Jump to content

Articles


wdfw w ff wdf sfsfd sfdwdfsdfwerw r werw erwe rwe rwer werwer werw erwer we r we rwerewrwe rwe rwer wer werwer werwe

A nice new update for Sketch mac app came out yesterday. It comes with some nice quality of life additions and some bugfixes as well as two new features. It's a good start on the new year I think.
New Smart Layout controls
In this release we got a nice new addition where we can set minimum width for symbols. This is useful for making sure your assets look good when doing overrides as well as controlling size for tap and other things. Maximum dimension is coming soon as well so you can get even more control.

A better way to save
A nifty new interface for the save function provide the option to save to cloud or locally in one dialog instead of two.

A whole host of improvements and bug fixes
 
Not the largest update, but still some nice quality of life changes. A larger update is scheduled for later this month it seems according to the release post.
New Smart Layout controls, better document saving and more — what’s new in Sketch?
BLOG.SKETCHAPP.COM After an exciting end to 2019, we’re kicking off the year with an update to the Mac app. Here’s what’s new in Sketch 62…  
Jimi Wikman
This is a repost from Atlassian's blog where the latest updates to the Atlassian cloud platform is posted. It is reposted here since the Atlassian blog does not have an RSS feed and so we can discuss the changes to the Atlassian Cloud architecture. You can follow these posts withe the tag "atlassian cloud changes".
Atlassian Cloud
Your cloud-hosted products are supported by the Atlassian Cloud platform. This section usually includes changes related to multiple Atlassian Cloud products, site administration, and user management.
Email users with suggested account changes
From the Change details button, you can suggest that a user changes their account details to make their profile more consistent and easier to identify. Read more about administering Atlassian accounts.
Give your users a Trusted permission 
From a user's Permission options, select Trusted to give certain users more responsibility. These users will be able to install and configure new products on your site and invite new users themselves.
Claim accounts after verifying a domain 
To start managing accounts on your domain, we’ve included an additional step that requires you to claim accounts after verifying that you own the domain. From the table on the Domains page, click Claim accounts next to the verified domain. Read more about verifying a domain.
Set your language and time zone for Jira and Confluence in your Atlassian account profile 
Rather than individually setting your language and time zone in Jira and Confluence, these preferences will soon come from your Atlassian account profile. Visit your account preferences to update these settings. It may take up to 10 mins before your updated preferences are reflected in Jira and Confluence.
 
Jira platform
Changes in this section usually apply to all Jira products. We'll tell you in the change description if something is only for a specific Jira product.
New issue view: Print an issue or export it to Microsoft Word or XML 
Print or export individual issues in the new issue view. Open an issue and choose more actions (•••) at the top-right to print it or export it to Microsoft Word (DOC) or XML format.
Changing the "Issues and filters" navigation item to "Filters"
In preparation for the rollout of our improved navigation for Jira Cloud, we've updated the "Issues and filters" menu item in the Jira sidebar to simply be "Filters." When we move to the new horizontal navigation, this name will better reflect what you'll find in the menu—filters, filters, and more filters. This is purely a label change at this point, and won't change any functionality.
New user profile cards 
When you hover over someone’s name in directories, on dashboards, and in user picker fields, you’ll now start to see rich profile cards with more information and a link to the user’s profile (if you have permission to see it).
Next-gen: Epic panel in backlog 
You can now manage epics on the backlog of your next-gen project via the Epics panel, similar to how epic management works in classic Jira Software projects. Changes you make in the panel on the backlog will reflect on the Roadmap, and vice-versa.
Advanced search (JQL): Search for content updated by a specific user 
Use the updatedBy() function to search for issues that were updated by a specific user, optionally within the specified time range. For example, if you want to find issues updated by John Smith between June and September 2018, enter issuekey IN updatedBy(jsmith, "2018/06/01", "2018/08/31"). Read more about the updatedBy() function.
 
Jira Software
We're rolling out a new type of project known as next-gen. By default, any Jira Software licensed user can create their own next-gen project. These projects don't affect existing Jira projects, shared configurations, or your schemes. You can manage who's allowed to create next-gen projects with the new Create independent projects global permission. Read more about next-gen projects.
GitHub app on the Atlassian Marketplace 
We've partnered with GitHub to build a new and improved integration, which you can install at the Atlassian Marketplace. This replaces the DVCS connector in Jira's system settings. Current GitHub integrations set up under the old method will continue to work, but new integrations must be set up using the app on the Atlassian Marketplace. We're rolling out this update gradually, so it may not be on your Jira Cloud site yet.
This won't affect GitHub Enterprise integrations, which must still be set up via the DVCS connector.
Next-gen: Roadmap issue hierarchy 
You can now expand an epic on your roadmap to see its child issues and their statuses. Learn more about managing epics on the roadmap.
Next-gen: Create child issues on your roadmap 
You can now add child issues directly on your roadmap. Just hover over an epic, click the + icon, and give your issue a name. Learn more about managing epics on the roadmap.
Next-gen: Environment system field in JSW 
Add Jira’s built-in Environment field to your issue types in next-gen projects. In your project, go to Project settings > Issue types and drag the Environment field into the Description section of the issue layout.
 
Jira Service Desk
New issue view for Jira Service Desk 
The new issue view groups key actions and information in a logical way, making it easier for you to scan and update requests. Learn more about the new issue view.
Use keyboard shortcuts in your queues 
Use keyboard shortcuts to navigate around your queues and get your work done faster. You can now move through issues, select their fields, and go to the issue view from your queues just by using your keyboard!
Customer portal request details page redesign 
We have redesigned the customer portal request details page to make it easier to use. You’ll notice we have added a rich text editor, sorted the activity stream from old to new, and have moved the location of the request fields, share button, approval and comment boxes.
Maintenance complete on the customer portal user profile page 
We have just completed some maintenance on the customer portal user profile page.
We also introduced a new layout that is easier to use on mobile devices. Go team!
Easier configuration for the new issue view 
If you have the new issue view, you can now easily configure how your issue view looks for each request type.
From your service desk project, go to Project settings > Request types and you'll find the new layout for making changes.
Next-gen projects: Approve or decline requests
You can now add an approval stage to requests that should be approved before they’re resolved in next-gen projects. If a request has an approval stage, approvers can approve or decline the request from the issue view.
Add an approval stage to a workflow by going to Project settings > Request types and then clicking Edit workflow. Learn more
Global create can select request type and raise on behalf of 
You can now create a request on behalf of your customers and set them as the reporter. Use the global create button ( + ), then select Raise this request on behalf of and add in your customer's email.
Introducing multi-line fields to the issue view in next-gen projects
You can now add multi-line fields to the issue view. These fields communicate long-form information to your team members and aren’t visible to your customers.
To add multi-line fields, go to Project settings > Request types and add fields to the Description fields bucket.
 
Confluence
Your editing experience just got an upgrade 
The new Confluence editor allows anyone to create beautiful, powerful pages effortlessly. Check out the editor roadmap to learn more.
We're extending editing improvements to all pages on Android 
The editing improvements we made to blogs a few months ago are coming to the rest of your Android mobile pages, too. In addition to being faster and more reliable, your new pages are also responsive, optimized for readability, and have advanced tables. Some macros are still missing as we rebuild them, but you can check the list of changes and track updates to macros on our docs site.
Annotate images in the new editor 
Annotate images by adding text, inserting shapes and lines, using brushes, or adding a blur to a certain area.
Confluence Cloud recent pages drawer 
We’ve made it easier to get to the pages you visited or worked with most recently. A new action has been added to the global sidebar that presents you with a list of your recent pages; interaction-specific tabs help you narrow the list based on your actions, like visited, edited, or saved as draft.
Share pages directly with your team 
It’s now easier to share pages with everyone on your team, all in one go. When you click Share on any page or blog post, Confluence now lets you add a team – no need to enter each person individually. Learn more
Jira issue URLs are converted to smart links 
When you paste a Jira issue link into a Confluence page, the URL is converted to a smart link that displays the page icon and the page title. This works if the Jira and Confluence sites are linked or if they are both cloud versions.
Convert pages to use the new editor 
You can now convert your existing pages that were created using the legacy editor to use the new editing experience! Learn more
Confluence navigation just got better 
Get to information faster with improved navigation – making what you need visible from anywhere in Confluence. Learn more
Align and resize images in tables in the new editor 
When images are inserted in table cells, you now have the ability to align and resize them.
Portfolio for Jira plan macro 
The Portfolio for Jira plan Confluence macro lets you embed a Portfolio for Jira Server and Data Center plan in a Confluence page. Join key stakeholders in the spaces where business goals are built and tracked, and share how work is progressing across multiple projects and teams.
Improved expand element replaces the macro 
Content creators just got a better way to control the way information is presented. The existing expand macro has been replaced with a quicker, easier way to include the expand functionality. Insert the improved expand element using /expand or by inserting the element from the editor's Insert toolbar.
 
Bitbucket
New Code Review - Limit the amount of rendered diff content 
Limits the amount of pull request content rendered in the diff and file tree to improve browser performance. Limits include the overall # of files and # of lines for the entire diff. Learn more
Jimi Wikman
Another week has past and as usual I will bring you some of the happenings of the week. This is a weekly newsletter that focuses on the development chain that I am most passionate about: Management, Design, Requirement, Development, Test and special interests such as Atlassian and Security.

If you have news that you think should be included in this newsletter, please let me know. You are also welcome to guest blog if you like.
 
Management
The Best Risk Management Software For Enterprises and Midsize Businesses - Top 10 tools for risk management. Agile vs Waterfall: What’s the Difference? - Still wonder what the difference is? Here the differences are broken down so it makes more sense. What Is Scrumban? How It Differs from Scrum & Kanban - For some reason this is always confusing people, so here is a guide. Estimation in the Era of Continuous Change - How do you work with estimations in a more agile way of working? Create Faster and More Accurate Forecasts using Probabilities - Another approach to estimations. Sprint Planning 101: How to Plan Great Sprints - Some good advice on how to get those sprints planned and executed properly. Exploring the Philosophies and Principles of Planning Approaches - Amazing article on planning approaches by Lynda Bourne Why Agile Is a Humane Way to Work - An interesting take on the Agile way of working.
A new video about Productive is added to the Video section.
"A complete project lifecycle – in one app. Stop juggling multiple tools. Handle your entire workflow in one place."
 
Requirement
Requirements management in Jira 101: the basics - An interesting take on requirements in Jira. Requirements Management: A Quick Guide - Good run through of what requirements actually are.
Pentagon Wars - Bradley Fighting Vehicle Evolution (the best example of scope creep ever!)
 
Design
UX Design Trends for 2020 - You know this was coming, but do you agree with them? 20 Most Inspirational Interactive Prototypes for 2020 - For all your prototype lovers out there! UX For Enterprise: 3 Biggest Challenges (and How to Tackle Them) - Some great advice here. Storybook 5.3: Build production design systems faster - It's not bad really! New GoDaddy logo is a massive improvement - The iconic GoDaddy logo is renewed and it's pretty neat. ActiveCollab redesign deconstruction - A walkthough of the design process redesigning this tool I used a long time ago. Introducing Wacom One - Yes please! Why Ethical Design Is Critical for Mobile App Designers - I like the reasoning and the topic. Baseline Material Design Components for Sketch - Some good resources here. What Star Wars can teach us about the UX? - Did not see that one coming! 100 Cartoon Characters - Great resource for all your character need.
The Professional Golden Shine Effect in Photoshop
 
Development
Node.js and JavaScript conferences you should attend in 2020 10 Interesting JavaScript and CSS Libraries for January 2020 How To Protect Your Vue.js Application With Jscrambler How To Not Have A Mess with React Hooks & Redux Darken - A javascript library that makes darkmode easy 10 Ways to Optimize Your React App’s Performance An Introduction To React’s Context API The Deal with the Section Element MassCode – a code snippets manager for developers released to v0.4.0 Understanding CSS Grid: Creating A Grid Container Understanding CSS Grid: Grid Lines Babel 7.7 Released With Improved TypeScript Support, Top-Level Await and More Vue Composition API—What Is it and How Do I Use It? Understanding Async Await | CSS-Tricks The JS based polished markdown editor called Boost Note has been officially launched Multi-Thumb Sliders: Particular Two-Thumb Case  
Test / QA
Continuous Testing at scale: The new mabl and Bitbucket Pipelines CI/CD integration - A bit techy, but good. 5 software testing books QA professionals should dig into - pretty neat list here. Learn End-to-end Testing with Puppeteer - looks pretty good I must say. Manual mainframe testing persists in the age of automation - yeah, manual testing is still a thing pretty much everywhere.
JUnit 5 - Evolution and Innovation
 
Operations
Cloudflare acquires stealthy startup S2 Systems, announces Cloudflare for Teams - Sounds interesting indeed! cPanel Announces Collaboration with Google Cloud to Bring cPanel & WHM to Google Cloud Platform Marketplace WHMCS 7.9 Now Available - New features for WHMCS CloudLinux 6 kernel updated - A rather small update to CloudLinux 6. OpenSSL 1.1.1 and TLSv1.3 Beta Testing Open Call - test drive TLSv1.3 and OpenSSL 1.1.1 with EasyApache 4 and cPanel.  Beta: CloudLinux 8 with 4.18 kernel is here - If you want to beta test CloudLinux 8, then a new version is out.  
Atlassian
Atlassian scrambles to fix zero-day security hole accidentally disclosed on Twitter - A nasty one, so make sure you are updated. One company’s transformative journey to Jira Cloud - Canada-based Igloo Software go through their experiences with moving to Jira Cloud. Want to see your app in Jira Cloud mobile? Glances have arrived! - Now you can get more visibility for your app, which is great for the users as well.
Ship faster using Slack and Jira - Demo Den January
 
Security
Unprotected Medical Systems Expose Data on Millions of Patients - This is soo bad! One More Threat For Organizations – The Ako Ransomware - Nasty ransomware that can cripple your organization. SNAKE Ransomware – A New Threat For Businesses In Town - Another nasty ransomeware Hackers use system weakness to rattle doors on Citrix systems - This one caused some headache for IT this week. Multiple TikTok Vulnerabilities Could Exploit Or Delete Users’ Personal Data - Good thing kids these days are secure online... Threat From Pre-Installed Malware on Android Phones is Growing - I am not surprised really. Amazon calls PayPal's $4 billion Honey browser add-on a 'security risk' - that's a bit fishy Amazon! PayPal Patches Vulnerability That Exposed User Passwords - Sloppy mistake fixed by PayPal
Ship faster using Slack and Jira - Demo Den January
 
Interesting
LinkedIn Brings 3 New Features to LinkedIn Pages - Stream live or invite people to your page. Google January 2020 core update almost done rolling out - SEO changes coming your way. Google Chrome: Third-party cookies will be gone by 2022 - Hardcore approach by Google Chrome. Facebook's Updated Desktop Layout is Now Appearing for More Users - Not for me yet though... Social shorts: Twitter gets rid of Audience Insights, Facebook updates Instant Articles, YouTube enforces policy on kids’ content - The world is changing fast. Twitter Adds New Ad Unit and Alters Core Features - Do we need more ads really?
New Edge browser from Microsoft is rolling out today to windows 10 usersE-commerce
 
E-commerce
Bose is closing all of its retail stores in North America, Europe, Japan, and Australia - It's a trend these days it seems to close down stores and shift to online instead. Google Introduces a New Shopping Section in Search Results - Good or bad? Decide for yourself.
Teknik Magasinet file for bankrupcy - Another swedish company goes down
 
 
Jimi Wikman
When personal information is exposed it is always bad, but when adult sites expose thousands of people personal information such as ID, nationality, home address, parents name, personal signature and even fingerprints (!), then that could lead to very bad things indeed. This is what was found on a S3 amazon bucket by the vpnMentor cybersecurity research team.
This leak has exposed the personal data and likeness of over 4,000 models among more than 875,000 files and has high-risk, real life implications for said models. Some are are old, others within the last weeks and the content is more than enough to steal someone's identity for identity theft.
 
 
 
The more severe implications however is that exposing information that can identify these models in detail is that it can lead to harassment or even life threatening situations.  Among the exposed models are LGBTQ people and with around 70 countries still consider this a criminal offense it could lead to prison sentences or even murder.
It took the company several days to respond to the communication from vpnMentor and the response is not exactly what I would expect from a company that just illegally exposed information on thousands of people in their employment.
I sincerely hope that none of the people that had their information exposed come to any harm, emotionally or otherwise. I also hope that legal actions are taken towards this company for their negligence. Finally I hope this company hire someone to help them secure this kind of information so the people they employ can have their private data secured.
You can read the full post about this incident here.
 
Jimi Wikman
Two WordPress plugins, InfiniteWP Client and WP Time Capsule have been found to suffer from a critical authorization bypass bug that allows people to access a site’s backend with no password. All an attacker needs is the admin username for the WordPress plugins and they are in.
Both plugins are designed to allow users to authenticate to multiple WordPress installations from one central server. That allows site owners to “perform maintenance such as one-click updates for core, plugins, and themes across all sites, backup and site restores, and activating/deactivating plugins and themes on multiple sites simultaneously".
This was reported on January 7th and on January 8th a new release for InfiniteWP Client and WP Time Capsule was released. WebArx publicly disclosed the bugs on January 14th.
Based on the WordPress plugin library, the InfiniteWP Client plugin is active on 300,000+ websites. The InfiniteWP site claims they have 513,520 sites active.
Link to WPScan Vulnerability Database: https://wpvulndb.com/vulnerabilities/10011
 
Jimi Wikman