Blogsby GlyphThu Feb 28, 20192 posts
Reactive Programming with Salesforce Data
The recent introduction of Platform Events and Change Data Capture (CDC) in Salesforce has launched us into a new age of integration capabilities. Today, it's possible to develop custom apps that respond to activity in Salesforce.
Wed Feb 27, 20192 posts
Debugging in Ruby, Busting a Year-old Bug in Sprockets
Debugging is an important skill to develop as you work your way up to more complex projects. Seasoned engineers have a sixth sense for squashing bugs and have built up an impressive collection of tools that help them diagnose and fix bugs.
MWC19: Vertiv and 451 Research Survey Reveals More Than 90 Percent of Operators Fear Increasing Energy Costs for 5G and Edge
Vertiv, together with technology analyst firm 451 Research, has released the findings of an in-depth survey which reveals a good sense of optimism about the services 5G will enable and the interplay with edge computing.
Tue Feb 26, 20193 posts
Top ten most popular docker images each contain at least 30 vulnerabilities
we found that 44% of docker image scans had known vulnerabilities, and for which there were newer and more secure base image available. Most vulnerabilities originate in the base image you selected.
+5more from Snyk Blog that day
- ReDoS vulnerabilities in npm spikes by 143% and XSS continues to grow
- Open source maintainers want to be secure, but 70% lack skills
- 88% increase in application library vulnerabilities over two years
- 78% of vulnerabilities are found in indirect dependencies, making remediation complex
- 81% believe developers should own security, but they aren’t well-equipped
Bulb shines bright with Solar as its design system
Bulb adopts Figma to build, maintain and host their design system Solar.
Spinning Up in Deep RL: Workshop review
On February 2, we held our first Spinning Up Workshop as part of our new education initiative at OpenAI.
Mon Feb 25, 20191 post
Snyking in - Directory traversal vulnerability exploit in the st package
Welcome to the first edition of a new exploit series we’re calling “Snyking In”! We’ll be looking at various security vulnerabilities, demonstrating how they can be exploited, as well as the potential risk they pose to your data and...
Thu Feb 21, 20194 posts
Ten Ways to Secure your Applications
This blog post is adapted from a talk given by Joe Kutner at Devoxx 2018 titled “10 Mistakes Hackers Want You to Make.” Building self-defending applications and services is no longer aspirational–it’s required.
So, you think your CI/CD environment is secure?
This post, co-written by Weaveworks and Snyk, explains how by using a GitOps continuous integration (CI)/continuous delivery (CD) pipeline combined with good security practices improves the overall security of your development workflow to...
+1more from Snyk Blog that day
Wed Feb 20, 20192 posts
Vertiv Receives Award from Telefonica for Energy Efficiency Project
Grupo Telefonica recognized Vertiv for its infrastructure solution implemented in large Colombia data center, with short ROI and energy savings of up to 40 percent.
Leveraging RPA to Reduce Risk and Increase Compliance in BFSI
Discover how RPA can be leveraged to streamline risk and compliance for organizations in the Banking, Financial Services, and Insurance (BFSI) sector.
Tue Feb 19, 20194 posts
3 steps to build bionics at your company
What's bionics at Fullstory? It's deploying technology and efficient workflows to amplify the power of your workforce, leading to happier employees.
10 npm Security Best Practices
Concerned about npm vulnerabilities? It is important to take npm security best practices into account for both frontend, and backend developers.
The New UiPath AI Computer Vision Is Now in Public Preview
Announcing the public preview of the new UiPath AI Computer Vision built on deep learning. Watch a demo of the new AI Computer Vision in action!
+1more from UiPath Blog that day
AI safety needs social scientists
We’ve written a paper arguing that long-term AI safety research needs social scientists to ensure AI alignment algorithms succeed when actual humans are involved.
Mon Feb 18, 20192 posts
Vertiv Names Magdalena Mardones as Channel Sales Manager for Chile
Vertiv has announced the appointment of Magdalena Mardones as channel sales manager for Chile. Mardones is charged with leading the sales function within the local market, in addition to supporting Vertivs business partners.
Fri Feb 15, 20191 post
Thu Feb 14, 20194 posts
Introducing The Secure Developer community
Today Snyk is happy to announce the launch of The Secure Developer, a community and educational resource for all things security.
Figma raises $40MM Series C round led by Sequoia
Figma announces a $40 million Series C funding round led by Sequoia
When Policy Drives Technology: American AI Initiative and Intelligent Automation
Learn how the AAII helps federal agencies adopt AI and RPA, to prepare a successful workforce in the Automation First era.
Better language models and their implications
We’ve trained a large-scale unsupervised language model which generates coherent paragraphs of text, achieves state-of-the-art performance on many language modeling benchmarks, and performs rudimentary reading comprehension, machine...
Wed Feb 13, 20194 posts
A serious security flaw in runC can result in root privilege escalation in Docker and Kubernetes
A security flaw discovered by Adam Iwaniuk and Borys Popławski and found in open source software runC was disclosed on February 11th, 2019 and described in CVE-2019-5736.
How to Break Down Organizational Silos to Speed Up RPA Implementation
Insights on how leading enterprise companies can fast track RPA implementation by breaking down the silos within their organizational structure.
Unifying Our GraphQL Design Patterns and Best Practices with Tutorials
Read Time: 5 minutes In 2015, Shopify began a journey to put mobile first. The biggest undertaking was rebuilding our native Shopify Mobile app and improving the tools and technology to accomplish this.
Tue Feb 12, 20193 posts
How to Use GraphQL Nexus with a Database
Learn how to connect GraphQL Nexus to a database with Prisma Client and the Nexus Prisma plugin.
Solving Robotic & AI Challenges at Massive Scale Today
A look at the biggest challenges for robotic and artificial intelligence and how UiPath is solving them, and solving for them on a massive scale.
Mon Feb 11, 20191 post
Thu Feb 7, 20195 posts
Scanning Docker images for key binaries - going beyond package managers
We’re happy to share that we’ve just extended our Docker scans to now include scanning key binaries that were manually installed on the Docker image.
GraphQL Nexus: Code-First GraphQL Server Development
Meet GraphQL Nexus, a code-first library for building GraphQL servers with type-safe schemas and a better developer workflow.
Protecting your Domain Names: Taking the First Steps
Everyone and everything on the Internet depends on the Domain Name System (DNS) being functional. The DNS has been a common vector for attacks in recent years, and 2019 seems to be no different.
Wed Feb 6, 20193 posts
Cloud infrastructure drift: The good, the bad, and the ugly
Infrastructure misconfiguration is the leading cause of data breaches in the cloud, and a big reason misconfiguration happens is infrastructure configuration “drift.” While some drift events can lead to data breaches, not all of it is bad.
Vertiv Expands its Portfolio of Infrastructure Solutions Wholesalers in México
Vertiv announced its new partnership with Luguer, a Mexican multi-brand wholesaler whose value-added services span more than 20 years of experience in the market, over which time it has become one of the main distributors of...
UiPath Introduces A New Release Strategy
Announcing a new UiPath release strategy with a more frequent delivery cycle to enable you to select the Platform release best suited for your business.
Tue Feb 5, 20192 posts
NumPy arbitrary code execution vulnerability
A recently discovered vulnerability in NumPy, the widely used open source package for scientific computing in Python, allows for the execution of arbitrary, potentially malicious code.
Phishing Attacks Against Facebook / Google via Google Translate
When it comes to phishing, criminals put a lot of effort into making their attacks look legitimate, while putting pressure on their victims to take action.
Mon Feb 4, 20193 posts
How even quick Node.js async functions can block the Event-Loop
When I tried to fix the situation, I realized how little I actually knew about the event-loop behavior and gained some realizations that at first surprised me and some fellow developers I shared this with.
+1more from Snyk Blog that day
Fri Feb 1, 20191 post
Attracting Local Talent And Building Mobile Apps: A Developer Hiring Initiative
Shopify is a commerce platform that serves over 600,000+ merchants and employs over 3000 people across the globe. We’re always on the lookout for highly skilled individuals with diverse backgrounds to join our team, and that requires us to...