GitHub shared a report of its research on how Copilot helps improve developer productivity. Last month, GitHub announced the general availability of its AI-powered code suggesting tool to all developers. More: - GitHub surveyed over 2,000 U.S-based developers and matched their feedback with quantitative data around usage measurements and productivity.
- The developer survey explored whether Copilot made developers productive and identified the usage measurements that reflected productivity changes.
- According to the research, developers who reported the highest productivity gains accepted the largest number of show code suggestions.
- JavaScript and Python enjoyed a higher acceptance rate compared to TypeScript.
| |
Wordfence, a WordPress security plugin, identified a sudden increase in attack attempts targeting a vulnerability in Kaswara Modern WPBakery Builder Addons. Wordfence claims to have blocked an average of 443,868 attack attempts per day on its customers' websites. More: - The vulnerability, tracked as CVE-2021-24284, allowed miscreants to upload malicious PHP files and completely take over a website.
- Wordfence disclosed the vulnerability in April last year, after which the plugin was closed without releasing a patch.
- Most of the attacks sent a POST request to /wp-admin/admin-ajax.php using the uploadFontIcon AJAX action found in the plugin to upload a file to the impacted website.
- According to Wordfence, between 4,000 and 8,000 websites still use the plugin, and it recommends removing the plugin and finding an alternative.
| |
 A message from SECURITY COMPASS Current approaches to Threat Modeling simply don’t work. - They are manual and inconsistent
- They take too long
- They don’t scale
- They don’t give developers what they need
Here you can find a series of posts breaking down how you can anticipate threats earlier in the software development life cycle to create more secure software. Learn more about current threat modeling challenges. See how a new, developer-centric approach to threat modeling can help your organization deliver secure software faster. Read Series on Threat Modeling And, yes, we understand that threat modeling is a time-consuming process that requires the expertise of security professionals and figuring out the best approach to mature application security programs can be difficult, especially with increasing internal demands for a faster time to market. According to this Total Economic Impact™study, SD Elements enabled its users to decrease the time needed to develop security requirements for products by 90%. See how
| |
Open search platform You.com launched YouCode, a search engine for developers. The open platform aims to provide the most relevant coding results from different sources. More: - The ad-free and private search engine aggregates more than 20 popular coding sites and includes AI features that it claims can make workflow 10 times faster.
- It provides code snippets with easy copy/paste buttons, side panels for quickly skimming through documentation, and access to tutorials and academic publications.
- It is also available as a privacy-preserving extension that incorporates four other search engines.
- You.com plans to allow external developers and organizations to build their own apps for the platform later this year.
| |
Locofy is a new tool that can turn designs into frontend-ready code for web and mobile apps. It claims to help builders launch their projects three to four times faster with their existing design tools and tech stacks. More: - The tool can convert Figma designs into React, React Native, Next.js, Gatsby, and HTML-CSS code.
- Users will receive a live-responsive prototype that runs on code that can either be exported or directly deployed in Netlify or Vercel.
- Locofy's team is working on adding support for Adobe XD, Vue, Preact, Angular, and Svelte.
- It is currently in free beta, which users can extend every three weeks after sharing feedback through its form or booking a call.
| |
 A message from BOXABL Imagine if houses were built like cars, with one home coming off the assembly line every 60 seconds...wouldn’t that change the world? Cutting-edge housing manufacturer Boxabl plans to do just that, by setting up the world's largest and most advanced housing factory. Why Boxabl? - Setting up a 170,000 sq ft manufacturing facility in less than one year
- Raising over $100M from over 15,000 investors
- Elon Musk shouted out the Las Vegas-based company calling Boxabl a “cool product.”
- Achieving LEED certification and hurricane wind ratings on all houses
- Strategic partnership and investment from the largest home builder in the USA, D.R. Horton Inc.
- Over 50 patent filings due to considerable innovations in building technology
- Factory 2 is now under construction
- Customer waitlist of over 100,000 pre-orders, indicating potential demand worth billions of dollars
- Guided by Volkswagen Group's Porsche Consulting Inc. for the design and implementation of Boxabl’s new factory
- Shipping houses every day
Invest Now
| |
New Tools and Updates: - The Gradle team announced the release of Gradle 7.5. The latest release includes building code and running Gradle with Java 18, support for Groovy 4, more responsive continuous builds, improved diagnostics for dependency resolution, configuration cache improvements, and more.
- Salesforce announced the open beta of a new developer tooling space, Code Builder. The web-based IDE was announced in June 2020. Code Builder is powered by AWS and features code completion, refactoring, search, and support for Salesforce languages and frameworks.
- Improvements to Rocky Linux 9 include redesigned core apps, UI improvements, the ability to mute notifications by selecting DND, different refresh rates for each screen, support for Python 3.9, Node.js 16, Ruby 3.0.3, PHP 8.0, and more.
- Vite 3.0 is now available with an improved WebSocket connection strategy, cold start improvements, build improvements, and experimental features such as built asset paths, fine-grained control, esbuild deps optimization at build time, and HMR partial accept.
| |
Quick Hits: - Ransomware attacks grew by 485% in 2020. This multi-pronged approach can help organizations respond to and recover from ransomware attacks.*
- A Ph.D. student at Northwestern University has discovered a vulnerability on the Google Pixel 6 that affects the kernel portion of Android. The vulnerability allows attackers to gain arbitrary read and write access, root privilege, and authority to disable SELinux.
- Emberfest, a European Community Ember Conference, will be held in Paris on Sept. 22 and 23. The event will provide a great opportunity to meet the European Ember Community and hire Ember talent.
- JetBrains is asking Kotlin developers to give their feedback on the current level of satisfaction with Kotlin and problems within the language and tooling.
- How’s your current digital marketing strategy? Make it even stronger with our new interactive worksheet.*
*This is a sponsored post.
| |
Tweet of the Day: ZDNet shared its pick of the 10 best web development bootcamps of 2022. 
| |
Upcoming Events: DID YOU KNOW WE'RE HIRING? - We have multiple positions open for 100% remote, full-time analysts. Apply or refer someone.
| |
 |  | Sudarshan lives in Toronto, Canada, and is an engineering graduate. He is passionate about business, tech, entrepreneurship, and politics. FUN FACT: Sudarshan worked for the election campaign teams of two heads of state in India. When he is not busy with work, he enjoys hiking, playing cricket, and cooking. | | | | Editor | Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 Ford. | |
Security Compass is on a mission to accelerate software time-to-market while managing risk. | |
| |
Comments
Post a Comment