Jake Howard ๐ŸŠ's Avatar

Jake Howard ๐ŸŠ

@theorangeone.net

Part Developer, Part SysAdmin, Part InfoSec. Avid self-hoster. - All things Systems @torchbox.com. - Core & Security Teams @wagtail.org. - @djangoproject.com Security Team and Foundation Member.

320
Followers
246
Following
162
Posts
17.11.2024
Joined
Posts Following

Latest posts by Jake Howard ๐ŸŠ @theorangeone.net

I spent half an hour this afternoon wondering why the switch I'd just installed didn't work.

Turns out I'd wired it wrong on the first attempt, tripped the RCD, and I hadn't noticed everything downstairs was off when I checked different configurations.

That's enough DIY for me for today.

08.03.2026 17:23 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
Moving on from Gandi: Registrar and DNS migration DNS is the cornerstone of any infrastructure. Us humans are terrible at remembering strings of numbers (162.55.181.67), but we're good at remembering words (theorangeone.net). When people own a domain...

I ditched Gandi domains. More security, more features, and saving nearly ยฃ100/yr ๐Ÿฅณ

Now powered by Hover and deSEC.

theorangeone.net/posts/moving...

07.03.2026 17:10 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
3,454 words 20,049 characters 17:24 read

3,454 words 20,049 characters 17:24 read

It's been a long time since I've sat down to write, and stay in the flow.

2 hours and over 3000 words later, I feel more accomplished than I have in a while ๐Ÿฅณ

It should probably have a review pass though. Coming soon!

06.03.2026 23:48 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

It's hard to tell. It might just be for their hosted services, or the editor as a whole. It's a bit unclear right now

03.03.2026 14:39 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
We Overhauled Our Terms of Service and Privacy Policy - Zed Blog From the Zed Blog: Effective March 2, 2026, we're updating our Terms of Service, Privacy Policy, and related documentation. Our privacy commitments have not changed.

To use Zed you need to be 18+, force a binding arbitration and waive your right to class action lawsuits.

That's, a strange move.

zed.dev/blog/terms-u...

03.03.2026 09:35 ๐Ÿ‘ 2 ๐Ÿ” 4 ๐Ÿ’ฌ 1 ๐Ÿ“Œ 0

Depending on your use case, that day is today* ๐Ÿฅณ

*today actually being some time last year

03.03.2026 09:35 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
a man is sitting in a chair and saying `` do it . '' ALT: a man is sitting in a chair and saying `` do it . ''
02.03.2026 13:04 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Post image

Finally got around to pre-ordering a #Pebble Time 2.
I don't think I've been this excited for a new tech launch in a while! ๐Ÿฅฐ

02.03.2026 09:13 ๐Ÿ‘ 3 ๐Ÿ” 0 ๐Ÿ’ฌ 1 ๐Ÿ“Œ 0
Preview
GitHub - vercel-labs/portless: Replace port numbers with stable, named .localhost URLs. For humans and agents. Replace port numbers with stable, named .localhost URLs. For humans and agents. - vercel-labs/portless

Why does every project now need to be "for agents"?

Opening a port? Better make it for agents! github.com/vercel-labs/...

If your agent can use the tools you already have which are designed for good "human" UX, it's probably not an agent worth using.

27.02.2026 09:09 ๐Ÿ‘ 2 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
A screenshot of a conference talk "Scaling the database - using multiple databases with Django", with status "Confirmed".

A screenshot of a conference talk "Scaling the database - using multiple databases with Django", with status "Confirmed".

My talk for @djangocon.eu was accepted ๐Ÿฅณ ๐Ÿฅฐ

Time to start writing it...

26.02.2026 12:31 ๐Ÿ‘ 2 ๐Ÿ” 0 ๐Ÿ’ฌ 1 ๐Ÿ“Œ 0

If you use an LLM to generate your security report, but ignore the part where it says "triage this report according to your security process" and just post it as a public GitHub issue, you deserve bad things!

21.02.2026 16:06 ๐Ÿ‘ 4 ๐Ÿ” 1 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

It was, and it'll return. I want to make sure the API is good before reopening the implementation. For now, you'll need a side channel for it.

09.02.2026 19:13 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
Extracting directories into their own repositories Software projects in git repositories (or Version Control Systems - yes there are others) tend to be made up of much more than just 1 file, or even 1 directory. To make functions and functionality eas...

As part of the recent django-tasks refactor, I had to extract some directories, with history, into their own repositories.

The process was quite interesting, and easier than I expected.

theorangeone.net/posts/git-di...

08.02.2026 22:35 ๐Ÿ‘ 2 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
Release 0.12.0 ยท RealOrangeOne/django-tasks Breaking changes DB and RQ backends have been extracted into their own packages From this version onwards, django-tasks will aim to mirror the upstream django.tasks package as much as possible. The...

This is getting out of hand, now there are 3 of them!

With 0.12.0 of django-tasks, the DB and RQ backends are now in their own packages and repositories - making the separation between the interface and flagship backends clearer.

github.com/RealOrangeOn...

06.02.2026 17:19 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 1 ๐Ÿ“Œ 0
Preview
An Update on Heroku Today, Heroku is transitioning to a sustaining engineering model focused on stability, security, reliability, and support. Heroku remains an actively supported, production-ready platform, with an emph...

So, Heroku is basically dead now? Again...

www.heroku.com/blog/an-upda...

06.02.2026 16:17 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
A diff from GitHub showing 6 additions and 4744 deletions

A diff from GitHub showing 6 additions and 4744 deletions

It's that kind of Friday

06.02.2026 15:22 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

I thought it was just me!

04.02.2026 21:00 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
#36898 (Document `Session.is_empty`) โ€“ Django

On Monday morning, we fixed a bug on a project by using an undocumented API. At ~10:45, I raised a ticket to get it documented.

By Tuesday afternoon, the docs were updated and deployed.

The power of open source! Who says @djangoproject.com moves slowly?

code.djangoproject.com/ticket/36898

04.02.2026 09:41 ๐Ÿ‘ 3 ๐Ÿ” 1 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
My ticket for Djangocon Europe

My ticket for Djangocon Europe

Ticket acquired for @djangocon.eu ๐Ÿฅณ

03.02.2026 14:45 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
The Windows 11 Installation screen

The Windows 11 Installation screen

It's been that kind of day ๐Ÿ˜ญ

(I'm not moving to Windows, I just need a dev VM)

02.02.2026 16:58 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
A submitted talk proposal for Djangocon europe 2026. The talk name is redacted.

A submitted talk proposal for Djangocon europe 2026. The talk name is redacted.

Talk submitted for @djangocon.eu ๐Ÿฅณ

And now we wait... ๐Ÿคž

30.01.2026 12:59 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

zram0: detected capacity change from 3752960 to 0

Sounds like one of my servers is pretty unhappy ๐Ÿ˜”

28.01.2026 17:40 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
An email with the following wording:

Django versions 6.0.2, 5.2.11, and 4.2.28 will be released on Tuesday, February 3 around 14:00 UTC.

They will fix 6 security defects: one with severity low, two with severity moderate, and three with severity high.

An email with the following wording: Django versions 6.0.2, 5.2.11, and 4.2.28 will be released on Tuesday, February 3 around 14:00 UTC. They will fix 6 security defects: one with severity low, two with severity moderate, and three with severity high.

Happy (next) Tuesday, from the @djangoproject.com Security Team ๐Ÿฅฐ

28.01.2026 09:34 ๐Ÿ‘ 2 ๐Ÿ” 2 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
Preview
Wagtail's new Security Announcements Channel | Wagtail CMS Get notified of security releases for your favorite CMS

You can now subscribe to @wagtail.org security announcements using RSS!

wagtail.org/blog/new-sec...

27.01.2026 15:57 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 1

After the move (6 months ago...), I finally have my nice mic set up on my desk - On a much less unwieldy arm and with a pop filter. No more headset-quality audio in calls for me.

27.01.2026 10:07 ๐Ÿ‘ 0 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0
GitHub - rushter/selectolax: Python binding to Modest and Lexbor engines. Fast HTML5 parser with CSS selectors for Python. Python binding to Modest and Lexbor engines. Fast HTML5 parser with CSS selectors for Python. - rushter/selectolax

Ported some in-request HTML munging from beautifulsoup (+ lxml) to selectolax (lexbor), and saved over 150ms!

Maybe beautifulsoup has had its day... Even JustHTML was about on par with bs4 + lxml, and that's pure Python.

github.com/rushter/sele...

23.01.2026 16:26 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

My partner has provionally allowed me to go to @djangocon.eu ๐Ÿฅณ Leaving her and the kiddo for almost a week ๐Ÿฅฐ Now to come up with a talk idea... ๐Ÿค”

12.01.2026 18:05 ๐Ÿ‘ 2 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

Not quite decided yet, but I clearly need to get a move on. Stay tuned

10.01.2026 20:01 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0

Doh, Gandi renewed my domain earlier than I thought, so they charged me more than I would at another registrar. Better get this migration moving!

10.01.2026 17:10 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 1 ๐Ÿ“Œ 0

@mtth.org One missing feature down!

09.01.2026 17:59 ๐Ÿ‘ 1 ๐Ÿ” 0 ๐Ÿ’ฌ 0 ๐Ÿ“Œ 0