Imagine Fly.io on your own VPS (News)

0:04What up nerds? I'm Jared and this is Changelog news for the week of Monday September 23rd, 2024. Have you heard of the dead internet theory? It posits that most social internet activity today is artificial and designed to manipulate humans for engagement. Let's set aside how hard it is to define most for now. If this theory is even approximately true, what does it mean for those of us who work, play, and often live our lives on the internet? might ai slop be the first salvo in the rise of the machines maybe ignorance is bliss or maybe just maybe the time is coming and now is to take the red pill and i show you how deep the rabbit hole goes sorry i've been watching too many clips of the matrix lately but i mean come on Shootout in the lobby, best shootout scene ever.

1:07Guns. Lots of guns. Okay, enough of that. Let's get into this week's news. Imagine Fly.io on your own VPS. Here's sidekick creator Mahmoud Moussa. Moussa or Moussa, you decide. Quote, I'm tired of the complexity involved in hosting my side projects, While some platforms, like Fly.io, stand out in the crowded field of Heroku replacements, I believe a simple VPS can be just as effective. That's why I created Sidekick, to make hosting side projects as straightforward, affordable, and production-ready as possible. You'll be surprised how much traffic an$8 per month instance on DigitalOcean can handle.

1:51Grab a VPS or your own hardware if you prefer, just need a public IP, load it with Ubuntu, set up SSH access for yourself, and let Sidekick init take you from there to a deployed production application in minutes. Oracle, it's time to free JavaScript. Node and Dino creator Ryan Dahl has had enough of Oracle bogarting JavaScript, but not even using it. Dear Oracle, you have long ago abandoned the JavaScript trademark, and it is causing widespread, unwarranted confusion and disruption. JavaScript is the world's most popular programming language, powering websites everywhere. Yet, few of the millions who program in it realize that JavaScript is a trademark that you, Oracle, control.

2:39The disconnect is glaring. JavaScript has become a general purpose term used by countless individuals and companies independent of any Oracle product. End quote. Rye goes on to detail exactly why Oracle's hold on the JavaScript trademark clearly fits the legal definition of trademark abandonment. At the end of the letter, there's a place to sign your John Hancock alongside 11 ,495 others, including yours truly. John Hancock. It's Herbie Hancock. KTY, which I'm going to assume is pronounced KTY, is a terminal for Kubernetes. KTY is the easiest way to access resources such as pods on your cluster, all without kubectl or kubectl, if you will.

3:27Once KTY is installed on your cluster, SSH gives you a dashboard to interact with the cluster. With KTY, you can use your GitHub or Google account to log into the cluster. No more annoying kubectl auth plugins. Get a shell running in pods, just like you would when sshed into a host normally. Access the logs for running and exited containers in a pod. Forward traffic from your local machine into the cluster or from the cluster to your local machine. SCP or SFTP files from pods. Access the cluster from any device that has an ssh client, from phones to embedded devices. It's now time for sponsored news.

4:09Secure every PR from vulnerable and malicious dependencies. Who has time to run a security audit on all of their dependencies? Socket does. Socket is a developer-first security platform that protects your code from both vulnerable and malicious dependencies. The easiest way to get started with Socket is the two-click GitHub app install. From there, whenever a new dependency is added in a pull request, Socket analyzes the package's behavior and security risk and tells you at that moment, before the code is merged, whether or not you're introducing a vulnerable or malicious dependency. You can run Socket in your CICD pipeline, as a CLI tool, or even as a web extension so you can spot malicious packages on the web.

4:55Socket helps developers and security teams to work more efficiently and cut through the noise to focus on real threats. Get actionable alerts for the supply chain risks that matter. Learn more and get started at socket.dev. And thanks to Firas and our friends at Socket for sponsoring ChangeLog News. About 70 % of Redis users are considering alternatives. Quote, according to a survey by open source database support biz Percona, The move to the Redis Source Available License and Server-Side Public License has motivated almost three-quarters of the 151 developers and database managers questioned to look for alternatives.

5:36End quote. The biggest question when Redis relicensed was which fork would make the most sense for the most people. It appears the Linux Foundation's Valkey effort is leading that pack with 60 % of respondents considering or actively testing it out. I love how much this topic effectively snipes the nerds, myself included. The Registr's comment thread on this story is, unsurprisingly, almost entirely filled with arguments for or against the GPL. Lol. Big lol. Nine. Node.js Pillars. A bunch of smart JavaScript folks, James Snell, Natalia Venditto, Michael Dawson, Matteo Colina, got together to write up nine guiding principles for creating robust, scalable, and maintainable node applications in enterprise environments.

6:27They are briefly, one, do not block the event loop, two, monitor node-specific metrics and act on them, three, use node LTS versions in production, four, automate testing, code review, and conformance as much as possible, five, avoid dependency creep, 6. De-risk your dependencies. 7. Avoid global variables, config, or singletons. 8. Handle errors and provide meaningful logs. And 9. Use API specifications and automatically generate clients. Many of these are pillars of any well-factored application. We have Mateo Colina and hopefully Natalia Venditto coming on JS Party in October to talk through all nine of them.

7:13That's the news for now, but also scan the companion changelog newsletter for even more stories worth your attention, like Avdi Grimm on how to cope with technology FOMO, all is not well in WordPresslandia as Matt Mullenweg lashes out against WP Engine, and a database management TUI for Postgres. Oh, and I forgot to mention this here on news. During the month of September, we're trading free changelog sticker packs for thoughtful five-star reviews and blog posts about our pods just send proof of your review to stickers at changelog.com along with your mailing address and we'll ship the goods directly to your mailbox anywhere in the world let's do this have a great week leave us a five-star review if you want some stickers and i'll talk to you again real soon