What you need to know
- Microsoft today announced that it has acquired Semmle and plans to integrate its team with GitHub.
- Semmle is the company behind a code analysis engine used by NASA, Microsoft, Google, and more.
- Semmle's tools have been used to find vulnerabilities "some of the largest codebases in the world," Microsoft says.
Microsoft announced the acquisition of Semmle, a company that develops code analysis tools for companies and organizations ranging from NASA and Microsoft to Google and Microsoft. Semmle will join GitHub, which Microsoft acquired last year for 7.5 billion.
Semmle began life in 2006 and set out to develop tools that treat "code as data," according to the company's blog post announcing the acquisition. "Semmle's revolutionary semantic code analysis engine allows developers to write queries that identify code patterns in large codebases and search for vulnerabilities and their variants," GitHub explaines in its own blog post.
Security researchers can use Semmle to "quickly find vulnerabilities in code with simple declartive queries," Microsoft says. Those results are then shared through the Semmle community to help improve code quickly across different codebases.
Semmle says that current Semmle users won't see a disruption as part of the acqisition:
GitHub and Semmle are deeply committed to securing the open source ecosystem, and as part of that commitment, LGTM.com will continue to be available for free for public repositories and open source. We'll also continue our open source security research, which to date has yielded 107 CVEs in high-profile projects like UBoot, Apache Struts, the Linux Kernel, Memcached, VLC, and Apple's XNU.
On GitHub's side of things, Semmle's platform will see deeper integration throughout the platform.
Think you know ALL Windows 10 keyboard shortcuts? Find out in our full list
In this guide, we'll list all the best keyboard shortcuts that you can use to better navigate and utilize Windows 10 on your desktop PC or laptop.
Microsoft brings Android OS development for Surface Duo in-house
Microsoft is forming a team internally under the Microsoft Devices division that will handle the development of Android for Surface Duo going forward. Up until now, Microsoft had contracted the OS work out to third-party vendors such as Movial, who had the expertise required to bring Android to life on Surface Duo. Now, Microsoft is bringing that work in-house.
Everything we know about Resident Evil Village (so far)
Capcom's next survival-horror title may be Resident Evil 8. Related rumors indicate a first-person setting, some returning characters and more.
These are the best Ethernet switches money can buy
We rounded up a few great examples of managed switches to get you started on creating a solid network at home or in the office. These are great hubs for connecting various devices with some offering speeds of up to 10Gb.