Nearly 4,000 secrets discovered in PyPI projects / Android announces new updates and capabilities / Rust Leadership team introduces new Specification Team

Plus, Fractl emerges from stealth and $1M in a pre-seed round

Inside Dev For November 20, 2023

Thank you to our sponsor

Here's a look at today's Dev briefing. GitGuardian discovered almost 4,000 secrets hidden in PyPI projects.  Android announced new updates to help developers grow their apps.  The Rust Leadership Team introduced the Rust Specification Team.  Thank you. Sudarshan p/sudarshan

1 Researchers at GitGuardian discovered nearly 4,000 unique secrets were hidden inside PyPI projects, of which 768 were valid. There are over 450,000 projects released through the PyPI website, which contain over 9.4 million files. More: Almost 3,000 projects contained at least one unique secret, and several secrets were included in multiple releases, pushing the tally of secrets shared across all the releases close to 57,000. According to the researchers, exposing secrets in open-source packages could allow miscreants to exploit the information to obtain unauthorized access, impersonate package maintainers, and manipulate users through social engineering tactics. The leaked secrets provided access to Azure Active Directory API Keys, GitHub OAuth App Keys, Dropbox Key, Auth0 Keys, SSH Credentials, and more. The State of Secrets Sprawl 2023 report by GitGuardian revealed a 67% YoY increase in new secrets detected in public GitHub commits in 2022.

2 Android announced new updates and capabilities aimed at helping app developers boost growth and engagement, reach their monetization goals, and deliver high-quality experiences. The announcement came ahead of the Playtime event series last week. More: Android simplified creating and managing Google Play listings through the ability to save listings as a draft, schedule listings, and test listings. Enhancements to the new Play Console page allow developers to optimize the ad campaign landing pages with deep links, view the percentage of top-performing URLs that have been deep-linked, and determine the percentage of installed app users who open URLs directly inside the app. The alternative billing APIs are now available to developers enrolled in user choice billing, providing developers the ability to manage alternative billing settings in Play Console and other improvements. Further, Android expanded the beta of Google Play Games on PC and introduced the new getBillingConfigAsync API to display products and offers to users based on regional availability.

A message from our sponsor, Okta. Empower Your Small Business with Okta's Secure Identity Solutions Unlock the full potential of your small business with Okta's cutting-edge identity management solutions. In today's digital landscape, security and efficiency are key, and Okta delivers on both fronts. Our robust platform offers seamless authentication, single sign-on, and multi-factor authentication to safeguard your business data. But it's not just about security; it's also about efficiency. Okta streamlines user onboarding, making it a breeze to manage access to your applications and resources. Whether you're scaling up or streamlining operations, Okta adapts to your needs. Join the thousands of small businesses that trust Okta to protect their digital assets while enhancing productivity. Get started today by visiting our Okta for Small Business landing page. Your business deserves the best in identity management. Learn More

3 The new Rust Specification Team will be responsible for creating and maintaining the Rust specification. Felix Klock and Mara Bos will lead the four-member team. More: The Rust Specification Team will select and maintain a list of stakeholders that will include all members of the Rust language team and one or more representatives from other teams. The new team focuses on writing and editing the language specification, but the authority of the Rust language definition will remain with teams such as the language team and library API team. According to the announcement, the team's primary goal is to provide an authoritative resource for determining what source texts are valid Rust programs and how such programs behave. The team's next action plan involves setting up a meeting schedule, establishing the list of stakeholders, and making its first demo product.

4 Generative AI-based programming platform provider Fractl emerged from stealth and released its new open-source language. The startup raised a $1M pre-seed funding round led by WestWave Capital, with participation from January Capital and Arka Venture Labs. More: The Cupertino, California-based startup also announced the private availability of its programming platform for cloud-native SaaS development. The platform includes Fractl Design Studio, a collaborative tool that combines AI code generative, traditional coding, and drag-drop software development, and Fractl Cloud, a multi-tenant DevOps platform to launch and manage apps built with Fractl. Fractl claims its programming platform is ten times more cost-effective than standard cloud-native tools. Proceeds from the funding round will be used to expand its go-to-market efforts, recruit experts in the software and product space, and support its open-source efforts.

A message from our sponsor, StartEngine. Raise up to $5M or $75M on Your OWN Terms Since 2015, StartEngine has helped founders to raise over 1,000 rounds of capital all on terms they set.1 The results? We’re glad you asked… 1.8 million – The collective size of the StartEngine community…that’s a lot of eyes for your business2 $24 million – How much one of our top founders raised in a single offering3 $75 million – At StartEngine, we practice what we preach and we’ve raised over $75M of our own capital to date4 $750 MILLION – That’s how much our community has collectively raised for founders to date Ready to take your business to the next level? Apply to Raise 1. Includes funding rounds via Reg. CF and Reg. A+ combined through StartEngine’s funding portal and broker-dealer, StartEngine Capital, LLC and StartEngine Primary, LLC respectively, as well as StartEngine’s own raises.  2. Count determined as number of unique email addresses in StartEngine’s database as of 10-6-2023. 3. This is for informational purposes only and does not constitute investment advice or a recommendation to invest. StartEngine does not endorse, promote, or provide any investment advice on this product or any other investment opportunities. Furthermore, this example does not represent a guarantee of future performance or success.  4. Includes funds raised over multiple offerings and at different terms.

5 New Tools and Updates: New features in Microsoft's C#12 include the ability to create primary constructors in any class and struct, a new terse syntax to create common collection values, in parameters as a mechanism for passing read-only preferences, and more. Updates from Chrome:  Following developers' continued interest in activating picture-in-picture automatically when users switch focus from their current tab, Chrome 120 will allow browsers to enter picture-in-picture mode if they meet certain requirements.  Chrome introduced improvements to the Manifest V3 extensions platform, such as allowing up to 50 simultaneously enabled lists and a total of 100 rulesets and increasing the limit of 30,000 dynamic rules applied to safe DNR rules from Chrome 121.

6 📚 Tutorials: A developer explains how a new data structure in the Kotlin Multiplatform library called LeftRight could improve concurrent algorithms by 6,000%.  Learn how to use the design-to-code plugin in the Uno Platform to enhance collaboration between designers and developers efficiently.   This tutorial demonstrates how to build a smooth scroll cards parallax with Framer Motion and Next.js.  Here is an introduction to Grids in SwiftUI.

7 Quick Hits: Raising capital? Fundingstack's DB of 200,000 investors is your secret weapon. Use code "Inside" for 30% off x 3 months. Start your trial here and get funded faster.* The Cybersecurity and Infrastructure Security Agency (CISA) published its first Roadmap for Artificial Intelligence (AI) for ensuring AI safety and security across the U.S.  JetBrains invites developers to participate in the Kotlin Developer Survey to share their feedback about the language, the official Kotlin libraries, IDEs, and build tools.  According to a recent Skillsoft survey, Google Cloud's Professional Cloud Architect and Professional Data Engineer certifications ranked top in top-paying IT certifications.   *This is a sponsored listing.

Upcoming Events NOV 25 AI in Financial Services with Saroop Bharwani Virtual Watch On Demand NOV 25 The Future of Fractional Work with David Berkowitz Virtual Watch On Demand * This is a sponsored event

Knowledge Hub Term of the Day Average order value: Average order value (AOV) is a metric that measures the average amount spent per transaction on a website or in a store. Read More Question of the Week What perks would convince you to return to the office? Join the conversation

Sudarshan Gopalakrishnan Analyst Sudarshan lives in Toronto, Canada, and is an engineering graduate. He is passionate about business, tech, entrepreneurship, and politics. FUN FACT: Sudarshan worked for the election campaign teams of two heads of state in India. When he is not busy with work, he enjoys hiking, playing cricket, and cooking. This newsletter was edited by Aaron Crutchfield

Discover more on inside.com/dev Thanks for reading today's issue of Inside Dev. Explore Explore

Grow your small business simply and securely with Okta.

Submit your application today and learn how to raise capital, turn customers into shareholders, and build your brand.

Share Email Share on Twitter Open in Browser Open in Browser Open in Browser

Did someone forward this email to you? Get your free subscription here. Interested in sponsoring this newsletter? Connect with our sales team here. You received this email because you are subscribed to Inside Dev. Manage your subscription or unsubscribe here. 767 Bryant St. #203, San Francisco, CA 94107 Copyright © 2023 Inside.com