Skip to main content

Posts

Showing posts from February, 2022

Agile mindset can be applied to more than just development teams

There has been no shortage of information on how to make your development team more agile, but little guidance exists on applying those same practices to infrastructure and operations (I&O). I&O leaders are under a lot of pressure to improve their agility in order to strengthen the alignment between IT and the rest of the business, but there is a different between becoming agile and “agile” as a methodology. Read more in this article , written by Gartner analyst George Spafford, which initially appeared on ITOpsTimes.com .   The post Agile mindset can be applied to more than just development teams appeared first on SD Times . from SD Times https://ift.tt/OmEHayg

Microsoft contributes features to Flutter for foldable devices

Microsoft has made some announcements regarding its support for developing for foldable devices with Flutter. MediaQuery now has Display Features, which are parts of the display that can be obstructed by hardware features, such as the hinge on the Surface Duo.  When users switch over to the master channel on their local Flutter setup, they can now access a property called ‘displayFeatures’.  When users want to display content on only one screen of Surface Duo, which is the case when they’re showing a dialog, they now have the option of using the ‘DisplayFeatureSubScreen’ widget. The widget is mostly needed for modal routes and is used in the “Dialogs and popups support” PR.  “Some of our contributions have not yet been merged. If you want to give them a try today, this is now far easier to do compared to when we first proposed these changes. Back then you had to configure a custom Flutter Engine. Things are a lot simpler now,” Andrei Diaconu, senior software engineer of Surface Duo

SD Times Open-Source Project of the Week: TorchRec

Earlier this week, at an event on AI in the Metaverse, Meta (previously Facebook) announced that it was open-sourcing TorchRec . TorchRec is a PyTorch library for recommendation systems.  According to PyTorch, the TorchRec library includes modeling primitives, optimized recommendation system kernels, a sharder for partitioning tables, a planner than can generate sharding plans, GPU inference support, common modules for recommendation systems, and pipelining for overlapping dataloading device transfer, inter-device communication, and computation.  “Recommendation Systems (RecSys) comprise a large footprint of production-deployed AI today, but you might not know it from looking at Github. Unlike areas like Vision and NLP, much of the ongoing innovation and development in RecSys is behind closed company doors,” Donny Greenberg, product manager for PyTorch; Colin Taylor, senior software engineer for Facebook AI; and Dmytro Ivchenko, software engineer at Facebook, wrote in a blog post .

Microsoft gives sneak peek at C# 11 features in latest Visual Studio update

In Microsoft’s Visual Studio 17.1, users will get a sneak peek at features coming to C# 11. These features will also be available in .NET SDK 6.0.200.  A feature available in early preview is parameter null checking , which verifies at runtime if a null has been passed to code. This is separate from Nullable Reference Types (NRT), which identifies at design time if a null is possible. Another new addition to the language is the ability to allow newlines in holes in non-verbatim interpolated strings. Holes, or interpolation expressions, are contained inside curly braces and supply runtime values. Previously newlines were allowed in verbatim interpolated strings, but in non-verbatim strings escapes, like \r or \n, were required instead.   C# 11 will also include list patterns , which allows developers to match elements against lists and arrays. In addition, developers will be able to include a slice pattern to match zero or more elements. List patterns work with types that are cou

GitLens 12 released with support for VS Code for the Web

Git tool provider GitKraken launched GitLens 12 with support for Visual Studio Code for the Web and github.dev. GitLens is an extension for Git that can be used in various IDEs, and according to the company, is the most downloaded Git extension for Visual Studio Code. In addition, premium features like Worktrees and Visual File History are now available through the GitLens Free+ and Pro plans. “Bringing the power of GitLens to the Web is an incredible milestone, and introduces compelling new opportunities for developers. Now everyone can access GitLens’ rich insights to better understand why things changed, when, and by whom, directly from their browser” says Eric Amodio, CTO and CPO of GitKraken.   GitLens 12 provides support for Visual Studio Code for the Web, which gives users the ability to edit GitHub repositories in VS Code in a web browser, on desktops or tablets, with no install required.  The release also introduces upgraded GitLens plans. The free plan provides access to

Report: Test stability and coverage remain challenges for teams, but top performers embrace continuous testing

While test stability and test coverage are still challenging for teams, the top performers are the ones who are embracing continuous testing.  This is according to the annual State of Test Automation survey, in which Perfecto surveyed over 400 leading digital enterprises across industries.  Organizations are finding it difficult to keep up with high-value test suites as modern apps and the market continuously change.  To address these concerns, these companies should leverage market data in order to align their testing lab with customer usage data and continuously maintain, validate, and modify test automation suites, according to the survey.  Test automation executions throughout the pipeline should be spread based on software iteration scope, regression needs, parallel testing for velocity, and more, Perfecto explained.  The survey also found that in 2022, organizations are looking to expand shift-left testing to API, performance, and accessibility testing. This comes as test

SD Times news digest: Ambassador Labs releases latest version of Ambassador Cloud; Harness announces enterprise GitOps; Ahana unveils new security capabilities;

The cloud native developer company Ambassador Labs today announced the newest release of Ambassador Cloud , bringing users features such as “ClickOps” capabilities. This makes it easier for developers to code, test, ship, and run applications for Kubernetes. Visit here to get started using Ambassador Cloud for free.  This release brings developers the ability to code and test service with Telepresence , deploy canary releases with Argo, and run production apps with Emissary-ingress. It is available now and free to use for one Kubernetes namespace, and additional namespaces can be achieved for $5 a month.  “We built Ambassador Cloud to help developers do what they want to do most, which is write great code,” said Richard Li, founder and CEO at Ambassador Labs. “The power of Kubernetes and the tools ecosystem to manage it adds a lot of complexity to the development process. Ambassador Cloud directly addresses the learning curve for developers to master this complexity with ease,

Security and usability are not mutually exclusive in mobile applications

Organizations that build or maintain mobile applications have a greater responsibility than ever to secure their applications as the number of application downloads continues to grow.  3.8 billion smartphone users accounted for 218 billion app downloads in 2020 alone. Zimperium conducted a survey last year in which 250 enterprises described the security issues they  struggled with the most within their their mobile applications. The greatest security issue with applications for Android was lacking runtime protection at 93% while this data point was at 79% for iOS. Where iOS struggles was in lacking code protection at 94% while it is only 63% on Android. The two other most common issues were vulnerable encryption for which both application types hovered around 50%, while the lack of data protection sat at around 26-38% for both device types.  The survey found that enterprises were concerned with the right things, such as ensuring data is securely stored and transmitted and ensuring

Broadcom Clarity 16.0.1 now available with new configurable visual widgets

The team at the global infrastructure technology company Broadcom recently announced the general availability of Broadcom Clarity 16.0.1 for On-Premise and SaaS users. With this release the Clarity Product Team brings customers several new features. This update introduces Visual Resource Staffing in the form of an allocation timeline which shows an investment timeline utilizing either Allocations by Investments or Allocations by Resources layouts at the top of the page and Capacity, Allocation, and Remaining Capacity using either Resource Availability or Resources by Role at the bottom of the page. Additionally, Configurable Visual Widgets have been added to several functional areas, including Investments, Sub Objects, Planning, and Workspaces. With this, users can also create Widgets and have the option to share them in a library. This release also brings a deeper level of focus on improving the Project Management user experience. This includes the ability to display financial an

SD Times news digest: Couchbase launches Couchbase Mobile 3; Hasura closes Series C funding round; Redpanda announces $50 million in Series B

Couchbase , provider of a modern database for enterprise applications, today announced the release of Couchbase Mobile 3 , an edge-ready data platform that allows mobile developers and edge architects to build native, modern applications in the cloud, at the edge, and on mobile and IoT devices with whatever language, framework, and platform they choose. Key highlights of this release include:  Device ubiquity: users can embed lightweight data storage directly into their applications on the edge, IoT, or mobile devices  Operational ease of use: REST-based remote administration works to support large multi-tenant applications  Greater flexibility within complex edge architectures: Couchbase can run and sync in the cloud, in edge data centers, within a 5G network, on-premise, or on edge devices Hasura closes Series C funding round The round totaled $100 million and was led by Greenoaks with participation from Lightspeed’s growth arm, Vertex, Nexus, and Strive. This influx of fund

Temporal.io Raises $103 Million Series B, Company Valuation Passes $1.5 Billion

Temporal, the leading state management systems company, today announced it raised $103 million in Series B funding. Index Venture Capital led the round and was joined by Sequoia Capital, Amplify Partners, Madrona Venture Group and Addition Ventures. Temporal raised more than $120 million since its founding in 2019, and Series B funds will be used to expand the team with a heavy focus on developer empowerment, growing the vibrant open source community, and developing new features for Temporal’s cloud offering. Temporal was founded by Maxim Fateev and Samar Abbas, the leading experts in application state management. Fateev and Abbas led the design and development of Simple Workflow at AWS, which was the first technology to solve the state management problem. Over the last decade, they architected business critical systems including Durable Task Framework and Uber Cadence before arriving at the ideal solution: Temporal – an MIT licensed platform for unifying and managing application stat

New study shows 20x increase in security scan cadence

As security continues to shift left and DevSecOps efforts expand, software security best practices are rapidly evolving. The State of Software Security Report conducted by the application security company Veracode, showed that on average, organizations are running scans on their apps 20 times more than they were just 10 years ago. With this, the report also revealed that scan frequency has seen a dramatic increase, with developers now testing more than 17 new applications per quarter, more than triple what was reported for the same period a decade ago.  “Part of this is due to the speed of innovation that has happened in the past few years. More and more software is being written and organizations are realizing that there’s a bit of exposure there. There’s more customer data being put into those things and the business is being driven by these applications so it’s important to make sure that they’re secure,” said Chris Eng, chief research officer at Veracode. Additionally, there has

Solve TypeError: ‘int’ object is not subscriptable in Python Gorakh Gupta The Crazy Programmer

While we are using the operator on a string there an integer value will raise TypeError. We can say it in other words as the TypeError is raised on an unsupported object type when we are applying an operation of the wrong type. This error generally occurs when we are trying to use the integer type value as an array. In python language when any type of object that implements the get_item method then the class definition is being called subscriptable objects and when we are applying the method by which we can access the elements of the object for getting the value. In this article, we are going to see what is the reason for this error and how can we overcome this type of error in programs. Reasons for Error Case 1: Suppose we want to write a program to calculate your number for the car which is based on the date of joining a company. date_of_joining = '15/07/2000' add_month_values = (int(date_of_joining[0])+int(date_of_joining[1])) add_day_values = (int(date_of_joining[3])

SD Times news digest: Jetpack WindowManager 1.0.0 now stable; Rust-Analyzer joins Rust organization; Whitesource announces SAST solution

The team at Google recently announced that Jetpack WindowManager 1.0.0 is now stable. WindowManager can be used to manage multi-window applications. Since its initial alpha release, the library has added WindowMetrics information and experimental support for activity embedding .  Jetpack WindowManager brings users the DisplayFeature interface as well as its FoldingFeature implementation. These work to provide important information such as the hinge’s orientation and state .  For more information, see here . Rust-Analyzer joins Rust organization The Rust-Analyzer project, a new implementation of the Language Server Protocol for Rust, has been officially brought into the Rust organization. This change unblocks technical work to make Rust-Analyzer the recommended language server for Rust in the near future. Rust-Analyzer is supported by several editors, including VS Code, Neovim, Vim, and Emacs. If you are using IntelliJ-Platform based IDEs such as CLion, IDEA, and PyChar

Google to bring Privacy Sandbox to Android

Google announced that it will be bringing Privacy Sandbox to Android with the goal of introducing new, more private advertising solutions. Privacy Sandbox is an existing initiative by Google to better protect users’ private data.  These solutions will limit sharing of user data with third parties and operate without cross-app identifiers, including advertising ID. Google is also exploring technologies that reduce the potential for covert data collection, including safer ways for apps to integrate with advertising SDKs. “Our goal with the Privacy Sandbox on Android is to develop effective and privacy enhancing advertising solutions, where users know their information is protected, and developers and businesses have the tools to succeed on mobile,” Anthony Chavez, the VP of product management at Android Security and Privacy wrote in a blog post . “While we design, build and test these new solutions, we plan to support existing ads platform features for at least two years, and we in

.NET 7 Preview 1 marks first step forward toward future of platform

Microsoft has announced the next major milestone for the .NET platform with the release of the first preview of .NET 7. The language recently celebrated its 20th anniversary and according to Microsoft, this release “marks the first step forward towards the next 20 years of .NET.” This release will build off foundations laid in .NET 6, such as a unified set of base libraries, runtime, and SDK; a simplified development experience, and improved productivity for developers. According to Microsoft, the major areas of focus for .NET 7 include: Improved support for cloud native development Tools that will enable developers to more easily upgrade their legacy projects A simplified experience for working with containers “Containers are the preferred way to deploy cloud native apps and microservices for many companies today. Relying on containers presents several challenges including managing compliance, building and publishing images, securing images, and streamlining the size and perfo

SD Times news digest: Microsoft announces Foldable Navigation component; Creatio’s Atlas 8; Voltron Data launches with Series A funding

Recently, the team at Microsoft announced the release of its newest SDK component, Foldable Navigation Component, which can be used to develop apps optimized for foldable screens. This comes as an extension of JetPack Foldable Navigation Component and is now available for foldable devices. With this, the display will be split into two sections (physical or not) and shows two fragments, one for each display area, at once. See the FoldableLayout documentation for more information . There is also a sample available for users to test out the new navigation scenarios. Microsoft invites user feedback that can be submitted here or through a message on Twitter at @surfaceduodev .  Creatio reveals features of 8 Atlas Creatio , a no-code CRM platform, recently unveiled the new capabilities of its no-code platform, 8 Atlas.  A few highlights of this release include: No-code Designer: A module that consolidates all application design tools and assists in the design and launch of ap

SD Times Open-Source Project of the Week: Mizu

Mizu is an API traffic viewer for Kubernetes that enables users to view all API communication between microservices to help debug and troubleshoot regressions. “Viewing API traffic between microservices is essential if you want to understand the root cause of problems found in complex distributed systems,” Alex Haiut, the co-founder and vice president of engineering at UP9, the company behind the project, wrote in a blog post . “Through our efforts to observe API traffic between microservices, we were able to isolate a chunk of our technology and package it as an open source project.” Users can easily view traffic in the same way that they can use Google Chrome Dev Tool to view the traffic of their webapps. The tool works by injecting a container that performs a tcpdump-like operation at the node level of a Kubernetes cluster. The operation can be performed on-demand via a CLI that injects the container when run. Alternatively, when ^C is used, it removes the container. Mizu doe

Report: Investing in tools that allow for better asynchronous communication should be top priority

Tools that make developers happy, improve remote collaboration, and allow for automation of workflows should be at the top of the priority list for companies looking to drive productivity in their development organizations.  ZenHub has released a survey exploring these trends, the 2022 State of Disruptive Software Teams , in which 265 executives, team leads, project managers, developers, and other decision makers were surveyed.  “Today’s software teams, particularly those at startups, care deeply about innovating as quickly as possible, as they seek to change the status quo,” said Thabang Mashologu, VP of marketing at ZenHub. “In keeping with that overarching theme, product and team leaders must compete for developer talent by creating conditions in which increasingly remote teams can asynchronously collaborate on work that delivers impact and an edge for their business. Certainly, the dynamic has changed for most organizations, and team productivity tools need to reflect that reali

Elastic and Amazon reach an agreement on trademark infringement lawsuit

It was recently announced that Elastic and Amazon have resolved the trademark infringement lawsuit related to the term Elasticsearch. With this resolution, the only Elasticsearch on AWS and the AWS Marketplace is Elastic Cloud. This comes as a long awaited conclusion to the license battle between the two companies due to the change to the license of ElasticSearch and Kibana back in 2021. The open-source license was changed to SSPL as a result of Elastic believing customers were being misled by Amazon offering Amazon Elasticsearch Service, and that Amazon was abusing the intent of the open-source license and profiting off the project.  Amazon has since renamed Amazon Elasticsearch Service, to Amazon OpenSearch Service.  With this resolution, the companies hope to remove any confusion in the marketplace and provide clarity to their communities and customers. This resolution means that there is now only one Elasticsearch and it comes from Elastic. When using Elasticsearch, regar

SD Times news digest: Snyk acquires Fugue; JetBrains adds advanced project management to YouTrack; Akamai to acquire Linode

Today, the developer security company Snyk announced its acquisition of Fugue, a cloud security and compliance company. With this, Snyk makes its entrance into the cloud security market, a segment of the cybersecurity industry that is predicted to be worth $77.5 billion by 2026 according to MarketsandMarkets . This combination brings Fugue’s capabilities to the Snyk Developer Security Platform , allowing for a cloud security posture management (CSPM) platform designed both by and for developers. For more information, see here .  “As we join forces with Snyk today, our founding mission – security by and for developers – doesn’t change, but expands exponentially with the scope of the opportunity in front of us,” said Josh Stella, co-founder and CEO of Fugue. “We’re excited to now reach more developers in more places, helping them to not only build our future, but also successfully secure it.” JetBrains adds advanced project management to YouTrack JetBrains recently announced the 2

Melissa 2022 Catalog Offers Solutions to Improve Address Management, ID Verification, and Data Enrichment

Melissa , a leading provider of global data quality and address management solutions, today announced availability of its  2022 Melissa Solutions Catalog  highlighting the company’s comprehensive suite of solutions and services that help keep customer data clean, up-to-date, and enriched for the greatest insights and most efficient business practices. “Our annual catalog offers the full scope of smart, sharp tools that help organizations worldwide proactively maximize the inherent business value of customer contact data,” said Bud Walker, vice president of enterprise sales and strategy, Melissa. “The address is truly the foundation to data-driven success – whether it’s improved customer engagement, critical fraud detection, or smooth and profitable overall business operations. Through decades of experience, unmatched technology, and a growing global footprint, Melissa has earned its status as the Address Experts. Our address verification tools offer proprietary capabilities that simpl

Google Identity Services update makes it easier to implement authentication

Last year, Google announced Google Identity Services (GIS) , which is a set of APIs that consolidated several identity offerings from the company. Included in the GIS development kit are the Sign in with Google button and the authentication prompt One Tap.  Now, Google is adding an authorization feature to GIS to bolster the offerings of the SDK and make it easy for developers to implement secure authentication into their apps.  The new authentication library acts as a “one-stop-shop’ for authentication and authorization, according to the company. Authentication allows for new user sign ups and returning user sign ins, and authorization provides developers with access tokens to call Google APIs with a user’s consent.  The SDK provides clear separation between these two functions in order to provide developers with greater control. Developers can make calls as two separate flows based on app needs.  According to Google, the new GIS SDK uses pop-up dialogues in the browser, which he

SD Times news digest: Updates announced for Amazon CodeGuru Reviewer; JFrog Xray updates; Sysdig and Snyk announce partnership

Recently, Amazon announced new features being added to Amazon CodeGuru Reviewer, a developer tool that works to detect security vulnerabilities in code and provides intelligent recommendations to improve code quality. These updates include:  A new Detector Library that describes the detectors that CodeGuru Reviewer uses when looking for possible defects and includes code samples for Java and Python New security detectors that work to detect log-injection flaws in Java and Python code  These new features are available today in all AWS Regions where Amazon CodeGuru is offered. For more information, visit here .  JFrog Xray updates  DevOps company JFrog today introduced contextual analysis security capabilities in JFrog Xray , the company’s DevSecOps solution. These new features enable users to more precisely determine the threat level and relevance of common vulnerability exposures (CVEs). The goal of this update is to create more rapid and accurately-prioritized remedia

Report: 64% of companies were impacted by supply chain attacks mostly due to increased OSS reliance

The software industry’s reliance on open source along with a sharp increase in open source software (OSS) dependencies helped to make supply chains a major security target. 64% of organizations were impacted by a software supply chain attack in the last year according to a recent report .   The report, The 2022 State of the Software Supply Chain, was conducted by software and IoT  solution provider Revenera with data from over 100 Revenera audit services projects. While open-source use awareness is the first step to building and maintaining a successful open source management strategy, close to 70% of organizations do not have company-wide policies for properly using open source. The Revenera audit team identified 12% more issues in 2021 over the prior year, with 2,200 issues uncovered per audit project compared to 1,959 in 2020. 61% of the scanned codebase files were attributed to open source, up 6 percentage points from 2020.  Also, compared to 2020, Revenera found a 7% increa