Skip to main content

Posts

Showing posts from February, 2022

Take The Haskell Beginners 2022 Course

There's a short and free course on YouTube about Haskell and Functional Programming, taught by a very experienced developer. And that developer, teacher and enthusiast is Dmitrii Kovanikov, co-founder of KOWAINIK, a small team of enthusiasts who use Haskell and other functional technologies to develop more reliable libraries and tools, as well as a Quantitative Developer at Standard Chartered. Believe me, he knows his craft. Last year, I had a look at another great and free Haskell course by Professor Graham Hutton from the University of Nottingham in "Free Course On Functional Programming in Haskell" where I explored the connection of Haskell and mathematics : As Haskell is a purely functional language, when you write a program in it you are in essence writing mathematical functions. It's where a good background in mathematics will help you in programming, something that finally answers the timeless question of whether you need maths in order to program, a topic expl...

The Alpha Omega Initiative For Taking Open Source Software Security Seriously

 The Alpha Omega Project is a new initiative by the Linux Foundation to strengthen the security of critical open source applications. Why is this important? The answer is the extent to which we all now rely on open source software which, as I recently reported in European Union Will Pay For Finding Bugs In Open Source Software, powers everything, from modern servers, to IoT, to the desktops used by enterprises and governments. Evidence of the criticality of such software was provided by the commotion caused by the OpenSSL Heartbleed bug or the recent  RCE bug which shook the foundations of every industry. Nowadays every company is a software house, be it Adidas, Tesco or Oracle, whose stack is certain to involve open source libraries at a minor or larger scale. Even the White House acknowledged this, leading to the SBOM directive. full article on i-programmer: https://www.i-programmer.info/news/149-security/15231-taking-open-source-software-security-seriously.html

Quarkus 2.7.1 Released - Why Quarkus?

Quarkus, the Java framework for microservices initially released by RedHat in March 2019, has reached version 2.7.1. But before looking at what's new, let's take a look at what Quarkus does differently and how it contributes to the current popularity of Java. Describing Quakus as a "Java framework for microservices" isn't 100% accurate. Despite the fact that Quarkus was created with microservices in mind, you can also build monoliths with it. Also, while Java is the primary language, you can write Quarkus programs in Kotlin and Scala as well. Quarkus, together with Micronaut and Helidon, is part of a new league of open-source frameworks that have sprung up in the last few years in order to boost the usage of Java in the microservices world. Java supremacy in this arena was under threat due to the bloat that existing frameworks were burdened with - hundreds of class files required, resolving dependencies at runtime, use of reflection, large memory footprint, extend...

European Union Will Pay For Finding Bugs In Open Source Software

 The European Commission's Open Source Programme Office has decided to offer bug bounties on popular open source software. What better way of acknowledging OSS's importance than by a state driven sponsorship? Open Source Software powers everything, from modern servers, to IoT, to the desktops at work and, as it seems, is at the heart of European Union systems too. While this EU bug bounty initiative is welcome, it is not something new; I covered the origins of the program in 2019, see "EU Bug Bounty - Software Security as a Civil Right". Back then the bounty was focused on OpenSSL and the Heartbleed bug. As everyone knows OpenSSL is really the cornerstone of todays internet-based communication and as such bugs in it compromise the very fabric of society. From the article: full article on i-programmer: https://www.i-programmer.info/news/149-security/15210-european-union-will-pay-for-finding-bugs-in-open-source-software.html