JCON Report, Part 2 (#50) - Maven, Software Security, Code Quality

Foojay.io, the Friends Of OpenJDK!

#Tech #Foojay.io #Java #Software #Technology #Javafx #Javaee #Kotlin #Security #Microservices #Higher Education #Podcasting Education #News #Tech News #Springs #DevOps

1:00:36

Do you have fond childhood memories of summer camp? For a chance at $250,000, campers must compete in a series of summer camp-themed challenges to prove that they are unbeatable, unhateable, and unbreakable. Host Chris Burns is joined by the multi-talented comedian Dana Moon to recap the first five episodes of season one of Battle Camp . Plus, Quori-Tyler (aka QT) joins the podcast to dish on the camp gossip, team dynamics, and the Watson to her Sherlock Holmes. Leave us a voice message at www.speakpipe.com/WeHaveTheReceipts Text us at (929) 487-3621 DM Chris @FatCarrieBradshaw on Instagram Follow We Have The Receipts wherever you listen, so you never miss an episode. Listen to more from Netflix Podcasts.…

about a year ago 52:09

MP3•Episode home

This is part 2 of the interviews we recorded at the JCON conference earlier this month in Germany. In this episode you get two main topics: Maven and Code Quality. In the first part, you'll hear Karl Heinz Marbaise and Steve Pool about the Maven project, the repository, Sonaytype and the security impact of dependencies. But next to security, we as developers are also responsible for the creation of readable and maintainable code. Miro Wengner, Marit van Dijk, and Hinse ter Schuur dive into this topic.
00:28 Karl Heinz Marbaise: Apache Maven version 4, Sonatype, Maven Repository
https://www.linkedin.com/in/khmarbaise/
09:59 Steve Poole: Sonatype, The many languages running on the JVM, The possible impact on a company of getting hacked, Talks about software supply chain security, Maven, SBOMs,…
https://www.linkedin.com/in/noregressions/
27:44 Miro Wegner: Talks about Disciplined Engineering
https://www.linkedin.com/in/mwengner/
34:52 Marit van Dijk: Talks about IntelliJIDEA, reading code, and AI Assistant
https://www.linkedin.com/in/maritvandijk/
43:50 Hinse ter Schuur: Being a sustainable developer, Talks about code reviews, merge requests, and branching
https://www.linkedin.com/in/hinseterschuur/

74 episodes

JCON Report, Part 2 (#50) - Maven, Software Security, Code Quality

Foojay.io, the Friends Of OpenJDK!

published about a year ago

MP3•Episode home

74 episodes

#Tech #Foojay.io #Java #Software #Technology #Javafx #Javaee #Kotlin #Security #Microservices #Higher Education #Podcasting Education #News #Tech News #Springs #DevOps

All episodes

Foojay.io, the Friends Of OpenJDK!

1
Celebrating 30 Years of Java with James Gosling (#71) 1:14:29

15 days ago1:14:29

1:14:29

We are celebrating Java's 30th anniversary this May! This is a very special anniversary episode of the Foojay Podcast! As we approach May 23rd, marking exactly 30 years since Java's first beta release in 1995, we're honored to present our first-ever single-guest format. But we have a very special guest for you: James Gosling, the creator of Java! Join us for this exclusive conversation as we explore Java's beginnings, its revolutionary impact on the programming world, its continuous evolution over three decades, and James's insights on where the language is heading. From that groundbreaking beta release over "Write Once, Run Anywhere" to powering billions of devices worldwide, this is the story of Java, told by the man who started it all, the father of Java. Content 00:00 Introduction 01:06 How did it start 35 years ago? 06:21 Java evolved from device controllers to server applications 10:30 How does it feel that so many people use Java? 12:12 Looking back at the Y2K problem and how it triggered more Java adoption 14:58 Does James regret any decisions in Java? 18:44 Comparing early-day Java development versus now 20:55 About the stability of Java 24:14 JavaFX is one of James' favorites of all time 25:20 Frustrations about Android and iOS versus Java Phones 28:16 How "Write Once, Run Anywhere" was needed for Sun 29:23 Windows versus macOS versus Linux for laptops 31:32 The very first Java web service in 1994 turned into a dark story 33:17 Java in Docker and startup challenges 36:59 Garbage Collectors are amazing in many ways 39:18 Java-haters didn't use recent versions of Java ... 41:51 How Java became much more performant but lost embedded 43:08 Developers must be aware of which and how many libraries they use 47:40 James loves Kotlin, Scala, and Closure 49:42 Ethical responsibility for developers in a challenging job market 54:16 AI influence on jobs 01:00:20 Advice for junior developers 01:02:27 A few of the most remarkable moments in Java history 01:07:52 Why James is not a benevolent dictator for life 01:09:17 How Java will keep evolving 01:12:55 How much is James still involved in Java? 01:13:54 Conclusion…

Foojay.io, the Friends Of OpenJDK!

1
Celebrating 5 Years of Foojay! (#70) 31:10

24 days ago31:10

31:10

On April 25, 2020, Geertjan Wielenga published the first Foojay post. Yes, we are celebrating 5 years since the Friends Of OpenJDK website launch! Today, more than 1,600 posts are on the site, written by over 250 authors. And there is much more to discover within the Foojay world... In this podcast, we look at how Foojay started with founder Geertjan Wielenga. We'll also hear from Gerrit Grunwald about how Foojay's Disco API has become part of your daily work without you realizing it. We also have several of our regular authors and podcast guests who share how Foojay has influenced them (and vice versa). Thank you all for being part of the Foojay community, whether as a listener of this podcast, a visitor to the website, a user of the Disco API, or through any other touchpoint! 00:00 Introduction 00:58 Grace Jansen https://foojay.io/today/author/grace-jansen 02:44 Geertjan Wielenga about the start and evolution of Foojay https://foojay.io/today/author/geertjan-wielenga/ Foojay on Mastodon: https://foojay.io/today/foojay-mastodon-service-here-it-is/ Java Quick Start Course on Foojay: https://foojay.io/java-quick-start/ JDoodle on Foojay: https://foojay.io/today/integrate-executable-java-code-in-your-blog-posts-part-2-how-to-use-dependencies/ Foojay Slack: https://foojay.io/today/join-slack-com-t-foojay-signup/ Contribute to Foojay: https://foojay.io/today/how-to-submit-your-next-article-on-foojay-io/ 12:24 Richard Fichtner https://foojay.io/today/author/r-fichtner Free JCon tickets: https://pretix.eu/impuls/europe2025/redeem?voucher=FOOJAY-COMMUNITY 13:19 Mary Grygleski https://foojay.io/today/author/mgrygles 15:01 Shai Almog https://foojay.io/today/author/shai-almog 16:59 Gerrit Grunwald about the Disco API https://foojay.io/today/author/gerrit-grunwald/ Disco API Blog: https://foojay.io/today/disco-api-helping-you-to-find-any-openjdk-distribution/ Disco API Swagger UI: https://api.foojay.io/swagger-ui 24:38 Simon Ritter https://foojay.io/today/author/simonritter 25:10 Marit van Dijk https://foojay.io/today/author/marit-van-dijk 25:47 Hanno Embregts https://foojay.io/today/author/hanno-embregts 26:42 Bazlur Rahman https://foojay.io/today/author/bazlur-rahman 29:10 Artur Skowroński JVM weekly: https://www.linkedin.com/newsletters/jvm-weekly-7097859802881540096 30:22 Conclusion and looking forward to 30 years of Java with James Gosling…

Foojay.io, the Friends Of OpenJDK!

1
All Things Java at VoxxedDays Amsterdam (#69) 49:13

5 weeks ago49:13

49:13

On April 3rd, the first VoxxedDays event in Amsterdam took place. VoxxedDays are tech events organized by local community groups, with support from the Devoxx team. Geertjan Wielenga brought along a camera and microphone and spoke with many of the attendees. This is the first Foojay podcast ever to feature more than 20 guests! Geertjan asked the same two questions to many of conference visitors: “Tell us who you are and what excites you about the technology landscape?” and “What are two tips or insights you’d like to share?” As you might expect, there's a lot of talk about AI and machine learning, but you’ll also hear about new Java features, profiling, open source, security, code reviews, and much more! 00:00 Introduction 00:33 Ko Turk: VoxxedDays organization https://www.linkedin.com/in/ko-turk-b271b929/ 01:34 Stephan Janssen: F ounder of Devoxx and VoxxedDays https://www.linkedin.com/in/stephanjanssen/ 05:27 Lutske de Leeuw: Important new features in Java https://www.linkedin.com/in/lutske/ 06:25 Johannes Bechberger: Profiling and instrumentation https://www.linkedin.com/in/johannes-bechberger/ 07:03 Christian Tzolov: Spring AI and MCP https://www.linkedin.com/in/tzolov/ 09:01 Tom Cools: AI, machine learning, mathematical optimization, and all the opportunities in this field. https://www.linkedin.com/in/tom-cools-17547548/ 11:30 Eric-Wubbo Lameijer: Automated code analysis https://www.linkedin.com/in/eric-wubbo-lameijer-64303013/ 13:02 Abraham van de Vyver: GenAI, impact on job and opensource projects https://www.linkedin.com/in/a5r/ 15:01 Soham Dasgupta: Combining cloud native applications with AI, GenAI https://www.linkedin.com/in/dasguptasoham/ 17:05 Josh Long: AI and its impact, MCP, role of junior developers https://www.linkedin.com/in/joshlong/ 21:33 Susanne Pieterse: RAG and AI, vector search, VoxxedDays community reviewer https://www.linkedin.com/in/susannepieterse/ 23:22 Brian Vermeer: Security on using LLMs and what can possibly go wrong? https://www.linkedin.com/in/brianvermeer/ 24:47 Anton de Ruiter: Migrating the Dutch tax system to microservices and containers https://www.linkedin.com/in/antonderuiter/ 25:32 Rafael de Lio: Redis, real-time databases https://www.linkedin.com/in/raphaeldelio/ 27:55 Jonathan Stronkhorst: Spring AI https://www.linkedin.com/in/jonathan-stronkhorst/ 28:29 Jos Roseboom: Encapsulation with Spring Modulith https://www.linkedin.com/in/jos-roseboom-75508b11/ 29:18 Soroosh Khodami: Software supply chain security https://www.linkedin.com/in/sorooshkhodami/ 30:33 Artem Makarov: Applied AI, real use cases after the hype https://www.linkedin.com/in/artemy/ 31:46 Kaya Weers: Learning thanks to the community https://www.linkedin.com/in/kayaweers/ 35:27 Eddy Vos: Devoxx4Kids Foundation, volunteers learning children to code https://www.linkedin.com/in/eddyvos/ 38:00 Paco van Beckhoven: Improving the code review and pull request process with errorprone and openrewrite https://www.linkedin.com/in/pacovanbeckhoven/ 39:30 Hanno Embregts: Using AI and GenAI in a good way https://www.linkedin.com/in/hannotify/ 41:14 Martijn van Iersel: Learning through gamification, internationalization of code, unicode https://www.linkedin.com/in/martijn-van-iersel-2314464/ 43:54 Charl Fasching: Impact of AI on Dev and DevOps https://www.linkedin.com/in/charl-fasching-77843288/ 47:43 Joris Kuipers: Experimenting with AI to integrate in applications, learning at conferences https://www.linkedin.com/in/jkuipers/ 48:48 Conclusion…

Foojay.io, the Friends Of OpenJDK!

1
Welcome to OpenJDK (Java) 24 (#68) 54:53

9 weeks ago54:53

54:53

We serve you a podcast about the new Java version every six months. Our regular guest, Simon Ritter, Deputy CTO of Azul, is known on social media as "speakjava." He is part of the OpenJDK vulnerability group, JCP executive committee, and expert group for the Java SE specification request so that he can share a lot of inside information with us. In this episode, we are joined by Hanno Embregts, a Java Developer by day and musician by night. He publishes a post on Foojay with all the details of every new Java release and prepared a long description of all the new features included in Java 24. Let's see what this new release brings us... Guests Simon Ritter https://www.linkedin.com/in/siritter/ https://bsky.app/profile/speakjava.bsky.social Hanno Embregts https://www.linkedin.com/in/hannotify/ https://bsky.app/profile/hanno.codes Content 00:00 Introduction of the topic and guests 00:58 Why 24 JEPs in release 24? 02:16 Overview of the changes in Java 24 03:37 The changes in Hotspot and GC JEP 404: Generational Shenandoah (Experimental) https://openjdk.org/jeps/404 JEP 450: Compact Object Headers (Experimental) https://openjdk.org/jeps/450 JEP 475: Late Barrier Expansion for G1 https://openjdk.org/jeps/475 04:46 JEP 483: Ahead-of-Time Class Loading & Linking https://openjdk.org/jeps/483 07:30 JEP 491: Synchronize Virtual Threads without Pinning https://openjdk.org/jeps/491 10:27 Security JEPs and Quantum resistance JEP 478: Key Derivation Function API (Preview) https://openjdk.org/jeps/478 JEP 496: Quantum-Resistant Module-Lattice-Based Key Encapsulation Mechanism https://openjdk.org/jeps/496 JEP 497: Quantum-Resistant Module-Lattice-Based Digital Signature Algorithm https://openjdk.org/jeps/497 13:00 Tools JEP 493: Linking Run-Time Images without JMODs https://openjdk.org/jeps/493 16:47 Repreviews and finalizations JEP 489: Vector API (Ninth Incubator) https://openjdk.org/jeps/489 18:27 JEP 484: Class-File API https://openjdk.org/jeps/484 19:13 JEP 485: Stream Gatherers https://openjdk.org/jeps/485 21:22 JEP 487: Scoped Values (Fourth Preview) https://openjdk.org/jeps/487 22:15 JEP 488: Primitive Types in Patterns, instanceof, and switch (Second Preview) https://openjdk.org/jeps/488 22:30 How JEPs get finalized and included 23:44 JEP 492: Flexible Constructor Bodies (Third Preview) https://openjdk.org/jeps/492 24:09 JEP 494: Module Import Declarations (Second Preview) https://openjdk.org/jeps/494 25:07 JEP 495: Simple Source Files and Instance Main Methods (Fourth Preview) https://openjdk.org/jeps/495 29:24 JEP 499: Structured Concurrency (Fourth Preview) https://openjdk.org/jeps/499 34:04 Deprecations & Restrictions 34:46 JEP 472: Prepare to Restrict the Use of JNI https://openjdk.org/jeps/472 37:15 JEP 486: Permanently Disable the Security Manager https://openjdk.org/jeps/486 38:53 JEP 490: ZGC: Remove the Non-Generational Mode https://openjdk.org/jeps/490 Trash Talk - Exploring the JVM memory management by Gerrit Grunwald https://www.youtube.com/watch?v=Jh79ojcror0 42:09 JEP 498: Warn upon Use of Memory-Access Methods in sun.misc.Unsafe https://openjdk.org/jeps/498 45:43 Removal of 32-bit support JEP 479: Remove the Windows 32-bit x86 Port https://openjdk.org/jeps/479 JEP 501: Deprecate the 32-bit x86 Port for Removal https://openjdk.org/jeps/501 47:37 Should we use Java 24 in production? 51:09 Looking forward to the next LTS in September 54:14 Conclusion…

Foojay.io, the Friends Of OpenJDK!

1
Writing a book. Does it make you rich and famous? (#67) 1:15:28

12 weeks ago1:15:28

1:15:28

Let me share a personal story. I started experimenting with Java on a Raspberry Pi about five years ago and blogged a few articles about it. But the more I experimented, the more I wrote down, and eventually, I had written a book… I worked on it for six months in a row, every evening and a lot of weekends. But the moment I received the box with my author copies was an incredible feeling. Holding a paper book with your name is a special moment. Fast forward to now. The 1000 paper copies are sold out. I have the last 10 copies in case you still want one ;-) But as I self-published the ebook, it's still for sale on Leanpub, and I keep updating it. That's one of the first significant differences between publishing a paper book and an ebook…. As an author, I got about 2 euros per paper book from the publisher, and LeanPub pays 80% royalties. Don't forget that I have to pay taxes on what I earn. So, if you do the math, you'll understand that the book didn't make me rich. But yes, it helped me in my career and was one of the reasons I became a Java Champion. So, we can argue about the "becoming famous". But that's only my story. I invited several guests to share their knowledge about book writing: Marián Varga is finishing a book and tells about publishing a book with a publisher. Wim Deblauwe wrote a few books and has much experience with self-publishing. Len Epp is the co-founder of Leanpub, so he can tell us a lot about ebooks. And we start with Trisha Gee, who wrote a lot of books! Guests Trisha Gee https://www.linkedin.com/in/trishagee/ https://jvm.social/@trisha_gee https://bsky.app/profile/trishagee.bsky.social https://x.com/trisha_gee Len Epp https://www.linkedin.com/in/lenepp/ https://bsky.app/profile/lenepp.bsky.social https://x.com/lenepp Wim Deblauwe https://www.linkedin.com/in/wimdeblauwe/ https://bsky.app/profile/wimdeblauwe.com https://www.youtube.com/@WimDeblauwe https://www.wimdeblauwe.com/ https://www.widit.be/ Marián Varga https://www.dastalvi.com/book/ https://www.linkedin.com/in/mari%C3%A1n-varga-4869a042/ https://mastodon.social/@mrvarga Links Book by Frank https://webtechie.be/books/ https://leanpub.com/gettingstartedwithjavaontheraspberrypi/ Books and links by Trisha Gee https://trishagee.com/books/ https://trishagee.com/2022/12/12/tools-and-processes-for-collaborating-on-a-book-remotely/ https://trishagee.com/2022/12/01/writing-a-book-is-hard/ https://medium.com/97-things https://youtu.be/RzaNJzz5jW8 https://learning.oreilly.com/search/?q=trisha%20gee&rows=100&language=en&language=es Books by Wim Deblauwe https://www.infoq.com/minibooks/spring-boot-api-backend-version2/ https://www.wimdeblauwe.com/books/modern-frontends-with-htmx https://www.wimdeblauwe.com/books/taming-thymeleaf/ Book by Marián Varga https://www.dastalvi.com/book/ https://bsky.app/profile/love2integrate.com Leanpub https://www.youtube.com/leanpub https://twitter.com/leanpub https://mastodon.social/@leanpub https://www.instagram.com/leanpub https://bsky.app/profile/leanpub.bsky.social Lulu https://www.lulu.com/ Content 00:00 Introduction of the topic and guests 01:53 Books by Trisha Gee 02:24 Trisha's motivation for writing books 04:13 Difference between publisher and self-publishing 09:53 Publishers are looking for authors and course creators 12:55 How long do you work on a book? 17:35 Can we expect a new book by Trisha? 21:00 Automating the writing process 24:50 Len Epp about Leanpub and how it started 27:18 On Leanpub, you can publish a book-in-progress 27:51 Different publishing processes with Leanpub 30:20 You can use LeanPub to generate your book, but you don't need to sell it on Leanpub 32:57 80% of the selling price goes to the author 40:09 How to market your book 45:35 Let an expert handle the payments... 50:55 Books by Wim Deblauwe 51:45 Wim's motivation for writing books 53:15 Earning back the time spent on the writing 54:37 How to sell paper books on Lulu 57:19 Tools used to write a book 58:34 Wim's author-plans for the future 59:42 How the books influenced Wim's career 01:00:02 Marián Varga about the topic of his book 01:03:07 Current status of the book 01:04:03 The book is a teamwork with a publisher 01:07:06 Organizing the work between multiple authors 01:09:17 Time worked on the book 01:10:40 Feedback from the community for the content 01:12:13 What Marián wants to achieve with the book 01:14:38 Conclusion…

Foojay.io, the Friends Of OpenJDK!

1
Let's Talk About Java Code! Diving into Foojay blog posts... (#66) 54:59

14 weeks ago54:59

54:59

In this Foojay podcast, we dive into a few articles that were published recently and focus on code. Igor Kulakov of JetBrains gives us his insights into the tool he created to find duplicate content in documentation. Rijo Sam explains how you can generate real random values and how he created a train departure display. Maxillian Arruda explains in a very detailed post the different ways to construct a complex Java object. And we start with Wim De Troye about the code changes he had to do in a project that got upgraded from Spring Boot 2 to 3. Guests Wim De Troyer https://www.linkedin.com/in/wim-de-troyer-40647b130/ Maximillian Arruda https://www.linkedin.com/in/maxarruda/ Rijo Sam https://www.linkedin.com/in/rijosam19/ Igor Kulakov https://www.linkedin.com/in/inspector-patronum/ https://x.com/flounder4130 Links https://foojay.io/today/the-proper-way-to-define-configuration-properties-in-spring/ https://foojay.io/today/make-the-life-of-your-developer-clients-easier-with-smart-builders/ https://foojay.io/today/pseudorandom-number-generator/ https://foojay.io/today/crafting-your-own-railway-display-with-java/ https://foojay.io/today/duplicate-finder-for-text-requirements/ Content 00:00 Introduction of the topics and guests 00:55 Wim De Troyer 03:27 Pro or contra Lombok? 06:09 BeanValidation as part of the solution 07:40 Generating a config JSON file 08:50 Maxillian Arruda 09:19 What is a complex object? 12:09 Using records to simplify object creation 14:48 Telescoping constructors 16:08 Static factory method 19:09 Builder pattern 21:00 The risks of rewriting a project 23:00 Thread safety in object creation 27:53 Rijo Sam 29:07 java.util.Random is not fully random... 30:20 About SecureRandom, seeds, and blocking algorithms 34:16 Vaadin railway display 37:43 Getting railway data from an open API 38:44 It's a PET project together with Rijo's partner Ancy 40:22 Runs on a Raspberry Pi 41:18 The next project... 41:34 Igor Kulakov 43:02 DRY principle in documentation 43:37 How the tool works an integration in JetBrains products 44:54 Test-first approach in the project 47:10 Not using AI (yet) to avoid extra cost, local systems could be integrated 48:22 Input data the tool can handle 49:14 Highlights of the blog (and following) post(s) 54:35 Outro…

Foojay.io, the Friends Of OpenJDK!

1
Boost Your Career in 2025! (#65) 1:02:44

17 weeks ago1:02:44

1:02:44

With the first Foojay podcast of 2025, we want to help you to boost your career! By now, you've likely had your year-end performance review with your manager and set some goals to advance in the coming year. Are you ready to take your career growth into your own hands? I've invited three fantastic guests who are eager to share their experiences and help you elevate your professional journey. Guests Rafael Del Nero https://www.linkedin.com/in/rafadelnero/ https://www.youtube.com/c/javachallengers https://javachallengers.com Bruno Souza https://www.linkedin.com/in/brjavaman/ https://java.mn Career project/blog: https://code4.life/blog Book: https://careermasterplan.dev Join the newsletter, with daily career tips: https://code4.life Elder Moraes https://www.linkedin.com/in/eldermoraes/ https://www.youtube.com/ElderMoraes https://instagram.com/eldermoraes SouJava (JUG Brazil) https://www.meetup.com/SouJava/ http://soujava.org.br/ Content 00:00 Introduction of topic and guests 01:44 Why are the guests mentors for others? 06:25 There are many important skills you need to develop 07:38 How are they handling the mentoring process? 15:58 A mentor needs a mentor himself 16:43 Different growing paths, technical versus managing 21:59 How participating in JUGs can evolve your career 30:50 The impact of being a Java Champion 33:33 What is the value of mentoring? 41:18 How to get a salary increase? 50:18 Just ask for any change you want! 59:44 Book Bruno 01:01:16 Outro…

Foojay.io, the Friends Of OpenJDK!

1
Interviews at JFall about opensource, OpenJDK evolutions, Project Loom, JVM,... (#64) 33:01

21 weeks ago33:01

33:01

Let's wrap up this year with more interviews from the JFall conference. In this episode you'll learn more about Foojay, JVM internals and writing your own programming language, Project Loom and structured concurrency, learning at conferences, code reviews, creating desktop applications with Java, infrastructure as code, JUG Noord, and much more! Guests Geertjan Wielenga https://www.linkedin.com/in/geertjanwielenga/ Nataliia Dziubenko https://www.linkedin.com/in/nataliia-dziubenko-341919b8/ Hanno Embregts https://www.linkedin.com/in/hannotify/ Hinse ter Schuur https://www.linkedin.com/in/hinseterschuur/ Anthony Goubard https://www.linkedin.com/in/anthonygoubard/ Steffan Norberhuis https://www.linkedin.com/in/steffannorberhuis/ Paulien van Alst https://www.linkedin.com/in/paulienvanalst/ Lutske de Leeuw https://www.linkedin.com/in/lutske/ Johan Hutting Content 00:00 Introduction of topics and guests 01:09 Geertjan Wielenga: OpenJDK evolutions 01:47 The goal of Foojay, the website for the Friends Of OpenJDK https://foojay.io/ 03:49 Nataliia Dziubenko: What you can learn at conferences 04:48 Writing your own programming language on top of JVM 07:30 What it learned her about the Java compiler 08:38 How it influenced her career as a Java developer 11:20 Hanno Embregts: Project Loom, structured concurrency and scoped values 14:04 Playing music during conference talks 15:09 Important OpenJDK evolutions 17:07 Hinse ter Schuur: Learning at conferences 17:58 Best practices for code reviews 20:03 Anthony Goubard: Creating desktop apps with Java https://www.japplis.com 22:45 Steffan Norberhuis: Infrastructure code for AWS https://www.rocketleap.dev/ 23:50 Java as a Cloud language 24:54 How developers look at infrastructure 26:03 Is getting locked into a single cloud vendor a risk? 28:03 Paulien van Alst, Lutske de Leeuw en Johan Hutting: Introducing JUG Noord https://www.meetup.com/jug-noord 29:20 Introducing VoxxedDays Amsterdam https://amsterdam.voxxeddays.com/ 29:40 NLJUG versus local JUGs 30:06 Starting as a new speaker at JUGs 30:24 How to contribute to opensource 31:24 How to speak at JUG Noord 31:53 Learned at JFall 32:38 Outro…

Foojay.io, the Friends Of OpenJDK!

1
How do we keep our Java applications up to date and secure (#63) 43:12

22 weeks ago43:12

43:12

Last month, I published a Foojay blog post about the risks in systems that are stuck on old or outdated Java versions and got a lot of feedback from developers. Most of them want to move on but get stuck on management decisions, outdated production environments, or one of the many other reasons that keep systems stuck on old Java versions and dependencies... Do you want to bring your system from Java 8 to 23? Did you know that Java 17 already got 13 security releases? And that you can use tools like OpenRewrite to help you update your code? Related Foojay articles Why Java 8 is a Ticking Time Bomb Hiding Within Your Organization https://foojay.io/today/why-java-8-is-a-ticking-time-bomb-hiding-within-your-organization/ How Organizations Became Stuck on Outdated Java Versions https://foojay.io/today/how-organizations-became-stuck-on-outdated-java-versions/ Guests Gerrit Grunwald https://www.linkedin.com/in/gerritgrunwald/ Jonathan Schneider https://www.linkedin.com/in/jonkschneider/ Martijn Dashorst https://www.linkedin.com/in/dashorst/ Carl Wanting https://www.linkedin.com/in/carl-wanting-638943/ Charl Fasching https://www.linkedin.com/in/charl-fasching-77843288/ Johan Janssen https://www.linkedin.com/in/johanjanssen2001/ Content 00:00 Introduction of the topic and guests 01:35 Gerrit Grunwald about CVE fixes in Java updates 04:58 LTS (Long Term Support) versus STS (Short Term Support) 9:45 Jonathan Schneider about the goal of OpenRewrite 12:15 Upgrade all at once, or step by step? 14:03 Who creates the recipes? 15:08 What Moderne is offering on top of OpenRewrite 17:29 How to use OpenRewrite in your IDE 18:32 Companies maintaining recipies for their products 20:05 Jonathan's view on the importance of upgrades 26:56 Other use cases for OpenRewrite 29:03 Martijn Dashorst: Updating legacy projects 33:12 Carl Wanting and Charl Fasching: Migrating projects 39:43 Johan Janssen: Java evolutions and upgrading 42:51 Outro…

Foojay.io, the Friends Of OpenJDK!

1
Better Coding with AI: Friend or Enemy? (#62) 43:46

24 weeks ago43:46

43:46

AI, LLMs, ChatGPT—these are just a few of the buzzwords of the massive revolution unfolding right now. These tools are reshaping how we work, but they come with a catch: while they help us work faster and smarter, we need to be careful about placing too much trust in them. I’ve spoken with several guests at the JFall conference in the Netherlands actively working with these tools to learn more about them. And I had a chat with Grace Jansen about a recent Foojay blog post Guests Grace Jansen https://www.linkedin.com/in/grace-jansen/ Sean Li https://www.linkedin.com/in/sean-li-568a8414/ John Sterken https://www.linkedin.com/in/jsterken/ David Vlijmincx https://www.linkedin.com/in/david-vlijmincx/ Urs Peter https://www.linkedin.com/in/urs-peter-70a2882/ Joost Kaan https://www.linkedin.com/in/joost-kaan/ Links https://foojay.io/today/run-ai-enabled-jakarta-ee-and-microprofile-applications-with-langchain4j-and-open-liberty/ https://marketplace.visualstudio.com/items?itemName=IBM.wca-eja https://docs.langchain4j.dev/integrations/language-models/ https://foojay.io/today/building-project-panamas-jextract-tool-by-yourself/ https://foojay.io/today/project-panama-for-newbies-part-1/ https://foojay.io/today/writing-c-code-in-java/ Content 00:00 Introduction of topics and guests 01:07 Introduction of Grace and the Foojay blog post 02:31 What is Langchain4J? 03:23 What is JakartaEE? 04:25 What is MicroProfile? 06:33 Compare these tools with Spring 08:30 About the demo application of the blog post 11:32 What is an LLM, and what can it do? 13:41 Short-term evolutions in AI 16:49 Long-term predictions... 18:36 IBM Watson code assistant for VSC 19:45 Sean Li: Java at Microsoft 21:56 AI products provided by Microsoft 25:09 Code upgrades with a VSC extension 26:44 John Sterken: AI as a coding assistant 30:50 David Vlijmincx: Project Panama in relation to AI 34:53 Urs Peter: Generative AI, LLMs, and LangChain4J 40:20 Joost Kaan: Organizing an AI conference…

Foojay.io, the Friends Of OpenJDK!

1
As a developer, how do we keep our body and mind healthy? (#61) 38:04

26 weeks ago38:04

38:04

Foojay Podcast published in November 2024 All info, show notes, and links: https://foojay.io/today/category/podcast/ At Devoxx and JFall, we talked with Georgios Diamantopoulos, Lutske de Leeuw, Tom Cools, Jessica Siewert, and Rijo Sam about staying physically and mentally healthy as software developers. There are many topics to handle, like the impact of AI on how valuable we feel, how COVID-19 impacted careers, how we work in and with remote teams, how to get to know new colleagues and much more. Yes, there is even a sidestep where we compared the Java and .NET communities. Guests Georgios Diamantopoulos https://www.linkedin.com/in/georgiosd/ https://x.com/georgiosd Tom Cools https://www.linkedin.com/in/tom-cools-17547548/ https://bsky.app/profile/tcoolsit.bsky.social Lutske de Leeuw https://www.linkedin.com/in/lutske/ Jessica Siewert https://www.linkedin.com/in/jesiewert/ Rijo Sam https://www.linkedin.com/in/rijosam19/ https://github.com/Rijosam Content 00:00 Introduction of topic and guests 00:48 Georgios Diamantopoulos about the impact of your work on your body 05:22 Comparing Java to .NET community 06:54 Lutske de Leeuw about the impact of AI on our job 09:13 Impact of Covid and working from home 10:48 Talk with your colleagues about mental issues 12:06 Tom Cools about switching jobs 13:00 About the danger of a burnout, dealing with stress, and trying too much at the same time 17:08 How to deal with Impostor Syndrom 20:31 Jessica Siewert about dealing with conflicts within a team 22:50 How to get in contact with new people 24:58 Rijo Sam about working in and with remote teams 26:34 Schedule "coffee moments"! 30:54 Impact of time zone differences 33:02 Misunderstanding each other because of cultural differences 34:44 The danger of text chat versus having a voice chat 37:04 Avoid team burnout! 37:43 Conclusion…

Foojay.io, the Friends Of OpenJDK!

1
Proud Of Belgium: Devoxx, JobRunr, Timefold, OpenJDK Mobile, OpenJFX, Thymeleaf, htmx (#60) 35:38

28 weeks ago35:38

35:38

Belgium might be tiny, but we have a strong Java Community! As I was doing interviews at Devoxx in October, I met several of these people, and we talked about their projects, how you can get involved in OpenJDK, and maybe even start a company out of it. This podcast will teach you more about Devoxx, VoxxedDays, Devoxx4Kids, JobRunr, Timefold, OpenJDK Mobile, OpenJFX, Thymelead, htmx, and more! Guests Stephan Janssen https://www.linkedin.com/in/stephanjanssen/ https://x.com/Stephan007 https://www.devoxx.com https://events.voxxeddays.com https://www.devoxx4kids.org/ Ronald Dehuysser https://www.linkedin.com/in/ronalddehuysser/ https://x.com/rdehuyss https://www.jobrunr.io/en/ Geoffrey De Smet https://www.linkedin.com/in/ge0ffrey/ https://x.com/GeoffreyDeSmet https://timefold.ai/ Johan Vos https://www.linkedin.com/in/johanvos/ https://mastodon.social/@johanvos https://x.com/johanvos https://gluonhq.com/ https://github.com/openjdk/mobile https://github.com/openjdk/jfx/ Wim Deblauwe https://www.linkedin.com/in/wimdeblauwe/ https://x.com/wimdeblauwe https://www.wimdeblauwe.com/books/modern-frontends-with-htmx/ https://www.wimdeblauwe.com/books/taming-thymeleaf/ https://www.wimdeblauwe.com/projects/ Content 00:00 Introduction 00:47 Stephan Janssen about how Devoxx started 02:22 Difference between Devoxx and VoxxedDays 03:47 About Devoxx4Kids 04:22 Sponsors are needed to keep the entrance fee low 06:26 About the speakers and CFPs 07:11 Important Belgian Java people and tools 09:08 Ronald Dehuysser about JobRunr 10:00 How to turn an open-source project into a company 11:09 Reviewing and validating the evolutions in Java 12:35 Importance of conferences 13:23 How government support can help a startup 14:02 Challenge of starting a company... 14:40 Geoffrey De Smet about Timefold and the challenges in scheduling 16:47 How AI helps to find the best schedule 18:34 How it started as an open-source project (Optoplanner) 19:06 The challenges of growing Timefold as a company 21:26 Visiting conferences as a "yearly training" 22:36 Johan Vos about OpenJFX and how he got involved 24:49 Everyone can contribute to OpenJDK and OpenJFX 25:50 The goal of the OpenJDK Mobile project 29:33 About the Belgian Java community 30:29 Wim Deblauwe about Spring libraries and books 30:50 About Wim's Thymeleaf and htmx books 32:08 How to get involved in the Java community 33:06 Goal of writing a book 33:40 Wim's involvement in the community 35:08 Outro…

Foojay.io, the Friends Of OpenJDK!

1
DevRel Explained and How to Become a Conference Speaker 48:53

30 weeks ago48:53

48:53

What do people who have Developer Relations as their job description do? And how do you become a conference speaker? You'll learn in this Foojay podcast! At Devoxx in Belgium, I got to talk to Josh Long, Baruch, Pratik Patel, and Roni Dover, who are on the stage because it's part of their job. They share many tips about being a DevRel and the plenty tasks involved in such a job. I also talked with Clo Willaerts who was my inspiration many years ago to become a speaker myself, when I saw her presentation at a marketing conference. Guests Clo Willaerts https://www.linkedin.com/in/clowillaerts/ https://x.com/bnox https://clowillaerts.com/ https://clowillaerts.substack.com/ Josh Long https://x.com/starbuxman https://www.linkedin.com/in/joshlong/ Baruch Sadogursky https://www.linkedin.com/in/jbaruch/ https://x.com/jbaruch Pratik Patel https://www.linkedin.com/in/prpatel/ https://x.com/prpatel Roni Dover https://www.linkedin.com/in/ronidover/ https://x.com/doppleware Content 00:57 Clo about the difference between marketing and technical conferences 02:49 Impact of ecological cost on our work 04:56 Fast changes in trending topics 07:33 How to get paid as a (keynote) speaker 12:53 Josh about being Developer Relation 14:53 How to reach the energy level of Josh 15:42 Do you have to be an expert about a topic to talk about it? 18:34 How to create a story for a new talk 19:02 Only use slides when really needed 22:29 How hard is live coding? 23:48 Baruch about the DevRel role 24:52 How to move from Dev to DevRel 25:44 The focus of Baruch 27:57 Pratik about the role of a dev team at a conference 29:50 How DevRel influences product development in their company 31:36 How Pratik became a DevRel 32:40 Good and bad of being a DevRel 34:38 Roni about the role of a DevRel 35:54 Importance of using your product (coding) as a DevRel 37:35 Back side of the job 38:43 Tip 1: Ask to be a speaker 39:31 Tip 2: Stand out! 41:01 Tip 3: The show must go on! 42:31 More tips... 48:08 One final tip from Josh 48:16 Outro Book by Geertjan Wielenga: "Developer, Advocate!"…

Foojay.io, the Friends Of OpenJDK!

1
How Java Developers Can Secure Their Code (#58) 55:06

33 weeks ago55:06

55:06

Three years after Log4Shell caused a significant security issue, we still struggle with insecure dependencies and injection problems. In this podcast, we'll discuss how developers can secure their code. I talked with three authors who posted a security and code quality post on Foojay.io. Guests Jonathan Vila https://www.linkedin.com/in/jonathanvila/ https://about.me/jonathan.vila https://twitter.com/jonathan_vila Brian Vermeer https://www.linkedin.com/in/brianvermeer/ https://brianvermeer.nl/ https://twitter.com/BrianVerm Erik Costlow https://www.linkedin.com/in/costlow/ https://twitter.com/costlow Content 00:00 Introduction of topic and guests 01:35 Brian: Why is Log4Shell still around? https://foojay.io/today/the-persistent-threat-why-major-vulnerabilities-like-log4shell-and-spring4shell-remain-significant/ 03:24 Outdated dependencies are still used a lot 04:31 Who is responsible for dependency updates? 07:55 Snyk tools to help discover issues 10:15 Comparing to Dependabot 11:21 How to keep dependencies up-to-date 14:32 Responsibility to use dependencies with care 17:17 Looking forward to the JFall conference 18:48 About Foojay 19:49 Jonathan: Is SQL injection still a problem? https://foojay.io/today/top-security-flaws-hiding-in-your-code-right-now-and-how-to-fix-them/ 24:50 Deserialization injection 27:30 Logging injection 31:22 Even experienced developers make mistakes 33:17 About Sonar tools 35:53 Other articles by Jonathan https://foojay.io/today/author/jonathan-vila/ https://foojay.io/today/ensuring-the-right-usage-of-java-21-new-features/ 38:20 Other security tools https://www.youtube.com/watch?v=-wVCYj8oQUY 39:47 Erik: Trash Pandas are attracted by unused code https://foojay.io/today/trash-pandas-love-enterprise-java-garbage-code/ 43:01 How bad are insecure but unused libraries? 45:16 Problem of code only used by unit tests 47:15 Testing in different layers (develop, test, production) 49:31 How much code is not used in production? 50:31 How code becomes unused https://foojay.io/today/foojay-podcast-57/ 54:29 Conclusions…

Foojay.io, the Friends Of OpenJDK!

1
Welcome to OpenJDK (Java) 23 (#57) 1:07:29

35 weeks ago1:07:29