allow – Devstyler.io https://devstyler.io News for developers from tech to lifestyle Thu, 08 Jun 2023 07:23:23 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.5 Not a Twist, but a Sequel: Spotify Lays Off 200 Employees https://devstyler.io/blog/2023/06/08/not-a-twist-but-a-sequel-spotify-lays-off-200-employees/ Thu, 08 Jun 2023 07:23:23 +0000 https://devstyler.io/?p=107524 ...]]> Spotify has announced it will lay off about 200 employees, or about 2% of its workforce, as part of an effort to change the way the streaming company operates in its partnership with “leading podcasters from around the world,” CNBC reports.

The layoffs were announced by Sahar Elhabashi, Spotify’s vice president, in a memo to employees, saying those affected would be provided “generous benefits.”

Elhabashi also said the “fundamental pivot from a more uniform proposition will allow us to support the creator community better.”

Since 2020, the company has spent 493 million euros ($526 million) on four different podcast acquisitions, according to a Securities and Exchange Commission filing.

In addition, Spotify has entered into sponsorship deals with celebrities such as Meghan, Duchess of Sussex, and Joe Rogan.

]]>
Sony Files Patent for Temperature Change Controller https://devstyler.io/blog/2023/04/07/sony-files-patent-for-temperature-change-controller/ Fri, 07 Apr 2023 08:51:27 +0000 https://devstyler.io/?p=104202 ...]]> Sony has registered a patent for a controller that can change its temperature as a result of player actions and gameplay. As Exputer reports, the company’s new patent application suggests that the PlayStation controller will simulate what’s happening in the game using temperature feedback. If Sony manages to achieve temperature feedback in its controller, it will be just the right complement to tactile feedback.

The patent also describes the inclusion of a “temperature control apparatus”, that would allow it to make the accessory hotter or colder depending on player input, and likely the gameplay situation.

The controller will be made of plastic materials that are difficult to break or bend, similar to current DualSense controllers. The documentation states that a sealed gas bubble is added into the resilient element. The controller circuit would most likely include a temperature control apparatus such as a Peltier element. It could be used to control the volume of gas in the bladder to change the shape of the elastic element. As a result, the player could feel the controller heat up or cool down depending on the game they are playing.

It probably goes without saying that the controller capabilities mentioned in the patent are unlikely to appear in a consumer product. However, if any of these ambitious features make their way into a future Playstation pad, they could provide players with a number of new control options.

]]>
Latest Python Updates Are Now Available https://devstyler.io/blog/2023/01/03/latest-python-updates-are-now-available/ Tue, 03 Jan 2023 09:14:34 +0000 https://devstyler.io/?p=97461 ...]]> Updates to Python 3.7, 3.8, 3.9, 3.10 and 3.11 are now available to fix a number of bugs and security issues. Python is one of the most common programming languages that can be used to develop platform-independent applications.

It was created in the 1990s by Guido van Rossum, who was working for CWI in Amsterdam at the time. Guido was involved in the development of Python as BDFL (Benevolent dictator for life). He also worked for Dropbox as well as Microsoft.

Here are the latest updates:

  • 3.7 – 3.12: gh-98739: Updated bundled libexpat to 2.5.0 to fix CVE-2022-43680 (heap use-after-free).
  • 3.7 – 3.12: gh-98433: The IDNA codec decoder used on DNS hostnames by socket or asyncio related name resolution functions no longer involves a quadratic algorithm to fix CVE-2022-45061. This prevents a potential CPU denial of service if an out-of-spec excessive length hostname involving bidirectional characters were decoded. Some protocols such as urllib http 3xx redirects potentially allow for an attacker to supply such a name.
  • 3.7 – 3.12: gh-100001: python -m http.server no longer allows terminal control characters sent within a garbage request to be printed to the stderr server log.
  • 3.8 – 3.12: gh-87604: Avoid publishing list of active per-interpreter audit hooks via the gc module.
  • 3.9 – 3.10 (already released in 3.11+ before): gh-97514: On Linux the multiprocessing module returns to using filesystem backed unix domain sockets for communication with the forkserver process instead of the Linux abstract socket namespace. Only code that chooses to use the “forkserver” start method is affected. This prevents Linux CVE-2022-42919 (potential privilege escalation) as abstract sockets have no permissions and could allow any user on the system in the same network namespace (often the whole system) to inject code into the multiprocessing forkserver process. This was a potential privilege escalation. Filesystem based socket permissions restrict this to the forkserver process user as was the default in Python 3.8 and earlier.
  • 3.7 – 3.10: gh-98517: Port XKCP’s fix for the buffer overflows in SHA-3 to fix CVE-2022-37454.
  • 3.7 – 3.9 (already released in 3.10+ before): gh-68966: The deprecated mailcap module now refuses to inject unsafe text (filenames, MIME types, parameters) into shell commands to address CVE-2015-20107. Instead of using such text, it will warn and act as if a match was not found (or for test commands, as if the test failed).
]]>