Inside | Real news, curated by real humans
Inside Dev

Inside Dev (Aug 12th, 2019)

1. WordPress developers are working on a plan to forcibly auto-update older versions within a year. The plan involves slowly auto-updating old sites starting at version 3.7 to the current minimum supported release, 4.7, in stages, with developers carefully monitoring each phase for errors and site breakages. In the event a site breaks while being updated, WordPress will email its owners and let them they need to manually update their website. Site owners will also be warned before the auto-updates begin, thus giving them a chance to opt-out of the process altogether. - ZDNET

  • Email gray
  • Permalink gray

2. Starting in Google Chrome 77, Chrome will move the Extended Validation [EV] certificate UI indicator from the left of the URL bar to Page Info instead. The news comes after the Chrome Security UX team's research revealed that the EV UI does not protect users in the way it was designed to. In removing the EV UI, Chrome joins other browsers, such as Apple's Safari and Firefox 70, who have also come to similar conclusions. Chrome 77 will be released on Sept. 10. - TROY HUNT

  • Email gray
  • Permalink gray

3. The PSR-12 Extended Coding Style Guide specification has been approved. Ten Core Members of the PHP-FIG voted in favor while two voted against. PSR-12 replaces PSR-2 and provides more detailed rules for formatting code, while PSR-1 remains the baseline for style guidelines. - GITHUB

  • Email gray
  • Permalink gray

4. U.S. election security experts say nearly 36 backend election systems in ten states were found connected to the internet over the past one year, and thus vulnerable to attack. The SFTP server, which is the system that receives votes, and the firewall are only supposed to be connected to the internet for a few minutes, but some systems have stayed connected for up to a year. As a result, attackers could have easily hacked the firewall and SFTP server, thus allowing them to send in fake results or install malware. “For a skillful, motivated attacker, it doesn’t matter much if [the system is connected] two minutes or a whole year," said independent election security expert Harri Hursti. "But for a less skilled fool, less motivated attacker, the fact that they are there for a year, it lowers the bar." - VICE

  • Email gray
  • Permalink gray

5. TeamCity 2019.1, a build management and continuous integration server from JetBrains, now provides support for Go. That means Go developers now have to access all TeamCity test reporting-related features. Click here to learn how to configure TeamCity to work with Go programs. - JETBRAINS

  • Email gray
  • Permalink gray

Written and curated by Inside Dev and Inside Deals Editor Sheena Vasani, a freelance journalist based in California. Proficient in Javascript and Ruby. Got my start at Dev Bootcamp and Thinkful.

Editor: Bobby Cherry (senior editor at Inside, who’s always on social media).

  • Email gray

Subscribe to Inside Dev