Checked C Extends LLVM to Bring Spatial Memory Safety to C

Checked C is an open, collaborative project led by Microsoft Research aimed to extend the C language so programmers can write more reliable programs free of errors such as buffer overruns, out-of-bounds memory accesses, and incorrect type casts. Checked C code can coexist with code written in standard C to ease porting.

Git 2.19 Improves Diff, Branch, Grep, and More

The latest release of Git brings a wealth of new features and internal changes, including improved diff, branch and grep, better command line completion, a new range-diff command, and more.

New Git Submodule Vulnerability Patched

The Git community has disclosed a security vulnerability affecting the clone and submodule commands that could enable remote code execution when vulnerable machines access malicious repositories. The vulnerability, which has been assigned CVE–2018–17456 by Mitre, has been fixed in Git 2.19.1.

GitHub Release Developer Workflow Tools: Actions, Suggested Changes & Security Alerts for .NET/Java

At GitHub Universe in San Francisco, GitHub announced a number of new tools to help developers make their workflows more effective, including Actions, Suggested Changes, Security Alerts for .NET and Java, and more.

MIT Researchers Propose DAWG Defense against Spectre and Meltdown

Security researchers from MIT claim to have devised a hardware solution to prevent cache timing attacks based on speculative execution, such as Spectre and Meltdown. Their approach, named Dynamically Allocated Way Guard (DAWG), splits the processor cache in variably-sized partitions to make it impossible for processes to snoop on other processes’ cache partitions.