[Google Online Security]
Introducing sigstore: Easy Code Signing & Verification for Supply Chain Integrity
Posted by Kim Lewandowski & Dan Lorenc, Google Open Source Security TeamOne of the fundamental security issues with open source is that it’s difficult to know where the software comes from or how it was built, making it susceptible to supply chain attacks. A few recent examples of this include

[Google Research]
Accelerating Neural Networks on Mobile and Web with Sparse Inference
Posted by Artsiom Ablavatski and Marat Dukhan, Software Engineers, Google Research On-device inference of neural networks enables a variety of real-time applications, like pose estimation and background blur, in a low-latency and privacy-conscious way. Using ML inference frameworks like

[Soshace]
Node.js Lesson 17: Timers, Differences from Browser, ref and ref
Hey, guys! Our today’s article will tell you about Node.js timers. Here we will try to tell you about all the differences existing between browser and Node.js timers. So, let us refer to our technical materials and see a number of similar methods: The post Node.js Lesson 17: Timers, Differences

[.NET]
.NET March 2021 Updates – 5.0.4, 3.1.13, 2.1.26
Today, we are releasing the .NET March 2021 Updates. These updates contains reliability and security improvements. See the individual release notes for details on updated packages. You can download 5.0.4 , 3.1.13, 2.1.26 versions for Windows, macOS, and Linux, for x86, The post .NET March 2021

[Spotify]
Spotify’s New Experimentation Coordination Strategy
At Spotify we run hundreds of experiments at any given time. Coordinating these experiments, i.e., making sure the right user is receiving the right “treatment” with a population of hundreds of millions of users, poses technical challenges. Adding to the complexity, some of these experiments must

[Google Online Security]
Fuzzing Java in OSS-Fuzz
Posted by Jonathan Metzman, Google Open Source Security TeamOSS-Fuzz, Google’s open source fuzzing service, now supports fuzzing applications written in Java and other Java Virtual Machine JVM based languages e.g. Kotlin, Scala, etc.. Open source projects written in JVM based languages can

[Netflix]
ConsoleMe: A Central Control Plane for AWS Permissions and Access
ConsoleMe: A Central Control Plane for AWS Permissions and AccessBy Curtis Castrapel, Patrick Sanders, and Hee Won KimAt AWS re:Invent 2020, we open sourced two new tools for managing multi-account AWS permissions and access. We’re very excited to bring you ConsoleMe pronounced: kuhn-soul-mee,

[Android]
Android Dev Challenge: Week 3 - Speed round
Posted by Jolanda Verhoef, Developer Relations Engineer On your marks

[Google Research]
A New Lens on Understanding Generalization in Deep Learning
Hanie Sedghi, Google Research and Preetum Nakkiran, Harvard University Understanding generalization is one of the fundamental unsolved problems in deep learning. Why does optimizing a model on a finite set of training data lead to good performance on a held-out test set? This problem has been

[Cloudflare]
About the March 8 & 9, 2021 Verkada camera hack
To be clear: this hack affected the cameras and nothing else. No customer data was accessed, no production systems, no databases, no encryption keys, nothing.

[HubSpot]
Name Dropping: Darling Jimenez, President and Partner at Leading Results, Inc.
Name Dropping is a Q&A series that aims to elevate the stories of women and nonbinary people leading in the tech space. The idea came from Angela DeFranco, a VP of Product at HubSpot, who said one way to be better allies is to name drop more women and nonbinary people in discussions of

[New York Times]
Meeting… Alice Liang, Sr. Manager of Data & Insights at The New York Times
Celebrating Women’s History MonthThis March, we are featuring colleagues from across The New York Times in a special Women’s History Month series of ‘Meeting’Illustration by Claire MerchlinskyWhat are your pronouns?She/HerWhat is your job title and what does it mean?Senior Manager, Data &

[Cloudflare]
ARMs Race: Ampere Altra takes on the AWS Graviton2
A comparison between the Ampere Altra and the AWS Graviton2, the two ARM Neoverse N1-based processors.

[Ebay]
How Creating an Agile Code Base Helped eBay Pivot for Apple Silicon
eBay’s native code base has grown and evolved for over 13 years, but is still nimble enough to quickly incorporate the latest features into the app.

[Soundcloud]
Building a Healthy On-Call Culture
Paging Doctor Software In the past, on-call duty was often associated with doctors, but in recent years, it’s become common for software

[.NET]
Blinking LEDs with Raspberry Pi
The Raspberry Pi is one of the world’s most successful hardware projects. A lot of people have one, but not everyone knows what to do with it. You can use it as a desktop computer or the brain of an electronic circuit. The post Blinking LEDs with Raspberry Pi appeared first on .NET Blog.

[HubSpot]
Mobile Rewrote the Rulebook for Software. B2B Is Still Catching Up.
Fourteen years ago, Steve Jobs stood onstage and introduced the iPhone. It wasn’t the first smartphone, but it was the start of the smartphone era. And now 14 years later, we can clearly see some of the effects of this announcement on the ways that we think about and use computers and software.

[Pinterest]
Pinterest Flink Deployment Framework
Rainie Li | Software Engineer, Stream Processing Platform TeamBackgroundAt Pinterest, stream processing allows us to unlock value from real time data for pinners and partners. The Stream Processing Platform team is working on building a reliable and scalable platform to support many critical

[Docker]
Guest Post: Calling the Docker CLI from Python with Python-on-whales
At Docker, we are incredibly proud of our vibrant, diverse and creative community. From time to time, we feature cool contributions from the community on our blog to highlight some of the great work our community does. The following is a guest post by Docker community member Gabriel de Marmiesse

[Google Online Security]
Continuing to Raise the Bar for Verifiable Security on Pixel
Posted by Eugene Liderman, Android Security and Privacy TeamEvaluating the security of mobile devices is difficult, and a trusted way to validate a company’s claims is through independent, industry certifications. When it comes to smartphones one of the most rigorous end-to-end certifications is

[Google Online Security]
#ShareTheMicInCyber: Brooke Pearson
Posted by Parisa Tabriz, Head of Chrome Product, Engineering and UX In an effort to showcase the breadth and depth of Black+ contributions to security and privacy fields, we’ve launched a profile series that aims to elevate and celebrate the Black+ voices in security and privacy we have here at