Habr
1.25K subscribers
2.06K photos
3 files
1.64K links
Habr.com ⬝ English edition
Download Telegram
“I want to share my frustrating experience participating in Apple Security Bounty program”

Disclosure of three 0-day iOS vulnerabilities and critique of Apple Security Bounty program: https://amp.gs/jzvBP
Creating Roslyn API-based static analyzer for C#.

After you read this article, you’ll have the knowledge to create your own static analyzer for C#. With the help of the analyzer, you can find potential errors and vulnerabilities in the source code of your own and other projects. Are you intrigued? Well, let’s get started: https://amp.gs/jzvAG
“In this post, I try to explain what problems I have encountered when trying to use vue-i18n library in my app, and how Fluent syntax solves them”

Difficulties You Might Encounter When Using vue-i18n: https://amp.gs/jz4dG
“We have already integrated ASan into our testing system a long time ago. Now we want to tell you about a couple of interesting errors it found”

Why we need dynamic code analysis — the example of the PVS-Studio project: https://amp.gs/jzdYk
“In this article I’m going to dispute the claim that the App Store is safe”

How malware gets into the App Store and why Apple can’t stop that: https://amp.gs/jzdUX
“This year, we introduced a number of new features as well as some features that have been there for a while”

Big Data Tools with IntelliJ IDEA Ultimate, PyCharm Professional, DataGrip 2021.3 EAP, and DataSpell Support is Now Available: https://amp.gs/jzdaf
“For the first time PVS-Studio provided support for the CWE classification in the 6.21 release. It took place on January 15, 2018. Years have passed since then and we would like to tell you about the improvements related to the support of this classification in the latest analyzer version”

CWE Top 25 2021. What is it, what is it for and how is it useful for static analysis? https://amp.gs/jzrZP
Nothing and nobody will escape oblivion. Whatever you may say, the history of mankind is a history of automation and the subsequent evolution of workers. This happened both during the first industrial revolution and during the second. The same thing happened with digital revolution. Now machine learning and artificial intelligence are being implemented everywhere. What is the future of software testing?

Software testers — an endangered species? https://amp.gs/jzAxR
“When communicating with our clients, we see that choosing one of these systems is an issue. Therefore, my colleagues have formulated 3 questions to help you choose between PIM and MDM”

PIM or MDM: which system is better for retail? https://amp.gs/jzs0k
“The matching engine I developed can do more than 1’000’000 transactions per second and is 10x times faster than the matching engine of the Binance cryptocurrency exchange”

Millions of orders per second matching engine testing: https://amp.gs/jzKT5
How to fund an MVP-stage startup? An ultimate guide to initial funding.

While small business owners dream of a grant to fund their startup, the process of its obtaining is not as easy and cloudless as it may seem: https://amp.gs/jzKxT
Helpful service for microservice JSON-RPC based test automation.

Test automation approaches for product built in microservice architecture could vary significantly according to the context of testing goals and ways to achieve them: https://amp.gs/jzKNC
“The purpose of such a system is only to improve the readability of the text. It does not add information to the text that did not originally exist”

We have published a model for text repunctuation and recapitalization for four languages: https://amp.gs/jzLkt
Detecting errors in the LLVM release 13.0.0.

Commercial static analyzers perform deeper and fuller code analysis compared to compilers. Let’s see what PVS-Studio found in the source code of the LLVM 13.0.0 project: https://amp.gs/jz6ZG
SEPIC-Ćuk split-rail converter average model.

This text shows how to use the PWM switch average model to design a split-rail SEPIC-Ćuk converter: https://amp.gs/jz6Pf
“We are actively developing the PVS-Studio static analysis tool towards detecting Safety and Security-related errors. We’ve expanded the coverage of the MISRA C:2012 and OWASP ASVS standards”

PVS-Studio 7.15 — MISRA, CWE, OWASP, Unreal Engine: https://amp.gs/jz6JK
Making an Encoder Cable for Servosila Brushless Motor Controller. Testing in Direct Drive mode.

In this post, we’ll make a cable for connecting a quadrature encoder to Servosila brushless motor controller, and then run a servo motor in Direct Drive mode: https://amp.gs/j1T9y
C++ tools evolution: static code analyzers.

Modern applications have lots of code. And the C++ language doesn’t get easier. Nowadays, code reviews are not enough to fully analyze program code. Here’s where static code analysis comes in: https://amp.gs/j1T22
“What if I told you that Clean Swift, VIPER and other approaches can be adapted to SwiftUI? What if I told you that there are some modern architectures which might be as good as MVVM or even better?”

SwiftUI and MVI: https://amp.gs/j1mTf
“It’s the first article in the series about Mina and Mina Tools. In this article, I will introduce you to my tool for monitoring the Mina nodes”

Mina Monitor — convenient monitoring your Mina nodes: https://amp.gs/j1nhz