ClkScrew: Geheime Schlüssel mit der Brechstange aus der ARM Trustzone auslesen

heise online Newsticker - 27. September 2017 - 21:00
Die ARM-Chips in Smartphones lassen sich mittels Stromsparfunktionen angreifen, um Zugriff auf Informationen in der Trustzone der Geräte zu erlangen. Damit ließe sich Verschlüsselung knacken, die sogar vor Angreifern mit Root-Rechten sicher sein sollte.

Video-Plattform Vimeo kauft Livestream und startet "Vimeo Live"

heise online Newsticker - 27. September 2017 - 21:00
Das Video-Portal Vimeo übernimmt den Video-Dienstleister Livestream und startet mit "Vimeo Live" eine neue Streaming-Plattform. Allzu günstig ist das Angebot für Produzenten jedoch nicht.

Equifax-Hack: Chef der Wirtschaftsauskunftei tritt zurück

heise online Newsticker - 27. September 2017 - 20:30
Nach dem gewaltigen Datendiebstahl bei der Wirtschaftsauskunftei Equifax konnte sich auch der Unternehmensschef nicht mehr auf seinem Posten halten. Richard Smith nahm auch nach massiver Kritik an seinem Unternehmen nun den Hut.

Nvidia: Netflix-Streaming in 4K und HDR möglich ab Windows 10 Fall Creators Update

heise online Newsticker - 27. September 2017 - 20:30
Am 17. Oktober erscheint das große Windows 10 Fall Creators Update. Es soll laut Nvidia das Streaming von Netflix-Videos in 4K und HDR auf allen Pascal-Karten ermöglichen.

Vodafone führt unbegrenzte Datennutzung für bestimmte Apps ein

heise online Newsticker - 27. September 2017 - 18:30
Die Telekom machte es mit "StreamOn" vor; nun bietet auch Vodafone Optionen für Mobilfunktarife an, bei denen der Datenverbrauch bestimmter Apps nicht aufs Volumen angerechnet wird.

Notebook Alienware 13 im Test: Gute Performance hat ihren Preis

heise online Newsticker - 27. September 2017 - 18:30
Das Alienware 13 ist ein Hochleistungslaptop im kleinen Format. Das ist nicht nur praktisch für unterwegs. Ausgestattet mit genug Leistung für anspruchsvolle Games, ist das Notebook ein spannender alltäglicher Begleiter. Ein Test bei TechStage.

Digitalgipfel: EU soll bis 2025 weltweit führend bei Glasfaser und 5G werden

heise online Newsticker - 27. September 2017 - 18:30
Deutschland, Frankreich, Italien und Spanien haben Ziele für den EU-Digitalgipfel abgesteckt. Die Forderungen reichen von einem gleichen Mehrwertsteuersatz bis zu einem Behördenzugang zu Daten in Echtzeit.

Ben's SEO Blog: Is Your Drupal Website Antisocial?

Planet Drupal - 27. September 2017 - 18:06

Social media needs to be a part of your search engine optimization strategy. While the level of involvement in social media can be determined by your market and your customers, ignoring social media can no longer be an option. Smart Drupal SEO strategies include building authority in social media channels.

Search engine algorithms for social media vary

Google has stated clearly that social signals such as the number of Facebook likes and Twitter followers are not factored into Google’s search algorithm. To Google, each individual tweet or Facebook post is considered a web page on its own. On the other hand, Bing says that it does look at the social authority of a user. “We look at how many people you follow, how many follow you, and this can add a little weight to a listing in... Read the full article: Is Your Drupal Website Antisocial?

Schwachstelle in macOS bis High Sierra: Apps können alle Schlüsselbund-Passwörter klauen

heise online Newsticker - 27. September 2017 - 18:00
Schad-Software kann den kompletten Inhalt des macOS-Schlüsselbundes extrahieren, darunter die Passwörter im Klartext, wie ein Sicherheitsforscher demonstriert. Die schwere Lücke lasse selbst unsignierte Apps an die sensiblen Nutzerdaten.

Volkswagen und Navistar wollen Elektro-Lkw bauen

heise online Newsticker - 27. September 2017 - 18:00
Spätestens Anfang 2020 soll ein elektrisch angetriebener Lkw durch Nordamerika fahren, den Volkswagen und Navistar zusammen entwickeln wollen.

C++-Schöpfer Bjarne Stroustrup mit Faraday-Medaille ausgezeichnet

heise online Newsticker - 27. September 2017 - 17:30
Stroustrup reiht sich durch die Ehrung der britischen Institution of Engineering and Technology unter Größen wie "The Art of Computer Programming"-Autor Donald E. Knuth und MPEG-Gruppen-Gründer Leonardo Chiariglione ein.

Kontroverse um Piraterie-Studie der EU-Kommission

heise online Newsticker - 27. September 2017 - 17:30
Die von der EU-Kommission jahrelang nicht veröffentlichte Piraterie-Studie hat eine kontroverse internationale Debatte ausgelöst. Die Industrie und Aktivisten fühlen sich durch unterschiedliche Teile der Studie in ihren Überzeugungen bestätigt.

Zahlen, bitte! 1,6 Hektar für ein unabhängiges Ökosystem

heise online Newsticker - 27. September 2017 - 17:30
Zwei Jahre und sechs Bewohner auf sich allein gestellt: Was klingt, wie eine neue Staffel von "Big Brother" war eines der extremsten Umwelt-Experimente für die Forschung – mit einem Ausgang, anders als geplant.

DSAG-Jahreskongress 2017: SAP soll mehr Transparenz schaffen

heise online Newsticker - 27. September 2017 - 17:00
Die Deutschsprachige SAP-Anwendergruppe (DSAG) stellt auf ihrem Jahreskongress im Bremen die digitalen Transformation in den Mittelpunkt. Laut Umfrage muss SAP hier noch einige Aufgaben lösen.

Drupal blog: State of Drupal presentation (September 2017)

Planet Drupal - 27. September 2017 - 16:33

This blog has been re-posted with permission from Dries Buytaert's blog. Please leave your comments on the original post.

Yesterday, I shared my State of Drupal presentation at DrupalCon Vienna. In addition to sharing my slides, I wanted to provide some more detail on how Drupal is evolving, who Drupal is for, and what I believe we should focus on.

Drupal is growing and changing

I started my keynote by explaining that Drupal is growing. Over the past year, we've witnessed a rise in community engagement, which has strengthened Drupal 8 adoption.

This is supported by the 2017 Drupal Business Survey; after surveying 239 executives from Drupal agencies, we can see that Drupal 8 has become the defacto release for them and that most of the Drupal businesses report to be growing.

While the transition from Drupal 7 to Drupal 8 is not complete, Drupal 8's innovation continues to accelerate. We've seen the contributed modules ecosystem mature; in the past year, the number of stable modules has more than doubled. Additionally, there are over 4,000 modules in development.

In addition to growth, both the vendor and technology landscapes around Drupal are changing. In my keynote, I noted three primary shifts in the vendor landscape. Single blogs, portfolio sites and brochure sites, which represent the low end of the market, are best served by SaaS tools. On the other side of the spectrum, a majority of enterprise vendors are moving beyond content management into larger marketing suites. Finally, the headless CMS market segment is growing rapidly, with some vendors growing at a rate of 500% year over year.

There are also significant changes in the technology landscape surrounding Drupal, as a rising number of Drupal agencies have also started using modern JavaScript technologies. For example, more than 50% of Drupal agencies are also using Node.js to support the needs of their customers.

While evolving vendor and technology landscapes present many opportunities for Drupal, it can also introduce uncertainty. After listening to many people in the Drupal community, it's clear that all these market and technology trends, combined with the long development and adoption cycle of Drupal 8, has left some wondering what this all means for Drupal, and by extension also for them.

Drupal is no longer for simple sites

Over the past year, I've explained why I believe Drupal is for ambitious digital experiences, in both my DrupalCon Baltimore keynote and on my blog. However, I think it would be valuable to provide more detail on what I mean by "ambitious digital experiences". It's important that we all understand who Drupal is for, because it drives our strategy, which in turn allows us to focus our efforts.

Today, I believe that Drupal is no longer for simple sites. Instead, Drupal's sweetspot is sites or digital experiences that require a certain level of customization or flexibility — something I refer to as "richness".

Ambitious is much more than just enterprise

This distinction is important because I often find that the term "ambitious" becomes conflated with "enterprise". While I agree that Drupal is a great fit for the enterprise, I personally never loved that categorization. It's not just large organizations that use Drupal. Individuals, small startups, universities, museums and nonprofits can be equally ambitious in what they'd like to accomplish and Drupal can be an incredible solution for them.

An example of this could be a small business that manages 50 rental properties. While they don't have a lot of traffic (reach), they require integrations with an e-commerce system, a booking system, and a customer support tool to support their business. Their allotted budget is $50,000 or less. This company would not be considered an enterprise business; however, Drupal would be a great fit for this use case. In many ways, the "non-enterprise ambitious digital experiences" represent the majority of the Drupal ecosystem. As I made clear in my presentation, we don't want to leave those behind.

Addressing the needs of smaller organizations

The Drupal ecosystem majority are organizations with sites that require medium-to-high richness, which SaaS builders cannot support. However, they also don't need to scale at the level of enterprise companies. As the Drupal community continues to consider how we can best support this majority, a lot of smaller Drupal agencies and end-users have pointed out that they would benefit from the following two things:

  1. Powerful site building tools. They want easy-to-use site building tools that are simple to learn, and don't require dozens of contributed modules to be installed and configured. They would also prefer to avoid writing a lot of custom code because their clients have smaller budgets. Great examples of tools that would improve site building are Drupal's upcoming layout builder, workspaces and media library. To make some of Drupal's own administrative UIs more powerful and easier to use, I proposed that we add a modern JavaScript to core.
  2. Easier updates and maintenance. While each Drupal 8 site benefits from continuous innovation, it also needs to be updated more often. The new Drupal 8 release cycle has monthly patch releases and 6-month minor releases. In addition, organizations have to juggle ad-hoc updates from contributed modules. In addition, site updates has often become more complex because our dependency on third-party libraries and because not everyone can use Composer. Many smaller users and agencies would benefit tremendously from auto-updates because maintaining and updating their Drupal 8 sites can be too manual, too complex and too expensive.

The good news is that we have made progress in both improving site builder tools and simplifying updates and maintenance. Keep an eye on future blog posts about these topics. In the meantime, you can watch a recording of my keynote (starting at 22:10), or you can download a copy of my slides (56 MB).

State of Drupal keynote, DrupalCon Vienna from Dries Buytaert State of Drupal keynote, DrupalCon Vienna from Dries Buytaert

Arbeitsbedingungen von Videospiele-Sprechern: Höhere Bonuszahlungen, mehr Transparenz

heise online Newsticker - 27. September 2017 - 16:00
Bezüglich des Streiks gewerkschaftlich organisierter Sprecher von Videospielen ist ein Ende in Sicht: Höhere Bonuszahlungen und mehr Vorab-Informationen über die zu vertonenden Spiele sollen die Arbeitsbedingungen verbessern.

Nachhaltigkeit und Wiederverwertung: Pure Gold – Upcycled! Upgraded!

heise online Newsticker - 27. September 2017 - 16:00
Was tun mit den Müllbergen der Welt? Eine Hamburger Ausstellung stellt die Re- und Upcycling-Ansätze von ökologisch und ethisch nachhaltig agierenden Designerinnen und Designern vor.

Oracle stopft kritische Lücken in Apache Struts 2

heise online Newsticker - 27. September 2017 - 16:00
Mit einer Reihe von Updates patcht Oracle unter anderem eine bereits vor drei Wochen geschlossene kritische Sicherheitslücke in Produkten, die Apache Struts 2 verwenden.

WhatsApp: China blockiert Messenger vor KP-Parteitag

heise online Newsticker - 27. September 2017 - 16:00
In China wird der Messengerdienst WhatsApp nun weitestgehend blockiert und Nachrichten erreichen nur noch ausnahmsweise ihr Ziel. Die Behörden verstärken damit weiter ihre Kontrolle, Nutzer werden wohl zu überwachbaren Alternativen gedrängt.

Volocopter: Lufttaxi hebt erstmals in Dubai ab

heise online Newsticker - 27. September 2017 - 16:00
Die Drohne der deutschen Firma Volocopter flog am Montag erstmals im urbanen Raum und war acht Minuten in der Luft. Allerdings erst einmal noch ohne Passagiere.