Hey, Insider! Want to be featured in next week’s newsletter? Answer our weekly question: What is the most challenging project you’ve ever worked on? Share your response here. | |  Sudarshan | |
| |
New in DevTools Chrome 109 includes updates to the Recorder, new keyboard shortcuts in the Console & Sources panel, improved JavaScript debugging, and more. Google also announced the beta of Chrome 110. More: - Replaying the user flow in the Recorder now shows the navigation steps separately instead of navigating to or reloading the page.
- Developers can also right-click a step and copy it to the clipboard in the Recorder panel instead of exporting the whole user flow.
- Google upgraded the performance panel to show the actual function names and their sources in the trace if there is a sourcemap.
- Improvements to JavaScript debugging include new.target — a meta-property, a WeakRef object, fixed inline preview for shadowed variable, and deobfuscate variable names in Generator and async functions.
- Chrome 110 beta is available with two new CSS features, web app launch handler, cross-origin iframe support for the FedCM API, and more.
| |
CircleCI's recent security incident report revealed that customer data was stolen during last month's breach. Earlier this month, CircleCI advised developers to change their passwords after identifying the breach. More: - CircleCI identified an employee's laptop infected with information-stealing malware as the source of the breach. The company's anti-virus had failed to detect the malware.
- The malware stole corporate session cookies and allowed the intruder to log in as a user without having to authenticate via 2FA.
- The customer data was encrypted, and the miscreants had access to encryption keys to decrypt it.
- According to the company's CTO, Rob Zuber, the threat actor had access from Dec. 16 until Jan. 4.
| |
 A message from SUNSAMA Tasks scattered across JIRA, Github, and PM tools? Try Sunsama to get a unified daily plan. Sunsama is your planning powerhouse, equipped to help you build a schedule for your stress-free & focused daily routine.
Trusted by thousands at Uber, Spotify, and other “get-stuff-done” firms, Sunsama integrates your apps and tools, letting you drag-and-drop tasks to plan focused work sessions, carve out time for family or exercise, and more.
Replace that afternoon snack with an inbox-clearing session (or Peloton sweat session) and let Sunsama refine your routine with a 14-day free trial. Claim your free access
| |
Microsoft announced developers can now use Rust to develop applications on Azure Sphere. Last week, Google announced support for third-party Rust libraries in the Chromium Project. More: - Microsoft believes Rust and Azure are a good match and that the programming language would add performance and security capabilities.
- Rust is implemented through Rust's crate system, with dependencies built into the customer app for the platform.
- Apps built with Rust will be fully functional until 2031, irrespective of security patches, fixes, and new features added to the Azure OS.
- Microsoft announced the private preview of this feature in June last year and called it a lifeline for embedded systems.
| |
Veracode's annual State of Application Security report revealed that over 30% of apps show flaws at the first scan. The report establishes what factors contribute to flaw introduction, faster remediation, and lower security debt. More: - Almost three in four applications had at least one security flaw discovered in the last scan in the previous 12 months.
- JavaScript had the fewest flaws reported, with over half of applications reporting any flaws, while around 80% of Java and .NET applications reported any flaws.
- The report identified developer training using multiple scan types, including scanning via API and scan frequency, as effective strategies to reduce flaw introduction.
- Veracode analyzed over 750,000 applications from commercial software suppliers, software outsourcers, and open-source projects.
| |
 A message from LACEWORK Discover cloud insights and harden your security posture In the latest installment of the Cloud Threat Report series, Lacework Labs covers the significant increase in efficiencies used by cybercriminals. Get insights into these trends that cover how: - Attackers are automating key discovery and exploits, taking advantage of momentary mistakes
- Simple mistakes turn into misconfigurations that attackers use to compromise your cloud identity infrastructure
- Vulnerabilities continue to stick around for months (sometimes even years) and attackers quickly exploit any new vulnerabilities
- Cryptojacking continues to be a staple in cybercriminal tool belts
Discover detailed intelligence about ongoing infrastructure compromise activities and best practices for hardening your cloud security posture. Read the Lacework Labs Cloud Threat Report, Vol. 4 today. get the report
| |
Hewlett Packard Enterprise (HPE) announced the acquisition of Pachyderm to expand its AI development capabilities. The price and terms of the purchase were not disclosed. More: - Pachyderm develops a data science platform based on open-source technology for versioning enterprise-scale machine learning and AI projects.
- HPE plans to integrate Pachyderm's capabilities with its AI solutions to automate reproducible machine learning pipelines for large-scale AI applications.
- HPE said the combined platform would offer customers an integrated machine-learning pipeline and platform to accelerate their AI journey.
- Pachyderm will continue to be available to current and new customers.
| |
New Tools and Updates: - JetBrains released Kotlin 1.8.0 with new experimental functions for JVM, improved kotlin-reflect performance, new -Xdebug compiler option, improved Objective-C/Swift interoperability, and more.
- Last week, Android announced the stable release of Android Studio Electric Eel with a resizable emulator and other updates and features to improve design, build and dependencies, emulators and devices, and IntelliJ.
- Alpine.js is a lightweight, JavaScript framework with 15 attributes, six properties, and two methods.
- Conan 2.0, expected next month, will include a cleaner syntax, a new public Python API, new build system integrations, and a new graph model to represent the relations between packages in C and C++.
- YouPlot is a command-line tool that draws plots on the terminal.
| |
I'm Kiani from Inside.com, and last week, we asked our Inside Dev community, "What skills do you think make a great developer?" Here's a highlighted response we received: - Sam Littler (p/SamMakesCode | LinkedIn), CTO at DashSalt, highlighted two essential skills for great developers, stating, "ability to accept critique and willingness to change their mind." He explained further, writing, "Despite how long it has been in use in tech, many people still feel as though criticism on PRs are personal attacks. They're not. They don't even usually reflect your personal ability. They're just someone saying 'Hey, this can be done better' — something that benefits the whole team."
Want your question featured? Ask a question! Join the conversations at Inside.com, and we may shout out your name and business or contact you for more! ⭐️
| |
Quick Hits: - Enjoy 50% off your first month when you join the Athletic Club. Get award-winning brews delivered monthly and perks like early access + free shipping!*
- Android Day 2023 on Feb. 2 will focus on The Linux Kernel in AOSP and include multiple sessions conducted by Android team members and the community.
- TechCrunch believes Twitter deliberately suspended Twitter API for a select few apps.
- The Chrome DevRel team shared best practices to improve Core Web Vitals performance in 2023.
- As your business grows, so does the number of employees and the information they have access to. In this short video, security experts at Vanta demystify access reviews.*
*This is a sponsored event listing.
| |
Upcoming Events: - January 12 - AMA with Gun.io - Building and managing software development teams w/ Deividi Silva (Watch On Demand)
- January 13 - AMA with LinearB - Improving workflow for developers w/ Ori Keren (Watch On Demand)
- January 16 - Inside Marketing Coffee Break (Register Here)
- January 18 - Inside Interview with Lacework - 4 Common Attack Paths in Cloud Security (Register Here)
- January 25 - Amanda Natividad speaks on zero-click content, how to measure it, and other trends to keep tabs on in 2023. (Register Here) *
- January 26 - Growth Experimentation Workshop: From Strategy to Process by GrowthHackers.com (Register Here)
- February 23 - Startups Book Club, February 2023 (Join The Club)
*This is a sponsored listing.
| |
 |  | Sudarshan lives in Toronto, Canada, and is an engineering graduate. He is passionate about business, tech, entrepreneurship, and politics. FUN FACT: Sudarshan worked for the election campaign teams of two heads of state in India. When he is not busy with work, he enjoys hiking, playing cricket, and cooking. | | | | Editor | Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords. | |
| |
| |
Comments
Post a Comment