Scott Hanselman's Blog - TheNote.app

Scott Hanselman's Blog
Follow

The given link is to the personal blog site of Scott Hanselman, an American author, advocate for computer science in schools, and Microsoft Developer Community Program Co-Vice Chair for many years. The blog primarily focuses on discussing various aspects of computer programming, software development, and the latest trends in technology.

Scott Hanselman's Blog hanselman.com

RSS feeds.hanselman.com

RSS Hunter • Aug 19, 2024

Thread Of Notes

Is the craft dead?

The author begins by appreciating the traditional craftsmanship exemplified by Japanese woodworking and the personal workshop activities of his father, contrasting this hands-on creation with mass-produced items like IKEA furniture. Despite having coded professionally for 35 years, the author notes that modern computing systems remain overly complicated, with both machines and humans continuing to make errors. This persistent complexity is compared to historical technological shifts in programming, such as the transition from assembly language to C, and the introduction of tools like syntax highlighting, IntelliSense, and the widespread use of Stack Overflow-driven development.The core assertion is that genuine value still lies in good taste, craftsmanship, and sound human judgment, regardless of technological advancements. Building a cohesive system is described as analogous to interior design—a non-trivial task requiring skilled assembly. The author warns against being deceived by simplistic tools and "one-shot" software solutions, emphasizing that software development remains inherently difficult, even though developers are no longer constrained by input/output speed.He predicts significant future work involving cleaning up the "slop" created by rushed development. However, the author believes that for those who possess deep understanding, AI-augmented development promises incredible results. He is currently enjoying the learning process during this era shift, confirming that the underlying craft of software development endures.

https://feeds.hanselman.com/~/945480746/0/scotthanselman~Is-the-craft-dead feeds.hanselman.com

RSS Hunter • Feb 9

The danger of glamourizing one shots

Judging AI-augmented coding capabilities based on "one-shot" examples is misleading and insufficient for true evaluation. A single successful one-shot demonstration, such as creating "Minecraft," often relies heavily on the semantic weight of the keyword itself within the prompt. To properly test the AI's ability, evaluators should challenge the system to achieve the same result without using that highly specific, loaded term. Programming, even with AI augmentation, remains the intricate process of transforming ambiguity into precise, stable specificity through careful "sculpting." This AI sculpting requires finding and maintaining desired specificity while keeping the system stable across modifications, emphasizing that good Software Development Life Cycle practices and historical knowledge remain crucial. While generating established games like Mario Brothers or Space Invaders in one shot is a neat parlor trick, the resulting code will be statistically "mid" or the most generic, average version of those games. The model is essentially tasked with drawing the statistical average face of the concept from memory rather than executing unique, specific requirements. As high-level programming evolves into prompt-based prose compilation, defining clear goals and specifications for the "ambiguity loop" becomes paramount. Developers must exercise superior judgment and meticulously choose their words to ensure no single term carries an undue hidden or obvious semantic burden.

https://feeds.hanselman.com/~/945480803/0/scotthanselman~The-danger-of-glamourizing-one-shots feeds.hanselman.com

RSS Hunter • Feb 4

Automatically Signing a Windows EXE with Azure Trusted Signing, dotnet sign, and GitHub Actions

The author of the text created a Windows Edge Light App and wanted to add a feature that would give it a virtual ring light, similar to the Mac Tahoe's Edge Light feature. To make the app more trustworthy, the author decided to use Azure Trusted Signing, a cloud-based code signing service provided by Microsoft. This service allows for automatic certificate management, GitHub Actions integration, and is trusted by Windows, which helps to prevent SmartScreen warnings. The author found that Azure Trusted Signing was less of a hassle than traditional code signing methods, but still required some setup and configuration. To use the service, the author had to register the resource provider, create a trusted signing account, complete identity validation, and create a certificate profile. The author then used the Azure CLI to assign the correct role and login with the correct scope, and installed the sign tool to sign the executable. The author also set up automated signing with GitHub Actions, which required creating a service principal with signing permissions. The process involved several steps, including verifying the setup and troubleshooting common issues. Overall, the author found that Azure Trusted Signing was a useful tool for adding trust to their app, but required some technical expertise to set up and configure. The author's experience with Azure Trusted Signing was mostly positive, but highlighted the need for careful attention to detail and troubleshooting to overcome common issues.

https://feeds.hanselman.com/~/930373259/0/scotthanselman~Automatically-Signing-a-Windows-EXE-with-Azure-Trusted-Signing-dotnet-sign-and-GitHub-Actions feeds.hanselman.com

RSS Hunter • Nov 28, 2025

Webcam randomly pausing in OBS, Discord, and websites - LSVCam and TikTok Studio

The author encountered a perplexing issue with their webcam, experiencing regular pauses during streaming and in OBS. The problem seemed to stem from a virtual camera called "LSVCam" that appeared in the Windows device list but was not recognized by some applications. This issue was traced back to TikTok Live Studio, which installs a virtual camera that may not be fully installed or hangs during enumeration.The author provided a PowerShell script to list all connected devices and a JavaScript code snippet to enumerate webcams, revealing the presence of "LSVCam." They discovered that "LSVCam" is linked to a DLL file in the TikTok Live Studio directory. This virtual camera can cause hangs and errors in various applications that rely on webcam access.The author identified the registry key associated with "LSVCam" and advised deleting it to resolve the issue. However, this is a temporary fix as the registry key will reappear upon running TikTok Live Studio. The author believes this issue is a regression in TikTok Live Studio's virtual camera implementation.The author shared this information to inform others experiencing similar webcam problems and hoped that the TikTok Studio development team would notice this post and address the issue. Deleting the registry key is a temporary workaround until a proper solution is provided by the developers.

https://feeds.hanselman.com/~/905963465/0/scotthanselman~Webcam-randomly-pausing-in-OBS-Discord-and-websites-LSVCam-and-TikTok-Studio feeds.hanselman.com

RSS Hunter • Oct 9, 2024

Open Sourcing DOS 4

Microsoft has released the source code for MS-DOS 4.00, a historic operating system written in 8086 assembly code. The release is a collaboration with IBM and part of Microsoft's open innovation initiative. The source code was discovered by researcher Connor "Starfrost" Hyde in unreleased beta binaries sent to Ray Ozzie. Microsoft and IBM believe this release is a valuable piece of operating system history. The release includes the source code for MS DOS 4.00, beta binaries, documentation, and disk images. Microsoft and IBM continue to explore the archives for additional materials. The source code can be accessed on GitHub. The software can be run on original IBM PC XT, Pentium computers, or within PCem and 86box emulators. The release acknowledges the contributions of the original authors, some of whom still work at Microsoft and IBM.

https://feeds.hanselman.com/~/882544025/0/scotthanselman~Open-Sourcing-DOS feeds.hanselman.com

RSS Hunter • Apr 25, 2024

Updating to .NET 8, updating to IHostBuilder, and running Playwright Tests within NUnit headless or headed on any OS

In 2007, the author employed Selenium for integration and browser automation testing. Currently, Playwright is preferred for its versatility and compatibility across platforms. To ensure end-to-end testing, Playwright tests are integrated into .NET applications using Visual Studio or VS Code.Previously, a hack involving WebApplicationFactory was used to spin up ASP.NET within unit tests. However, with .NET 8, IHostBuilder has replaced IWebHostBuilder, necessitating code changes.The author's goal is to write Playwright tests within NUnit, which assumes a running web application and a defined URL. A WebApplicationTestBuilderFactory starts the web app within TestHost, retrieving the port dynamically.The builder factory uses a manifest file generated by MSBuild, which is a necessary workaround in .NET 8. However, this hack can be eliminated in .NET 9, making testing more straightforward.With these enhancements, both unit tests and Playwright integration tests can be run across various operating systems and environments, ensuring comprehensive testing of the site updated to .NET 8.

https://feeds.hanselman.com/~/873234002/0/scotthanselman~Updating-to-NET-updating-to-IHostBuilder-and-running-Playwright-Tests-within-NUnit-headless-or-headed-on-any-OS feeds.hanselman.com

RSS Hunter • Mar 7, 2024

Using WSL and Let's Encrypt to create Azure App Service SSL Wildcard Certificates

Using WSL and certbot, you can create a wildcard certificate for Azure websites, even though Azure requires a specific PFX format. The certificate must include a 2048-bit private key, all intermediate certificates, and the root certificate. After generating the certificate with certbot, you need to import and export it in Windows, ensuring it meets the PFX requirements. The resulting PFX file can then be uploaded to Azure App Service under Bring Your Own Cert. For custom domains, select the newly uploaded certificate as the binding. While this process can be automated, it provides a temporary solution for obtaining a wildcard certificate at a reduced cost.

https://feeds.hanselman.com/~/749206136/0/scotthanselman~Using-WSL-and-Lets-Encrypt-to-create-Azure-App-Service-SSL-Wildcard-Certificates feeds.hanselman.com

RSS Hunter • Jun 27, 2023

GitHub Copilot for CLI for PowerShell

GitHub Next has introduced a project that extends Copilot functionality to the CLI through three shell commands. The project is currently in waitlist-only mode. However, these commands are simply aliases for the "github-copilot-cli" executable, which allows for customization. This realization led to the creation of PowerShell aliases that modify the injected prompt to "use powershell to." While not perfect, this serves as a demonstration of the need for PowerShell support. The provided aliases include "??," "git?," and "gh?," each with the modified prompt. Additionally, the aliases use a temporary file to execute the command and display the results, providing a seamless experience. The author encourages feedback and suggestions for improvement, highlighting the potential for further customization and integration with other tools like bash and wsl.

https://feeds.hanselman.com/~/737271731/0/scotthanselman~GitHub-Copilot-for-CLI-for-PowerShell feeds.hanselman.com

RSS Hunter • Apr 25, 2023

Use your own user @ domain for Mastodon discoverability with the WebFinger Protocol without hosting a server

Mastodon is a decentralized, open-source social networking service that leverages the WebFinger protocol to facilitate user discovery and access. WebFinger enables users to find information about other users on the Mastodon network by utilizing their email addresses or other identifying information.WebFinger operates through a simple HTTP-based protocol where a user sends a request to a server using the email address or identifier of the user they seek. The server responds with a JSON object containing the requested information, known as a resource descriptor.The resource descriptor provides various details about the user, including their name, profile picture, social media links, and public key for establishing secure connections.When searching for a Mastodon user, the network queries the user's server using a specific endpoint format. The user's server then returns a WebFinger response containing the necessary information.To implement WebFinger, users can create a WebFinger API endpoint on their own domain and define a JSON file that provides the required information.Alternatively, users can utilize the WebFinger response from their Mastodon server and save it as a static JSON file on their own server.WebFinger is essential for user discovery and access on the Mastodon network, allowing users to locate and follow each other regardless of their server location.Mastodon offers a Twitter-like experience with the added benefits of decentralization and adherence to web standards like ActivityPub.For those new to Mastodon, a comprehensive guide is available to assist in getting started.

https://feeds.hanselman.com/~/722495722/0/scotthanselman~Use-your-own-user-domain-for-Mastodon-discoverability-with-the-WebFinger-Protocol-without-hosting-a-server feeds.hanselman.com

RSS Hunter • Dec 18, 2022

I got tired

After 20 years of consistent blogging, the author inexplicably stopped last year without any significant life events prompting the decision. They found joy in TikTok, YouTube, and podcasting, and recently joined Mastodon. Consistency is challenging, but the author maintained it for a long time. They prioritize activities that nourish their spirit, and currently, blogging has taken a backseat to other pursuits. Going forward, they will continue writing and sharing on multiple platforms, emphasizing the importance of owning your words and preserving your work. The author assures their readers that they are still active and look forward to connecting soon.

https://feeds.hanselman.com/~/722495724/0/scotthanselman~I-got-tired feeds.hanselman.com

RSS Hunter • Dec 18, 2022

Using Home Assistant to integrate a Unifi Protect G4 Doorbell and Amazon Alexa to announce visitors

Home Assistant is a versatile home automation platform that enables extensive control over connected devices, including people, lights, and appliances. It operates locally, providing privacy and independence from cloud services. Running Home Assistant on a Raspberry Pi with Power over Ethernet is recommended for ease of setup.Integrations allow Home Assistant to connect with various devices, including security systems like Unifi Protect Doorbell. Third-party integrations can extend functionality and enable custom automations.To create an announcement when the Unifi Protect Doorbell is pressed, install Home Assistant Community Store and the UniFi Protect and Alexa Media Player integrations. Configure both integrations and create an Alexa "Everywhere" speaker group.In Home Assistant's Developer Tools, verify that Alexa TTS (text-to-speech) is working. Then, create an automation that triggers when the doorbell's state changes to "on" and sends a notification to the Alexa "Everywhere" group.The automation can be defined both through the user interface and in the Automations.yaml file. The "to: 'on'" trigger prevents double announcements during state changes.Home Assistant offers numerous possibilities for automation, providing convenience and enhanced control over the connected home.

https://feeds.hanselman.com/~/676711904/0/scotthanselman~Using-Home-Assistant-to-integrate-a-Unifi-Protect-G-Doorbell-and-Amazon-Alexa-to-announce-visitors feeds.hanselman.com

RSS Hunter • Dec 14, 2021

JavaScript and TypeScript Projects with React, Angular, or Vue in Visual Studio 2022 with or without .NET

Visual Studio 2022 introduces a new .esproj project type for standalone JavaScript/TypeScript apps. This project type utilizes native CLIs for Angular, React, and Vue, ensuring up-to-date templates. Visual Studio 2022 supports both JavaScript-heavy front-end apps and ASP.NET apps with JavaScript/TypeScript components. It provides a TypeScript NuGet package for building apps with MSBuild. The new JavaScript/TypeScript support in Visual Studio 2022 includes a full JavaScript Language Service based on TypeScript. It enables developers to create a solution with an .esproj for the front end and a .csproj for the ASP.NET Web API backend. Visual Studio 2022 allows developers to add an ASP.NET Web API integration to a JavaScript/TypeScript front-end app, enabling the front end to call the Web API backend. The React CLI is used to create the front end, ensuring the desired version of React is installed. Visual Studio 2022 provides flexibility in choosing the web server and web browser for JavaScript/TypeScript development, allowing developers to use the Launch.json file to specify their preferences. Developers can also choose to use TypeScript/JavaScript as a secondary component in an ASP.NET Core project, allowing them to bring in JavaScript/TypeScript functionality to an existing ASP.NET app.

https://feeds.hanselman.com/~/674283520/0/scotthanselman~JavaScript-and-TypeScript-Projects-with-React-Angular-or-Vue-in-Visual-Studio-with-or-without-NET feeds.hanselman.com

RSS Hunter • Nov 25, 2021

A Nightscout Segment for OhMyPosh shows my realtime Blood Sugar readings in my Git Prompt

The author, a diabetic, previously created a way to display blood sugar readings in their command prompt but has now developed a more streamlined method using Oh My Posh. This new approach utilizes a custom "segment" within Oh My Posh to fetch and display real-time blood sugar data from Nightscout, an open-source platform for tracking glucose levels. The segment is highly configurable, allowing for personalized colors and icons based on the blood sugar values. It's also efficient, only updating every 5 minutes or when the prompt refreshes, with a configurable timeout to prevent delays. The author plans to further enhance the segment by adding support for mmol measurements and visually indicating stale data points. This solution works seamlessly across various operating systems and shells, providing a convenient and customizable way to monitor blood sugar directly within the command prompt. The author encourages community contributions and provides a link to a YouTube video demonstrating the segment's development. The article concludes with a sponsorship message from Auth0, promoting their authentication services.

https://feeds.hanselman.com/~/673947624/0/scotthanselman~A-Nightscout-Segment-for-OhMyPosh-shows-my-realtime-Blood-Sugar-readings-in-my-Git-Prompt feeds.hanselman.com

RSS Hunter • Nov 23, 2021

Upgrading a 20 year old University Project to .NET 6 with dotnet-upgrade-assistant

In 2001, the author created a Tiny Virtual Operating System for a college course, initially in C# and later ported to VB.NET on early .NET frameworks. Years later, the project was migrated to GitHub and updated to .NET Core 2.0, enabling it to run on various platforms like Linux, Docker, and Raspberry Pi. Recently, the author decided to upgrade the 20-year-old application to .NET 6 using the .NET Upgrade Assistant. The upgrade process was interactive and surprisingly smooth, with the project building successfully on the first attempt. However, some outdated version numbers in the project file required manual adjustment. Using the "dotnet outdated" tool, the author confirmed the availability of newer packages and upgraded them accordingly. The execution command was modernized to a simpler format. With .NET 6, the final application was packaged as a self-contained, cross-platform executable, a mere 11 MB in size, highlighting the significant progress in .NET development over the years.

https://feeds.hanselman.com/~/673659136/0/scotthanselman~Upgrading-a-year-old-University-Project-to-NET-with-dotnetupgradeassistant feeds.hanselman.com

RSS Hunter • Nov 18, 2021

.NET 6 Hot Reload and "Refused to connect to ws: because it violates the Content Security Policy directive" because Web Sockets

To improve security, Hot Reload in ASP.NET Core applications requires understanding Content-Security-Policy (CSP) headers. DasBlog uses the NWebSpec library to configure CSP headers. By default, CSP headers restrict connections to "self," blocking communication with Hot Reload. To enable Hot Reload in development, explicitly allow WebSocket connections to the development server using CSP headers, such as "connect-src: wss://localhost:62895." CSP headers should be configured differently for development and production environments to ensure security while accommodating development tools like Hot Reload. It's essential to be aware of the headers required for both scenarios to maintain a balance between security and development convenience.

https://feeds.hanselman.com/~/673288256/0/scotthanselman~NET-Hot-Reload-and-Refused-to-connect-to-ws-because-it-violates-the-Content-Security-Policy-directive-because-Web-Sockets feeds.hanselman.com

RSS Hunter • Nov 16, 2021