GitHub introduced fine-grained personal access tokens to provide developers with enhanced security. GitHub said the new offering reduces the risk to developer's data of compromised tokens. More: - The new personal access tokens leverage a set of 50 granular permissions that control access to GitHub's organization, user, and repository APIs.
- Developers can grant permissions on a no access, read, or read and write basis.
- When it is made generally available, GitHub plans to add support for GraphQL and the ability to target a PAT against repositories in multiple organizations.
- The existing personal access token will continue to receive support and be called personal access tokens (classic).
| |
Oracle invites customers and organizations to build on its new Applications Platform. Oracle announced a series of new products and updates at the Oracle CloudWorld Conference. More: - The Applications Platform provides tools such as Redwood UX building blocks, telemetry for real-world feedback, a self-learning recommendation engine for business logic, and more.
- Oracle's SVP of UX design, Jenny Lam, said the Applications Platform would enable users to personalize and scale their applications to fit their needs.
- Oracle released Java SE Subscription Enterprise Performance Pack with garbage collection algorithms and other improvements for Java 8.
- It is also planning to launch Oracle Alloy, allowing independent software vendors, system integrators, and other organizations to resell its cloud services.
| |
 A message from COMPOSER How did this hedge fund return 66% per year? If you invested $10,000 in Renaissance Technologies’ Medallion in 1988, you’d cash out in 2018 with a cool $200,000,000. Their secret sauce? "Quantitative Investing." Instead of hiring slick-talking Wall Street suits, Medallion is run by an army of computer scientists, mathematicians, and neural engineers that specialize in quantitative investing that eliminates human biases (fear, greed, FOMO). Unless you are a PHD-wielding, Python-coding, Excel-Wizard…that type of quant-trading has been out of reach. Until now… Composer gives you the financial firepower to easily drag, drop, edit and swap quant-investing strategies from scratch - no engineering degree required. They even have a library of expertly vetted strategies to choose from like: Buy the Dips Nasdaq, The Buffett and The Dalio. Stop trading on impulse. Start Investing Today
| |
Mozilla added new features to Firefox that prioritize user privacy. Mozilla made the announcement to support CyberSecurity Awareness Month. More: - A new shortcut button will allow users to pin Private Browsing mode to the desktop, with a new logo and a default dark theme.
- The new Fire View shows up to 25 recently closed tabs within each desktop window to easily access information.
- Mozilla released the latest limited edition of the Colorways and wallpapers collection inspired by Independent Voices.
- New productivity-focused features include the ability to edit PDF forms in the editor and the ability to save a step with its Text Recognition feature for macOS 10.15 and above users.
| |
Blockchain development platform Tatum raised $41.5M in funding. The funding round was led by Evolution Equity Partners and saw participation from Octopus Venture, 3VC, Tensor Ventures, and Leadblock Fund. More: - Tatum provides a flexible platform for web3 developers with the fastest way to build, test, and deploy blockchain applications.
- It provides pre-built features for smart contracts, fee and payment solutions, real-time alerts, and crypto exchange functions.
- It supports over 40 blockchain networks and claims to reduce the time taken to produce decentralized code by 95%.
- Proceeds from the funding round will accelerate marketing, educational efforts, and community building.
| |
 A message from SECURITY COMPASS Current approaches to software threat modeling simply don’t work. They are: - Manual
- Inconsistent
- Take too long
- Don’t scale
- Don’t give developers what they need
When software security and compliance are considered more as an afterthought, rather than a vital step in the development process, organizations end up trying to remediate security and compliance issues after software has been written, rather than preventing issues in the first place. Here you can find a series of posts breaking down how you can anticipate threats earlier in the software development life cycle to create more secure and compliant software. Empower DevSecOps teams to make software secure and compliant by design through automating threat modeling, generating application security requirements, and providing secure development and compliance best practices. The SD Elements platform is the best solution for organizations who need to scalably model software threats, identify countermeasures, and deliver secure, compliant code quickly. Download whitepaper bundle
| |
InfoWorld announced the winners of its 2022 Best of Open Source Software Awards. The award recognizes the best open-source software for business and professional users. More: - The award winners were chosen by InfoWorld editors and expert reviewers from the IT and software development industry.
- The awards celebrate open-source projects from software development, cloud-native computing, DevOps, data analytics, and machine learning.
- A total of 28 projects, such as AlmaLinux, Apache Druid, Accelerate, Podman, and Dapr, were recognized for improving the efficiency and agility of users.
| |
| |
Quick Hits: - You might have an amazing product and team, but you'll struggle with your next funding round if you're weak on this one metric.*
- Apple seeded iOS 16.1 release candidate with iCloud Shared Photo Library, the ability to share keys in the Wallet app via apps, and more.
- Axios reported that Microsoft laid off around 1,000 employees across multiple divisions.
- Tim Davis, a developer, tweeted that Github's Copilot emits large chunks of his copyrighted code with no attribution or LGPL license.
- Rerun's co-founder Emil Ernerfeldt shared why he has been writing Rust full-time.
- Unlock profitable growth. See how Northbeam is helping marketers discover the true impact of their marketing spend.*
*This is sponsored content.
| |
Upcoming Events: - October 14 - Learn how leaders from Slack, Shopify, and Stripe are improving developer productivity, workflow, and collaboration in their engineering orgs. (Register Here) *
- October 19 - AMA with Zecca Lehn (Responsibly VC) (Register Here)
- October 25 - Meet Our Fund 4, an Inside.com Summit (Register Here)
- November 02 - AMA with Bill Glenn (Executive Chairman at Crenshaw Associates) (Register Here)
- November 09 - Synthetic data for more efficient, robust and ethical model development - Live AMA with Yashar Behzadi (CEO and Founder of Synthesis AI)* (Register Here)
- December 07 - Live AMA with Deividi Silva ( Head of Developer Relations at Gun.io) (Register Here)
*This is a sponsored event listing.
| |
 |  | Sudarshan lives in Toronto, Canada, and is an engineering graduate. He is passionate about business, tech, entrepreneurship, and politics. FUN FACT: Sudarshan worked for the election campaign teams of two heads of state in India. When he is not busy with work, he enjoys hiking, playing cricket, and cooking. | | | | Editor | Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords. | |
According to JPMorgan quantitative hedge funds are buying $2bn-$4bn in equities a day. Join them today! | |
Security Compass is on a mission to accelerate software time-to-market while managing risk. | |
Comments
Post a Comment