BT

A Few Highlights from QConSF2013- Part 2 of 2

by Martin Monroe on  Dec 31, 2013

It's one thing having an in-house training program. But there is a certain deeper insight that can be gained from attending a Q-Con conference in person. Which may be one reason why attendance at the globe-hopping event continues to grow.

How Can You Learn Early and Fast?

by Ben Linders on  Dec 26, 2013

Agile suggest that teams should fail-fast to enable quick learning from mistakes. Learning from failure is one approach, you can also learn early and fast from successes, by doing experimentation, or by using a plan for knowledge acquisition.

Android 4.4 KitKat and the Secret Key Factory

by Jonathan Allen on  Dec 24, 2013

With the introduction of Android 4.4, developers are being asked to change the way symmetric keys are generated from Unicode passphrases via the SecretKeyFactory.

Xen Project Releases 1.0 of Mirage OS

by Chris Swan on  Dec 23, 2013

Mirage OS is a ‘cloud operating system’ that seeks to avoid security vulnerabilities and bloat by facilitating the creation of single purpose virtual appliances. Applications are developed in the OCaml functional programming language and compiled into standalone ‘unikernels’ that run directly on the Xen hypervisor.

Firefox 26 Blocks Java

by Abel Avram on  Dec 11, 2013 2

Mozilla Firefox 26 now blocks all Java plug-ins by default due to security concerns but allows users to run such plug-ins if they want to.

Amazon re:invent roundup

by Chris Swan on  Dec 02, 2013

Amazon announced a number of new services at the recent re:invent conference in Las Vegas: Amazon WorkSpaces - Desktop Computing in the Cloud, Identity and Access Management using SAML, Amazon AppStream - Delivering Streaming Applications from the Cloud, Amazon Kinesis - Streaming Big Data, CloudTrail - Capturing AWS API Activity, Postgres support in RDS and new EC2 instance types

Continuous Security Testing With Gauntlt

by Manuel Pais on  Nov 30, 2013 1

James Wickett, from Gauntlt core team, gave a tutorial at Velocity Conf London about integrating security testing in the continuous integration cycle for early feedback on application security level. James stressed the importance of regularly checking for security as release delivery rates increase with continuous delivery.

Microsoft to Stop Honoring SHA1 Certificates for SSL and Code Signing

by Jonathan Allen on  Nov 20, 2013

Following recommendations by the US National Institute of Standards and Technology, Microsoft intends to stop honoring SHA1 for SSL and Code Signing certificates. This policy will begin in 2017 and applies to Windows Vista, Windows Server 2008, and later operating systems.

Practices for Scaling Agile in Enterprises

by Ben Linders on  Nov 19, 2013 2

Enterprises that are adopting agile organizational-wide will at some time have to scale their agile practices. In a session at the Agile Methods in the Finance Sector and Complex Environment conference, attendees shared their experiences with scaling agile in enterprises.

Applying Security by Design with the CMMI for Development

by Ben Linders on  Nov 15, 2013

To enable development of secure products, processes covering the software development life cycle have to include security activities. Winfried Russwurm from Siemens and Peter Panholzer from Limes Security facilitated a workshop at the SEPG Europe 2013 conference where they explored security activities and presented the Application Guide for Improving Processes for Secure Products.

Apigee Now Supports Node.js and Open Sources Volos

by Abel Avram on  Nov 12, 2013

Apigee Edge now supports Node.js and has open sourced Volos, a project containing a set of API management modules.

Oracle Releases 51 Security Fixes for Java

by Dan Woods on  Oct 24, 2013

Last week, Oracle released a Critical Patch Update, which included 127 new security fixes for the Oracle ecosystem of products, including Java SE, amongst others. There were 51 critical security fixes for Java, which affects both client and server deployments.

Visual Studio 2013 Adds New Project Templates with Improvements and Social Accounts Authentication

by Anand Narayanaswamy on  Oct 23, 2013

The recently released Visual Studio 2013 includes new project templates with several improvements which enables developers to build projects and applications faster.

A Look Back at the Linux Kernel Backdoor

by Jonathan Allen on  Oct 14, 2013 2

With all of the recent concern over the US government’s National Security Agency (NSA) some of the attention has turn to the possibility of backdoors. Back in 2003 someone attempted to insert a backdoor into the Linux kernel. Though caught, it illustrates how seemingly innocuous changes can introduce vulnerabilities and the importance of tractability in source control.

Securing Docker and Containers

by Aslan Brooke on  Sep 27, 2013 2

Jérôme Petazzoni, senior engineer at dotCloud, examined the progress of security concerning Docker compared with other virtualization and container like technology in his recent blog post "CONTAINERS & DOCKER: HOW SECURE ARE THEY?". Jérôme makes a case for the techniques that secure Docker, in spite of the acknowledgement that improvements are needed.

General Feedback
Bugs
Advertising
Editorial
InfoQ.com and all content copyright © 2006-2013 C4Media Inc. InfoQ.com hosted at Contegix, the best ISP we've ever worked with.
Privacy policy
BT