# capture Published articles for capture. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Релиз рабочего окружения GNOME 51 A Coruña DevFeed: [Релиз рабочего окружения GNOME 51 A Coruña]() Original publisher: [Read original article]() Author: denis-19 Published: 2026-09-17T08:31:45Z Content type: news Language: ru Sources: [Tagir Valeev]() Topics: [input](), [Wayland](), [SVG](), [API]() Tags: [2026](), [background](), [capture](), [files](), [gnome](), [gnome-51](), [input](), [panel](), [settings](), [svg](), [tag-08a48a9394c3](), [tag-cb5ff012b3f0](), [wayland]() ### AI overview GNOME 51, codenamed A Coruña, was released on September 16, 2026. The release improves performance and settings, adds new GNOME Circle applications and elements, and introduces features including monitor brightness restoration, elogind support, a QR-code generation API, input capture portal support, improved screen recording, SVG-based cursors, and Wayland background effects. ### Source excerpt 16 сентября 2026 года состоялся релиз рабочего окружения GNOME 51 под кодовым названием A Coruña. В проекте оптимизирована производительность и настройки, добавлены новые элементы и приложения в GNOME Circle. Читать далее ## TRA:CE is a portable scanner concept for recording color, material, and surface finish DevFeed: [TRA:CE is a portable scanner concept for recording color, material, and surface finish]() Original publisher: [Read original article]() Author: JC Torres Published: 2026-09-16T13:20:57Z Content type: article Language: en Sources: [Yanko Design]() Topics: [color](), [Tool](), [dataset](), [App]() Tags: [capture](), [cmf](), [color](), [concept-designs](), [design](), [gadgets](), [gadgets-product-design-technology-cmf-concept-designs-scanner](), [product-design](), [scanner](), [technology]() ### AI overview The article presents TRA:CE, a pocket-sized CMF scanner concept that reads color, material, texture, and finish directly from surfaces. Scans are saved in a companion app with color values, reference matches, grain, pore size, and gloss information. ### Source excerpt Phone Photos of Materials Lie, This Scanner Reads the Surface Itself Every designer has a folder full of phone photos that were supposed to capture a specific shade of oak or a particular matte finish, and... ## Arcturus Vision Camera Adds Color Passthrough & 3D Video Capture To Steam Frame DevFeed: [Arcturus Vision Camera Adds Color Passthrough & 3D Video Capture To Steam Frame]() Original publisher: [Read original article]() Author: David Heaney Published: 2026-09-15T06:59:00Z Content type: news Language: en Sources: [UploadVR]() Topics: [3D]() Tags: [3d](), [camera](), [capture](), [experimental](), [headsets-tech](), [rgb](), [video](), [vision]() ### AI overview The $149 Arcturus Vision Camera adds color passthrough to Valve's Steam Frame headset through its PCI-E expansion port. It also captures tracked stereoscopic 3D video, with options for 6-megapixel-per-eye HDR recording at 60fps or lower-resolution recording at 120fps. ### Source excerpt The $149 Arcturus Vision Camera, weighing just 10 grams, adds 6 megapixel per eye color passthrough to Steam Frame and captures tracked 3D HDR video. ## One App, More Than One Native Window DevFeed: [One App, More Than One Native Window]() Original publisher: [Read original article]() Author: Shai Almog Published: 2026-08-28T00:00:00Z Content type: article Language: en Sources: [CodeName One]() Topics: [App](), [Windows](), [Linux](), [Java]() Tags: [app](), [capture](), [desktop](), [linux](), [monitor](), [native](), [screen](), [state](), [windows]() ### AI overview Codename One now supports multiple native desktop windows, each with its own component tree, focus owner, animation list, repaint region, native peers, and text editing. The main Form remains the application's primary surface, preserving existing mobile and single-window behavior. ### Source excerpt Codename One now supports multiple native desktop windows with independent component trees, paint surfaces, focus, modality, monitor geometry, and input routing while Form remains the application's main surface. ## Knowledge Lifecycle: Capture, Organize, and Archive Team Knowledge DevFeed: [Knowledge Lifecycle: Capture, Organize, and Archive Team Knowledge]() Original publisher: [Read original article]() Author: Luca Rossi Published: 2026-08-17T07:02:23Z Content type: article Language: en Sources: [Refactoring]() Topics: [context](), [save](), [Artificial Intelligence]() Tags: [archiving](), [capture](), [developers](), [knowledge-base](), [save]() ### AI overview This newsletter discusses whether AI is helping developers ship faster and introduces a three-step lifecycle for team knowledge: capture information quickly, organize it deliberately, and archive outdated material without deleting it. ### Source excerpt Monday Ideas -- Edition #221 ## 10,501 Radios in Seven Days: What a $69 Badge Heard at Summer Camp DevFeed: [10,501 Radios in Seven Days: What a $69 Badge Heard at Summer Camp]() Original publisher: [Read original article]() Author: jgamblin Published: 2026-08-10T13:07:44Z Content type: article Language: en Sources: [Jerry Gamblin]() Topics: [Bluetooth](), [MicroPython](), [Hardware](), [Claude](), [Networks]() Tags: [black-hat](), [bluetooth](), [bsides](), [capture](), [claude](), [devices](), [hardware](), [micropython](), [networks](), [open](), [uncategorized]() ### AI overview A seven-day passive listening project using a Pimoroni Tufty 2350 examined WiFi and Bluetooth activity at BSides, Black Hat, and DEF CON. The article reports 4,653 access points and 5,848 Bluetooth devices, including 673 open networks and a beacon flooder that advertised 77 fake networks. It also explains why rotating addresses can inflate device counts and documents important limitations, including 2.4 GHz-only WiFi coverage. ### Source excerpt Seven days of passive listening at BSides, Black Hat and DEF CON: 673 open networks, one beacon flooder, and what it takes to count devices honestly. I have wanted to build one of these for a long time. A little screen on my bag that tells me what the air around me is actually made ... Read more ## Inside the Git Hooks: Tagging Every AI Agent Commit (Part 3) DevFeed: [Inside the Git Hooks: Tagging Every AI Agent Commit (Part 3)]() Original publisher: [Read original article]() Author: Eugene Petrenko Published: 2026-06-26T00:00:00Z Content type: tutorial Language: en Sources: [Eugene Petrenko]() Topics: [Git](), [hooks](), [AI Agent](), [observability](), [Security]() Tags: [ai-agent](), [ai-agents](), [ai-coding](), [capture](), [commit](), [eugene-petrenko](), [git](), [git-hooks](), [infrastructure](), [jonnyzzz](), [provenance](), [repo](), [sandbox](), [tag-41199d53f463](), [workflow]() ### AI overview This third-part tutorial explains a best-effort Git hook layer for AI agents running inside a sandbox. The hooks stamp session IDs on commits, preserve the tags through amend, rebase, and squash, and capture restorable copies of pushed changes while continuing to run repository-local hooks. ### Source excerpt Part 3 -- the build for the lighter solution. How a set of git hooks stamps a session id on every commit an AI Agent makes, survives squash and rebase, and captures each push -- all best-effort, all inside the sandbox. ## iPhone Screenshots on Linux, on a Stream Deck Button DevFeed: [iPhone Screenshots on Linux, on a Stream Deck Button]() Original publisher: [Read original article]() Author: Ivan Morgillo Published: 2026-06-22T09:30:00Z Content type: tutorial Language: en Sources: [Ivan Morgillo]() Topics: [iphone](), [iOS](), [Linux](), [systemd]() Tags: [capture](), [command](), [ios](), [iphone](), [linux](), [root](), [screenshots](), [stream](), [systemd]() ### AI overview A tutorial on capturing iPhone screenshots directly to the Linux clipboard with a Stream Deck button. On iOS 17 and later, it uses pymobiledevice3, Developer Mode, a mounted Developer Disk Image, and a root-run systemd tunnel service instead of the classic idevicescreenshot workflow. ### Source excerpt How I screenshot my iPhone straight to the Linux clipboard with one Stream Deck button -- iOS 17+ needs pymobiledevice3 and a root tunnel, not the classic idevicescreenshot. No Mac required. ## MetaStealer traffic, new DGAs and analyzing the "tracker" backdoor DGA with AI DevFeed: [MetaStealer traffic, new DGAs and analyzing the "tracker" backdoor DGA with AI]() Original publisher: [Read original article]() Author: Jason Reaves Published: 2026-06-17T21:54:01Z Content type: article Language: en Sources: [Walmart Global Tech]() Topics: [Malware](), [backdoor](), [payload](), [Python](), [Claude](), [Artificial Intelligence]() Tags: [ai](), [backdoor](), [capture](), [claude](), [claude-ai](), [infosec](), [ip](), [malware](), [payload](), [port](), [python](), [reverse-engineering]() ### AI overview The article examines new MetaStealer domain-generation algorithms and explains that its gate servers rely more on IP addresses, ports, URIs, and HTTP headers than on domains. It also analyzes RuntimeSync, a developing malware sample with RAT and backdoor capabilities, and describes using Claude.ai Sonnet 4.6 to reverse engineer its DGA and produce Python simulation code. ### Source excerpt By: Jason Reaves and Joshua Platt In this blog we simply want to highlight a few new additions to what appears to be related to MetaStealer, one is a new wordlist based DGA used by MetaStealer. We also want to highlight that MetaStealer's proxies or 'gates' don't actually care what domain gets used as it's just a config item; they simply pass on the traffic to another server. We also want to highlight a task that was seen delivered to a few bots which is related to MetaStealer but appears to still be in development. This turned out to be a piece of malware that contains RAT/backdoor functionality. Leveraging Claude.ai Sonnet 4.6 we were able to systematically guide the AI to automatically reverse engineer the DGA used in the backdoor malware and provide working python code to simulate it. MetaStealer DGA: As previously mentioned MetaStealers new DGA is based on a wordlist. Below are some recent examples: sea-vast-send.com 46bbaceb6073f196bf7737c67f5394a6465e396bbcbbac1afe5f2f866c995fd0hxxp://pestrear-lamp.xyz:443 d57e132866286f9b4227c7fb1cd77f16a461e76a3f3e71362734741aab6b9a96hxxp://anus-staylard.xyz:443 d1b88ded80f0e616362b8984334c69da1ea2f32d0828480e32978d1a710f40c5 This does not mean, however, that the older DGA is no longer in use; it remains active. The threat actor (TA) has designed their gate servers in such a way that they are largely agnostic to the domain being used. Instead, the IP address, port, URI, and HTTP headers are the more important factors. 155.117.20.75 qocyeicmusmegouw.xyz 213.139.77.254 uumcceymkuymmqou.xyz We didn't focus on this DGA though because during our investigation we stumbled on a piece of malware being actively developed by the same TA that also had a DGA. Backdoor "tracker" During the investigation, we observed a peculiar payload being delivered to several machines: an installer named RuntimeSync, example hash: 82c218357266ce314f523946bdd661cc335a120981c471e95d70af7fbd4d9141 RuntimeSyncExe: PE32+ executable (GUI) x86-64, for MS Win ## Khronos Launches Initiative to Extend glTF for Volumetric Media DevFeed: [Khronos Launches Initiative to Extend glTF for Volumetric Media]() Original publisher: [Read original article]() Author: jphilips (jeff@khronosgroup.org) Published: 2026-06-15T13:00:00Z Content type: news Language: en Sources: [Blogs Khronos Blog]() Topics: [3D](), [interoperability]() Tags: [3d](), [api](), [blog-gltf-volumetri](), [capture](), [extend](), [gltf](), [media](), [playback](), [standard](), [standards](), [streaming]() ### AI overview Khronos has established a Volumetric Media Subgroup within its 3D Formats working group to extend glTF for interoperability across volumetric capture, data formats, and content playback. The initiative invites organizations to help define the new capabilities. ### Source excerpt Any interested organizations are invited to join Khronos to help define new glTF capabilities to enable interoperable volumetric capture, streaming and playback ## Building a cooking assistant with Firebase AI Logic DevFeed: [Building a cooking assistant with Firebase AI Logic]() Original publisher: [Read original article]() Author: Marina Coelho Published: 2026-05-29T00:00:00Z Content type: tutorial Language: en Sources: [Firebase Blog]() Topics: [Firebase](), [Artificial Intelligence](), [Android](), [SDKs](), [Mobile](), [WebSocket]() Tags: [ai](), [ai-logic](), [android](), [api](), [app](), [app-check](), [authentication](), [build](), [building](), [camera](), [capture](), [firebase](), [function-calling](), [gemini](), [google](), [how-to](), [kotlin](), [mobile](), [permission](), [remote-config](), [sdks](), [streaming]() ### AI overview A tutorial on building a real-time cooking assistant for the Friendly Meals Android app with Firebase AI Logic, Gemini Live, bidirectional video streaming, and client-side function calling. It covers secure connections, authentication and App Check, camera and microphone permissions, and actions such as updating a grocery list. ### Source excerpt News, tutorials, and updates from the Firebase team. ## Reverse-engineering a neural network puzzle with mechanistic interpretability DevFeed: [Reverse-engineering a neural network puzzle with mechanistic interpretability]() Original publisher: [Read original article]() Author: Ricson Cheng Published: 2026-02-24T00:00:00Z Content type: tutorial Language: en Sources: [Jane Street]() Topics: [Neural Network](), [Machine learning](), [PyTorch]() Tags: [capture](), [ml](), [models](), [neural](), [puzzle](), [pytorch](), [research]() ### AI overview This article explains a Jane Street machine-learning puzzle in which solvers receive a neural network specification, including its weights, and must determine what the network does. It describes why ordinary brute-force approaches fail and presents a solver's reverse-engineering process using mechanistic interpretability. ### Source excerpt A lot of "capture-the-flag" style ML puzzles give you a black box neural net, and your job is to figure out what it does. When we were thinking of creating our own ML puzzle early last year, we wanted to do something a little different. We thought it'd be neat to give users a complete specification of the neural net, weights and all. They would then be forced to use the tools of mechanistic interpretability to reverse engineer the network--which is a situation we sometimes find ourselves facing in our own research, when trying to interpret features of complex models. ## Showing Tap Indicators on iOS Screen Recording DevFeed: [Showing Tap Indicators on iOS Screen Recording]() Original publisher: [Read original article]() Author: Amanjeet Singh Published: 2025-08-29T00:00:00Z Content type: tutorial Language: en Sources: [mobile.dev - Medium]() Topics: [iOS](), [debugging](), [ui]() Tags: [capture](), [ci](), [debugging](), [display](), [ios](), [maestro](), [screen](), [tutorials]() ### AI overview This tutorial explains how to show tap and gesture indicators in iOS screen recordings to make UI test failures involving animations and timing easier to debug. It discusses the limitations of Simulator touch indicators and app-integrated solutions, then introduces injecting a dynamic library so indicators can work across apps and system interactions in automated tests. ### Source excerpt Learn how to display tap and gesture indicators in iOS screen recordings for better debugging, app demos, and tutorials. ## Postgres Replication Slots: Confirmed Flush LSN vs. Restart LSN DevFeed: [Postgres Replication Slots: Confirmed Flush LSN vs. Restart LSN]() Original publisher: [Read original article]() Published: 2025-08-05T11:55:00Z Content type: tutorial Language: en Sources: [Gunnar Morling]() Topics: [Replication](), [Databases](), [Transactions]() Tags: [capture](), [concurrent](), [database](), [debezium](), [postgres](), [recovery](), [replication](), [retention](), [stream](), [streaming](), [transactions](), [troubleshooting]() ### AI overview This tutorial explains the difference between PostgreSQL replication slots' confirmed_flush_lsn and restart_lsn attributes. It describes how consumers resume from replication slots, how concurrent transactions affect the oldest WAL that may still be required, and why understanding both LSNs helps with troubleshooting and WAL retention. ### Source excerpt Table of Contents confirmed_flush_sn: Tracking Consumer Progress restart_lsn: Handling Concurrent Transactions Mid-Transaction Recovery Looking Forward: Streaming In-Progress Transactions Replication slots in Postgres keep track of how far consumers have read a replication stream. After a restart, consumers--either Postgres read replicas or external tools for change data capture (CDC), like Debezium--resume reading from the last confirmed log sequence number (LSN) of their replication slot. The slot prevents the database from disposing of required log segments, allowing safe resumption after downtime. In this post, we are going to take a look at why Postgres replication slots don't have one but two LSN-related attributes: restart_lsn and confirmed_flush_lsn. Understanding the difference between the two is crucial for troubleshooting replication issues, optimizing WAL retention, and avoiding common pitfalls in production environments. ## ArubaCX VXLAN Routing Packets Have Invalid Lengths DevFeed: [ArubaCX VXLAN Routing Packets Have Invalid Lengths]() Original publisher: [Read original article]() Published: 2025-06-12T05:08:00Z Content type: tutorial Language: en Sources: [ipSpace.net blog]() Topics: [VXLAN](), [networking](), [Linux](), [virtual machines]() Tags: [capture](), [ethernet](), [linux](), [netlab](), [tailscale](), [virtual-machines](), [vxlan]() ### AI overview A netlab IRB test exposed that VXLAN packets generated by ArubaCX's routing process reported IP and UDP lengths four bytes larger than the actual packet. The article uses packet captures to trace the issue to a VLAN tag removed during software VXLAN encapsulation without a corresponding length adjustment. ### Source excerpt This blog post describes yet another bizarre example of how reliable digital twins are, but don't worry; they all work great in PowerPoint. After "fixing" the integration tests to deal with ArubaCX's notion of VXLAN VNI having 16 bits, the bridging test worked, but the IRB tests kept failing. In the IRB test, the lab has two layer-3 switches. Each of them should be able to bridge within a VLAN/VXLAN segment and route across the segments. Read more ... ## Capturing Traffic in Virtual Networking Labs DevFeed: [Capturing Traffic in Virtual Networking Labs]() Original publisher: [Read original article]() Published: 2025-03-04T06:43:00Z Content type: tutorial Language: en Sources: [ipSpace.net blog]() Topics: [networking](), [Linux](), [qemu](), [virtual machines](), [Containers](), [Docker]() Tags: [capture](), [container](), [containers](), [docker](), [lan](), [linux](), [netlab](), [networking](), [qemu](), [virtual-machines](), [virtualization]() ### AI overview A tutorial on capturing traffic in virtual networking labs. It explains how to capture traffic from Linux bridges and QEMU-connected virtual machines, use netlab capture as a wrapper around virsh, brctl, and tcpdump, and approach traffic capture for containers attached to Docker networks or Linux bridges. ### Source excerpt When I announced the Stub Networks in Virtual Labs blog post on LinkedIn, I claimed it was the last chapter in the "links in virtual labs" saga. I was wrong; here comes the fourth part of the virtual links trilogy - capturing "on the wire" traffic in virtual networking labs. While network devices provide traffic capture capabilities (usually tcpdump in disguise generating a .pcap file), it's often better to capture the traffic outside of the device to see what the root cause of the problems you're experiencing might be. Read more ... ## Snyk announces commitment to Service for America, bringing security education access to all DevFeed: [Snyk announces commitment to Service for America, bringing security education access to all]() Original publisher: [Read original article]() Author: Michael Biocchi Published: 2024-10-17T05:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk](), [snyk-learn](), [Cybersecurity](), [Learning](), [AdventureX 2026]() Tags: [application-security](), [awareness](), [blog](), [capture](), [code-security](), [ctf](), [cybersecurity](), [developer](), [devops](), [devsecops](), [education](), [executive](), [free](), [government](), [learn](), [open-source-security](), [pmm](), [security](), [snyk](), [snyk-code](), [snyk-learn](), [snyk-open-source](), [teams](), [training](), [workshops]() ### AI overview Snyk announces its commitment to the Service for America Initiative by providing free cybersecurity education through Snyk Learn. The platform offers interactive lessons, learning paths, resources, and a Capture the Flag 101 workshop for students to help developers, security teams, and aspiring professionals build practical skills for secure software development. ### Source excerpt Snyk partners with the Service for America Initiative to offer free cybersecurity education through Snyk Learn. Discover Snyk Learn's free, hands-on training and workshops designed to equip developers and security teams with the skills to build secure applications. From coding security to Capture the Flag events, Snyk helps prepare students and professionals for the ever-evolving cyber landscape. ## netlab 1.9.1: Packet Capture, Routing Improvements DevFeed: [netlab 1.9.1: Packet Capture, Routing Improvements]() Original publisher: [Read original article]() Published: 2024-10-07T05:42:00Z Content type: release Language: en Sources: [ipSpace.net blog]() Topics: [networking](), [releases](), [IS-IS](), [Release notes](), [Cisco]() Tags: [capture](), [cisco](), [features](), [is-is](), [netlab](), [protocol](), [release](), [release-notes](), [routing]() ### AI overview The netlab 1.9.1 release adds packet capture capabilities, IS-IS and RIPv2/RIPng route redistribution and VRF instances, configurable RIPv2/RIPng timers, and support for the Cisco IOSv layer-2 image. ### Source excerpt netlab release 1.9.1 brings packet capture capabilities and numerous routing features: IS-IS route redistribution and IS-IS VRF instances RIPv2/Ripng route redistribution and VRF instances Configurable RIPv2/RIPng protocol timers We also added support for Cisco IOSv layer-2 image. You'll find more details in the release notes. Read more ... ## Postgres Realtime location sharing with MapLibre DevFeed: [Postgres Realtime location sharing with MapLibre]() Original publisher: [Read original article]() Author: Thor Schaeff Published: 2024-07-04T07:00:00Z Content type: tutorial Language: en Sources: [Supabase Blog]() Topics: [Supabase](), [JavaScript](), [React](), [Remote Procedure Call (RPC)](), [API](), [data](), [Database]() Tags: [api](), [build](), [capture](), [code](), [function](), [getting-started](), [guide](), [how-to](), [javascript](), [js](), [map](), [migrations](), [postgres](), [react](), [realtime](), [remote](), [rpc](), [state](), [subscription](), [telegram]() ### AI overview This tutorial shows how to build live location sharing with Supabase, Postgres, Supabase Realtime, a Telegram Bot, and MapLibre GL JS in React. It covers capturing location data in a Supabase Edge Function, inserting it through an RPC, subscribing to database changes, and displaying updated markers on a map. ### Source excerpt Use Supabase Realtime to draw live location data onto the map with MapLibre GL JS. ## Capturing composable to a bitmap without losing a state DevFeed: [Capturing composable to a bitmap without losing a state]() Original publisher: [Read original article]() Author: Shreyas Patil Published: 2024-03-20T13:58:20Z Content type: tutorial Language: en Sources: [Shreyas Patil's Blog]() Topics: [Jetpack Compose](), [ui](), [Caching](), [Canvas](), [Code]() Tags: [android](), [android-app-development](), [android-apps](), [android-development](), [caching](), [capture](), [code](), [compose](), [deep-dive](), [how-to](), [jetpack](), [jetpack-compose](), [jetpack-compose-layouts-and-modifiers](), [kotlin](), [mobile-apps](), [mobile-development](), [screenshot](), [screenshots](), [state](), [ui]() ### AI overview This tutorial explains how to capture Jetpack Compose content as a Bitmap while preserving its current state. It describes the Compose 1.6.x rendering approach, shows how stateful content such as counters and network images can expose problems, and examines caching and canvas rendering behavior. ### Source excerpt Learn how to capture a Jetpack Compose Composable as a Bitmap without losing its current state. A deep dive into capturing high-quality UI screenshots programmatically. ## Filtering Process Output With tee DevFeed: [Filtering Process Output With tee]() Original publisher: [Read original article]() Published: 2024-02-10T10:11:00Z Content type: tutorial Language: en Sources: [Gunnar Morling]() Topics: [Java](), [Kubernetes](), [Logging](), [Streams]() Tags: [capture](), [disk-space](), [files](), [filter](), [java](), [jvm](), [kubernetes](), [logging](), [redirection]() ### AI overview This tutorial explains how to use tee and process substitution to expose complete Java process output to Kubernetes logging while writing only filtered lines to a log file. It also discusses preventing unbounded log growth and illustrates how process substitution uses file descriptors and pipes. ### Source excerpt Recently I ran into a situation where it was necessary to capture the output of a Java process on the stdout stream, and at the same time a filtered subset of the output in a log file. The former, so that the output gets picked up by the Kubernetes logging infrastructure. The letter for further processing on our end: we were looking to detect when the JVM stops due to an OutOfMemoryError, passing on that information to some error classifier. ## .NET developers alert: Moq NuGET package exfiltrates user emails from git DevFeed: [.NET developers alert: Moq NuGET package exfiltrates user emails from git]() Original publisher: [Read original article]() Author: Liran Tal Published: 2023-08-09T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [.NET](), [NuGet](), [supply-chain-security](), [Testing](), [Mocking](), [Vulnerabilities](), [pii](), [Security](), [HTTP](), [Git](), [Azure](), [GitHub]() Tags: [acquisition](), [application-security](), [blog](), [capture](), [developer](), [devrel](), [dot-net](), [git](), [mocking](), [net](), [nuget](), [open-source-security](), [pii](), [security](), [snyk](), [snyk-open-source](), [supply-chain-security](), [testing](), [vulnerabilities]() ### AI overview The article reports that Moq, a widely used .NET mocking library, began exfiltrating developers' configured Git email addresses starting with version 4.20.0. The data was hashed into an HTTP request to Azure blob storage and shared with a third-party SponsorLink service. Snyk frames the incident as an open-source software supply-chain security and package-health concern. ### Source excerpt On August 8th 2023, the .NET community was made aware that the testing library called Moq exfiltrates developers emails from their development machine, and sends them off to third-party remote servers. ## Understanding & Assessing Visual Regression Testing DevFeed: [Understanding & Assessing Visual Regression Testing]() Original publisher: [Read original article]() Author: Nikhita Reddy Eega Published: 2023-07-27T12:58:43Z Content type: tutorial Language: en Sources: [Android@Microsoft - Medium]() Topics: [Testing](), [Jetpack Compose](), [Kotlin](), [Declarative programming](), [ui](), [XML]() Tags: [capture](), [cashapp-paparazzi](), [declarative](), [facebook-sdk](), [jetpack-compose](), [kotlin](), [mobile](), [snapshots](), [testing](), [verify](), [visual-regression-testing]() ### AI overview This article explains visual regression testing for Android UI, focusing on possible visual differences when migrating from the View system to Jetpack Compose. It describes recording baseline snapshots, verifying new snapshots against them, and evaluating VRT tools such as Facebook SDK and Paparazzi for framework compatibility. ### Source excerpt Understanding & Evaluating Visual Regression TestingPhoto by Jessica Ruscello on UnsplashDive into learning about VRT tools like Facebook SDK, Paparazzi and study their compatibility for migration. Since Jetpack Compose was released in 2021, its declarative programming model has offered a modern and intuitive approach to building user interface. Compared to View system framework, Compose promotes cohesion and simplifies state-management. This framework is lightweight because the UI components are built using composable functions as separate building pieces. With this paradigm shift, boilerplate code is lessened, code reuse is encouraged, and the development process is made simpler. Migrating to Compose seems quite appealing. Will there be any regression if we migrate from one framework to another, though? Because Compose is still relatively new compared to the well-established View-based UI, there might be potential challenges faced during the migration period. What about visual regressions? Possible visual regressions can be encountered due to different UI frameworks, view configuration and styling approach. Styling and themes are usually defined in XML resource files which are applied to the views and then rendered. Whereas in Compose, these are programmatically defined in Kotlin and then takes advantage of efficient recomposition. These variances may result in changes to padding, margin, etc. Thus, to maintain a seamless transition and avoid any visual bugs going unreported, visual regression testing can be used. This ensures that the final UI is consistent to enhance user experience. Understanding Visual Regression Testing (VRT): Let us now break down the process into two design approaches -- High level and Low level High-Level Design Approach Consists of 2 steps: 1) Record -- Generating a snapshot and saving it as Golden (baseline/reference snapshot used to compare subsequent snapshots) 2) Verify -- Compares the two snapshots High level design flowLow-Level Design ## Introducing New Terminal API Customization Features DevFeed: [Introducing New Terminal API Customization Features]() Original publisher: [Read original article]() Author: Priscilla Wu Published: 2023-06-15T15:00:00Z Content type: release Language: en Sources: [Square Corner Blog](), [Square Corner Blog RSS Feed]() Topics: [API](), [Terminal](), [Availability]() Tags: [announce](), [api](), [apis](), [availability](), [capture](), [checkout](), [collection](), [customization](), [developers](), [experience](), [features](), [flow](), [images](), [qr-code](), [screen](), [terminal]() ### AI overview Square announces the beta launch of Custom Workflows for Terminal API, allowing developers to add customizable screens and interactive checkout steps such as confirmations, signatures, contact collection, multiple-choice menus, and QR codes. The article also announces general availability of Custom Idle Screen, which lets sellers display rotating images and their business name on Square Terminal. ### Source excerpt Customize the checkout experience with the newest features [Next page]()