In an era of software crisis, the move of firms towards distributed software development teams is being challenged by emerging collaboration issues. On this matter, the open-source phenomenon may shed some light, as successful cases on distributed collaboration in the open-source community have been recurrently reported. In this paper, we explore the collaboration networks in the WebKit open-source project, by mining WebKit's source-code version-control-system data with Social Network Analysis (SNA). Our approach allows us to observe how key events in the mobile-device industry have affected the WebKit collaboration network over time. With our findings, we show the explanation power from network visualizations capturing the collaborative dynamics of a high-networked software project over time; and highlight the power of the open-source fork concept as a nexus enabling both features of competition and collaboration. We also reveal the WebKit project as a valuable research site manifesting the novel notion of open-coopetition, where rival firms collaborate with competitors in the open-source community.
Websites today routinely combine JavaScript from multiple sources, both trusted and untrusted. Hence, JavaScript security is of paramount importance. A specific interesting problem is information flow control (IFC) for JavaScript. In this paper, we develop, formalize and implement a dynamic IFC mechanism for the JavaScript engine of a production Web browser (specifically, Safari's WebKit engine). Our IFC mechanism works at the level of JavaScript bytecode and hence leverages years of industrial effort on optimizing both the source to bytecode compiler and the bytecode interpreter. We track both explicit and implicit flows and observe only moderate overhead. Working with bytecode results in new challenges including the extensive use of unstructured control flow in bytecode (which complicates lowering of program context taints), unstructured exceptions (which complicate the matter further) and the need to make IFC analysis permissive. We explain how we address these challenges, formally model the JavaScript bytecode semantics and our instrumentation, prove the standard property of termination-insensitive non-interference, and present experimental results on an optimized prototype.
In an era of software crisis, the move of firms towards geographically-distributed software development teams is being challenged by collaboration issues. On this matter, the open-source phenomenon may shed some light, as successful cases on distributed collaboration in the open-source community have been recurrently reported. While practitioners move with difficulties towards globally distributed software development, there is a lack of research addressing the collaboration dynamics of large-scale distributed software projects. More particularly, even if there are empirical manifestations of collaboration among software-houses that market rival-software products within the same market, there is a clear lack of research addressing the development of information systems by coopetitive manners. While addressing a previous call for the advancement of methods and techniques to support the visualization of temporal aspects to represent change and evolution in ecosystems, we combined and virtual-ethnography (VA) with a Social Network Analysis (SNA) over publicly-available and naturally-occurring data that allowed us to re-construct and visualize the evolution of the WebKit collaboration
The popularity and wide adoption of JavaScript both at the client and server side makes its code analysis more important than ever before. Most of the algorithms for vulnerability analysis, coding issue detection, or type inference rely on the call graph representation of the underlying program. Despite some obvious advantages of dynamic analysis, static algorithms should also be considered for call graph construction as they do not require extensive test beds for programs and their costly execution and tracing. In this paper, we systematically compare five widely adopted static algorithms - implemented by the npm call graph, IBM WALA, Google Closure Compiler, Approximate Call Graph, and Type Analyzer for JavaScript tools - for building JavaScript call graphs on 26 WebKit SunSpider benchmark programs and 6 real-world Node.js modules. We provide a performance analysis as well as a quantitative and qualitative evaluation of the results. We found that there was a relatively large intersection of the found call edges among the algorithms, which proved to be 100 precise. However, most of the tools found edges that were missed by all others. ACG had the highest precision followed immedia
Intelligent Tracking Prevention (ITP) is a privacy mechanism implemented by Apple's Safari browser, released in October 2017. ITP aims to reduce the cross-site tracking of web users by limiting the capabilities of cookies and other website data. As part of a routine security review, the Information Security Engineering team at Google has identified multiple security and privacy issues in Safari's ITP design. These issues have a number of unexpected consequences, including the disclosure of the user's web browsing habits, allowing persistent cross-site tracking, and enabling cross-site information leaks (including cross-site search). This report is a modestly expanded version of our original vulnerability submission to Apple (WebKit bug #201319), providing additional context and edited for clarity. A number of the issues discussed here have been addressed in Safari 13.0.4 and iOS 13.3, released in December 2019.
NASA’s Curiosity rover has entered a Martian valley covered by an astonishing “sea” of tiny polygon-shaped fractures。 The honeycomb patterns, each only a few inches wide, stretch across the landscape and even wrap around a nearby 20-foot-tall butte
Primordial black holes may occasionally pass through white dwarf stars and trigger enormous Type Ia supernova explosions。 Researchers found that these events could explain chemical patterns seen in supernova remnants, nearby explosions, and stars across the Milky Way
MIT engineers have found a way to give chip-based lidar a wider, clearer view without relying on moving parts。 Their design uses differently shaped antennas that can sit close together without scrambling one another’s signals。 In tests, the system sharply reduced interference while steering a single precise beam across a broad field of view
Hidden moon ice may reveal itself through the way it bends and reflects vibrations from moonquakes。 The technique could help astronauts locate vital water supplies and uncover clues about the origins of Earth’s oceans
When atomic nuclei smash together at nearly the speed of light, they create the hottest fluid in the universe, but scientists may have overlooked one of its most important forces。 New simulations reveal that extreme acceleration builds up along the edges of quark-gluon plasma, helping drive its explosive expansion。 This acceleration may do far more
Scientists have built the first all-optical photonic time crystal, allowing them to reshape the behavior of terahertz light at extraordinary speeds。 The breakthrough could open the door to ultrafast computing, smarter communication systems, advanced imaging, and a new generation of highly tunable lasers
Engineers have transformed a notoriously brittle cobalt-aluminum compound into a material that is both extremely strong and capable of bending without breaking。 Their nanoscale design produced a yield strength about six to 10 times greater than high-strength structural steel while sustaining substantial deformation at room temperature。 The approach
Top scores increased by 5x
A black hole observed during a dramatic 2023 eruption did not simply devour gas from its nearby companion star。 It also expelled large amounts of material through powerful jets and winds, even after the outburst had nearly faded。 The results suggest black holes may continue reshaping their surroundings long after their brightest fireworks end