The project is a collaboration of the Open Source Security Foundation (OpenSSF), the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Homeland Security’s Science and Technology Directorate (DHS S&T).

“Vulnerabilities in software are a key risk in cybersecurity, with known exploits being a primary path for bad actors to inflict a range of harms. By leveraging SBOMs as key elements of software security, we can mitigate the risk to the software supply chain and respond to new risks faster, and more efficiently,” said Allan Friedman, senior advisor and strategist at CISA.

Protobom allows companies to read data from software specifications (SBOMs), create their own SBOMs, and translate SBOMs into a variety of standard formats.

According to OpenSSF, there are many SBOM formats and schemas, which can be challenging for companies. The goal of the new project is to provide “a format-neutral data layer on top of standards that allows applications to work seamlessly with any kind of SBOM.”

“Protobom is a step towards greater efficiency and interoperability by translating across the widely used formats so that tools and organizations can focus on what’s important. It is a positive solution that helps shape a more transparent software-driven world”, Allan Friedman added.

OpenSSF also explained that by integrating Protobom into applications that link SBOM and vulnerability information, organizations will be able to more quickly access the necessary patches and mitigations to keep their software supply chains safe.

According to Omhar Arasaratnam, General Manager of OpenSSF Protobom will enable organizations to proactively manage the risk of their open source dependencies.

The API now includes a file search tool that allows searching of up to 10,000 files per assistant and can allow developers to integrate knowledge extraction into their assistants. It works with OpenAI’s vector repository objects.

The company also introduced new controls for setting the maximum input and output token so that developers can more directly limit costs. They can also now choose how many last messages will be used for context shortening.

Other new features include the introduction of the Tool Choice option, which allows the selection of a relevant tool. Other updates in this release include more model configuration settings, new streaming and polling utilities, support for fine-tuned models, and more.

“Due to complex environments and distributed engineering teams, enterprise customers struggle to efficiently and securely deploy and manage IDEs, AI tools, and remote environments all at once. These struggles naturally slow businesses down and result in missed opportunities,” said Brian Noll, VP of sales and global partnership at JetBrains Americas.

JetBrains IDE Services provides a central management hub for five different JetBrains products: IDE Provisioner, AI Enterprise, License Vault, Code With Me Enterprise, and CodeCanvas.

IDE Provisioner provides IDE updates as needed to ensure outdated versions are not used, AI Enterprise provides AI-driven productivity features, License Vault automates the distribution of JetBrains IDE licenses, Code With Me Enterprise provides pair programming, and CodeCanvas handles the configuration of the development environment.

“With the release of JetBrains IDE Services, we are giving customers a centralized way to manage their development stack at the organizational level and dramatically improve the productivity of entire engineering departments with the inclusion of enterprise versions of JetBrains AI, Code With Me, and CodeCanvas in the suite,” said Noll.

The service is available with an on-premises deployment option, but the company has plans to add a cloud offering as well.

A group of technology companies, including Intel, Google, Arm, Qualcomm and Samsung, created the Unified Accelerator Fund (UXL) alliance, through which they will work together to remove the advantages that NVIDIA has as a dominant player in the artificial intelligence market, reports The Verge.

The alliance will undertake the mission of developing an open-source software package that will allow AI professionals to break away from NVIDIA’s technology. Additionally, the code that developers create will be able to function on any machine with any chip.

The Unified Acceleration Foundation is still in the design phase, but is expected to begin operations by the beginning of the second half of the year. UXL currently supports the OneAPI open standard. It was created by the Intel company.

Members of the alliance believe that it will remove restrictions on developers using specific programming languages, code sets and any other tools intended to bind developers to the use of certain architectures. For example – NVIDIA’s CUDA platform, which strives for this.

After focusing entirely on making chips for AI models like the H100, the company reached $2 trillion in market capitalization last month. This secured NVIDIA’s top spot among chip makers. The company is also planning to release new AI models soon – H200 GPU.

The chips that NVIDIA manufactures require developers to use the CUDA architecture, which supersedes all other chip manufacturers’ architectures by leaps and bounds. Jensen Huang, CEO of NVIDIA, also shared that 4 million developers use CUDA.

However, technology companies are not giving up and continue to try to create alternative architectures of their own to displace the dominant one in the market.

For now, the creators of UXL intend to support NVIDIA hardware and code. Initially, the project will aim to develop options for AI applications.

The group of tech companies that make up the alliance is looking to collaborate with other powerhouses like Microsoft and Amazon to make sure the solutions they provide can be built into any chip or hardware.

#1. PYTHON

Python is a versatile programming language that is commonly used in backend development and data science, making it an excellent choice for programming beginners.

#2. C

C is a programming language that is commonly used in application and systems development. Its syntax resembles that of other widely used languages and this makes it very suitable for beginner developers who want to develop.

#3. C++

C++ is a programming language that is very similar to C but includes classes and objects. It is among the most suitable languages for developing games and systems.

#4. JAVA

Java is a high-level object-oriented programming language and is a good choice for developing applications and websites.

#5. C#

C# is an object- and component-oriented programming language similar to C and Java. C# allows developers to create many types of secure and reliable applications that run in .NET.

#6. JAVASCRIPT

JavaScript is a programming language that is commonly used to develop applications, games, and websites as well as web servers. Although it is best known as a scripting language for web pages, many non-browser environments also use it, such as Node.js, Apache CouchDB, and Adobe Acrobat.

#7. SQL

SQL is designed specifically for database programming. This involves storing and processing information in a relational database. A relational database stores information in tabular form, with rows and columns representing the various relationships between data values.

#8. GO

Go is suitable for backend development and for working with APIs and web services. Go was originally designed for programs related to networks and infrastructure. It was intended to replace popular high-performance server-side languages such as Java and C++. Today, Go is used for a variety of applications, such as cloud applications and servers, DevOps, command line tools, and much more.

#9. SCRATCH

Scratch is a programming language created to teach kids the basics of programming. It is block-based, and website and serves as an educational tool, with a target audience of ages 8 to 16. Users of the website can create projects within it using a block-like interface.

#10. VISUAL BASIC

Visual Basic, sometimes also called Classic Visual Basic, is a programming language with a user interface suitable for frontend and full-stack development. It is the most widely used programming language for creating Windows applications. It is easy to learn and does not require you to memorize difficult commands like other programming languages.

Web application testing, desktop and mobile QA are more common areas for QA professionals, while game testing, security and automation are more narrowly focused. Regardless of the direction you want to take, each path has its unique requirements, although many of the skills overlap.

Today, we’re going to cover the most important tips for getting started as a QA professional, according to Master Born.

1. Know the basics that QA professionals use

Before you embark on this career adventure, it would be a good idea to familiarize yourself with what others will want from you as a QA professional.

– SQL Fundamentals – Regardless of which position you choose, you should know the SQL basics, which are a must for everyone. The ability to extract data from a structured database is essential to verify that a piece of code is secure and stable.

– Knowledge of SDLC – As someone who is just starting their career or transitioning from another, different job, you need to know the software development life cycle or SLDC. Knowing the difference between Waterfall and Agile, as well as some of the Agile methodologies, such as Scrum and Kanban, can win you your dream job during an interview.

– GIT Basics – GIT is a version control system that you can use to share code with your team. GitHub, GitLab, and BitBucket are the programs that are used in most of the industry. Be sure to familiarize yourself with the basic commands and gain insight into the software.

– Soft Skills – Non-technical skills are just as important as technical skills. Highly skilled candidates who cannot work in a team face a lot of competition from less experienced candidates who can, however, work in a team. Among the most sought-after soft skills are: communication, willingness to learn, ability to prioritize, and time management.

2. Know the responsibilities of the QA specialist

A QA specialist ensures software quality before its launch. Beyond testing for bugs, they often spend up to half their time on tasks like documentation, reporting, and process improvement. Understanding test documentation terms like test case, scenario, run, cycle, and plan is crucial. Bug reporting basics are essential too, covered in certification courses. Learning tools like BrowserStack simplifies testing across various devices.

3. Information sources

Let’s not forget that the technological world is one of the fastest growing and the knowledge we have today may not be relevant tomorrow. To build a successful career as a QA professional you need to read constantly and use different but reliable sources of information. This could be different YouTube channels where there are a number of podcasts and videos on QA topics. Other sources of information include ChatGPT and Udemy, which offers several courses for testers to increase their working knowledge, which we think is worth it. There is a lot of valuable knowledge in them that are organized very well.

President Joe Biden, during his State of the Union address, urged Congress to pass legislation to regulate artificial intelligence. He added that it is necessary to prohibit AI from imitating human voices.

The president announced that lawmakers must protect people from the risk of potential dangers arising from the use of AI. The reason for his statement is the fake robocall campaign in which his voice was imitated and which reached thousands of voters who received a call about the New Hampshire primary election.

Authorities say this fake campaign is an attempt to interfere in the election through AI. Despite the potential danger of AI interfering with the election process, few expect lawmakers to be able to pass legislation to regulate the matter anytime soon.

All this does not prevent the big technology companies from continuing to attract users to new features and possibilities that AI offers.

Researchers and experts in the field of artificial intelligence fear the widespread use of AI before the area is regulated. Hundreds of experts have signed a letter calling on technology companies developing AI to make changes to their company policies and agreeing that there is a need for independent safety assessments of the use of AI.

“Generative AI companies should avoid repeating the mistakes of social media platforms, many of which have effectively banned types of research aimed at holding them accountable” wrote in the letter.

In it, the researchers also add that some AI companies are suspending researchers’ accounts and changing their terms of service in order to prevent some evaluations. The experts also say that “disempowering independent researchers is not in AI companies’ own interests”.

In summary, users should be aware of the limitations and challenges that may arise when using AI, for which there is still no regulation, nor sufficient information about what risks and harms it could cause.

Read more:
1. Authors Sue NVIDIA for Plagiarism
2. How to Burst the Toxic Bubble in Work IT Culture?
3. ChatGPT Now Reads Cooking Recipes While Walking Around the Kitchen

LEADTOOLS is a suite of development tools with components that allow developers to incorporate features such as forms processing, document/image viewing, OCR/ICR and more into their applications.

Highlights in this release include a new Excel application programming interface and web editor, .NET MAUI support, and an updated React Medical web viewer.

“These integrated, powerful, and customizable features make it possible for developers to build better, more sophisticated applications quickly without compromising on quality”, said Khalil El-Dana, head of product development for LEADTOOLS

The new Excel API allows developers to load, create, edit, and save Excel sheets, and the Excel web editor integrates into existing HTML and JavaScript applications. According to the company, both tools offer features such as formatting, formula creation, styling, merging and saving.

The company integrates .NET MAUI across the LEADTOOLS product line, providing cross-platform development capabilities for developers working on Android, iOS and Windows.

Other features include multi-capture video support, speech recognition demonstrations, and recognition engine updates.

Read more:
1. Mark Zuckerberg and His Wife Shared Photos From Billionaire Wedding In India
2. How to Burst the Toxic Bubble in Work IT Culture?
3. ChatGPT Now Reads Cooking Recipes While Walking Around the Kitchen

Microsoft Graph Toolkit users can now directly edit items, view colleagues’ presence and profiles, and take advantage of the general availability of search components, which are now fully supported.

These updates are intended to improve tasks and interactions across the Microsoft ecosystem.

One notable enhancement is the adoption of the latest version of the underlying Lit framework, which introduces asynchronous rendering. This update enables components to more effectively manage their state, reducing unnecessary re-rendering. As a result, memory usage and processing cycles are optimized for the entire webpage.

Another improvement is the introduction of registration of toolkit components. This method ensures that only the components that are actively used in a project are included in the final package, significantly reducing its size. This approach not only cuts unnecessary bulk from applications, but also improves load times and overall performance.

Microsoft urges new users to discover the toolkit’s capabilities by utilizing its extensive documentation and introductory guides.

What is Microsoft Graph Toolkit?

Microsoft Graph Toolkit is a universal collection of framework-agnostic components and certificate providers designed for seamless integration with Microsoft Graph, which is a platform for connecting various Microsoft 365 services and data. These components are customizable, function in a ready-to-use form, and are compatible with any web framework and modern browsers.

“Application modernization continues to be a top priority for customers. Red Hat JBoss EAP 8 delivers enhancements that provide upgraded security integration and reduce operational overhead, enabling customers to not only extend the product life cycle for modern applications, but to take advantage of cloud native platforms that provide a connected foundation for applications to run seamlessly across environments”, said Joe Fernandes, vice president and GM, Hybrid Cloud Platforms, Red Hat.

JBoss EAP 8 delivers security enhancements, advanced cloud tools and Jakarta EE 10 compatibility, contributing to streamlined application modernization for customers. JBoss EAP 8 also includes a new provisioning system that helps developers better manage application deployments no matter where they are deployed.

To improve security, Red Hat also added native OpenID Connect support. The company has also removed some legacy security frameworks from JBoss EAP.

Other new features in this release include an updated migration toolset, feature pack support for data sources, and JBoss EAP XP 5.0.

Adding the expansion pack to JBoss EAP enables developers to add cloud-native functionality to their existing Jakarta EE applications, such as adding metrics, health endpoints, and reactive messaging support.

JBoss EAP 8 builds on the lightweight, cloud-native capabilities of Red Hat JBoss EAP 7 to improve developer productivity, reduce operational overhead, and ease the path towards modernization. Some of the advancements customers can take advantage of in the latest version include:

Jakarta EE 10 support enables customers to benefit from the functionality provided by current versions of the Jakarta EE APIs. With this release, companies can extend the life cycle of their enterprise Java applications.

Improved provisioning tools empower developers and operations teams to manage and optimize the deployment of their Jakarta EE applications on all deployment targets, including bare metal, virtual machines, cloud, and Red Hat OpenShift.

Security enhancements introduce native support for OpenID Connect and remove legacy security frameworks, making it easier to integrate JBoss EAP with OpenID Connect compliant platforms.

Red Hat recommends using JDK 17 because JDK 11 support was deprecated in JBoss EAP 7.4. JDK 11 continues to be deprecated in JBoss EAP 8.0 while it is still supported. Support for Java SE 21 is planned for a future release of JBoss EAP 8.

Read more:
1. Let’s Talk about Money: How to Invest Your Money in 2024?
2. From Harvard Students to Users Around the World: Facebook turns 20
3. The CodeIT 2024 Team for the Competition and the Journey into the World of Programming