InfoQ Homepage Architecture & Design Content on InfoQ
-
Zip Slip Directory Traversal Vulnerability Impacts Multiple Java Projects
Security monitoring company Snyk has disclosed Zip Slip, an arbitrary file overwrite vulnerability exploited using a specially crafted ZIP archive that holds path traversal filenames. The vulnerability affects thousands of projects including AWS CodePipeline, Spring Integration, LinkedIn's Pinot, Apache/Twitter Heron, Alibaba JStorm, Jenkins, Gradle, and Google Cloud Platform.
-
Q&A with Martijn Verburg on AdoptOpenJDK and Nestmates
InfoQ recently sat down again with Martijn Verburg, leader of the London Java Community, co-founder of AdoptOpenJDK and CEO of jClarity, and discussed the overall aim of the AdoptOpenJDK build farm, his thoughts on Nestmates and Java 11, 2018 plans for AdoptOpenJDK, and how developers can get involved.
-
Microservices to Not Reach Adopt Ring in ThoughtWorks Technology Radar
Whilst microservices come with many benefits over traditional monolithic applications, they can also introduce additional complexity into an organisation, writes Rebecca Parsons, chief technology officer at ThoughtWorks. Because of these tradeoffs, she does not believe that microservices should always be the default architecture choice for a software application.
-
Microsoft Announces Azure Event Hubs for Kafka Ecosystems in Public Preview
During Build 2018, Microsoft announced it would support Kafka clients to integrate with Azure Event Hubs. The Microsoft engineering team responsible for Azure Event Hubs made a Kafka endpoint available for users of their service to stream event data into it.
-
Google Kubernetes Engine 1.10 Is Generally Available and Enterprise Ready
Google has announced the general availability of the 1.10 version of their kubernetes engine. Furthermore, in parallel of the 1.10 release, Google will release several new features to support enterprise use cases with the engine like the Shared Virtual Private Cloud (VPC), Regional Persistent Disks and Regional Clusters, Node Auto-Repair and the Horizontal Pod Autoscaler.
-
eBay's Accelerator Data Processing Framework Provides Parallel Execution and Live Recommendations
eBay's Accelerator data processing framework provides parallel execution and automatic organization of source code, input data, and results. It can be used for data analysis, and algorithm development, as well as a live recommendation system.
-
TypeScript 2.9 Release Updates ES.Next Support
TypeScript 2.9 contains several improvements to the language. Support is now available for ES.Next's import.meta, as well as symbols and numeric literals in keyof and mapped object types.
-
2018 Node.js User Survey Report Shows Continued Rapid Growth
On May 31st, 2018, the Node.js Foundation released its 2018 User Survey Report, with insights from more than 1600 participants, spanning 100+ countries. Usage continues to grow rapidly, with over ¾ of participants expecting to expand their use of Node.js in the next year, and significant improvements in ease of learning Node reported, as compared to the 2017 version of the report.
-
Gradle Releases Version 4.7 with Support for Java 10
Gradle has released version 4.7 of their polyglot build tool with a host of new features including support for Java 10, incremental annotation processing, improved console logs, and new pre-compiled script plugins for Kotlin DSL.
-
Microsoft Graph: Connect to Essential Data Every App Needs
Yina Arenas, principal program manager for the Microsoft 365 Ecosystem, gave a session on how to use Microsoft Graph to connect to application data. Using Microsoft Graph, developers can help users to focus on tasks to be accomplished, rather than applications to run. The talk focused on the Build 2018 announcements, getting started, what tools to use, the main APIs, and tips and tricks.
-
Enterprise Ethereum Alliance Announces Client Specification 1.0
On May 16th, the Enterprise Ethereum Alliance (EEA) released the Enterprise Ethereum Client Specification 1.0 which is an open, cross-platform distributed ledger framework. The focus of this framework is to create a standards-based, enterprise-ready approach to building blockchain applications while avoiding multi-protocol propriety approaches.
-
Propel Shifts Plans to Leverage TensorFlow.js
The Propel JavaScript scientific computing and machine learning library has announced a change in the project's direction. Just a few weeks after Propel's initial launch in March 2018, TensorFlow.js announced its release. Propel's initial efforts extended deeplearn.js and the C implementation of TensorFlow. Tensorflow.js is an evolution of deeplearn.js.
-
AWS Blockchain Templates for Ethereum and Hyperledger Fabric
Amazon recently announced the introduction of blockchain templates for Ethereum and Hyperledger Fabric. AWS Blockchain templates enable developers to quickly setup blockchain infrastructure and focus on building applications rather than having to deal with the underlying infrastructure, how to build, maintain and secure it.
-
Microsoft Announces Preview of Azure SignalR Service
Microsoft recently announced a public preview of the Azure SignalR Service during their annual Build developer conference in Seattle. SignalR has been available for download as a separate ASP.NET library but this is the first time it has been available as a fully-managed service.
-
Microsoft and Red Hat Announce a Managed OpenShift Offering on Azure
Microsoft announced it would expand their partnership with Red Hat to offer a managed OpenShift on Azure, which will combine the capabilities of Red Hat OpenShift and Microsoft Azure. Both Red Hat and Microsoft will join forces to design and engineer a Red Hat OpenShift on Azure, which will be available as a public preview in the coming months.