In partnership with

Good Morning! A judge has dismissed the majority of claims in a copyright lawsuit filed by developers against GitHub, Microsoft, and OpenAI. The lawsuit originally made 22 claims alleging copyright violations related to the AI-powered GitHub Copilot coding assistant, but the judge left only two claims standing: one accusing the companies of an open-source license violation and another alleging breach of contract.

— Forrest Knight & Meghanadh Vasireddy

Sony Dives into Web3 with Soneium Layer 2 and Developer Incubator

Context: Sony's been flirting with Web3 for a while now, from investing in Epic Games' metaverse plans to experimenting with NFTs. But this time, they're going all-in with their own blockchain infrastructure.

Sony Block Solutions Labs (Sony BSL) just dropped two big announcements:

1. Soneium Minato: A public testnet built on the OP Stack (yeah, the same tech behind Optimism). It's EVM-compatible, so all you Solidity devs out there can breathe easy.

2. Soneium Spark: An incubator program that's not messing around. We're talking up to $100k in funding per team, plus support from heavy hitters like Astar Network, Circle, and Chainlink.

Soneium is positioning itself as a scalable Layer 2 solution to tackle Ethereum's well-known issues with transaction speed and gas fees. By leveraging the OP Stack, they're aiming for that sweet spot of high throughput and low costs, all while keeping things EVM-compatible.

What's Next: Sony's casting a wide net, looking for projects in DeFi, NFTs, gaming, and social apps. They're clearly betting big on Web3 becoming mainstream, and with Sony's consumer reach, they might just pull it off.

Read More Here

Want SOC 2 compliance without the Security Theater?

Question 🤔 does your SOC 2 program feel like Security Theater? Just checking pointless boxes, not actually building security?

In an industry filled with security theater vendors, Oneleet is the only security-first compliance platform that provides an “all in one” solution for SOC 2.

We’ll build you a real-world Security Program, perform the Penetration Test, integrate with a 3rd Party Auditor, and provide the Compliance Software … all within one platform.

Schedule a demo for pricing

North Korean Hackers Target npm: A Wake-up Call for Devs

Remember the "Contagious Interview" shenanigans from earlier this year? Well, they're back with a vengeance. Phylum, our cybersecurity pals, spotted this new offensive kicking off on August 12th. It's not just a one-trick pony – we're talking multiple attack vectors here.

What's new: They are using obfuscated JavaScript to download extra malware goodies, including Python scripts and even a full interpreter. Their goal? Sniffing out crypto wallets and sensitive data on infected machines.

The attack flavors include the classic "Contagious Interview" style, fake job listings (because who doesn't love a side of social engineering?), and the "Moonstone Sleet" method for you vintage hack enthusiasts.

Now, I know we all love our open-source ecosystems, but this is a reminder that with great npm comes great responsibility. Keep your eyes peeled for sketchy packages like "temp-etherscan-api" or "sass-notification" – they're not bringing anything good to your code party.

Read More Here

Rally Goes On-Prem: Broadcom's Agile Platform Levels Up

Rally has been a go-to SaaS tool for agile planning and management. But some orgs need tighter control over their data and infrastructure

Rally Anywhere brings the full power of Rally in-house, offering:

• Enterprise-grade security for sensitive environments

• Data sovereignty to keep info within your borders (hello, compliance!)

• Global collaboration features for distributed teams

This move completes Broadcom's ValueOps VSM (Value Stream Management) solution, now available as both SaaS and on-prem. It's a big win for companies juggling agile practices with strict security and data residency requirements.

Bottom Line: If you're in a highly regulated industry or just prefer to keep your agile tools close, Rally Anywhere might be worth a look. It promises the same features you love about Rally, but with the control your IT team craves.

Read More Here

🔥 More Notes

• Using ChatGPT to reverse engineer minified JavaScript: The webpage describes the author's experience using ChatGPT to reverse engineer minified JavaScript code. The author came across an interesting-looking component with a "running ASCII art" effect and wanted to understand how it was implemented.

• One Of The Rust Linux Kernel Maintainers Steps Down - Cites "Nontechnical Nonsense": One of the several Rust for Linux kernel maintainers, Wedson Almeida Filho, has decided to step away from the project. The move is being driven at least in part due to having to deal with increased "nontechnical nonsense" raised around Rust programming language use within the Linux kernel.

📹 Youtube Spotlight

Everything You Need to Know about Git

Was this forwarded to you? Sign Up Here