Arpan Sharma
97 viewsHow much will post-quantum migration cost your Java codebase?
A static auditor that estimates what a post-quantum migration will cost a Java codebase, run across 27 popular Java projects to show where …
Security
Arpan Sharma
97 views
Luis Majano
53 viewsBoxLang AI 3.4.0: Gateways, Human-in-the-Loop, and a Full Security Stack
BoxLang AI 3.4.0 introduces gateways, durable human approvals, layered AI security, normalized reasoning, run control, and improvements …
Felipe Maschio
431 viewsMasking a JVM thread dump without breaking the analysis
A few weeks ago I posted on r/java about detecting virtual thread pinning from a plain thread dump. The technical discussion was fine. The …
Nicolas Frankel
5 viewsSolving Gradle metadata and Renovate integration
My current company has settled on using Gradle. It doesn't make me very happy, but you need to learn to work with constraints. Plus, I must …
Steve Poole
807 viewsYour AI Assistant Is Choosing Your Dependencies
AI code generation doesn't just write your Java. It picks your suppliers, edits your build and pulls in ecosystems you don't know. What …
Cristobal Escobar
409 viewsBuild Secure AI Chat Applications with BoxLang, RAG, Ollama, and Amazon Bedrock with Dan Card
Build Secure AI Chat Applications with BoxLang, RAG, Ollama, and Amazon Bedrock AI demos are everywhere. Building an AI-powered feature that …
Steve Poole
768 viewsAI Found the Bugs. Who's Patching Your EOL Java Code?
AI finds decades-old flaws at machine speed, but the fixes only reach supported versions. What that means for end-of-life Java, and what to …
Cristobal Escobar
358 viewsBoxLang AWS, Azure, and Google Secrets Manager Module Released
Every production application carries secrets: database passwords, API tokens, encryption keys. The question is never whether to manage them …
Muhammad Usman
820 viewsThis Dependency Update Looked Exactly Like an Account Takeover
I pointed a scanner I have been building at an old Spring project, and it flagged javax.activation. The bump was 1.1-rev-1 to 1.1.1. Prior …
Steve Poole
2,370 views7 Jackson CVEs in One Day: AI-Assisted Security Research
Seven jackson-databind vulnerabilities, one researcher, one day. Two critical RCEs. This is AI-assisted security research in practice.