Apache Webserver: "Optionsbleed"-Bug legt Speicherinhalte offen

heise online Newsticker - 21. September 2017 - 7:30
Bestimmte Konfigurationen in der .htaccess-Datei können dazu führen, dass Apache-Server als Antwort auf OPTIONS-Anfragen vertrauliche Daten preisgeben. Ein Patch steht bereit.

PC-Wahl: CCC demonstriert erneut einen Angriff und bietet Open-Source-Hilfe

heise online Newsticker - 21. September 2017 - 7:30
Mit einem demonstrativen Hack macht der CCC auf ein erneutes Sicherheitsproblem der bereits mehrfach nachgebesserten Wahl-Software aufmerksam. Eine Open-Source-Spende soll PC-Wahl jetzt zu einer sicheren Update-Funktion verhelfen.

Fachkräftemangel: Weiter steigender Bedarf an IT-Fachkräften

heise online Newsticker - 21. September 2017 - 7:00
20 Prozent mehr Stellen für IT-Profis waren in den 12 Monaten bis August 2017 ausgeschrieben als im gleichen Zeitraum ein Jahr zuvor, analysiert der Personaldienstleister Adecco - was die Diskussion um Fachkräftemangel weiter anheizen dürfte.

Oracles neuer 32-Kern-Prozessor SPARC M8 mit mehr Performance

heise online Newsticker - 21. September 2017 - 7:00
Mit dem M8 stellt Oracle die neue Generation seiner SPARC-Prozessoren vor. Besonders die hauseigene Oracle DB und Java sollen von den Neuerungen profitieren.

Intels Prozessor-Wirrwarr: Kaby-Lake-CPUs laufen nicht auf Z370-Boards

heise online Newsticker - 21. September 2017 - 6:00
Kaby-Lake-Prozessoren laufen nicht auf Z370-Mainboards, wie aus dem Bericht einer holländischen Website hervorgeht.

Lullabot: Lullabots Coming to DrupalCon Vienna

Planet Drupal - 21. September 2017 - 5:06

Several of our Lullabots and the team from our sister company, Drupalize.me, are about to descend upon the City of Music to present seven kick-ass sessions to the Drupal community in the EU. There will be a cornucopia of topics presented — from softer human-centric topics such as imposter syndrome to more technical topics such as Decoupled Drupal. So, if you're headed to DrupalCon Vienna next week, be sure to eat plenty of Sachertorte, drink lots of Ottakringer, and check out these sessions that will Rock You Like Amadeus:

Contenta - Drupal’s API Distribution Tuesday, September 26, 10:45-11:45

Sally Young, Cristina Chumillas, and Daniel Wehner

Contenta is a decoupled Drupal distribution that has many examples of various front-ends available as best practices guides. Lullabot Senior Technical Architect Sally Young, Christina Chumillas, and Daniel Wehner will bring you up to speed on the latest Contenta developments, including its current features and roadmap. You will also get a tour of Contenta’s possibilities that come with reference applications that implement the out-of-the-box initiative’s cooking recipe.

Automated Testing 101 Tuesday, September 26th, 10:45 - 11:45

Ezequiel “Zequi” Vázquez

Lullabot Developer, Ezequiel “Zequi” Vázquez, will explore the current state of test automation and present the most useful tools that provide testing capabilities for security, accessibility, performance, scaling, and more. Zequi will also give you advice on the best strategies to implement automated testing for your application, and how to cover relevant aspects of your software.

Get Started with Voice User Interfaces Tuesday, September 26th, 15:45pm - 16:45pm Amber Himes Matz

Drupalize.me Production Manager & Trainer, Amber Himes Matz, will survey the current state of voice and conversational interface APIs with an eye toward global language support. She’ll cover services including Alexa, Google, and Cortana by examining their distinct features and the devices, platforms, interactions, and spoken languages they support. If you’re looking for a better understanding of the voice and conversational interface services landscape, ideas on how to approach the voice UI design process, an understanding of concepts and terminology related to voice interaction, and ways to get started, this is the right session for you - complete with a demo!

Breaking the Myths of the Rockstar Developer Wednesday, September 27th, 10:45 - 11:45

Juan Olalla Olmo & Salvador Molina

Lullabot Developer, Juan Olalla Olmo, and Salvador Molina will share their experiences and explore the areas and attitudes that can help everyone become better professionals by embracing who they are and ultimately empower others to do the same. This inspiring session aims to help you grow professionally and provide more value at work by focusing on fostering the human relationships and growing as people.

Juan gave this presentation internally at Lullabot’s recent Design and Development Retreat. It was a highlight that sparked a lively conversation.

Virtual Reality on the Web - Overview and "How-to" Demo Wednesday, September 27th, 13:35 - 14:00

Wes Ruvalcaba

Want to make your own virtual reality experiences? Lullabot Senior Front-end Developer Wes Ruvalcaba will show you how. Starting with an overview of VR (and AR) concepts, technologies, and what its uses are, Wes will also demo and share code examples of VR websites we’ve made at Lullabot. You’ll also get an intro to A-Frame and Wes will explain how you can get started.

Thursday Keynote - Everyone Has Something to Share Thursday, September 28th, 9:00 - 10:15

Joe Shindelar

We’re especially proud of Drupalize.me's Joe Shindelar for being selected to give the Community Keynote. If you’ve been around Drupal for a while, it’s likely you’ve either met or learned from Joe. In this session, Joe will reflect on 10 years of both successfully and unsuccessfully engaging with the community. By doing so he hopes to help others learn about what they have to share, and the benefits of doing so. This is important because sharing:

  • Creates diversity, both of thought and culture
  • Builds people up, helps them realize their potential, and enriches our community
  • Fosters connections, and makes you, as an individual, smarter
  • Creates opportunities for yourself and others
  • Feels all warm and fuzzy
Making Content Editors Happy in Drupal 8 with Entity Browser Thursday, September 28th, 14:15 - 15:15

Marcos Cano

Lullabot Developer Marcos Cano will be presenting on Entity Browser, which is a Drupal 8 contrib module created to upload multiple images/files at once, select and re-use an image/file already present on the server, and more. In this session Marcos will:

  • Explain the basic architecture of the module, and how to take advantage of its plugin-based approach to extend and customize it
  • See how to configure it from scratch to solve different use-cases, including some pitfalls that often occur in that process
  • Check what we can copy or re-use from other contrib modules
  • Explore some possible integrations with other parts of the media ecosystem

See you next week in Wien!

Agiledrop.com Blog: AGILEDROP: DrupalCon Vienna sessions you don't want to miss

Planet Drupal - 21. September 2017 - 1:25
There will be a lot of sessions on DrupalCon Vienna. That's nothing new to be fair. DrupalCons are the biggest Drupal events, so you don't catch all the sessions you want. Therefore, we have made a short list of the sessions you don't want to miss. We hope it will help you. But before looking at it, it's fair to say that the Business sessions were excluded because we have already presented them on the other occasion. Moreover, our commercial director Iztok Smolic was directly involved in selecting them, so if we pointed out any session from the business track, you may have argued about the… READ MORE

Bay Area Drupal Camp: 10 Things to Make Your BADCamp ROCK!

Planet Drupal - 21. September 2017 - 1:24
10 Things to Make Your BADCamp ROCK! Anne Wed, 09/20/2017 - 4:24pm

Here’s a list of the 10 important tips and tricks to help make your sure you have a magical BADCamp experience.

BADCamp is sure to be a great event. Tickets are FREE. Register today!

1. Wear Good, Comfortable Shoes

If you want to have a great time the whole time you’re at BADCamp, we STRONGLY recommend wearing shoes that are comfortable but give you lots of support. You don’t want to miss out on all the fun stuff we have planned because you have to take a break to rest your poor tootsies. Don’t wear brand new shoes either and you might want to also get insoles.

2. Dress in Layers

October in Berkeley is beautiful, but let’s face it, room temperatures are unpredictable. For this reason, bring a hoodie (or donate to get a special edition 2017 BADCamp hoodie) that you can throw on and/or take off as the climate requires. The historical average for that time of year is in the mid 70’s (about 22 – 25 Celsius).

3. Plan Your Schedule

Are you coming to learn specific skills? Check out the training classes, summits and sessions available and create your own schedule.

Do you want to find a new employer? Check out the job board and sponsors expo to meet awesome Drupal shops

Who do you want to meet with while you are at BADCamp? A famous podcaster or module maintainer? Find out who is coming on the attendee list and reach out to connect. Magical moments are frequent at BADCamp

4. Bring a Laptop

If you want to get the most out of your BADCamp experience, be sure to bring a laptop. You will want to follow along and try some of the cool things the presenters show you. Bring a notepad too. Sometimes getting to an outlet to charge your laptop can be tricky. So that you don’t forget something important while your laptop charges, bring a notebook or notepad and a pen and take some notes.

5. Bring a Water Bottle/Travel Mug

There will be water fountains and FREE coffee/tea. Bringing a refillable water bottle means that you can stay focused on what you’re doing longer and get the most out of the sessions you're attending. Not to mention, using a water bottle instead of buying bottles of water is far better for the environment.

6. Bring Chargers for ALL your Devices and a Mobile Charger

There’s nothing worse than being out and about with a dead phone/tablet/laptop. Bring chargers for all of the devices you intend to use at BADCamp. If you use a battery-operated mouse (or wireless remote for presenting), bringing an extra set of batteries couldn’t hurt either. Even if you don’t end up needing them, you could find yourself with a new friend when you share those extra batteries with someone in need.

7. Bring Business Cards

Make it easy to connect! You will meet lots of great people and some of them you will want to keep in touch with. Get in the habit of giving out a card when you meet someone.

8. Condense your Stuff

You will walk around campus, so a lighter load is ideal. Plus you will want room for SWAG!  Condense your backpack down. Pro Tip: Get a small tote or even a Ziploc bag to stick all of your conference swag in. That way all of the stickers and little bits and pieces are in one bag that you can stick in your luggage at the end of the conference.

9. Bring a Pair of Headphones

As much as we all want to be able to unplug from our jobs and just focus on the sessions, it’s not always possible. Sometimes you have to put your nose to the grindstone and get some work done. If you’re the type that needs to listen to some music while you work, bring along a pair of earbuds so that you can focus and not disturb others around you.

10. Bring a Friend

While not required, having a friend tag along with you can make for a memorable BADCamp experience. If you’re like me and you’re road tripping to BADCamp, think of all of the awesome photos, sing-a-longs, and weird roadside attractions that you’ll see and get to enjoy together. If you’re flying, it’s always nice to have a travel buddy to keep you company while you’re waiting at the airport during the inevitable layover.

Pro Tip: Don’t use your buddy as a reason to shut out others. Go in with an open mind and you’re sure to find another new friend (or friends!) to share the experience with.

BADCamp is sure to be a great event. Tickets are FREE. Register today!

Drupal Planet

Lullabot: Lullabots Coming to DrupalCon Vienna

Planet Drupal - 21. September 2017 - 0:55

Several of our Lullabots and the team from our sister company, Drupalize.me, are about to descend upon the City of Music to present seven kick-ass sessions to the Drupal community in the EU. There will be a cornucopia of topics presented — from softer human-centric topics such as imposter syndrome to more technical topics such as Decoupled Drupal. So, if you're headed to DrupalCon Vienna next week, be sure to eat plenty of Sachertorte, drink lots of Ottakringer, and check out these sessions that will Rock You Like Amadeus:

Contenta - Drupal’s API Distribution Tuesday, September 26, 10:45-11:45

Sally Young, Cristina Chumillas, and Daniel Wehner

Contenta is a decoupled Drupal distribution that has many examples of various front-ends available as best practices guides. Lullabot Senior Technical Architect Sally Young, Christina Chumillas, and Daniel Wehner will bring you up to speed on the latest Contenta developments, including its current features and roadmap. You will also get a tour of Contenta’s possibilities that come with reference applications that implement the out-of-the-box initiative’s cooking recipe.

Automated Testing 101 Tuesday, September 26th, 10:45 - 11:45

Ezequiel “Zequi” Vázquez

Lullabot Developer, Ezequiel “Zequi” Vázquez, will explore the current state of test automation and present the most useful tools that provide testing capabilities for security, accessibility, performance, scaling, and more. Zequi will also give you advice on the best strategies to implement automated testing for your application, and how to cover relevant aspects of your software.

Get Started with Voice User Interfaces Tuesday, September 26th, 15:45 - 16:45

Amber Himes Matz

Drupalize.me Production Manager & Trainer, Amber Himes Matz, will survey the current state of voice and conversational interface APIs with an eye toward global language support. She’ll cover services including Alexa, Google, and Cortana by examining their distinct features and the devices, platforms, interactions, and spoken languages they support. If you’re looking for a better understanding of the voice and conversational interface services landscape, ideas on how to approach the voice UI design process, an understanding of concepts and terminology related to voice interaction, and ways to get started, this is the right session for you - complete with a demo!

Breaking the Myths of the Rockstar Developer Wednesday, September 27th, 10:45 - 11:45

Juan Olalla Olmo & Salvador Molina

Lullabot Developer, Juan Olalla Olmo, and Salvador Molina will share their experiences and explore the areas and attitudes that can help everyone become better professionals by embracing who they are and ultimately empower others to do the same. This inspiring session aims to help you grow professionally and provide more value at work by focusing on fostering the human relationships and growing as people.

Juan gave this presentation internally at Lullabot’s recent Design and Development Retreat. It was a highlight that sparked a lively conversation.

Virtual Reality on the Web - Overview and "How-to" Demo Wednesday, September 27th, 13:35 - 14:00

Wes Ruvalcaba

Want to make your own virtual reality experiences? Lullabot Senior Front-end Developer Wes Ruvalcaba will show you how. Starting with an overview of VR (and AR) concepts, technologies, and what its uses are, Wes will also demo and share code examples of VR websites we’ve made at Lullabot. You’ll also get an intro to A-Frame and Wes will explain how you can get started.

Thursday Keynote - Everyone Has Something to Share Thursday, September 28th, 9:00 - 10:15

Joe Shindelar

We’re especially proud of Drupalize.me's Joe Shindelar for being selected to give the Community Keynote. If you’ve been around Drupal for a while, it’s likely you’ve either met or learned from Joe. In this session, Joe will reflect on 10 years of both successfully and unsuccessfully engaging with the community. By doing so he hopes to help others learn about what they have to share, and the benefits of doing so. This is important because sharing:

  • Creates diversity, both of thought and culture
  • Builds people up, helps them realize their potential, and enriches our community
  • Fosters connections, and makes you, as an individual, smarter
  • Creates opportunities for yourself and others
  • Feels all warm and fuzzy
Making Content Editors Happy in Drupal 8 with Entity Browser Thursday, September 28th, 14:15 - 15:15

Marcos Cano

Lullabot Developer Marcos Cano will be presenting on Entity Browser, which is a Drupal 8 contrib module created to upload multiple images/files at once, select and re-use an image/file already present on the server, and more. In this session Marcos will:

  • Explain the basic architecture of the module, and how to take advantage of its plugin-based approach to extend and customize it
  • See how to configure it from scratch to solve different use-cases, including some pitfalls that often occur in that process
  • Check what we can copy or re-use from other contrib modules
  • Explore some possible integrations with other parts of the media ecosystem

See you next week in Wien!

Mediacurrent: The Race for Mobile Traffic: Facebook Instant Articles, AMP, Apple News, and the Responsive Web

Planet Drupal - 20. September 2017 - 21:05

If you haven’t heard, Facebook’s often-criticized Instant Articles service recently received an update to support publishing to Accelerated Mobile Pages (AMP for brevity) and Apple News (still not supported as of the publishing of this article) all at once. At first glance this seems like big news—Facebook is one of the big three mobile content delivery platforms—this will obviously push some traffic to its competitors’ services.

myDropWizard.com: Agencies: How to Turn Micro-Tracking Off and Profit-Making On!

Planet Drupal - 20. September 2017 - 20:44

All businesses have to track their income and expenses. That's the most fundamental axiom of business. We've all learned to think about this in terms of time or "billable hours" After-all, we track our success based on how many billable hours we either get paid or "save".

Is that working for you perfectly?

WTH is "Micro-Tracking" and Why is it Terrible?

I define "micro-tracking" as the "micro-managing of time and resources". We see a few things wrong with "micro-tracking" - specifically for support - but possibly other business expenses.

Do you bill clients by the minute? Even the hour?

It's almost always a terrible idea to watch the clock for support!

Below I'll attempt to outline a few of the downsides...

iOS 11 und macOS 10.13: Apple zwingt zu neuem Authentifizierungsverfahren

heise online Newsticker - 20. September 2017 - 19:00
Wer bislang Apples "zweistufige Bestätigung" zur Absicherung seiner Apple-ID verwendet hat, wird bei der Aktualisierung auf die Zwei-Faktor-Authentifizierung umgestellt. Das hat nicht nur Vorteile.

iX Live-Webinar: iOS 11 im Unternehmen – effizient und sicher einsetzen

heise online Newsticker - 20. September 2017 - 18:30
Das ca. 60-minütige Webinar richtet sich an Mobility-, System- und Security-Verantwortliche im Unternehmen, die sich mit der Integration und Verwaltung von iOS-Geräten auseinandersetzen müssen.

Photoshop statt Rechtsstreit: Mit gefälschten Gerichtsdokumenten gegen Online-Kritik

heise online Newsticker - 20. September 2017 - 17:30
Ein Edelsteinhändler aus New York hat sich schuldig bekannt, ein Gerichtsdokument gefälscht zu haben, um negative Bewertungen aus Googles Suchergebnissen löschen zu lassen. Intern hatte er geprahlt, wie viel er durch die Urkundenfälschung sparte.

Protest gegen DRM im Browser: EFF verabschiedet sich vom W3C

heise online Newsticker - 20. September 2017 - 17:30
Nach der Verabschiedung des EME-Standards für Kopierschutz im Browser verlässt die Electronic Frontier Foundation das W3C. In einem offenen Brief erklärt die Organisation ihre Gründe.

Gmail wandelt Kontaktdaten in Links um

heise online Newsticker - 20. September 2017 - 17:00
Das war längst überfällig: Die Gmail-App erkennt endlich Kontaktinformationen und wandelt sie in Links um. Tippt man eine Adresse an, öffnet sich automatisch Google Maps.

Dries Buytaert: Announcing Node.js on Acquia Cloud

Planet Drupal - 20. September 2017 - 16:48

Today, Acquia announced that it expanded Acquia Cloud to support Node.js, the popular open-source JavaScript runtime. This is a big milestone for Acquia as it is the first time we have extended our cloud beyond Drupal. I wanted to take some time to explain the evolution of Acquia's open-source stack and why this shift is important for our customers' success.

From client-side JavaScript to server-side JavaScript

JavaScript was created at Netscape in 1995, when Brendan Eich wrote the first version of JavaScript in just 10 days. It took around 10 years for JavaScript to reach enterprise maturity, however. Adoption accelerated in 2004 when Google used JavaScript to build the first release of Gmail. In comparison to e-mail competitors like Yahoo! Mail and Hotmail, Gmail showed what was possible with client-side JavaScript, which enables developers to update pages dynamically and reduces full-page refreshes and round trips to the server. The benefit is an improved user experience that is usually faster, more dynamic in its behavior, and generally more application-like.

In 2009, Google invented the V8 JavaScript engine, which was embedded into its Chrome browser to make both Gmail and Google Maps faster. Ryan Dahl used the V8 run-time as the foundation of Node.js, which enabled server-side JavaScript, breaking the language out of the boundaries of the browser. Node.js is event-driven and provides asynchronous, non-blocking I/O — things that help developers build modern web applications, especially those with real-time capabilities and streamed data. It ushered in the era of isomorphic applications, which means that JavaScript applications can now share code between the client side and server side. The introduction of Node.js has spurred a JavaScript renaissance and contributed to the popularity of JavaScript frameworks such as AngularJS, Ember and React.

Acquia's investment in Headless Drupal

In the web development world, few trends are spreading more rapidly than decoupled architectures using JavaScript frameworks and headless CMS. Decoupled architectures are gaining prominence because architects are looking to take advantage of other front-end technologies, most commonly JavaScript based front ends, in addition to those native to Drupal.

Acquia has been investing in the development of headless Drupal for nearly five years, when we began contributing to the addition of web service APIs to Drupal core. A year ago, we released Waterwheel, an ecosystem of software development kits (SDKs) that enables developers to build Drupal-backed applications in JavaScript and Swift, without needing extensive Drupal expertise. This summer, we released Reservoir, a Drupal distribution for decoupled Drupal. Over the past year, Acquia has helped to support a variety of headless architectures, with and without Node.js. While not always required, Node.js is often used alongside of a headless Drupal application to provide server-side rendering of JavaScript applications or real-time capabilities.

Managed Node.js on Acquia Cloud

Previously, if an organization wanted to build a decoupled architecture with Node.js, it was not able to host the Node.js application on Acquia Cloud. This means that the organization would have to run Node.js with a separate vendor. In many instances, this requires organizations to monitor, troubleshoot and patch the infrastructure supporting the Node.js application of their own accord. Separating the management of the Node.js application and Drupal back end not only introduces a variety of complexities, including security risk and governance challenges, but it also creates operational strain. Organizations must rely on two vendors, two support teams, and multiple contacts to build decoupled applications using Drupal and Node.js.

To eliminate this inefficiency, Acquia Cloud can now support both Drupal and Node.js. Our goal is to offer the best platform for developing and running Drupal and Node.js applications. This means that organizations only need to rely on one vendor and one cloud infrastructure when using Drupal and Node.js. Customers can access Drupal and Node.js environments from a single user interface, in addition to tools that enable continuous delivery, continuous integration, monitoring, alerting and support across both Drupal and Node.js.

On Acquia Cloud, customers can access Drupal and Node.js environments from a single user interface. Delivering on Acquia's mission

When reflecting on Acquia's first decade this past summer, I shared that one of the original corporate values our small team dreamed up was to "empower everyone to rapidly assemble killer websites". After ten years, we've evolved our mission to "build the universal platform for the world's greatest digital experiences". While our focus has expanded as we've grown, Acquia's enduring aim is to provide our customers with the best tools available. Adding Node.js to Acquia Cloud is a natural evolution of our mission.

McAfee: Avril Lavigne ist derzeit der "gefährlichste Promi" im Netz

heise online Newsticker - 20. September 2017 - 16:30
Die Suche nach Prominenten im Internet kann gefährlich werden – besonders dann, wenn die Suchenden auch noch kostenlose mp3 finden wollen. Die McAfee-Top-Ten der gefährlichsten Promis in der Suchmaske setzt sich momentan nur aus Musikern zusammen.

Hip Hop Virtual Machine verabschiedet sich schrittweise von PHP

heise online Newsticker - 20. September 2017 - 16:00
Facebooks virtuelle Maschine soll mittelfristig nur noch mit der hauseigenen PHP-Alternative Hack funktionieren. Dafür stärkt das Team jedoch anfangs die Kompatibilität zu PHP 7.