Millions of developers and users are on alert as the popular code-sharing platform GitHub faces a large-scale attack. Security researchers at Apiiro have identified a concerning trend where malicious actors are targeting GitHub repositories, potentially compromising over 100,000 projects.

Massive Malware Campaign Targets Over 100,000 GitHub Repositories

The attack involves a technique called “malicious repository obfuscation” where attackers clone legitimate repositories, inject harmful code, and re-upload them to the platform. These tampered repositories can then be downloaded by unsuspecting users, potentially compromising their systems or infecting them with malware.

The report by Apiiro highlights several factors making GitHub vulnerable to such attacks. The platform’s ease of use, readily available APIs, and the presence of numerous hidden repositories create an ideal environment for attackers to launch “watering hole attacks.”

In these attacks, attackers target popular and frequently downloaded repositories. They inject malicious code into these repositories and then re-upload them. To further amplify their reach, attackers create numerous fake forks of the compromised repositories using automated methods. These fake forks can then be spread through social media, online forums, and other channels, tricking users into downloading the malicious versions.

The report acknowledges that GitHub has been notified and has taken down most of the identified malicious repositories. However, the activity is ongoing, with attackers constantly attempting to inject harmful code. This ongoing struggle resembles a game of whack-a-mole, where GitHub plays catch-up, removing malicious code after it has already been uploaded, potentially putting users at risk.

The report further reveals that this attack campaign began in May 2023 and has been steadily growing. This continuous activity raises concerns that even more repositories and users could be compromised in the future. Developers and users are advised to exercise caution when downloading code from GitHub, especially from unfamiliar repositories. It’s crucial to verify the source and legitimacy of the code before integrating it into projects.

RELATED:

• Microsoft teams with Intel on 18A process chip development
• Older CPUs or PCs may lose out on future Windows 11 updates
• Best of MWC 2024: AI Phone, Transparent Laptop, 3D Tablet & More
• Big Discount: AOOSTAR R1 N100 NAS Mini PC Only For $159
• Get latest Oneplus 12 Phone for $699 on Geekwills

(Source)

The post Microsoft’s popular code-sharing platform GitHub under attack, potentially affecting millions appeared first on Gizmochina.

In a recent survey conducted by GitHub, the leading online code hosting platform, the influence of artificial intelligence (AI) on developers’ work was analyzed. This study targeted American companies with over 1,000 employees, surveying 500 enterprise developers. The results, published by IT Home News on June 15th, highlight the significant role AI tools play in the programming community. The survey findings showed that an overwhelming 92% of programmers are actively utilizing various AI tools in their day-to-day tasks. Furthermore, a staggering 70% of respondents expressed that the integration of AI tools has notably enhanced their work efficiency.

AI boosts developer productivity, efficiency and a reduced number of errors

Programmers who participated in the survey praised AI tools for their ability to improve code quality, expedite output processes, and reduce the occurrence of production-level incidents. These advancements highlight the indispensability of AI programming tools in modern business IT operations.

Inbal Shani, the Chief Product Officer at GitHub, underscored the importance of empowering developers and increasing their productivity. Shani stated, “The way to innovate at scale is by increasing developer productivity, increasing their satisfaction, and empowering them to be their best every day.”

GitHub’s survey sheds light on the evolving landscape of software development, where AI tools have become an integral component. With the vast majority of programmers leveraging AI technology, it is evident that these tools have successfully established their value and potential within the industry. The adoption of AI tools has not only expedited the development process but has also contributed to heightened code quality, resulting in more reliable and efficient software solutions. The positive impact of AI on developers’ work showcases the symbiotic relationship between human ingenuity and technological advancements.

As the programming community continues to embrace AI tools, it is expected that further innovations will emerge, revolutionizing the way developers approach their work. With the vast potential of AI yet to be fully realized, it is an exciting time for the future of software development.

RELATED:

• US District Court Orders Github to Identify Suspect who Leaked Twitter Source Code
• Some Parts of Twitter’s Source Code were Reportedly Leaked on Github
• Top 4 Best Fancy Name Generator Tools for BGMI

(Via)

The post GitHub’s Latest Survey Reveals 92% of Programmers in the US use AI Tools appeared first on Gizmochina.

Quite recently, portions of Twitter’s source code were leaked online on Github. This incident has caused significant embarrassment for the company’s new owner. Court filings indicate that Twitter claimed copyright infringement and requested that the code be taken down from Github. The code was removed on the same day, but details regarding how long it had been available online were not disclosed. Twitter also requested the US District Court to order Github to reveal the identity of the user who posted the code and those who accessed and downloaded it. That request is now a subpoena: the US District Court for the Northern District of California has issued a subpoena to Github demanding that it identify GitHub user “FreeSpeech Enthusiast,” along with any “name(s), address(es), telephone number(s), email address(es), social media profile data, and IP address(es)” associated with the user.

A data leak of any sort is quite serious for an organization because it represents a failure to protect sensitive information and maintain the trust of stakeholders. Furthermore, Twitter being one of the most active social media platforms in the world, it becomes increasingly important to secure the credentials and data of tons of users. It highlights a lack of proper security protocols and can have serious consequences for the organization’s financial and reputational well-being. This step by Twitter will ensure that any future threats are at least subdued since taking absolutely no action in a source code leak such as this can solidify the company’s image in a bad light not only for stakeholders but also for its user base.

Sources within Twitter suspect that a disgruntled former employee may be behind the leak, and the company hopes that the information provided by Github will help them determine if the source code was posted by one of the thousands of workers laid off following Elon Musk’s acquisition of the company last year. The deadline to produce the data of the suspect is April 3.

RELATED:

• Twitter Unveils New Pricing Plans for its APIs
• Twitter will only allow verified accounts to vote on its polls: Elon Musk
• Best Ergonomic Mouse 2023: Logitech, Microsoft & More

(Via)

The post US District Court Orders Github to Identify Suspect who Leaked Twitter Source Code appeared first on Gizmochina.

In October 2021, Elon Musk acquired Twitter for $44 billion, causing significant excitement and speculation in the tech and business world. Musk is known for his innovative ideas and success with companies such as SpaceX and Tesla, and many were curious to see how he would lead the popular social media platform. While some were optimistic about Musk’s ability to inject new life into Twitter, others were concerned about the potential consequences of such a high-profile acquisition. Well, amongst all the rough tides Musk has faced since he took ownership of the company, this is another one that poses a long-term risk to Twitter.

According to recent reports published in the New York Times, portions of Twitter’s source code have been leaked online. This incident has caused significant embarrassment for the company’s new owner. Court filings indicate that Twitter claimed copyright infringement and requested that the code be taken down from Github. The code was removed on the same day, but details regarding how long it had been available online were not disclosed. Twitter also requested the US District Court to order Github to reveal the identity of the user who posted the code and those who accessed and downloaded it.

Sources within the company revealed that Twitter executives strongly suspect a disgruntled employee, who left within the past year, is responsible for the leak. Since Elon Musk’s acquisition of Twitter last October for $44 billion, the company has experienced a significant reduction in staff. Despite fears that Musk would lay off 75% of the workforce, 80% of the company’s staff have been let go.

The leaked code has raised concerns among Twitter executives that hackers may use the information to access user data or discover new vulnerabilities. This incident could also negatively impact Twitter’s reputation, with advertisers and users alike possibly choosing to abandon the platform.

RELATED:

• Twitter to Kill Legacy Verified Checkmarks Starting April 1st: A Shift Towards Paid Verification
• Twitter Users Can Now See How Many Users Bookmarked Their Tweets
• Best Keyboard for iMac 2023

(Via)

The post Some Parts of Twitter’s Source Code were Reportedly Leaked on Github appeared first on Gizmochina.

Microsoft GitHub has announced an upgrade to its widely-used coding assistance tool, Copilot. The new version, dubbed Copilot X, will incorporate OpenAI’s advanced language-generation tools, allowing developers to use chat and voice features for coding assistance. Here are the details…

Microsoft’s GitHub to add OpenAI chat functions to coding tool

Copilot was first previewed in 2021 and saw a wide release last year. The initial product featured a code completion tool that suggested snippets of programming code as developers typed. By November, hundreds of thousands of developers had adopted Copilot, making it a cornerstone of Microsoft’s strategy to deploy assistive technologies across its product range.

The recent success of OpenAI’s ChatGPT chatbot has inspired other companies to integrate OpenAI’s tools into their products and business strategies, while rivals like Alphabet’s Google are releasing competing chatbot technologies. The new Copilot X aims to enhance the developer experience by offering chat and voice functionality.

GitHub CEO Thomas Dohmke demonstrated the tool by asking it how to program a snake game in Python. The chat window can provide explanations of code segments, suggest ways to test the code, and propose fixes for bugs. Developers can also interact with Copilot X using their voice.

In addition to integrating chat and voice features, GitHub will start using OpenAI’s latest language model, GPT-4, in Copilot X. Different AI models will be employed for various tasks; for instance, code completion features will continue to use older technology that prioritizes speed over perfect accuracy, while the chat features will utilize the more accurate GPT-4.

Developers can join a wait-list to preview the new service, and Dohmke is optimistic that Copilot X could be a valuable tool for education. He is set to join a professor at Duke University who is already using Copilot in the classroom. Dohmke believes that Copilot can “revolutionize how we learn” by helping students overcome initial frustrations and quickly reach the same knowledge level as their peers.

RELATED:

• Best Keyboard for Gaming in 2023
• Microsoft may add Exclusive Call of Duty features for PS5 owners
• Huawei P60 Series Launched in China with 120Hz Display, 48MP Triple Cameras, & Satellite Messaging
• Microsoft introduces AI-powered Bing Image Creator, Visual Stories
• Nvidia unveils new AI Supercomputing Cloud Service

(via)

The post Microsoft’s GitHub Integrates OpenAI Chat Functions into Copilot X Coding Tool appeared first on Gizmochina.

After their initial release which saw some of the required Elephone P8000 Source Code released a few months ago, Elephone have today released the full Elephone P8000 Source Code required for devs to build their own roms, hopefully stable Marshmallow roms or properly ported existing roms such as Cyanogen CM12.1 etc to the P8000.

One thing that has let Elephone down a little in the past and not won them any favours has been the bugginess of their roms, often requiring fixes to the fixes to get things working as they should, now is the chance for these things to be put right and with hope make Elephone see how important a dev community could be to the success of their forthcoming handsets such as the Vowney and the P9000 and force their hand to release the code for these phones as well.

The Elephone P8000 Source Code can be found on github here

The P8000 can be purchased on lilited sale for just $153.99 here

To those of you that like to dabble with your phones or the more hardcore rom devs out there, I say let the fun begin and lets see what you can create.

Please leave any comments or questions below

Regards Shanos

The post Elephone P8000 Source Code appeared first on Gizmochina.