coding Archives (original) (raw)

Android adds OpenID support for simpler digital credentials

A request for access to virtual identity data as Google gives Android an OpenID upgrade to make handling digital credentials like virtual driving licences much easier and more secure.

Google has given Android an OpenID upgrade to make handling digital credentials like virtual driving licences much easier and more secure.

With native support for OpenID standards, Android apps and services can talk the same language when it comes to verifying who you are digitally.

This update uses Android's existing Credential Manager system (specifically, the DigitalCredential API) to bring in support for OpenID4VP (for showing your credentials) and OpenID4VCI (for...

AI is changing software development, but not always for the better

A row of software developers with some humans and some digital as software development is changing before our eyes, with AI becoming a real workmate for developers everywhere as highlighted by a discussion between Microsoft CEO Satya Nadella and Meta's Mark Zuckerberg during the LlamaCon event.

Software development is changing right before our eyes, with AI becoming a real workmate for developers everywhere.

This change isn’t just happening in trendy startups either, the tech giants are all in. We got a fascinating peek behind the curtain recently, thanks to a discussion between Microsoft CEO Satya Nadella and Meta's Mark Zuckerberg.

AI has already changed software development

During Meta's LlamaCon AI event, Zuckerberg directly asked Nadella about the AI...

Apple adds official Vision Pro support to Godot game engine

Photo of an Apple Vision Pro headset as the company begins contributing official support to the Godot game engine.

Apple has begun contributing official support for its Vision Pro headset to the popular Godot game engine. Ricardo Sanchez-Saez, a senior iOS engineer working on Apple's visionOS team, announced the effort via a pull request (PR) submitted to the Godot project on GitHub.

This first contribution lays the foundational groundwork for running Godot applications natively on the visionOS platform.

"We're really excited to be working with the Godot community on adding visionOS...

EU DMA: Apple and Meta hit with first major fines

Man punching as the EU flexes its regulatory muscles under the new Digital Markets Act (DMA), imposing hefty fines on Apple and Meta for non-compliance over App Store and personal data practices.

The EU has flexed its regulatory muscles under the new Digital Markets Act (DMA), imposing hefty fines on Apple and Meta for non-compliance. In its first enforcement actions of this kind, the Commission levied a €500 million fine against Apple and a €200 million fine against Meta.

The EU Commission found Apple breached its obligations regarding "anti-steering" practices within its App Store, while Meta was found to have failed to provide users with adequate choice concerning...

Endor Labs deploys AI agents to counter vibe coding risks

Bright text as Endor Labs expands its application security (AppSec) platform with agents to address development risks posed by AI and vibe coding, including what the company claims is the industry’s most comprehensive security dataset.

Endor Labs is expanding its application security (AppSec) platform with agents to address development risks posed by AI and vibe coding.

Bolstered by agentic AI and what the company claims is the industry’s most comprehensive security dataset, the platform moves beyond mere risk identification to prioritise threats, propose solutions, and even implement fixes automatically.

The move comes amid a dramatic shift in software development practices. The rise of AI coding...

Skills gaps hinder UK software deployment success

Business man walking past someone as according to research from Salesforce DevOps platform Gearset, UK teams are struggling to keep pace with industry standards for software deployment with significant inefficiencies and costly delays due to team skills gaps and lack of adoption of adequate software development automation tools.

UK teams are struggling to keep pace with software deployment standards due to skills gaps, leading to inefficiencies and costly delays.

According to Salesforce DevOps platform Gearset, UK software deployments are 26 percent more likely to be delayed than delivered ahead of schedule.

These delays are not isolated incidents and impact 82 percent of UK businesses surveyed. The financial impact is considerable, costing organisations an average of £107,000 annually due to...

Mozilla open-source tools help developers build ethical AI datasets

Smiling cookies as Mozilla and EleutherAI unveil open-source tools to help developers build ethical AI datasets and avoid training models on copyrighted material.

Mozilla has unveiled open-source tools to help developers build ethical AI datasets and avoid training models on copyrighted material.

The reliance of many popular large language models (LLMs) on vast datasets scraped from the internet, often encompassing copyrighted works used without permission, presents a significant ethical and legal challenge.

A growing contingent within the developer community believes creating high-quality, ethically sound alternatives is not only...

JetBrains debuts free AI tier and Junie coding agent in IDEs

A digital being helping a human developer as JetBrains announces the integration of its AI tools – including the upgraded AI Assistant and new coding agent Junie – into its IDEs under a single subscription model, complete with a free tier.

JetBrains has announced the integration of its AI tools – including the upgraded AI Assistant and new coding agent Junie – into its IDEs under a single subscription model, complete with a free tier.

Love it or loathe it, there’s no denying that AI is disrupting the software development industry. JetBrains, for its part, views it as an opportunity to redefine developers’ roles.

“AI is taking care of basic coding tasks,” JetBrains states, enabling developers to...

Masquerading payment npm package installs backdoor

Mannequin wearing a masquerade mask as cybersecurity researchers at Socket uncover a malicious npm module disguised as a legitimate package for payments integration that hijacks server control during payment transactions.

Cybersecurity researchers at Socket have uncovered a malicious npm package that hijacks server control during payment transactions.

The package, @naderabdi/merchant-advcash, masquerades as a legitimate integration for the digital payment platform Advcash (now rebranded as Volet). The package embeds a reverse shell activated after successful payments that enables attackers to remotely commandeer systems.

Advcash, though niche compared to mainstream services like PayPal,...

Microsoft Research teaches AI tools how to debug code

A digital being holding a magnifying glass up to a computer as Microsoft Research introduces debug-gym, a novel environment designed to train AI coding tools in the complex art of debugging code.

Microsoft Research has introduced debug-gym, a novel environment designed to train AI coding tools in the complex art of debugging code.

As AI's role in software development expands, debug-gym aims to address a critical bottleneck: while AI can generate code efficiently, debugging remains a major time sink for developers.

The proliferation of AI coding assistants is enhancing developer productivity. GitHub CEO Thomas Dohmke predicted in 2023 that "sooner than later, 80%...