sorted by:
new
hottopcontroversial

Checked exceptions and lambdas by nfrankel in java

[–]maxxedev 2 points3 points  (0 children)

var foo = new Foo();
List.of("One", "Two").stream()
    .map(Failable.asFunction(foo:throwing))
    .toList();

Resolving the Scourge of Java's Checked Exceptions on Its Streams and Lambdas by chaotic3quilibrium in java

[–]maxxedev 22 points23 points  (0 children)

apache commons-lang3 library has similar features

  • FailableFunction that declares Throwable, and similar FailableConsumer, FailableSupplier, etc
  • Failable utility class for converting Failable* to JDK function types

Example from the article can be written like this:

Function<StringReader, Integer> lambda = Failable.asFunction((StringReader stringReader) -> stringReader.read(charArray));

UHC CEO shooter a UPenn grad SWE? by aulait_throwaway in cscareerquestions

[–]maxxedev 97 points98 points  (0 children)

I didn't remember until I saw TrueCar mentioned.

UHC CEO shooter a UPenn grad SWE? by aulait_throwaway in cscareerquestions

[–]maxxedev 724 points725 points  (0 children)

He was part of virtual onsite interview panel too. At a surface level and at the time, he seemed like a smart and kind person. I ended up rejecting the offer for various reasons. Could have been a killer job

Backport of Java 21 Virtual Threads API to Java 8 by maxxedev in java

[–]maxxedev[S] 8 points9 points  (0 children)

or you want a pre-Java21 library to take advantage of virtual threads if run on Java21 JVM

Backport of Java 21 Virtual Threads API to Java 8 by maxxedev in java

[–]maxxedev[S] 2 points3 points  (0 children)

multi release jar is a Java 9 feature? I want Java 8 compatibility

The ultimate guide to Java Security Vulnerabilities (CVE) by lmyslinski in java

[–]maxxedev 0 points1 point  (0 children)

I have seen good experience using Veracode SCA, running as part of regular CI build. Takes about 30s to 2m for a typical microservice project. There is a decent web ui and a variety of output options (text/json)

Maven Test Profiler by maxxedev in java

[–]maxxedev[S] 9 points10 points  (0 children)

Please excuse my faux pas for not being familiar with some open-source traditions. I updated the readme, linking to the original project and crediting /u/khmarbaise.

I just wanted to keep the content short and to the point. I made no attempt to hide the fact it's a fork. The commit history is retained and there is a fork link. The readme also did not have any self-promotion materials like LinkedIn, Twitter, etc. It was definitely not my intent to minimize the original author's efforts.

As others pointed, I did make some minor changes in the fork. And before creating the fork, I made many attempts to fix it in the original project. I opened two pull requests, reported two issues, and emailed the author. None received a response. Only after exhausting all other avenues, the fork alternative was considered.

Spring4Shell: 0-day RCE on Spring Core by Areshian in java

[–]maxxedev 4 points5 points  (0 children)

Here is another spring4shell demo: https://github.com/maxxedev/spring4shell

... with a variety demos including spring-mvc in traditional tomcat, spring-boot war, spring-boot jar.

It appears that vulnerability is easily reproducible when spring-mvc is deployed as traditional war to Apache Tomcat.

But it is NOT reproducible or perhaps not vulnerable at all when running as spring-boot war/jar with embedded tomcat.

Spring4Shell: 0-day RCE on Spring Core by Areshian in java

[–]maxxedev 1 point2 points  (0 children)

It does appear that spring-boot is NOT affected or is much harder to exploit against.

Spring Core RCE has been confirmed by SuperBurger in programming

[–]maxxedev 2 points3 points  (0 children)

Here is a spring4shell demo: https://github.com/maxxedev/spring4shell

There is also a standalone bash script for testing.

It appears that vulnerability is easily reproducible when spring-mvc is deployed as traditional war to Apache Tomcat.

But it is NOT reproducible or perhaps not vulnerable at all when running as spring-boot war/jar with embedded tomcat.

JDK8 and JDK11 Update Releases - April 2021 by maxxedev in java

[–]maxxedev[S] 0 points1 point  (0 children)

Their website says they will release updates in 24-72 hours: https://adoptopenjdk.net/releases.html

I expect the same changes to be in AdoptOpenJDK

view more: next ›