2020-07-21 Weekly News - Episode 62

Watch the video version on YouTube at https://youtu.be/YpYEy2sUw18

Hosts:
Eric Peterson - Senior Developer for Ortus Solutions
Brad Wood - Software Consultant for Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

Get live training from the makers of your favorite Box Product.
ColdBox Hero to Superhero API Edition July 23 & 24 - still time to register.
CFCasts is releasing new Free and Paid content every week

Patreon Support

We are at the 63% mark for fully funding all of our Modernize or Die Podcasts via our Patreon site: https://patreon.com/ortussolutions . If you love our podcasts and all we do for the #coldfusion #cfml community considers chipping in, we are almost there!
https://www.ortussolutions.com/blog/we-need-your-help

New Patreon supporter Mario Rodrigues



News and Events


ICYMI Adobe Security Patch Day

CommandBox versions are on ForgeBox

Adobe has released security updates for ColdFusion versions 2016 and 2018. These updates resolve multiple important vulnerabilities that could lead to privilege escalation.

Vulnerability Details: DLL search-order hijacking - Privilege escalation

Note: Adobe recommends updating your ColdFusion JDK/JRE to the latest version of the LTS releases for 1.8 and JDK 11. Applying the ColdFusion update without a corresponding JDK update will NOT secure the server.  See the relevant Tech Notes for more details.
Adobe  also recommends customers apply the security configuration settings as outlined on the ColdFusion Security page as well as review the respective Lockdown guides.  ( linked in the security bulletin )

Adobe Docker Images have been updated as well.
CommandBox Docker images updated on ForgeBox

Security Bulletin: https://helpx.adobe.com/security/products/coldfusion/apsb20-43.html
Blog: https://community.adobe.com/t5/coldfusion/coldfusion-2018-release-update-10-and-coldfusion-2016-release-update-16-released/td-p/11287201?page=1

CFCasts Content Updates

What’s New in CommandBox 5
https://cfcasts.com/series/commandbox5

ColdBox Master Class
https://cfcasts.com/series/cb-master-class

Send your suggestions at https://cfcasts.com/support


ICYMI - ColdFusion Meetup - "What Web Developers Can Learn From Native Mobile Developers", w/ TJ VanToll

Thursday July 16 at 12pm US Eastern Time, UTC-4
Web developers tend to be unabashed defenders of the web platform, and tend to view native mobile platforms as proprietary, gated and bloated.
As a long-time web developer I felt this way too, but then something unexpected happened: I joined the dark side, and spent five years of my career working on—*gasp*—iOS and Android applications.
Now, like an explorer returning from a multi-year safari—I have so much to share! In this talk I’ll discuss how native development has improved the way I write code for the web, and how you can incorporate the best native app performance and testing tips into your web workflows.
Meetup Group Link: https://www.meetup.com/coldfusionmeetup/events/271613429/
Recording: https://www.youtube.com/watch?v=HVc9UW1T3ew&list=PLG2EHzEbhy0-QirMKgSxhjkUyTSSTvHjL


ColdFusion Meetup - "Intro to NativeScript", with Alex Ziskind

Thursday July 23rd at 6pm US Eastern Time, UTC-4.
Web developers are people too. They have needs and wants beyond just slinging code that is destined for the modern browser. They may also dream of building native mobile apps. But learning XCode and Android Studio and objective C might not be in the cards.
This is where NativeScript comes in; a framework that allows web developers to build native mobile apps using JavaScript and CSS. Alex Ziskind, the creator of NativeScripting.com, a school for learning NativeScript, will show you how to get started.
Meetup Group Link: https://www.meetup.com/coldfusionmeetup/events/271844332/


Adobe Webinar - Understanding the what, when and how of API Manager architecture and its various components with Kailash Bihani

July 23, 2020
10 am PT
Dive right into API Manager architecture and learn about its various components including datastore, server and elastic search. Find out how to install API Manager and the myriad of settings you can play with to ensure the best performance!
https://cfwebinar-apim.meetus.adobeevents.com/


Adobe Webinar - A bird's-eye view of PMT architecture and how to harness it's true potential with Nimit Sharma

July 30, 2020
10 am PT
This session will walk you through everything there is to know about PMT (Performance Monitoring Toolsett) architecture and the configurations to look out for when installing PMT on your systems. Get a deeper look at how data flows in the system and the configuration files where the data is stored. Explore the common customer issues and find out how using archiving can reduce the disk consumption.
https://cfwebinar-pmt-architecture.meetus.adobeevents.com/


Ortus Webinar - Injecting Dependencies With WireBox with Grant Copley

Friday, July 31st, 2020
11:00 AM CDT (GMT -5:00)
Dependency injection may sound intimidating but is easy to understand once you learn a few key concepts. In this session with Grant Copley, we'll show you how you can use the dependency injection framework WireBox in your CFML applications to remove boilerplate, reduce complexity, and build better apps.
https://us02web.zoom.us/meeting/register/tZIlduiuqT0pE9JwQsPiVRzYih0ZLs35SpkX


Docker Developer Survey
Welcome to the Docker Developer 2020 Survey! We'd like to learn a bit more about you, your background and really learn about our Docker user and customers! We appreciate you taking the time to fill this in so that we can improve our products and services.
Total survey time < 10 minutes.
Make sure you mention how much you love Swarm, because Ortus loves swarm
https://docs.google.com/forms/d/e/1FAIpQLSfCBAZLHZZafTOdhibV3tUPMlaZxbPA6-bWYlwXT9da2BksAQ/viewform



Conferences


Into the Box 2020 - Workshops - Virtual Live training

Luis leading ColdBox Hero to Superhero API Edition July 23-24 - Filling up fast

2 x 6 hour days
9am-12pm Central
1 hour lunch
1pm to 4pm central

Tickets available: $899
https://www.ortussolutions.com/events
https://www.ortussolutions.com/blog/new-zero-to-hero-workshop-dates-announced-and-important-updates

Podcast Code:
PODCAST10 - 10% off
There is a code for ITB attendees to save 15% - If you didn’t get the email contact us.


Adobe ColdFusion Certification now available Online

Adobe Certified Professional: Adobe ColdFusion is an industry-leading certification program from Adobe, for ColdFusion developers. The course consists of 50+ online videos and is designed for professionals who have basic to advanced level proficiency in any computer language and basic understanding of how web pages work. Successfully passing an assessment test at the end of the program will reward participants with a badge and certificate from Adobe.
https://www.adobe.com/products/coldfusion-family/certificate.html


Adobe ColdFusion Summit 2020 - Replaces CF Summit West

Date: November
Location: Online
Admission: Free
No blog post or official announcement made

Registration: https://cfsummit.adobeevents.com/
Speaker sign up for Adobe: https://cfsummit.adobeevents.com/speaker-application/


CF Camp
TBA

More conferences: https://confs.tech/



Blogs, Tweets and Videos of the Week

Video - Matthew Clemente - A CFML Module for Weighted Round-Robin
Matthew Clemente streamed himself building a new ForgeBox module for producing weighted round-robin results.
https://www.youtube.com/watch?v=sbgvtStxzhY


Blog - Kishore Balakrishnan - 25 Years of Adobe ColdFusion
https://coldfusion.adobe.com/2020/07/25-years-of-adobe-coldfusion/


Blog - SauravGhosh - ColdFusion (2018 release) Update 10 and ColdFusion (2016 release) Update 16 release
https://coldfusion.adobe.com/2020/07/coldfusion-2018-release-update-10-and-coldfusion-2016-release-update-16-released/


Blog - Charlie Arehart - CF Summit Fall 2020 will be online, free
https://coldfusion.adobe.com/2020/07/cf-summit-fall-2020-will-online-free/


Blog - Charlie Arehart - More on today’s CF update, and the importance of securing CAR files
https://coldfusion.adobe.com/2020/07/importance-of-securing-car-files/


Tweet: Brad Wood on CommandBox vNext
CommandBox vNext will come with a generic "watch" command that wraps our Watcher library so you can watch any folder of files and execute arbitrary commands.

> watch *.json "echo 'config file updated!'"
https://twitter.com/bdw429s/status/1284190579849605120?s=20
https://twitter.com/bdw429s

Tweet: Ben Nadel - “The Coolest Parts run on CFML”
https://twitter.com/BenNadel/status/1283735030720847872


Blog - Docs: Using Java in Lucee
https://docs.lucee.org/guides/Various/tutorial-lucee/tutorial-java-in-lucee.html


Blog - Matt Gifford aka coldfumonkeh - GitHub Actions with CommandBox and TestBox
https://www.monkehworks.com/2020/07/16/github-actions-with-commandbox-and-testbox.html


Blog - Ben Nadel - Strange Double-Encoding Character Behavior With CFLocation Tag In Lucee CFML 5.3.6.61
https://www.bennadel.com/blog/3863-strange-double-encoding-character-behavior-with-cflocation-tag-in-lucee-cfml-5-3-6-61.htm



CFML Jobs
Several positions available on https://www.getcfmljobs.com/
Listing over 50 ColdFusion positions from 38 companies across 25 locations in 5 Countries

2 new jobs this week.

Sr. Cold Fusion Developer in Reston, VA
https://www.getcfmljobs.com/jobs/index.cfm/united-states/Senior-CFDev-at-Reston-VA/11097

ColdFusion Developer in Morrisville, NC
https://www.getcfmljobs.com/jobs/index.cfm/united-states/ColdFusionDev-at-Morrisville-NC/11096

Tweet job opportunity from Nolan Erck
https://twitter.com/southofshasta/status/1283174377714937857



ForgeBox Module of the Week

Cfml-weighted-round-robin by Matthew Clemente

This module provides a round-robin algorithm for rotating elements according to differing weights, instead of evenly. It was inspired by the npm package weighted-round-robin, and uses the same logic for its algorithm.

box install weightedroundrobin

https://www.forgebox.io/view/weightedroundrobin




VS Code Hint Tips and Tricks of the Week

Easy-snippet

another easy way to manage snippet

Features
- Auto-detects language
- Easily edit and delete snippets once created
- View, edit, and remove snippet groups from a dedicated snippet manager

https://marketplace.visualstudio.com/items?itemName=inu1255.easy-snippet



Thank you to all of our Patreon Supporters

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox, ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.

You can support us on Patreon here https://www.patreon.com/ortussolutions

Ben Nadel
Brett DeLine
Carl Von Stetten
Charlie Arehart
Da Li
Dan Card
Daniel Garcia
David Belanger
Didier Lesnicki
Don Bellamy
Eric Hoffman
Gary Knight
Giancarlo Gomez
Jan Jannek
Jason Daiger
Jeff McCain
Jeremy Adams
Jordan Clark
Joseph Lamoree
Kai Koenig
Laksma Tirtohadi
Mario Rodrigues
Matthew Clemente
Mingo Hagen
Ryan Hughes
Scott Steinbeck
Shawn Oden
Steven Klotz
Synaptrix
Yogesh Mathur

You can see an up to date list of all sponsors on Ortus Solutions' Website
https://ortussolutions.com/about-us/sponsors