docker-image-registry-facade/

Blogpost about Docker Hub and wider FOSS community: https://woju.eu/blog/2023/03/foss-and-docker-hub/

(special greetings to @bagder)

oh my god, you can turn off those fucking EVIL sign in with #google popovers on random websites

https://myaccount.google.com/
> Security
> Signing in with Google
> Google Account sign-in prompts

I argue we (#curl) should NOT pay docker. Not give in to extortion. This might mean that someone else soon suddenly will register our name and can serve whatever image they want there. 5 *billion* pulls indicate there's a user or two that might fall victim for this.

That's on docker, not us.

@palmin

All these years later, I just can’t get comfortable with a computer platform where you can write code for it, but the vendor gets to say whether or not people can run your code.

I thought that was wrong the day it was announced and still do.

The money says I’m in a minority. I’m comfortable with that.

The Web remains the only platform without a proprietor. Treasure it.

I did something cool but untraditional knowing in the back of my mind that App Review might reject it.

And they did making my effort wasted and ensuring I don't try drawing outside the lines for a long time.

Nothing discourages thinking different like Apple App Review.

Wow, look at that, a JEP draft to finalize virtual threads for JDK21
https://openjdk.org/jeps/8303683

Next guest for the Effective Android interviews⚡️🥁

@JakeWharton 🥳

Airing next week. Post your questions for him here!

I love that everyone has taken off their racism masks post-Trump.
The Wall Street Journal asks if SVB would still be around if the board was 12 white men instead of “diverse” ?

Not racist, just asking questions. 🤦🏾‍♂️