The ARMy grows
Travis-CI published a security bulletin the other day, describing a special condition that would allow to access secrets belonging to a foreign repository in Github or Bitbucket. The condition requires a fork from a public repository. That’s how open source work, and very central functionality. Not a corner case.
Turns out, the cloud service did address the issue, still plenty of secrets have been affected:
While cloud technology is all great economically, this is another sample of why commercial software vendors need to consider third party vendors in their threat profiles.
With the anticipated release of iPhone 13 coming closer, rumours increase. Leaker @FrontTron on Twitter has some numbers, that AppleInsider is kind enough to put into perspective.
It’s impressive how apple dominates the mobile CPU space. With last years release of “Apple Silicon” in form of the M1 chip for notebook like computing (and the iPad), the near strategy ain’t too obvious. Notebookcheck.coms interpretation is the next gen M2 will base on the A15 design, but vary in contained cores.
A benchmark on what is said to be the GPU in Apple’s A15 chip, destined for the ” iPhone 13 ,” is 13.7% faster than the A14, maintaining Apple’s lead in mobile performance. A Manhattan 3.1 GPU benchmark test reportedly shows Apple’s A15 chip hitting 198 FPS during the first round of testing.From the article.
Contentful, a Content-Management SaaS company, raised another round of financing. With the latest investment the Berlin founded and Headquartered is valued at over $3B.
Contentful locked in a $175 million Series F and a $3 billion-plus valuation as it looks to take advantage of a more digital-first marketplaceFrom Crunchbase
Source @ingliguori on Twitter:
Are you using Azure? A newly published Hyper-V bug could possibly crash ‘big portions of Azure cloud infrastructure’.
Security researchers have posted proof of concept code that exploits a recently patched vulnerability in Microsoft’s Hyper-V hypervisor. The bug enables code in the guest to crash the host, and in some circumstances compromise the host’s security.The Register
Google’s Data Cloud Summit took place May 26th, 18PT. The summit is home to their big data products and offerings, that aim to help customers succeed in data driven businesses. Here is a summary of news and announcements:
- Dataplex, an intelligent data fabric. The product allows management of data across multiple sources, including data lakes, data warehouses and data marts for the goal of centralizing management and governance. From there, Dataplex allows to make data available for analytics and data science.
- Datastream, a server-less change data capture (CDC) and replication service. The service allows to syncronize datasets across multiple systems by transferring changes alone, thus reducing the amount of data transferred and increasing performance and reliability.
- Announcement of Analytics Hub, a fully-managed service built on BigQuery. The service aims to provide an open ecosystem for sharing and exchanging data across organisations at scale. Part of the offering will be controls and monitoring over data usage and sharing. The hub will offer self service and monetization for data owners, while reducing the need to operate infrastructure for data owners.
- Dataflow Prime, a no-ops, serverless data processing platform. Dataflow Prime is a managed offering of Apache Beam based data processing pipelines. The product will autoscale infrastructure.
- Cloud Spanner will allow more flexible and granular instance sizing
- Key Visualizer, an interactive monitoring tool to analyze usage patterns in Cloud Spanner
- Cloud Bigtable lifts SLA to 99.999% and introduces new security features. Security features are namely customer managed encryption keys (Googles acronym CMEK) and audit logs. Alongside with SLAs, the product now aims at compliance with regulated industries.
- Sessions are available on demand.
Join us to learn how leading companies are powering innovation with our data solutions. Attend sessions, demos, and live Q&As to discover how data can help you make smarter business decisions and solve your organization’s most complex challenges.Google Data Cloud Summit
Source: Home – Data Cloud Summit
“Does it run Doom?” is the ultimate nerd test for technology. CloudFlare passed today running multiplayer Doom on their edge worker network:
So, if a developer wants to run their next hit, say a real-time multiplayer game, using nothing but their app and Workers, without any servers or traditional infrastructure, can they? Let’s prove they can. Here’s Doom Multiplayer running on top of Cloudflare Workers.
Splunk announced beta availability of their new Observability Cloud at last years .conf20 already. The product became GA this week and offers Infrastructure Monitoring, Application Performance Monitoring, a Log Observer, Real User Monitoring (RUM), Synthetic Monitoring and On-Call for incident response and collaboration:
Announcing the new Splunk Observability Cloud, bringing together the world’s best-in-class solutions for infrastructure monitoring, application performance management, digital experience monitoring, synthetic monitoring, log investigation and incident response.
That makes a total of 3 clouds in Splunk’s portfolio, notes ConstellationR’s Holger Müller:
Hack of the day: A physical switch to chose which OS your PC boots