Modernize or Die® - CFML News for January 19th, 2021 - Episode 87

2021-01-19 Weekly News - Episode 87Watch the video version on YouTube at https://youtu.be/DHO_LXiFHII Hosts:Gavin Pickin - Software Consultant for Ortus SolutionsBrad Wood - Software Consultant for Ortus SolutionsThanks to our Sponsor - Ortus SolutionsOne way to say thanks back to Ortus Solutions, is to support CFCasts, which is releasing new content every weekPatreon SupportWe have 33 patreons providing 61% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions. If you love our podcasts and all we do for the #coldfusion #cfml community considers chipping in, we are almost there!https://www.ortussolutions.com/blog/we-need-your-help News and EventsLucee Vulnerability now Public - Security researchers earn $50k after exposing critical flaw in Apple travel portalSecurity researchers have earned a $50,000 bug bounty after uncovering a critical flaw in Apple’s travel portal.Rahul Maini and Harsh Jaiswal were able to achieve remote code execution (RCE) by stringing together a string of vulnerabilities in order to exploit targeted domains.Lucee in the sky with exploitsIn a detailed technical write-up, Maini and Jaiswal explain how the early stage of their bug hunt narrowed their range of targets down to three hosts running on a content management system (CMS) which was back-ended by Lucee, a Java-based tag and scripting language used for web app development.https://portswigger.net/daily-swig/security-researchers-earn-50k-after-exposing-critical-flaw-in-apple-travel-portal Apple RCE Write Up - https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md Cbi18n V2.0.0 ReleasedThis module will enhance your ColdBox applications with i18n capabilities, resource bundles and localization. It supports traditional Java resource bundles and also modern JSON resource bundles.V2.0 includes a large contribution by Wil De Bruin. Release Notes: https://github.com/coldbox-modules/cbi18n/releases/tag/v2.0.0 ForgeBox: https://www.forgebox.io/view/cbi18n ColdBox V6.2.2 ReleasedToday we released ColdBox v6.2.2 as a minor path. Please update if you are affected by the issues shown in the release notes.https://www.ortussolutions.com/blog/coldbox-622-released Ortus Webinar - CommandBox Task RunnersFriday, January 22nd - 11:00 AM CDT (GMT -6:00)Have you ever wished you could create command-line programs using CFML, perhaps to automate a task or handle some long-running process? With CommandBox Task Runners, you easily can! Join Grant Copley for this month's webinar, where we take a close look at this powerful tool within CommandBox and how we can use it alongside our applications.with Grant Copleyhttps://www.ortussolutions.com/events/webinarsOnline CF Meetup - "Communication Skills for Technical Engineers & Developers", with Mark TakataThursday, January 21, 20215:00 PM to 6:00 PM CSTNo matter what language, framework or technical skillset you employ in your day-to-day work, the biggest differentiator among engineers, designers & developers is the ability to communicate and engage with end users, stakeholders and business analysts. In this talk, Mark Takata will cover how to improve your ability to communicate with those folks, become an asset for your team & company, and widen the available paths for your future career.https://www.meetup.com/coldfusionmeetup/events/275712862/ Online CF Meetup - "Securing a ColdFusion Application with Fixinator & FuseGuard", w/ Pete FreitagThursday, January 28, 202111:00 AM to 12:00 PM CSTIn this session we'll take a look at a ColdFusion application that is vulnerable to several security issues. We'll look at some of the security holes in the application, how they can be exploited. Finally we'll use FuseGuard to protect the application, and Fixinator to find and fix some of the vulnerabilities in the application.https://www.meetup.com/coldfusionmeetup/events/275825925/ ICYMI Online CF Meetup - "CF AMA: Ask Me Anything", with Charlie Arehart and Dan WilsonThursday, January 14, 202111:00 AM to 12:00 PM CSTJoin us for another CF “Ask Me Anything” session, with your host Charlie Arehart and recent co-organizer Dan Wilson. We'll open the floor to any sort of CF-related questions you may have, whether about coding challenges or using CF features (on the newest or older versions), configuration or tuning, deployment, security, the future and state of CF, whatever.Meeting: https://www.meetup.com/coldfusionmeetup/events/275569910/ Recording: https://www.youtube.com/watch?v=KH8-FRUP_Sc CFCasts Content UpdatesWhat’s new with ColdBox 6 - https://cfcasts.com//series/whats-new-with-coldbox6 - HTML QuickStart - Testing QuickStart - WhoopsSend your suggestions at https://cfcasts.com/supportConferences and TrainingVS Code DayJoin the VS Code team and community at a live event just for VS Code users. Get a glimpse of things to come and meet the team who works on VS Code every day.Watch live: January 27, 2021 from 8 AM to 10:30 AM PSTRe-stream (with live Q&A): January 27, 2021 from 8 PM to 10:30 PM PSThttps://code.visualstudio.com/vscode-day DevnexusJoin the VIRTUAL <dev/>olutionFeb 17 2021 - Onlinehttps://devnexus.com/Ortus Workshops - Dates coming soon - Quick- CommandBox Zero to Hero- ColdBox Zero to Hero- ColdBox Hero to SuperHeroOrtus’s Possible Conferences for 2021Dates subject to changeDue to Online conference overload, we are thinking about not expanding the number of events, but more content in more timezones with a different format.ITB - Developer Week Style?? With some European Timezone Friendly slots from our European Community MembersMay 2021ITB LatamDecember 2021More conferencesNeed more conferences, this site has a huge list of conferences for almost any language/community.https://confs.tech/Trying to get CFML on the listhttps://github.com/tech-conferences/conference-data/issues/1837 Blogs, Tweets and Videos of the WeekBlog - Ben Nadel - Array.Sort() ...