| |
| Hey Insiders, Thanks for reading today's Inside Dev newsletter! Today, we cover: - Researchers discovering that AI-based code completion tools provided credentials captured during training;
- GitHub launching migration tools for Atlassian users;
- Go fixing for loops in version 1.22;
- And more!
If you find this newsletter useful, please share it with your friends and colleagues. Thank you. Sudarshan
p/sudarshan | |
| 1 | | Researchers from The Chinese University of Hong Kong and Sun Yat-sen University in China investigated the implications of code generation tools such as GitHub Copilot and Amazon CodeWhisperer. The investigation revealed these tools occasionally provided credentials they learned during their training, but not often. More: - The tools emitted credentials such as API keys, Access Tokens, and OAuth IDs, which are not supposed to be made public.
- The report cited developer oversight or lack of security practices as reasons for the credentials ending up in public code repositories.
- The researchers developed a tool called the Hardcoded Credential Revealer (HCR) that can identify secrets in code.
- According to the research, GitHub Copilot and Amazon CodeWhisperer generated 3.0% and 17.5% of valid secrets, respectively.
- In Stack Overflow's 2023 Developer Survey, nearly 42% of respondents said they trusted the output from AI-based tools, while almost one-third (31%) said they neither trust nor distrust them.
Q: What strategies are you following to protect sensitive data and credentials when using AI-based code completion tools? Join the conversation here. 
|     | |
| 2 | | Earlier this week, GitHub launched tools to help Atlassian users migrate easily to GitHub Enterprise Cloud and GitHub Actions. The tools will enable developers to migrate their code, pull requests, reviews, and comments to GitHub. More: - Through the launch, GitHub plans to attract customers who will lose technical support for server-deployed products like Bitbucket Server and Bamboo Server from Feb. 15, 2024.
- GitHub Enterprise Importer (GEI) will support migration from the Bitbucket Server and Bitbucket Data Center, while GitHub Actions Importer will support Atlassian's users to migrate from its CI/CD products to GitHub Actions.
- To migrate a repository, developers should install the GitHub CLI extension and run the gh bbs2gh migrate-repo command.
- In October 2020, Atlassian announced it would discontinue support for server products, and the company claims millions have migrated to its cloud offering since the announcement.
| | | |
| |
|
| 3 | | Go shared a detailed explanation of how it is fixing for loops in Go version 1.22. Go 1.21 included the preview of a change to for looping that the Go development team plans to ship in Go 1.22. More: - In Go, developers accidentally retain a reference to loop variable past the end of its iteration, leading to unintended changes in the variable's value.
- This issue has led to production problems at several companies.
- To fix this issue, the Go development team plans to modify for loops in Go 1.22 the loop variables to contain per-iteration scope instead of per-loop scope.
- To maintain backward compatibility, the updated loop variable schematics will only have affect packages contained in modules that declare Go version 1.22 or later in their go.mod files.
| | | |
| 4 | | Cybersecurity startup Legit Security raised a $40M Series B round. CRV led the funding round and saw participation from Cyberstarts, Bessemer Venture Partners, and TCV. More: - Initially launched to secure software supply chains, Legit Security's current services include aggregating vulnerabilities from various sources, integrating with traditional app security tools, and risk-scoring vulnerabilities.
- According to co-founder and CEO Roni Fuchs, Legit Security provides comprehensive security coverage to the app dev environment by enforcing security policies in CI/CD pipelines, servers, and other infrastructure.
- Proceeds from the investment round will be used to expand its sales, marketing, and research and development teams.
- The startup's client list includes Google, the New York Stock Exchange, Kraft Heinz, and Takeda Pharmaceuticals.
| | | |
| A message from our sponsor, Amplitude. |  | | Amplitude customers saw 217% ROI & more What's the ROI of understanding how customers use your products? See how Amplitude users achieved a 217% ROI in 3 years and recouped Amplitude costs in under 6 months. Conductued by Forrester Consulting in an August 2023 commissioned study, Amplitude's Total Economic Impact™ shows how customer journey insights drive data-driven decisions on engagement, conversion, and purchases. Testimonial: “Without Amplitude, we probably would have to spend another 20% to 25% on our analysis tooling budget.” - Chief product officer, entertainment company See why leading brands like Atlassian, Hubspot, Notion, PayPal, Capital One and Dropbox trust in Amplitude's digital analytics platform. Get your copy now 
| |
|
| 5 | | New tools and updates: - Swift 5.9 comes with a new expressive macro system and support for integrating Swift into C++ codebases through bidirectional interoperability. Other additions include parameter packs, an improved expression evaluator while debugging, enhanced crash handling, and more.
- The beta version of Ruby on Rails 7.1 adds default Docker support, built-in support for the Trilogy MySQL database adapter, and the ability to build new applications using the Bun JavaScript runtime.
- The Deno team released Deno 1.37 with the ability to use the new deno jupyter command to create a Deno kernel that can be used within notebooks, enhanced VS Code and LSP support, better testing performance, improved Node compatibility, and bug fixes.
- Create launched the early beta of Autodevs, an AI-based service that can generate UI prototypes based on a prompt, customize prototypes, and turn prototypes into a live app on ProductHunt.
| | | |
| |
| 7 | | Quick Hits: - FinOps can be a game-changer for your organization. This guide shares expert tips on efficient cost management. Read now.*
- Android Studio Bot is now available in more than 170 countries and territories through the canary release of Android Studio.
- Cisco is acquiring cybersecurity startup Splunk for $157 per share with a total deal value of around $28B.
- Red Hat rebranded Red Hat OpenStack Platform to Red Hat OpenStack Services on OpenShift.
- With the right process and tools, dev teams can ship gold every week. This guide breaks down a proven approach to product delivery.*
*This is a sponsored listing. | | | |
| Upcoming Events | | SEP
28 | | Join TruEra's Webinar on AI Observability with former CMU professor Anupam Datta* | | | | | | | OCT
4 | | Join this free online and onsite event in Amsterdam and you'll hear from industry experts at Meta, Opera, AdGuard, Mozilla, Google, and more* | | | | | | | OCT
16 | | Meet Our Fund 5, Building and Investing in AI | | | | | | * This is a sponsored event | | | |
Term of the Day Limited liability company: A limited liability company's debts and obligations are the responsibility of the LLC, and not of the members. Question of the Week Do you share details about your salary with your coworkers? Join the conversation Today's Knowledge Hub Is Brought To You By Ready to take your career to the next level? Apply to join Sidebar, a highly-vetted and private community of small peer groups designed to support exceptional senior leaders in doing their best work. |
INSIDE DEV LEADERBOARD (ALL-TIME) |
 | Analyst | | Sudarshan lives in Toronto, Canada, and is an engineering graduate. He is passionate about business, tech, entrepreneurship, and politics. FUN FACT: Sudarshan worked for the election campaign teams of two heads of state in India. When he is not busy with work, he enjoys hiking, playing cricket, and cooking. | | This newsletter was edited by Aaron Crutchfield | |
| |
 | Get your own DevSquad, a high-performing product team that will build your SaaS in 3 to 6 months. | |
|
 | Amplitude customers saw 217% ROI in The Total Economic Impact™ of Amplitude. | |
|
| |
Comments
Post a Comment