GitLab is strongly recommending users upgrade to any of the newest versions for GitLab 8.2 through 8.7 GitLab Community Edition (CE) and Enterprise Edition (EE) because they contain security fixes. One of the security fixes is for a critical privilege escalation. GitLab said that during an internal code review, it discovered a critical security flaw … continue reading
Good software requires a good process for creating it. Good software that meets the needs of the business requires an even better process. That’s the goal of the CMMI Institute, to make sure that organizations are tracking what they do so their performance improves. The CMMI—Capability Maturity Model Integration—originated at the Software Engineering Institute at … continue reading
Today Dropbox showcased a new technology preview called Project Infinite. The goal of this project is to reimagine how people find, access and collaborate with large amounts of data, according to a Dropbox blog post. Most users work on devices with limited storage capacity, said the company, and when people work in teams, getting secure … continue reading
Google is continuing its commitment to modern open standards. The company announced it will be shutting down support for OAuth 1.0 2-legged (2LO) by Oct. 20. “With this step, we continue to move away from legacy authentication/authorization protocols, focusing our support on modern open standards that enhance the security of Google accounts and that are … continue reading
The Justice Department is seeing another lawsuit, this filed by the Electronic Frontier Foundation (EFF). It filed a Freedom of Information lawsuit to determine whether the government has used secret court orders to force technology companies to decrypt their customers’ private communications, according to an EFF announcement. The lawsuit against the DOJ states that it … continue reading
This year’s Android Security Annual report was released today, taking a look at Google services, security protections in 2015, and the work between Android partners and security research as a whole. Last year was the first time this report was released, and it analyzed billions of data points gathered in 2014 to provide insight into … continue reading
For years, securing your website meant paying a certificate authority for the privilege. But last summer, the Let’s Encrypt Project kicked off, led by the Electronic Frontier Foundation. It sought to provide a free source of SSL certificates, and as of yesterday, that goal has been met. In the time since Let’s Encrypt began its … continue reading
Altova announced this morning new pricing and functionality for MobileTogether 2.1, a framework for building and deploying native mobile apps. Version 2.1 introduced more than 20 features based on developer feedback, from functionality for building tables, to error-handling actions, and also flexible options for UI design. With MobileTogether 2.1, the app development environment is free … continue reading
People can find out in as little as 15 minutes if they’re paying too much for their auto insurance. There’s even a little green gecko to tell them so. Determining if you’re paying too much for software, though, might be a more complex task. Failure to understand and manage your licenses can lead to staggering … continue reading
The Apple and FBI battle over the encrypted iPhone was believed to be over when the FBI announced on Monday that it managed to unlock the San Bernardino shooter’s phone. But Apple wants to know how the agency was able to get through its security features, and so the battle continues. The Los Angeles Times … continue reading
Websites are playing a critical role for the candidates in the 2016 U.S. presidential primary season. These sites are used to encourage voters and educate the people of their platform, but even these candidates are susceptible to hacks and security problems, impacting their campaign or their image. Each presidential candidate has a website, but which … continue reading
The Strata and Hadoop World Conference in San Jose kicked off this morning with tutorial sessions covering all manner of Apache projects and Big Data challenges. While the attendees learned about techniques, the vendors were busy announcing and detailing their latest and greatest Big Data software products. Security was a popular topic as Hadoop implementations … continue reading
