InfoQ Homepage News
-
Remote Code Exploitation through Bash
A remote exploit (CVE-2014-6271) has been in bash discovered that potentially affects any application that uses environment variables to pass data from unsanitised content, such as CGI scripts. After the release went public, other exploits were discovered (CVE-2014-7169). Official patches have been released to fix them. (Originally posted 24 September, updated 25, 26 and 29 September)
-
ShellShocked - Behind the Bug
The recent vulnerabilities in the Bash shell initially stemmed from a remote execution exploit, which was patched and made available through responsible disclosure before being announced. However, since the initial release there have been other flaws detected which became zero day threats. What exactly was the problem with Shellshock, and is it truly fixed? InfoQ explains what happened.
-
Collaborative Adoption of Scrum Guide
Three of the organisations in the fractured Scrum community have jointly announced their collaboration and endorsement of the new ScrumGuides.org website as the official source of “The Scrum Guide, The Definitive Guide to Scrum: The Rules of the Game.”
-
CloudBees Exit PaaS Business, Resign JCP Executive Committee Seat
CloudBees have announced they are exiting the PAAS business to focus on Enterprise Jenkins. With this new focus, they have resigned from the Java Community Process Executive Committee.
-
Microservices vs Shared Libraries
Robert C. Martin's advice is to start with shared libraries and a plugin architecture and only when that becomes insufficient consider microservices. Giorgio Sironi argues against this, emphasising how different interactions between microservices are compared to interactions between objects and warns for the cost of retrofitting microservices over an existing code base.
-
Scrum Turkey Community Launch Agile Sparrow Program to Teach University Graduates
The Scrum Turkey community have launched a program aimed at giving university graduates a deep experiential understanding of the Scrum framework. Going beyond just the two-day Scrum training this program requires participants to apply their knowledge and meet regularly with coaches to reinforce and expand their skills. The program is offered free to students and is supported by sponsorship.
-
Spring Data Release Train - Spring 4.0, Limiting Queries, SpEL, ALPS
Spring Data release train Evans is now generally available. The release train includes 11 Spring Data modules that help developers build data access layers on top of both relational and non-relational data stores.
-
.NET Micro Framework Adds VS2013 Support
The .NET Micro Framework has a new release which adds support for Visual Studio 2013 and Visual Studio "14". This Framework powers devices that Microsoft intends to build the "Internet of Things" and similar hardware-centric devices like the Raspberry Pi.
-
Building iOS 8 Share Extensions: A GitHub Repo with Issues, Sample Code, and Workarounds
Share extensions, introduced by Apple in iOS 8, "provide an exciting opportunity for developers of all types of apps to integrate with their customers’ devices like never before," says Bryan Irace, iOS developer at Tumblr. Though, as it is often the case with new technologies, the road to building iOS share extensions is paved not only with fun but also with frustration.
-
Puppet Labs Announces Approved Modules and Partner Network
Puppet Labs has announced at its PuppetConf conference the launch of the Puppet Approved program, to recognize those Puppet modules with more quality and active development, more Puppet Enterprise supported modules, as well as a new partner network.
-
Hortonworks Announces Stinger.next Roadmap to Deliver Hadoop Scale SQL with Apache Hive
Following on from the Stinger initiative delivered in Apache Hive 0.13, Hortonworks has laid out the Stinger.next roadmap to provide fully ACID transactions, a sub-second query engine, and more complete SQL 2011 analytics support, all driving towards the goal of “enhancing the speed, scale and breadth of SQL support” in Hive.
-
Testing the Internet of Things
Testing embedded software and systems for the Internet of Things has to involve physical, sensory and emotional interactions says Gerie Owen, Business Solutions Analyst from Northeast Utilities. InfoQ interviewed Gerie Owen and Peter Varhol about how testing differs for the internet of things and embedded software and systems, and on dealing with expectations and experiences of people in testing.
-
Puppet Labs Announces the Next-Generation Puppet Server
Puppet Labs is holding its annual PuppetConf conference where it has announced a faster next-generation Puppet Server, with new management and reporting capabilities for their Puppet Enterprise product, and the launch of new Puppet Apps.
-
NPM Reaches 2.0, Adds Private Node.js Module Management and More
Node.js standard package manager, npm, has reached version 2.0. Among npm's new features, scoped packages promise to make it easier to manage private Node.js modules, just as if they were part of the public repository. The new version also marks the introduction of a new release process and offers improved reliability.
-
How Agile Can Yield Effective IT Business Alignment
In agile projects the product owner is often seen as the person who primary assures the connection between business and IT. But for effective IT-Business alignment having a product owner is not enough. What can people from the business, demand and supply parts of the organization do increase the effectiveness of IT – Business alignment?