Articles for category: Software (Tech & Development)

March 14, 2025

ikayaniaamirshahzad@gmail.com

Visual Studio Devs Share Copilot AI Prompts to Improve Code — Visual Studio Magazine

News Visual Studio Devs Share Copilot AI Prompts to Improve Code Microsoft’s Mads Kristensen took to social media to ask Visual Studio developers to share their favorite prompts to get GitHub Copilot AI to improve their code. Kristensen, a principal product manager working on the Visual Studio team, is known for writing a huge amount of extensions for the Visual Studio IDE that introduce functionality that often gets baked into the IDE’s bits. He is a constant presence on social media to promote new extensions, features, functionality and in this case, ask developers for feedback or tips. He did that

March 14, 2025

ikayaniaamirshahzad@gmail.com

Keeping up with the latest fixes – Computerworld

Long before Taco Tuesday became part of the pop-culture vernacular, Tuesdays were synonymous with security — and for anyone in the tech world, they still are.  Patch Tuesday, as you most likely know, refers to the day each month when Microsoft releases security updates and patches for its software products — everything from Windows to Office to SQL Server, developer tools to browsers. The practice, which happens on the second Tuesday of the month, was initiated to streamline the patch distribution process and make it easier for users and IT system administrators to manage updates.  Like tacos, Patch Tuesday is

March 14, 2025

ikayaniaamirshahzad@gmail.com

Stupendous Python stunts without a net

Fastplotlib: Interactive plotting in Python powered by the GPUCreate snappy, live-updating graphs and plots that can run in a variety of contexts (Jupyter notebooks, PyQt-powered windows, and more). The current release is considered a late alpha, but you’re encouraged to give it a whirl outside production. A map of PythonA highly granular, interactive map of the package dependencies on PyPI, along with details about how to generate the same sort of interactive graph from a similarly sprawling data set. (Caution: Don’t try to plot everything!) An oral history of Bank PythonHow Python has been used, in proprietary forks, by various

March 14, 2025

ikayaniaamirshahzad@gmail.com

How to Exploit the EternalBlue Vulnerability on Windows – A Step-by-Step Guide

If you’ve followed cybersecurity news over the past few years, you’ve likely come across EternalBlue. This critical Windows exploit played a key role in the widespread WannaCry ransomware attack that affected systems in over 150 countries. In this article, we’ll walk through how EternalBlue works, how to scan for it, and how to exploit it using Metasploit. Note*: This is strictly for ethical hacking and penetration testing purposes on systems you own or have explicit permission to test. Do not use these tools on machines where you don’t have permission.* What Is EternalBlue? EternalBlue is a dangerous computer exploit developed

March 14, 2025

ikayaniaamirshahzad@gmail.com

When to Use and How to Avoid Pitfalls

Recently, I delivered a lecture to my colleagues on event sourcing, and I realized that this introductory information could be valuable to a broader audience. This article is useful for those interested in the concept of event sourcing and who want to decide if it’s a good fit for their projects while avoiding common pitfalls. So, let’s dive in. Event sourcing is an approach where, instead of storing the current state of the system, all changes are saved as events, which become the main data source. The approach gained popularity around 2005 after Martin Fowler’s article on the topic. The

March 14, 2025

ikayaniaamirshahzad@gmail.com

Mar 14, 2025: 10 AI updates from the past week – Google releases Gemma 3, OpenAI launches Responses API, Boomi AI Studio now available, and more

Software companies are constantly trying to add more and more AI features to their platforms, and AI companies are constantly releasing new models and features. It can be hard to keep up with it all, so we’ve written this roundup to share 10 notable updates around AI that software developers should know about. Google announces Gemma 3 Gemma 3 is Google’s latest AI model, offering improved math, reasoning, and chat capabilities. It can handle context windows of up to 128k tokens, understand 140 languages, and comes in four sizes: 1B, 4B, 12B, and 27B. It is a multimodal model, and

March 14, 2025

ikayaniaamirshahzad@gmail.com

The School Car Pickup Line Is a National Embarrassment

I teach a lot of international students about the US education system and our schools. Whenever they go into our schools for the first time, one of the things that always shocks them is the school car pickup traffic lines. These lines are ugly, annoying, dirty, and they have become a common mainstay in American schooling. Parents across the country must waste much of their mornings and afternoons in these lines. These lines are so pervasive that an entire subculture has sprung up around them. Mommy bloggers even swap book suggestions to help pass the time. Parents often hate having

March 14, 2025

ikayaniaamirshahzad@gmail.com

Entering AI Autumn: Why LLMs Are Nearing Their Limit 

There’s no question that AI is everywhere, with new use cases emerging almost daily, but the endless buzz obscures a far more complex reality. We are entering an AI paradox: although excitement for these new technologies has never been higher, large language models (LLMs) are hitting their limits and are only seeing marginal improvements. This has sparked debate among AI insiders as to whether these tools are “hitting a wall” or if such concerns are overblown. What’s clear is that, at this stage, simply training LLMs with more data will no longer yield breakthrough improvements. So, is AI winter upon

March 14, 2025

ikayaniaamirshahzad@gmail.com

What we learned at TDX 2025

Last week, we were on-site in San Francisco at Trailblazer DX, the developer conference of cloud colossus Salesforce. TDX 2025 was all about the future of AI agents and agentic AI’s potential to reimagine software development and the developer experience. If you’re new to the topic or could use a refresher, AI agents are AI systems that use machine learning (ML) and natural language processing (NPL) to understand and respond to users without human oversight or intervention. They are self-learning, capable of teaching themselves to improve. The promise of AI agents is that they free organizations to focus on the

March 14, 2025

ikayaniaamirshahzad@gmail.com

Sign in as anyone: Bypassing SAML SSO authentication with parser differentials

Critical authentication bypass vulnerabilities (CVE-2025-25291 + CVE-2025-25292) were discovered in ruby-saml up to version 1.17.0. Attackers who are in possession of a single valid signature that was created with the key used to validate SAML responses or assertions of the targeted organization can use it to construct SAML assertions themselves and are in turn able to log in as any user. In other words, it could be used for an account takeover attack. Users of ruby-saml should update to version 1.18.0. References to libraries making use of ruby-saml (such as omniauth-saml) need also be updated to a version that reference