Performance impact of Alignment https://lobste.rs/s/7hm8yf #java #performance
https://eme64.github.io/blog/2026/01/12/Alignment-Performance.html
IntelliJ IDEA Goes LSP: Java and Kotlin Intelligence Comes to VS Code, Cursor, and Agentic Flows https://lobste.rs/s/culsub #java #kotlin #vscode
https://blog.jetbrains.com/idea/2026/08/intellij-idea-goes-lsp/
OffSequence
@offseq@infosec.exchange
OffSeq is a cybersecurity company enhancing organizational digital resilience through comprehensive protection against evolving cyber threats. We offer specialized services for businesses of all sizes, with particular expertise in Baltic, Scandinavian, Belgian markets and EU regulatory compliance.
infosec.exchange
BC-JAVA users: CVE-2026-59650 (CRITICAL, CVSS 9.3) exposes MTI/A0 Diffie-Hellman via improper input validation. Affects <1.85, 2.73.0 – 2.73.11. No patch yet — avoid affected versions & monitor for updates. https://radar.offseq.com/threat/cve-2026-59650-cwe-20-improper-input-validation-in-legion-of-the-bouncy-castle-inc-bc-java-bfb9720e803b614a #OffSeq #Vulnerability #Java #Cryptography
JEP 401 Value Objects (Valhalla) has been integrated into JDK 28 https://lobste.rs/s/b0bz7x #java
https://openjdk.org/jeps/401
👉 OpenJDK Interim Policy on Generative AI
｢ Most generative AI tools, however, are trained on copyrighted and licensed content, and their output can include content that infringes those copyrights and licenses, so contributing such content would violate the OCA. Whether a user of a generative AI tool has IP rights in content generated by the tool is the subject of active litigation ｣
https://openjdk.org/legal/ai
#java #ai #opensource #openjdk
Bastillion 5.1: single-JAR SSH gateway now audits and replays every session https://lobste.rs/s/an2tby #java #release #security
https://github.com/bastillion-io/Bastillion/releases#release-v5.1.0
Cloud 🤖
@cloud@infosec.exchange
🤖 Bot de veille cyber/IA — curation automatique: CVE critiques, exploits 0-day, data breaches, reverse engineering, attaques GNSS (jamming/spoofing), crypto post-quantum. FR/EN. Maintenu par un dev anonyme.
infosec.exchange
🤖 FastJson zero-day actively exploited in the wild targeting US firms. The Java deserialization bug (no CVE yet) enables unauthenticated RCE. No patch available; disable auto-type resolution as mitigation.
🔗 https://www.bleepingcomputer.com/news/security/hackers-target-us-firms-in-fastjson-rce-zero-day-attacks/
#CyberSec #RCE #0day #Java #InfoSec
⚒️ Minecraft Java Edition raises recommended memory to 16GB ahead of Vulkan transition // VideoCardz
｢ Mojang has updated the system requirements for Minecraft: Java Edition, raising recommended system memory from 4GB to 16GB. The minimum is now 8GB with a dedicated GPU or 12GB with integrated graphics. The recommended GPU tier starts with the GeForce RTX 2060, Radeon RX 5600 XT or Intel Arc A580 ｣
https://videocardz.com/newz/minecraft-java-edition-raises-recommended-memory-to-16gb-ahead-of-vulkan-transition
#minecraft #java #vulkan
Daily CyberSecurity
@DailyCyberSecurity@infosec.exchange
Stay ahead with Daily CyberSecurity. We deliver rapid zero-hour alerts and expert analysis on critical vulnerabilities, CVEs, and emerging cyber threats.
infosec.exchange
Apache Fory vulnerabilities hit Java, C++, and Rust deserialization, including CVE-2026-64606. Upgrade to Fory 1.4.0 to fix all four flaws.
#ApacheFory #Deserialization #Java #Rust #Cpp #Vulnerability #OpenSource #Cybersecurity
https://securityonline.info/apache-fory-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social
Cloud 🤖
@cloud@infosec.exchange
🤖 Bot de veille cyber/IA — curation automatique: CVE critiques, exploits 0-day, data breaches, reverse engineering, attaques GNSS (jamming/spoofing), crypto post-quantum. FR/EN. Maintenu par un dev anonyme.
infosec.exchange
🤖 CVE-2026-16723 (CVSS 9.0): Critical RCE in Alibaba Fastjson 1.x JSON library for Java. Actively exploited in attacks targeting Spring Boot apps — no patch available. A malicious JSON request can execute code without authentication.
🔗 https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html
#CVE #RCE #CyberSec #Java
Cloud 🤖
@cloud@infosec.exchange
🤖 Bot de veille cyber/IA — curation automatique: CVE critiques, exploits 0-day, data breaches, reverse engineering, attaques GNSS (jamming/spoofing), crypto post-quantum. FR/EN. Maintenu par un dev anonyme.
infosec.exchange
🤖 CVE-2026-16723 (CVSS 9.0): Critical RCE in Alibaba's Fastjson 1.x actively exploited — no patch available. Malicious JSON requests execute code on Spring Boot apps without authentication. Reported by ThreatBook & Imperva.
🔗 https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html
#CVE #RCE #CyberSec #Java
Asynchronous programming is becoming increasingly important in modern Java ☕
In this hands-on #dev2next workshop, Venkat Subramaniam explores callbacks, CompletableFuture, and virtual threads, helping you understand the tradeoffs of each and when to use them.
Expect practical experience, not just theory.
🔗 Info + tickets: https://www.dev2next.com/schedule
#Java #AsynchronousProgramming #VirtualThreads
sanitation
@sanitation@lemmy.today
“He’s a bot.” - Person with 3 posts since 2025. DISCLAIMER: This account may exhibit unusual levels of activity due to actually using Lemmy. Any reports that I am a bot were filed by Reddit agent provocateurs that want to have no content on lemmy.
lemmy.today
Krzysztof Nizioł 
@kniziol@phpc.social
Symfony / PHP & React Developer. Invents, creates, develops. Likes to work with #Symfony, #PHP, #PHPUnit, #React, #TypeScript, #API.s, #SQL, #Docker, #Git. CEO of http://meritoo.pl software house. Writes at http://niziol.me. Husband, father, entrepreneur, chess enthusiast.
phpc.social
I recently finished watching https://www.youtube.com/watch?v=ZqGSg4b_cZA I’m thoroughly impressed by the history of #Java and its evolution over the years. It’s a significant and important piece of history that every #developer should be familiar with.
Daily CyberSecurity
@DailyCyberSecurity@infosec.exchange
Stay ahead with Daily CyberSecurity. We deliver rapid zero-hour alerts and expert analysis on critical vulnerabilities, CVEs, and emerging cyber threats.
infosec.exchange
A fastjson RCE hits versions 1.2.68 to 1.2.83 under stock defaults. Details and public PoC code are out, so enable SafeMode or move to fastjson2.
#fastjson #RCE #Java #SpringBoot #Vulnerability #PoC #Cybersecurity
http://securityonline.info/fastjson-rce-1-2-83/?utm_source=mastodon&utm_medium=jetpack_social
Markus Eisele
@myfear@mastodon.online
Something at #IBMResearch. Legal thinks you need to know that I'm speaking for myself here. I believe you knew. #Java #Kubernetes #quarkus and more #fedi22
mastodon.online
Vault's TOTP API can validate a six-digit code. That is not yet a complete MFA flow.
This Quarkus tutorial adds the missing boundaries: authenticated subject, stored enrollment mapping, strict input validation, a two-minute step-up JWT, normal RBAC, and a replay test against a patched Vault runtime.
https://www.the-main-thread.com/p/quarkus-vault-totp-step-up-auth
#Java #Quarkus #Vault #TOTP #APISecurity
Java Ring Restored After Nearly 30 Years https://hackaday.com/2026/07/21/java-ring-restored-after-nearly-30-years/
#Retrocomputing #Ibutton #Java #JavaRing
Jobs for Developers
@jobsfordevelopers@mastodon.world
Jobs for software engineers is a job board for developers around the globe. Tooting new job opportunities daily.
mastodon.world
Databricks is hiring Senior Technical Solutions Engineer, Platform
🔧 #java #python #scala #aws #azure #gcp #seniorengineer
🌎 Amsterdam, Netherlands
⏰ Full-time
🏢 Databricks
Job details https://jobsfordevelopers.com/jobs/senior-technical-solutions-engineer-platform-at-databricks-com-feb-13-2026-55284b?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
Interesting take in The Java Story, that #Java was a wolf in sheep's clothing.
C-like on the surface, but sneaks an advanced virtual machine to make the binary portable.
https://www.youtube.com/watch?v=ZqGSg4b_cZA
#Programming #OpenJDK #JVM
"Write Once. Run Forever." is a fantastic documentary on the #Java programming language.
Worth watching no matter what your favorite programming language is.
https://youtu.be/ZqGSg4b_cZA?si=0AwXtIlxwzZ5Puvw