Booklore maintenance stopped a while ago. Grimmory maintenance continues. The original author of Booklore has seemingly moved on to a new project.

They are extremely hydrophilic.

Aren't most overstaying their visa rather than improperly entering?

Visas are quite scarce for poor people, across the world.

Your secrets will be published to the CI log if you were affected.

I believe it's everything since around 10pm ET last night. I would consider any runs in the past 24 hours to be suspect.

Thank you, unfortunately we have a multiple of repositories with multiple runs that use this action so checking the logs one by one will be hard. Any idea how to get all logs? Thank you

I think your best bet is to traverse all the pipeline logs that make use of the action using Github's REST API.

It should be easy to do with thr Github CLI tool and some bash scripting.

Not sure how easy it'll be to parse the logs to look for a base64 string but it shouldn't be that complicated either.

also the secrets will be published as double base 64 encoded, so it will just look like a string of random chars at the end of the changed-files action in the log.

If you are using the action and were as of 10p ET last night I would assume everything is compromised, remove the action, and rotate secrets.

Wouldn't normalizing transgender people through the arts help prevent crimes against said people that bud out of fear of the unknown?

The Celery Organization on github had a security breach which has led to organizational activity halting. A number of contributions to the Celery project (apparently) have been reversed.

In case anyone is wondering where the next Celery release was.

As far as I understand it, they wouldn't be able to advertise with US companies in the US so it's a lot of cost for no benefit. Unless they're hosting all that bandwidth for an altruistic reason..

> it's a lot of cost for no benefit

The argument for TikTok ban is that it's a Chinese propaganda machine.

I don't know whether it is true. But assuming it is, propaganda usually costs money.

There is no note on the first one.

What happens when you get an interview and spend time for a company you don't want to work for?

I’ll turn it down if further research shows I don’t want to work there? Why upfront my research if I’ll be ghosted anyway? Turning down interviews because “circumstances have changed” is hardly unusual

Ghost jobs on one side, ghost applications on the other. Some people will just send automated applications everywhere, every day, and check for responses. That leads to ghost responses, and the cycle continues.

Responding to someone to say you got their message but have changed your mind isn’t ghosting. Job hunting would be less miserable if rejections happened in a reasonable time frame

You are happy you have anything to pay your bills ;)

interview practice

What do you suggest?

If one is not currently employed as an engineer?

Frankly, seriously consider a career change. The ladder has been pulled up for entry-level positions due to AI, interest-rates, etc. This will come back and bite us as an industry, but it’ll be 10 years from now and most people can’t wait that long.

I can’t speak for everyone, but 3000+ applicants for a single opening is typical at my org. The odds of any given individual getting in are essentially zero. Referrals get priority over everyone else, even candidates that are on-paper better qualified.

It sucks for everyone involved, especially for job hunters. But from the hiring side, truthfully, there’s no end in sight.

Oooooor work in Europe. Plenty of work here. I still get 1 job offer per 1 application.

My 5 year plan is to move to the EU, but it's a process. You're not going to be doing it as your next job hop from the US if you haven't been planning for it.

The trick is to get a masters or MBA in the country where you want to live. Germany and Netherlands are excellent for this. You can find lots of jobs with no local language requirements.

The fun part is that I went the security engineer route instead of SDE/SWE. It has some pros and cons, but seems like it's one of the "high demand" roles that gets more traction looking at others who have moved abroad.

I also have friends and family in Netherlands, France, and UK who help me keep tabs on how things are going in various places and where might be better locations to target for an American with a technical background looking to just up and leave the US.

Add a tiny captcha-like task that takes a real candidate who read the job ad 20 seconds to do, but won’t get done by spray and pray candidates.

Bunch of services that can do captchas now. It’d maybe lessen the load on employers but then job seeking becomes pay to play. The candidate who can afford one of those services + automation beats out those who can’t. It’s already an arms race of sorts.

Resumes must be dropped off at the office in person.

YEAH! Go back to the old Boomer ways of applying, lol. How ironic, but this seems preferable over the current sh*tstorm.

The internet is going to end up just a place for AI generated noise. Real people will only be found in the real world soon.