MACH and what it means for development [Q&A]
Launched in June of this year, the MACH Alliance (MACH standing for Microservices based, API-first, Cloud-native SaaS and Headless) is a non-profit group of tech leaders advocating for a new, open and best-of-breed enterprise technology ecosystem.
The Alliance aims to help enterprise organizations navigate the complex modern technology landscape with the belief that competitive advantage doesn't come from owning the stack, but rather from being free to select the best available resources for the moment.
Developer productivity in the remote era [Q&A]
Many more people are now working remotely and developers are no exception. But how does this shift in working patterns affect their productivity?
We spoke to Manish Gupta, CEO and founder of code analysis specialist ShiftLeft to find out more about the challenges of development in a remote world.
Only eight percent of virtual appliances are free of vulnerabilities
Virtual appliances are an inexpensive and relatively easy way for software vendors to distribute their wares for customers to deploy in public and private cloud environments, but new research shows appliances often have exploitable and fixable vulnerabilities, or are running on outdated or unsupported operating systems.
The Orca Security research study found 401,571 total vulnerabilities in scanning 2,218 virtual appliance images from 540 software vendors. This means less than eight percent of virtual appliances were free of known vulnerabilities.
Developers and security professionals sacrifice security for speed
In order to meet short deployment cycles, 73 percent of security professionals and developers feel forced to compromise on security according to a new report.
The study into DevSecOps from open source security and license management specialist WhiteSource, based on responses from over 560 developers in the US and Europe, finds that 20 percent of respondents describe their organizations' DevSecOps practices as 'mature', while 62 percent say they are improving, with only 18 percent being classed as 'immature'.
API investments remain strong despite tough times
Around half of respondents to a new survey say that investment of time and resources into APIs will increase over the next 12 months, while another third think investments into APIs will stay the same, despite a tough economic environment.
The study from development collaboration platform Postman shows over 60 percent of survey respondents rate themselves as five out of 10 or better in terms of embracing an 'API-first' philosophy.
High performing developers release more often
The highest performing developers put out releases 15 times more often and are 26 times times faster to detect and fix open source vulnerabilities than their low performing counterparts, according to a new study.
The report from Sonatype is based on analysis of over 1.5 trillion open source download requests, 24,000 open source projects, and 5,600 enterprise development teams.
Enterprises struggle to deliver software efficiently
Businesses experience problems in leveraging information to make data-driven decisions, communicating between teams and management layers, dealing with 'software sprawl', and accurately quantifying the cost of feature delivery delays a new report shows.
The survey by Accelerated Strategies Group (ASG), commissioned by CloudBees, also shows that many organizations have been able to tackle some of the facets of modern software delivery management, but that there’s still much room for improvement.
Microsoft is dropping PHP support from Windows
PHP 8.0 is due for release in November, but when this major new version appears Windows will not support it.
The company says that bug fixes and security patches will continue to be released for the lifecycles of PHP versions 7.2, 7.3 and 7.4. But when the latest version is released later this year, Microsoft will "not [...] be supporting PHP for Windows in any capacity for version 8.0 and beyond".
96 percent of developers believe security harms productivity
In a new survey of over 165 developers, AppSec and DevOps professionals, application security automation company ShiftLeft finds that 96 percent of developers believe the disconnect between developer and security workflows inhibits developer productivity.
When asked to prioritize, application security professionals rank creating developer-friendly security workflows as their top priority, even higher than protecting applications in production environments.
Developers need to think like hackers to prioritize fixes
As technology continues to evolve, software development teams are bombarded with security alerts at an increasing rate, making it almost impossible to address every potential vulnerability.
New research from WhiteSource, an open source security and license compliance management specialist, and CYR3CON, which predicts cybersecurity attacks based on AI-gathered intelligence looks at how development teams prioritize fixing vulnerabilities and compares this to discussions in hacker communities.
Software quality beats delivery speed for most developers
The latest State of Software Quality survey from continuous reliability company OverOps shows that 70 percent of respondents say quality is paramount and they would rather delay the product roadmap than risk a critical error impacting their users.
In addition, over half of survey respondents (53 percent) indicate they encounter critical or customer-impacting issues in production at least one or more times a month. A quarter of participants also say that over 40 percent of critical production issues are first reported by end users or customers rather than internal mechanisms.
Less development please, we're British and we have coronavirus
New research from DevOps automation specialist Sonatype has discovered that software development activity in the UK decreased by 28 percent since February.
However, the UK position contrasts with some other countries where development activity has continued to grow in the midst of the pandemic. Notably, this includes the United States with a six percent increase and Germany with a 12 percent increase since January 2020.
Check Point fixes a 20-year-old Linux security issue
For around two decades now, hackers have exploited the design of the memory management system used by Linux programs in order to take control of a target's computer.
Now though researchers at Check Point have introduced a new security mechanism for Linux users called 'safe-linking' which means attackers will need more than one vulnerability in order to take over the program.
Microsoft releases Windows 10 May 2020 Update to developers
Microsoft is preparing for a (probable) May 28 launch of Windows 10 May 2020 Update, but developers can already grab this feature update right now.
Windows 10 May 2020 Update / Windows 10 version 2004 / Windows 10 20H1 was supposed to have been finalized recently, but Microsoft decided to issue one more update to it -- and the company is going to release it knowing that it is still problematic. But now in an indication that the public launch is just around the corner, Microsoft has made the May 2020 Update available to MSDN subscribers.
Google delays Android 11
Google has released a new preview version of Android 11 for developers to play with, and also revealed details of a revised release schedule for the operating system.
Android 11 Developer Preview 4 has been released ahead of the first beta version, and it should come as no surprise to anyone that, given what's been going on in the world recently, this launch has been pushed back a bit. The good news is that everyone will be able to attend the launch event.
Recent Headlines
Most Commented Stories
Betanews Is Growing Alongside You
Only a fool still uses Windows 7
© 1998-2025 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.