New Downfall Attack Could Lead to Sensitive Data Leakage on Intel Processors

Security researcher Daniel Moghimi discovered a new side-channel vulnerability affecting Intel processors that could be exploited to steal data from other users or apps running on the same computer. Dubbed Downfall, the vulnerability has been patched by Intel and mitigated by most major OS vendors.

Keeping Go "Boring" in Go 1.21: How Google Grants Backward Compatibility

In a recent article, Google engineer Russ Cox detailed what Google does to make sure each new Go release honors Go’s backward-compatibility guarantee. This includes generalizing GODEBUG in Go 1.21 to cover even subtle incompatibility cases.

Ngrok Starts Offering One Static Domain to All of its Free Users

To make it easier for developers to expose their local services to the Internet while developing them, ngrok is now providing them the possibility to create and use one static domain for free, instead of relying on time-limited, random domains.

OpenSSF New Manifesto Urges the Software Industry to Take Responsibility for Open Source Security

The Open Source Consumption Manifesto from OpenSSF aims to make the software industry more aware of its responsibility when it comes to ensuring the software supply chain remains secure and healthy.

How Spotify Improved its LLM Chatbot in Sidekick

While using a Large Language Model chatbot opens the door to innovative solutions, crafting the user experience so it is as natural as possible requires some specific effort, argues Spotify engineer Ates Goral, to prevent rendering jank and to reduce latency.