InfoQ – September 2024

From Pipe Syntax in SQL to Storage Browser for S3, from open source licenses to AWS CodeBuild, the news I covered for InfoQ in September.

AWS Key Management Service Now Supports ECDH for Secure Communications

This summer, AWS announced that the AWS Key Management Service (KMS) supports the Elliptic Curve Diffie-Hellman (ECDH) key agreement. The security team at AWS recently showed how the new DeriveSharedSecret API enables the establishment of secure communication channels by using a derived shared secret.

Google Proposes Adding Pipe Syntax to SQL

In a recent paper titled “SQL Has Problems. We Can Fix Them”, a research team at Google proposed the introduction of a new Pipe Syntax in SQL. Google’s solution to address perceived limitations in SQL is currently available in the GoogleSQL and ZetaSQL dialects, but it has received mixed feedback from the community.

Blue / Green - Photo by Martin Adams on Unsplash

Amazon Introduces Storage Browser for S3

Amazon has recently announced the alpha release of Storage Browser for Amazon S3, providing end users with a simple interface for accessing data stored in S3. The project is available in the AWS Amplify JavaScript and React client libraries.

Security Experts Exploit Airport Security Loophole with SQL Injection

In the article “Bypassing airport security via SQL injection,” two security researchers recently demonstrated how they executed a simple SQL injection attack on a service that enables pilots and flight attendants to bypass airport security screening.

AWS CodeBuild Now Supports Mac Builds

Amazon has recently announced that AWS CodeBuild, its managed build service, now supports building applications on macOS. However, due to Apple’s licensing requirements, developers must still reserve a dedicated macOS fleet to utilize this new option.

Elastic Returns to Open Source: Will the Community Follow?

In a surprising move for both the open-source and Elastic communities, Shay Banon, founder and CEO of Elastic, recently announced that Elasticsearch and Kibana will once again be open source. The two products will soon be licensed under the AGPL, an OSI-approved license.

Concerns Rise in Open-Source Community as CockroachDB Ends Core Free Edition

CockroachDB Labs has recently announced a change to the license model of their distributed SQL database, discontinuing the free Core version and making the Enterprise version the only option. Having previously moved away from an open-source license, this latest change has raised further questions in the community about the future of open-source solutions managed by a single vendor.