Android added CameraViewfinder to the Jetpack Library to enable developers to implement camera previews quickly and with minimal effort. It is completely compatible with the existing Camera2 codebase and is tested on several devices. More: - CameraViewfinder uses TextureView or SurfaceView to display the camera feed with required transformations to display the viewfinder correctly.
- Android said it is ready to use across resizable surfaces, configuration changes, rotations, and multi-window modes and is tested for foldable devices.
- Developers can combine CameraViewfinder with the Jetpack WindowManager library to implement optimized layouts for foldable and dual-screen devices to provide their users with a unique experience.
- Android shared a sample project optimized for foldable phones with code to handle posture changes here.
| |
The National Security Agency (NSA) recommended developers switch from C and C++ to memory-safe languages like Go, Java, Ruby, Rust, and Swift. NSA made the recommendation to protect code from remote code execution and other attacks. More: - NSA cited recent Microsoft research that found 70% of all vulnerabilities in its products were memory-related and from using C and C++.
- The agency said learning memory-safe languages would include a learning curve and that developers and organizations should endure any newbie mistakes.
- It also proposed hiring programmers skilled in memory-safe languages but cautioned they would have a learning curve to understand the existing codebase and domain.
- NSA recommended static and dynamic application security testing methods to identify memory use issues in software.
| |
 A message from N8N n8n, the workflow automation platform that doesn't box you in, that you never outgrow n8n is a low code workflow automation tool loved by engineers because it allows you to automate workflows much faster than writing code or scripts from scratch. Our users are doing everything from powerful CRM automation, plugging gaps in the native sync capabilities of tools they use, to reducing time spent on customer integrations and building faster POCs. These are some of the reasons why companies like Adobe, Twilio, and Paramount are using us: - 250+ integrations and powerful pre-built nodes & integrations
- Tweak every element of your workflow, dig down into the code, plus add advanced logic such as loops, conditionals, and merges
- Visual canvas for easy collaboration within teams
- An active, passionate, and helpful community of 30k+ supporting you in solving any problem you might have
- Source code available product with 26k GitHub stars
Try n8n for free today and start automating your processes! Get Started for free
| |
Google released a patch to fix a high-severity issue in Chrome that affected the browser's desktop versions. Google plans to roll out the patch in the coming days/weeks. More: - The vulnerability, tracked as CVE-2022-4135, is a heap buffer overflow in Chrome's GPU component.
- According to the National Vulnerability Database advisory, the security flaw could allow an attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- Heap-based buffer overflows could be exploited for DoS attacks to execute arbitrary code or bypass existing protection mechanisms.
- Google TAG's Clement Lecigne reported the bug on Nov. 22, and the patch was released two days later.
| |
Google Cloud is partnering with India-based SuperGaming to take its game engine to developers worldwide. SuperGaming powers the official PAC-MAN game, which has over 1 billion downloads. More: - SuperGaming's platform enables developers to manage live operations, matchmaking, player progression, player data, analytics, monetization systems, and merchandising.
- It integrates with game development platforms such as Unreal Engine, Unity, PlayCanvas, and Cocos Creator.
- SuperGaming will be available in Google Cloud as an independent software vendor on a SaaS model.
- Google Cloud has announced a series of partnerships to expand its presence in the country in the past few weeks.
| |
 A message from SECURITY COMPASS Security teams and developers may be aligned on what is needed, but the delivery of these requirements leaves room for improvement. This interactive report examines the maturity and approaches of application security training for software developers. It emphasizes the frustrations developers experience with current eLearning options and organizational views on its effectiveness. Key takeaways from the study include: - 40% of respondents indicate their company provides interactive content, yet a lack of interactive content remains a top frustration.
- In total, 75% of respondents indicated they had to look up security-related topics regularly - once or twice a week (54%) or daily (21%).
- The best time to do secure development training was during code implementation.
- 37% of developers stated that implementing new code to satisfy security requirements was the most costly and time-consuming activity they perform.
To view the full “2022 DevSecOps Perspectives on AppSec Training” research report and learn more. Click here
| |
The makers of Flowbite announced the launch of version 2.0 on ProductHunt. Flowbite is an open-source library with more than 450 UI components, sections, and pages built with Tailwind CSS. More: - The latest version includes new features and updates to Flowbite's ecosystem, including Library, Figma, Blocks, and Pro.
- The development team said the Flowbite library hit 1 million downloads on NPM a few weeks ago and sees over 58,000 downloads per week.
- Flowbite Figma features variants, auto layout, grids, and responsive devices. Blocks consists of over 250 website sections built for marketing purposes.
- The Community edition of Flowbite is available for free. Designer and Developer versions are available at $149 and $259, respectively.
| |
New Tools and Updates: - Android said from May 2023, its archivable app file format, Android App Bundles, will replace APK files and be required for Android/Google TV devices.
- GitHub made it easy for developers to fix vulnerable GitHub Actions dependencies with support for Dependabot security updates.
- Detekt v1.22.0 introduced Detekt Marketplace, a place for users to add third-party extensions like rule, plugins, custom reporter, etc.
- Wasmer released the latest version of its open-source runtime for WebAssembly, Wasmer 3.0, with better API and memory management, the ability to run WAPM packages directly via wasmer run, WASI improvements, and more.
- Microsoft released ML.NET 2.0 with improved capabilities for text classification and automated machine learning. ML.NET is an open-source, cross-platform machine learning framework for .NET.
| |
Quick Hits: - HubSpot and Brandwatch partnered this year to survey over 1,000 individuals across the U.S. to better understand consumer purchasing habits, thoughts, and behaviors.*
- South Korea’s Fair Trade Commission said Apple plans to correct its billing policy which made the country’s developers pay 33% commission, including a 10% sales tax.
- Devographics, the collective behind the State of the JavaScript 2022 survey, is inviting developers to participate in the survey.
- Microsoft shared how it is contributing to making Python faster.
- Heroku will delete all the databases of non-Enterprise users and personal accounts and convert free dynos to eco dynos today.
- Tech innovation is surging in education, finance, health care, and other industries. See what your competitors are building with Crowdbotics.*
*This is sponsored content.
| |
| |
 |  | Sudarshan lives in Toronto, Canada, and is an engineering graduate. He is passionate about business, tech, entrepreneurship, and politics. FUN FACT: Sudarshan worked for the election campaign teams of two heads of state in India. When he is not busy with work, he enjoys hiking, playing cricket, and cooking. | | | | Editor | Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords. | |
| |
Security Compass delivers best-practice, role-based, accredited eLearning solutions. | |
Comments
Post a Comment