Google published a blog post saying memory safety vulnerabilities have dropped from 223 in 2019 to 85 in 2022. Google announced Android Open Source Project (AOSP) would support Rust last year. More: - According to Google, Android 13 is its first release since Rust support was added, with most new code in a memory-safe language.
- In 2022, memory safety vulnerabilities represent 35% of the platform's total vulnerabilities. This number has come down from 76% four years ago.
- The report considers vulnerabilities reported in the Android security bulletin and through the vulnerability rewards program.
- 21% of Android's native code is written in Rust, and zero memory safety vulnerabilities were reported in Android's Rust code.
| |
Firebase introduced the second generation of Cloud Functions, which launched five years ago. Firebase also added new features to existing first-gen functions. More: - Concurrency, the capability where each instance of a function handles multiple requests, causes fewer cold starts and new triggers.
- Concurrency is set at 80 by default and can be brought down to 1 or increased to 1,000.
- New triggers in the second gen include blocking functions, Firebase alerts, and custom events.
- Firebase supports splitting functions into distinct groups, called Codebases, which offers the benefits of code isolation, container isolation, and faster deploys.
- Other features available include portable functions and secure API keys through parameterized configuration and emulator suite support.
- Cloud Functions' second gen is in preview, and Firebase said they make functions faster for end users, deploy, and develop faster.
| |
 A message from N8N n8n, the workflow automation platform that doesn't box you in, that you never outgrow n8n is a low code workflow automation tool loved by engineers because it allows you to automate workflows much faster than writing code or scripts from scratch. Our users are doing everything from powerful CRM automation, plugging gaps in the native sync capabilities of tools they use, to reducing time spent on customer integrations and building faster POCs. These are some of the reasons why companies like Adobe, Twilio, and Paramount are using us: - 250+ integrations and powerful pre-built nodes & integrations
- Tweak every element of your workflow, dig down into the code, plus add advanced logic such as loops, conditionals, and merges
- Visual canvas for easy collaboration within teams
- An active, passionate, and helpful community of 30k+ supporting you in solving any problem you might have
- Source code available product with 26k GitHub stars
Try n8n for free today and start automating your processes! Get Started for free
| |
Mozilla announced the acquisition of California-based productivity startup Pulse. Financial details of the acquisition were not made public. More: - Mozilla said the team at Pulse has developed novel machine-learning approaches to help streamline the digital workplace.
- Pulse's team is joining Mozilla and will be deployed across projects like Pocket to lead its applied ethical machine learning.
- Pulse was launched last December, and its customers include Netflix and 1Password. A monthly premium subscription plan is available at $3 per user.
- In October, Pulse announced it was shutting down due to market conditions and difficulty raising fresh capital.
| |
Web3 developer platform Fleek raised a $25M Series A round. The funding round was led by Polychain Capital and saw participation from Coinbase Ventures, Protocol Labs, Arweave, North Island Ventures, and a few other investors. More: - According to Fleek's website, the platform makes it easier for developers to build websites and apps through Web3 services such as storage, hosting, billing, etc.
- The startup also announced the launch of Fleek Network and a new protocol-agnostic, non-custodial, and open-source platform.
- Fleek claims to host around 50,000 apps, and a majority are built for the Ethereum ecosystem.
- Fleek's leadership plans to use the funds to build its Fleek Network and platform, recruit new team members, and grow its community.
| |
 A message from SECURITY COMPASS Security teams and developers may be aligned on what is needed, but the delivery of these requirements leaves room for improvement. This interactive report examines the maturity and approaches of application security training for software developers. It emphasizes the frustrations developers experience with current eLearning options and organizational views on its effectiveness. Key takeaways from the study include: - 40% of respondents indicate their company provides interactive content, yet a lack of interactive content remains a top frustration.
- In total, 75% of respondents indicated they had to look up security-related topics regularly - once or twice a week (54%) or daily (21%).
- The best time to do secure development training was during code implementation.
- 37% of developers stated that implementing new code to satisfy security requirements was the most costly and time-consuming activity they perform.
To view the full “2022 DevSecOps Perspectives on AppSec Training” research report and learn more. Click here
| |
The makers of Flowlet, a low-code platform for connecting and providing APIs, launched the tool in ProductHunt. The all-in-one API platform is priced at $19 per month with all features. More: - Developers can use Flowlet's drag-drop visual builder to set up an API, create a data model, and add business logic, switching to TypeScript for adding custom logic.
- Its makers claim the platform gets APIs production ready in minutes and enables developers to test them in the cloud directly.
- The online editor of Flowlet comes with syntax checks, code completion, and code formatting.
| |
New Tools and Updates: - Google released Chrome 109 beta for Android, ChromeOS, Linux, macOS, and Windows. The beta version supports MathML Core, a language for describing mathematical notation embeddable in HTML and SVG, auto range support for font descriptors, and more.
- Node released version 19.2.0 with minor updates, including changes to Daylight Savings Time (DST) for Fiji and Mexico.
- The Election team announced the release of Election 22.0.0 with a new utility process API, upgrades to Chromium 108, V8 10.8, Node.js 16.7.1, and Windows 7/8/8.1 support.
- Extism, a code runtime built in Rust, brings extensibility to software. Developers can embed Extism into 13 programming languages using its official SDKs.
| |
Quick Hits: - Great ideas are recession-proof. See how innovators in every industry are turning their ideas into code faster and cheaper with Crowdbotics.*
- Cloudflare increased the subscription prices for Pro and Business Plans to $25 and $250 per month for new customers.
- Brave Search introduced the global beta of privacy-preserving ads.
- Researchers at Lookout Threat Lab discovered over 300 mobile loan apps in Google Play Store and App Store with over 15 million downloads exhibited predatory behavior.
- Bloom Institute of Technology, previously known as Lambda School, is laying off almost 50% of its staff.
- Learn how consumers act, think, and what they expect in this special report covering purchasing habits, social media, and more. Get the free report.*
*This is sponsored content.
| |
 |  | Sudarshan lives in Toronto, Canada, and is an engineering graduate. He is passionate about business, tech, entrepreneurship, and politics. FUN FACT: Sudarshan worked for the election campaign teams of two heads of state in India. When he is not busy with work, he enjoys hiking, playing cricket, and cooking. | | | | Editor | Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords. | |
| |
Security Compass delivers best-practice, role-based, accredited eLearning solutions. | |
Comments
Post a Comment