Google paid $8.7M in bug bounties in 2021 / Microsoft Azure Trial Hackathon / A-Frame, a framework for webVR experiences

Ruby Protocol raises $7.3M funding round

Inside.com Part of   Network February 14, 2022

Presented by

Google published the 2021 round-up of its Vulnerabilities Reward Program (VRP). Google launched the program in 2010 to reward security researchers who report bugs on Android, Google Play, Chrome, and other web services.  More:  Google paid a record-breaking total of $8.7M to researchers for reporting bugs, of which around $3M was donated to charities. In 2020, Google paid $6.7M in rewards.  In 2021, Google launched a new platform, bughunters, that provided a single intake form to make security bug submission easier.  A total of 696 researchers from 62 countries were rewarded through the program. The highest reward amount was $157,000 for an exploit chain vulnerability in Android. 220 and 333 unique bug reports were security bugs in Android and Google, respectively.

The Dev Community is conducting the Microsoft Azure Trial Hackathon to provide participants with the opportunity to create an application. Participants could win up to $1,500 in cash and some big prizes.  More:  App developers are invited to choose from various categories and build an application with Azure products such as Artificial Intelligence and Machine Learning, Computer Services, Java Services, etc. Developers who sign up for the contest will receive a free trial credit worth $200 to build applications.  To submit a valid entry, participants will have to share the app's code on the GitHub repository with a Readme, license the code with MIT, Apache-2, and create an app overview.  Entries should be shared on Dev by March 8.

A message from PASSBASE Digital ID verification has evolved, and there’s a new playbook to help you stay on the cutting edge. Every week we’re seeing headlines about fraud, so we were excited to read the New Identity Playbook from Passbase that unpacks how to implement next-gen identity verification into your KYC program.  In it, we learned the latest approaches that companies are using to fight fraud and protect customers without compromising on user experience. TL;DR: Learn how identity verification (IDV) has evolved - and why you should care. Explore frameworks for implementing modern, customer-centric IDV. Know the questions to ask your IDV provider as you evaluate solutions. Download the New Identity Playbook

A-Frame is a web framework for creating 3D and webVR experiences with HTML. Its latest version, 1.3, was released recently with updates to three.js r137, bug fixes, and performance enhancements.  More:  A-frame's powerful entity-component framework provides a declarative, extensible, and composable structure to three.js.  It supports all popular VR headsets, including Vive, Rift, Windows Mixed Reality, Oculus Go, Daydream, GearVR, etc., to build VR applications.    A-Frame is used by Google, Disney, Samsung, Toyota, Ford, CERN, NPR, and many more to create 3D experiences. Google, Microsoft, Oculus, and Samsung have made contributions to the open-source project.    A-Frame School offers an interactive course to get started with WebVR.

Web3 privacy platform Ruby Protocol raised a $7.3M funding round. The funding round saw participation from Digital Strategies, DFG Group, SigNum Capital, D1 Ventures, Global Chain Research, Ocean Foundation, and more.  More:  Ruby Protocol is powered by Polkadot and utilizes Functional Encryption (FE) cryptography to handle data sharing and privacy in dApps and Parachains.  This year, the development team plans to release GitHub Repos in Q1, launch Testnet v1.0 in Q2, followed by Mainnet v1.0 launch and the Parachain loan offering in Q3.  The new capital will core development of layer-1 blockchain and privacy middleware, expand research on dApps, increase the team size.

New Tools and Updates: Android revamped two testing sections on d.android.com to accommodate for Compose and new architecture guidelines. Android introduced a new Testing training with fundamentals of testing in Android and updated the Testing section of Tools documentation.  Microsoft announced the release of TypeScript v4.6 RC. There will be no new breaking changes from the release candidate to the stable release. Since the beta version, two new features, control flow analysis for destructured discriminated unions and es2022 output target, have been added.  The development team at Elastic announced the release of Elasticsearch 8.0. The latest release adds 7.x Rest API compatibility, the technical preview of kNN search API, PyTorch model support for natural language processing, and more.  Apache ECharts 5.3.0 is now available with enhancements to animation expressiveness, rendering performance, and server-side rendering.

📚 Tutorials:  Learn how to automate taking screenshots of the Android app written in Jetpack Compose.  This tutorial demonstrates how to develop a command-line tool using Swift concurrency.  Find out how GitHub Actions are written in Go at Blend.  Here is a look at how Angular's Compiler works.

Quick Hits: Ready to empower your teams to quickly explore, analyze, visualize, and collaborate on all of your cloud data? It's time for Sigma.* Tech giant Apple was fined another €5M by the Netherlands antitrust watchdog, Authority for Consumers and Markets (ACM). It found Apple's new guidelines for third-party payment methods as unreasonable conditions.  According to researchers at Threat Fabric, Cabassous, aka FluBot malware's infection tactics and delivery infrastructure is mimicked by another banking trojan, Medusa.  The U.S. CISA updated the catalog of known vulnerabilities to include 15 new vulnerabilities that attack Apple, Microsoft, Apache, and Oracle.  Web browser Opera is partnering with Yat to allow emoji web addresses on its browser.  *This is a sponsored listing.

Upcoming Events: February 15 - Venturing in VC - Episode #6 with Marlon Nichols (MaC Venture Capital) (Register Here) February 17 - Efficient Marketing Strategies in a Post iOS 14 World (Register Here) February 22 - Are you ready for the Future of Tax & Accounting for Crypto, DeFi, & NFTs? (Register Here) * February 23 - Need to Know NoCoder: Derya Sousa (Kianda Technologies) (Register Here) February 24 - Alternative Investments (Register Here) February 24 - Conversational AI in eCommerce with Flipkart (Register Here) * February 28 - Inside Investment DAOs with Global Coin Research (Register Here) March 10 - NoCode's Impact on the Gig Economy (Register Here) March 23 - Need to Know NoCoder: Nichole Bestman (Bubble) (Register Here) March 31 - How To Build In Web 3.0 (Register Here) April 07 - Blockchain and the Law (Register Here) April 14 - Shopping In The Metaverse (Register Here) *This is a sponsored listing. DID YOU KNOW WE'RE HIRING? We have multiple positions open for 100% remote, full-time analysts. Apply or refer someone. https://bit.ly/jobs-inside-NL.

Sudarshan lives in Toronto, Canada, and is an engineering graduate. He is passionate about business, tech, entrepreneurship, and politics. FUN FACT: Sudarshan worked for the election campaign teams of two heads of state in India. When he is not busy with work, he enjoys hiking, playing cricket, and cooking. Editor Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 Ford.

The identity infrastructure that helps companies solve KYC in a compliant and user-centric way.

Click to Share ➞

767 Bryant St. #203, San Francisco, CA 94107 Copyright © 2022 Inside.com

Did someone forward this email to you? Head over to inside.com to get your very own free subscription! You received this email because you subscribed to Inside Dev. Click here to unsubscribe from Inside Dev list or manage your subscriptions.