Skip to main content

Posts

Showing posts from July, 2020

Veracode Security Labs Community Edition launches to close the security gap

Security company Veracode has announced it will be offering a Security Labs Community Edition as a free-to-use alternative to its Enterprise Edition. This new edition will allow developers to hack and patch real applications, allowing them to learn new tactics and best practices in a controlled, safe environment. The company had recently partnered with Enterprise Strategy Group to survey developers and security professionals. They found that 53% of organizations provide security training less than once per year, and 41% believed it was the responsibility of security analysts to educate developers on security.  Veracode felt that developers are increasingly being asked to take more responsibility for securing code, which means it’s increasingly more important for them to get training on how to incorporate security into their applications. RELATED CONTENT: ‘Security debt’ the focus of 2019 State of Software Security report Application security: Best practices vs. practicality “W

A new New Relic: Focus on full-stack observability

Longtime application performance monitoring provider New Relic is shifting gears, announcing its product focus has shifted to observability with new updates to its New Relic One platform. According to the company, New Relic One has become an expanded observability platform comprised of three products: the Telemetry Data Platform, Full-Stack Observability and Applied Intelligence. The telemetry data platform is designed to be “the single source of truth” for all operational data. It is where application and infrastructure data is collected, analyzed and alerted on as necessary, the company said in a statement announcing the platform update. RELATED CONTENT: Observability: It’s all about the data ITOps Observability Guide Further, it provides full-stack observability across APM, infrastructure, logs and customer experience, the company said, as well as using applied intelligence for finding and resolving incidents more quickly. APM is now “only one piece of the puzzle,” Bill S

SD Times news digest: Yellowbrick and Protegrity data security partnership, Netlify to support self-hosted Git repos and Hasura Cloud

Yellowbrick Data and Protegrity are teaming up to provide advanced data security and privacy solutions.  “Protegrity delivers leading-edge data security and privacy solutions to the world’s largest enterprises across the leading platforms and data stores,” said Allen Holmes, vice president of business development at Yellowbrick Data. “Combined with the power and scale of Yellowbrick’s hybrid cloud data warehouse, enterprises can enjoy faster time to insights without worrying about compromising sensitive data and while also adhering to protection and privacy regulations.” Yellowbrick offers hybrid cloud data warehouse solutions while Protegrity offers data protection solutions. The collaboration will be a part of Yellowbrick’s mission to build a complete partner ecosystem for the data warehousing industry.  Netlify announces support for self-hosted GitHub and GitLab repo According to the company, this new support will unlock Jamstack for enterprise websites and applications. The sup

SD Times Open-Source Project of the Week: GitHub’s OpenAPI Description

This week’s highlighted open-source project of the week is GitHub’s OpenAPI description for its REST API. The company open sourced the description earlier this week. The OpenAPI specification is a standard for describing the interface of HTTP APIs, allowing both humans and machines to understand what an API does without having to read the documentation or have knowledge of the implementation, GitHub explained. The description contains over 600 operations that are exposed in GitHub’s API. The description can be used to generate mock servers, test suites, and bindings for languages that aren’t supported by Octokit , which is a collection of official clients for the API. It is currently provided in two formats: bundled and dereferenced. The bundled version of the description is the preferred one because it uses OpenAPI components for reuse and readability. The dereferenced version is intended only for tooling that has poor support for inline references to components, GitHub explaine

premium Don’t throwaway that throwaway code

Want to quickly know how good a project manager is? Here is an old consultant’s trick: Ask a programmer on the team how much throwaway code he or she used during the last project. A good 80/20 rule is the more throwaway code used during development, the better the project manager. Throwaway code refers to the temporary software programs and routines created to help in the coding, testing, conversion, and implementation of the final (deliverable) system. There is almost universal use of throwaway code in creating conversion software, the programs used to move data from the old filing system to the new one. After the conversion is successfully completed, the conversion software is often discarded, leading to the label, throwaway. Although conversion software might be the most obvious use of throwaway code, there are many other examples. Programmers use throwaway code in unit testing to display application variables at different locations in the program. Database teams create one or mo

SD Times news digest: Microsoft announces a new dev landing page and issues repo, MuseDev’s free code analysis platform, and Applitools’ Ultrafast Cross Browser Hackathon

Microsoft is giving developers new ways to work with Windows. The company announced a new docs landing page and a new GitHub issues repo.  The new landing page aims to help developers set up their development environments and optimize workflow on Windows. It will provide guidance and resources for working with Windows and using open-source tools alongside Microsoft apps and tools. Additionally, it will include ways to map Linux/Mac behaviors to Windows and provide the latest advancements and improvements in Windows.  The new GitHub repo is a place where developers can submit and discuss issues directly with the Windows engineering team. Currently, it only supports developer-related performance issues but will include additional scenarios in the future as the team learns more about how to best handle issues.  More information is available here .  MuseDev provides early access to its code analysis platform The Muse platform is now available on the GitHub marketplace. It is design

How to Make a Body or Object in VR (Virtual Reality)? Neeraj Mishra The Crazy Programmer

If you’ve enjoyed gaming using an Oculus Rift S or Sony PlayStation headset, then you’ve had a hands-on experience of VR. Nowadays, the concept of virtual reality or VR is finding across-the-board applications, including healthcare, defense, aerospace, and many other industries. However, no other sector makes use of VR as much as the gaming industry. In this article, we will walk you through the basics of ‘how to make a body or object in VR?”. We’ll take you through the integrated steps of creating 3D objects and bodies abounding in the VR point-and-click adventure gaming. This tutorial will guide you on how to create a basic version of a simple point-and-click adventure game, albeit in VR. What you’ll need is a computer or laptop. It doesn’t have to be a powerful PC or VR ready laptop as only the basic stuff will be covered. This guide mainly introduces you to 3D programming and serves as a standalone starter tutorial for setting up a web-based VR model. In the first part, we will

Machine Inferred Code Similarity system developed to democratize software development

Researchers from Intel, Massachusetts Institute of Technology and Georgia Institute of Technology have announced a new machine programming system designed to detect code similarity. The Machine Inferred Code Similarity (MISIM) system is an automated engine capable of determining when two pieces of code, data structures of algorithms perform the same or similar tasks.  According to the researchers, hardware and software systems are increasingly becoming more and more complex. That, coupled with the storage of programmers necessary to develop the hardware and software systems have highlighted a need for a new development approach.  The idea of machine programming, which was coined by Intel Labs and MIT, is to improve development productivity through the usage of automated tools.  “Intel’s ultimate goal for machine programming is to democratize the creation of software. When fully realized, MP will enable everyone to create software by expressing their intention in whatever fashion t

IntelliJ IDEA 2020.2 adds ability to review and merge GitHub pull requests

JetBrains has updated its IntelliJ IDEA platform. IntelliJ IDEA 2020.2 adds a number of new features, including the ability to review and merge GitHub pull requests, navigate between warnings and errors in a file using the Inspections widget, and use the Problems tool window to view the full list of issues in a current file. The company expanded its integration with GitHub in this release. Now, users can browse, assign, manage, merge, view and submit comments, and accept changes from within the editor. The editor will show the conversation around a pull request and will offer the ability to add comments without having to leave IntelliJ IDEA.  The Inspections widget makes it easier to search for warnings, errors, and issues, and quickly navigate through them by pressing F2 or using the arrow icons. The widget also allows users to select which issues they would like to highlight. The Problems tool windows displays all warnings and errors that pertain to the current file. It also inclu

GitHub provides more visibility into upcoming releases with public roadmap

GitHub wants to it easier for its users to anticipate and plan around new features. The GitHub public roadmap will allow GitHub to clearly communicate what it is working on, while giving users a way to plan for new releases. On the roadmap there are several boards, each pertaining to a particular upcoming release. Items on the board relate to a particular feature, and those items will link to more detailed issues with information on what exactly is planned. According to the company, each item on the GitHub public roadmap is labeled with the following information: Release phase, which describes the next expected phase for the item Feature area, which indicates what area the item belongs to Feature, which indicates the feature or product that the item belongs to  Product SKU(s), which indicates which product SKU(s) the feature is expected to be available in Deployment model, which indicates whether it is being deployed on cloud or server and when “As customers have gotten used

SD Times news digest: Undo LiveRecorder for Java, Splice Machine Kubernetes Ops Center, and PyTorch 1.6 launched

Undo has announced support for Java. With LiveRecorder for Java, developers can resolve bugs much faster than before. It simplifies the traditional and lengthy process of debugging complex Java applications down to Record, Play, and Resolve, the company explained.  Developers debugging Java applications get an automatic 100% reproduction of the error that caused the failure. Developers can then reverse-debug the recording by replaying it, offline, on another machine, according to the company.  “By accelerating MTTR of bugs and reducing the amount of time spent debugging overall with LiveRecorder, Java development teams can start looking at other ways to improve productivity and drive rapid continuous delivery” said Barry Morris, the CEO of Undo.  Splice Machine Kubernetes Ops Center The DevOps platform is designed to lower operating costs by making it easier to provision, manage, and operate many scale-out SQL RDBMS’s with machine learning. “With its comprehensive data capabilitie

OpenXR announces 1.0 Adopters Program and new ecosystem developments for AR/VR

The Khronos Group and OpenXR working group has announced the OpenXR 1.0 Adopters Program and open-source conformance tests. OpenXR is a royalty-free, open standard that provides direct access into AR/VR runtimes across diverse platforms and devices. As part of the adopters program, Oculus and Microsoft are shipping multiple conformant implementations of OpenXR with new advanced cross-vendor hand and eye-tracking extensions In addition, Microsoft has released an OpenXR-conformant runtime fortheHoloLens 2 headset, and Oculus has shipped conformant runtime for the Android-based Quest.  RELATED CONTENT: NASA is pushing virtual reality software to aid scientific discovery The reality of augmented reality Valve has also released a developer preview implementation of OpenXR 1.0 with new features on SteamVR and the ability to use OpenXR apps with Varjo headsets. “The Working Group has put tremendous effort into OpenXR conformance testing to create a truly reliable cross-platform API. We

Apache Arrow 1.0.0 now available

The Apache Arrow team has announced the release of Apache Arrow 1.0.0. Apache Arrow is a development platform for in-memory analytics.  Version 1.0.0 is the 18th release of the platform. It features 810 resolved issues from 100 contributors.  According to the team, this release marks a transition to binary stability of the columnar format and a transition to Semantic Versioning for the Arrow software libraries.  The columnar format has received a number of changes in this release:  The metadata version was bumped to a new version. Dictionary indices gained the ability to be insight integers. A new “Feature” enum was added. Optional buffer compression using LZ4 or ZStandard was added to the IPC format. Decimal types gained an optional “bitWidth” field that defaults to 123. According to the team, this will allow them to support other decimal widths in the future, such as 32- and 64-bit. The validity bitmap buffer was removed. In addition, the team has expanded integration tes

SD Times news digest: Git 2.28.0, Kotlin 1.4.0-RC, and Digital.ai’s VSM partner program

The latest update of Git is now available. The update brings a new ‘init.defaultBranch’ feature as well as changed-path Bloom filters, which are a huge boon for performance in lots of Git commands, according to the team.  Starting in Git 2.28, ‘git init’ will instead look at the value of ‘init.defaultBranch’ when creating the first branch in a new repository. Git also now includes a GitHub Actions workflow. Additional details on the new release are available here . Kotlin 1.4.0-RC released Kotlin 1.4.0-RC includes improved ‘*.gradle.kts IDE support,’ simplified management of CocoaPods dependencies, improved Kotlin/JS integrations and all source sets now include the standard library dependencies by default.  It also comes with new functionality to debug coroutines and define deep recursive functions. “Now you can manage Pod dependencies right in IntelliJ IDEA while enjoying the benefits it provides for working with code, such as code highlighting and completion. You can also buil

Cloudflare releases new developer serverless solution

Cloudflare has unveiled a new serverless solution to compete with AWS Lambda. The release of Cloudflare Workers Unbound offers a serverless platform for developers to run complicated computing workloads across the Cloudflare network and pay only for what they use. According to the company, the new solution can save users up to 75% for the same workloads running on centralized serverless platforms such as Lambda.  “Serverless promises both a radical new economic model for compute, and a radically simplified programming model, with the developer focusing on orchestration and composition of rich back end services. Autoscaling, performance, observability, built-in security and support for a range of modern programming languages are all provided by the infrastructure,” said James Governor, co-founder and analyst at RedMonk. Developers can now run heavy workloads without having to worry about overly restrictive CPU constraints, Cloudflare explained. They also won’t have to pay for hidden

SD Times news digest: Xen Project Hypervisor 4.14, Ensono’s mainframe modernization capabilities, and Apache’s weekly roundup

The Xen Project announced the latest version of its open-source hypervisor. Xen Project Hypervisor 4.14 introduces Linux subdomains, better nested performance, more robust live patching and reflects contributions from across the community and ecosystem.  A new development made in the Xen Project Functional Safety Working group is the successful drafting of prototype requirement documents and progress towards the processes and procedures on maintaining these documents.  Ongoing work on the project includes Secret free Xen which will prevent memory from being mapped, Golang bindings significantly expanded, and live migration without need for guest cooperation.  Ensono’s mainframe modernization capabilities Ensono expanded mainframe modernization capabilities within the Hybrid IT service portfolio. The solution delivers new capabilities for clients with mission-critical mainframe environments including cloud native functions to enhance mainframe workloads, targeted application assess

Azure Virtual Machine Tutorial Neeraj Mishra The Crazy Programmer

So in this article, we’ll learn the following things: What is a Virtual Machine? Why we use Virtual Machines? How to create a Virtual Machine? How to use a Virtual Machine in your Computer System? Prerequisites: Microsoft Azure Subscription Good Internet Connection So let’s start with the first question. What is a Virtual Machine? In simple words, If we use a Computer machine over the internet which has its own infrastructure i.e. RAM, ROM, CPU, OS and it acts pretty much like your real computer environment where you can install and run your Softwares. All you need is an internet connection to use that machine. We can increase and decrease the size of the disk, RAM, the capacity of CPU according to our needs. At a time we can run multiple virtual machines in a single computer. Why We Use Virtual Machines? To answer this question let’s assume a scenario: Ram is a freelancer and develops Computer Games. So once a client wants a game to be developed which should run on A