October 2023 Summaries

Celebrating Cybersecurity Awareness Month, Shrutirupa Banerjiee, a Google Developer Expert (GDE) in web security, is highlighted for her work in bridging the gap between developers and cybersecurity professionals to safeguard against online threats such as malware and phishing attacks. Starting her career in Blockchain security, Shrutirupa transitioned to malware research and emphasizes awareness of threats like those exemplified by the SolarWinds attack, where malicious code compromised numerous organizations. She advocates for proactive security measures including cautious downloading, up-to-date software patches, regular antivirus scans, and multi-factor authentication to protect personal and organizational data. Additionally, she utilizes Google technologies and the GDE program to educate and mentor future cybersecurity professionals in a secure environment, stressing the importance of ongoing vigilance as the internet becomes increasingly accessed by diverse age groups.

Halloween serves as a backdrop for Google for Developers to explore challenges that haunt software developers, offering insights and best practices to overcome them. Key concerns include managing outdated or complex codebases, emphasizing the importance of simplifying code and using version control systems. Testing emerges as a crucial practice, despite its perceived hindrance to quick development, with strategies like test automation and pair programming to ease the burden. Developers often face limitations in choosing their tech stack, but advocating for change and upskilling offer pathways through this issue. The article also highlights the risks associated with improper deployment scheduling, emphasizing planning, communication, and contingency measures to avoid weekend disruptions. Security threats, such as hacking and third-party data breaches, are addressed through recommendations like regular software updates, strong passwords, two-factor authentication, and thorough vendor vetting. These strategies collectively aim to reduce the likelihood of developer nightmares, ensuring more resilient and secure development practices.

Developer Journey is a monthly series that features diverse developers from around the world, highlighting their experiences, challenges, and successes while utilizing Google tools. This month, the series includes insights from developers like Lamis Chebbi from Tunisia, Amani Bisimwa from the Democratic Republic of Congo, and Enrique López Mañas from Germany, who leverage tools such as Angular, Firebase, Android Studio, and TensorFlow to build applications across various sectors. Each developer discusses their favorite tools, the importance of inclusive design, and accessibility in their projects, emphasizing the significance of accessibility as a development goal. They also share plans for using Google Bard in future projects, reflect on the role of mentorship and community involvement, and offer advice to new developers about the importance of learning, asking questions, and embracing mistakes for continued growth in their careers.

Credential Manager is a new Jetpack library introduced by Google to streamline authentication processes for Android developers by consolidating various authentication types into a single user interface, thereby enhancing usability and reducing complexity in applications. This tool supports passkeys and offers a unified interface for users, allowing developers to integrate with a single API instead of multiple identity providers. The transition to Credential Manager means that authentication APIs from Google Identity Services, such as One Tap sign-in and Sign-In for Android, will now be incorporated into this new system, and Smart Lock for Passwords will be removed from the Google Play Services SDK by November 2023. Developers are encouraged to migrate to Credential Manager to benefit from a simplified integration process and a consistent authentication experience across all Android devices. Google provides resources and guides to assist developers in this transition and seeks feedback to enhance the service further.

Credential Manager, set to be publicly released on November 1st, is an innovative authentication tool for Android designed to simplify and secure user sign-ins for apps and websites by supporting both traditional methods like passwords and new passwordless technologies such as passkeys. This new system addresses the complexity and security issues associated with multiple sign-in options by offering a unified interface that allows users to choose their preferred account without worrying about the specific method of authentication. Passkeys, which streamline the login process by eliminating the need for manual entry of credentials, provide enhanced security through phishing-resistant protection and have already been integrated by major apps like Uber and WhatsApp. Additionally, Credential Manager supports multiple credential providers, enabling users to customize their authentication experience, and has garnered interest from companies like 1Password and Enpass, which recognize the potential of passkeys as a secure alternative to traditional passwords. Developers are encouraged to integrate Credential Manager into their systems to enhance user experience and security.

KAYAK, a prominent travel search engine, has integrated passkeys into its Android and web apps to enhance security and streamline user authentication, reducing sign-up and sign-in times by 50%. This move away from traditional passwords addresses vulnerabilities such as phishing and hacking, and decreases user friction seen with previous methods like magic links. By using the Credential Manager API, KAYAK unifies passkey support and traditional sign-in methods within a single interface, simplifying the authentication process. The implementation of passkeys has not only improved user satisfaction by eliminating the need for complex passwords but also reduced technical debt by consolidating various authentication methods into a modern user interface. Thanks to these advancements, KAYAK plans to phase out password-based authentication by the end of 2023, showcasing a successful model for securing and enhancing user experiences in mobile applications.

Google Play has announced the opening of submissions for its Indie Games Accelerator 2024, a program aimed at supporting early-stage indie game developers. This 10-week program, starting in March 2024, is designed for developers who are either nearing the launch of a new game or have recently released one. It offers a highly-tailored experience including online masterclasses, talks, and workshops led by industry experts and provides an opportunity to network with other passionate game founders worldwide. Shafiq Hussein from Gambir Studio highlights the program's impact by sharing how his team increased their revenue by 20% through mentorship. Developers from over 70 eligible countries can apply, with submissions due by December 12, 2023, to enhance their growth potential on Google Play.

Dashlane, a widely-used password management tool, has embraced passkey technology to enhance security and user experience by offering passwordless authentication across its platforms, including Android, iOS, macOS, Windows, and web apps. This shift addresses the frustrations and security risks associated with traditional passwords, as passkeys are resistant to phishing, do not leak in server breaches, and cannot be reused. Dashlane implemented passkey support using features like the Credential Manager API on Android and conditional UI on web browsers, allowing users a seamless transition from passwords to passkeys. The adoption of passkeys has led to a significant increase in user satisfaction and conversion rates, with a 70% higher conversion rate for passkey authentication compared to passwords and a 63% success rate in saving new passkeys. The company's proactive approach to integrating new technologies and providing an intuitive user experience has resulted in minimal user confusion and rapid growth in passkey usage.

Passkeys offer a more straightforward and secure alternative to traditional passwords, allowing users to sign in using biometric data or simple patterns. Google's Passkeys Week, running from October 23-27, 2023, aims to educate developers and users about passkeys through various resources such as blog posts, case studies, and a live Q&A session. Since May 2023, Google Accounts have supported passkeys, and as of October 10, they have become the default sign-in method for compatible devices. Major companies like eBay, Uber, and WhatsApp now support passkeys on Chrome and Android, with successful integrations like KAYAK reducing sign-in times by 50% and Dashlane seeing a 70% increase in conversion rates. Developers are encouraged to learn about implementing passkeys through courses and documentation provided by Google and the FIDO Alliance, which is dedicated to reducing password reliance through standardized specifications.

People of AI returns for its second season, featuring a new co-host, Luiz Gustavo Martins, alongside returning host Ashley, to explore the rapidly evolving field of Generative AI. Following the success of the first season, which highlighted personal journeys into AI and the accessibility of AI technology, the new season promises engaging discussions on the explosive growth of Generative AI tools and their impact on productivity and economic growth. The podcast will continue to delve into guests' careers and interests, emphasizing ethical AI product development. Each episode will introduce unique guests, such as AI pioneers, Google experts, and venture capitalists, who share their insights and experiences with AI, exploring topics like community building, responsible AI practices, and leveraging AI in various industries. Season 2 episodes will be released weekly, with the first video podcasts premiering later in the season, and the series is sponsored by Google, although the opinions expressed belong solely to the speakers.

Passkeys offer a safer and more straightforward alternative to traditional passwords by allowing users to sign into online accounts using device screen locks like fingerprints, facial recognition, PINs, or patterns, and they are gaining traction as more online services adopt this technology. On October 10, 2023, Google set passkeys as the default sign-in method for compatible devices, marking a significant step toward a passwordless future. To further this initiative, Google is hosting Passkeys Week from October 23-27, an online event designed to educate users on implementing passkeys effectively. Participants can join the conversation using #PasskeysWeek and follow @ChromiumDev and @AndroidDev for new resources, including blog posts and case studies, and opportunities to earn passkeys badges on their Google Developer Profile. A live Q&A session with Google passkeys engineers is scheduled for October 25 at 10 AM PDT on the Google for Developers YouTube channel, with the recording available post-event for those unable to attend live.

Firebase is introducing its inaugural Firebase Demo Day on November 8, 2023, as a novel virtual event where developers can explore new features and capabilities of Firebase through short, pre-recorded video demos. This event, aimed at offering solutions to major app development challenges, will highlight how Firebase can facilitate the rapid development of full-stack applications, leverage AI for enhanced user experiences, and integrate smoothly with other Google technologies. Unlike traditional events, Firebase Demo Day doesn’t require registration or travel; participants simply need to bookmark the event website and can engage with the content at their convenience. As part of the lead-up to the event, Firebase is actively engaging with its community on social media platforms such as X (formerly Twitter) and LinkedIn, sharing teasers and behind-the-scenes content to generate excitement for the upcoming demonstrations.

Henry Ruiz, a Machine Learning Google Developer Expert (GDE) originally from Colombia, is celebrated for his contributions during Hispanic Heritage Month as a testament to the impact of Latin American and Hispanic developers. Initially aspiring to be a soccer player, Ruiz shifted his focus to computer science, eventually working as a Research Specialist at Texas A&M AgriLife Research while completing his Ph.D. in Engineering. His journey was supported by a strong Hispanic community, which provided him with a sense of belonging and inspiration. As a first-generation college student in the U.S., Ruiz found encouragement through international student networks and Hispanic community initiatives, which fueled his passion for technology and the recognition of minority developers. His work in generative AI, particularly in agricultural applications like detecting diseases in bananas, exemplifies his commitment to leveraging technology for practical solutions. Ruiz acknowledges the role of major tech companies in creating opportunities for minorities, citing initiatives like Google's scholarships and conferences that offer visibility and support for Hispanic contributions in the tech industry. He emphasizes resilience and creativity as key traits of the Hispanic community, encouraging continued progress despite challenges.

Earlier this year, MediaPipe Solutions introduced an on-device text-to-image generation feature for Android using diffusion models, which has now been officially launched as the experimental Image Generator. This tool enables developers to generate images on Android devices in approximately 15 seconds, offering three main functionalities: text-to-image generation from prompts, controllable generation using text prompts and conditioning images via diffusion plugins, and customized generation with Low-Rank Adaptation (LoRA) weights for specific concepts. The Image Generator supports models compatible with Stable Diffusion v1.5 architecture and allows for fine-tuning through MediaPipe Diffusion LoRA on Vertex AI, offering developers the flexibility to customize foundation models with new concepts. The tool also includes a plugin system for enhanced generation capabilities with support for facial structures, edge detection, and depth awareness, as well as the ability to inject specific styles or objects into images using LoRA weights. Developers can explore these features through the official documentation and example app on GitHub, with ongoing support and updates available through Google’s platforms.

MediaPipe Solutions offers web developers an accessible way to integrate machine learning (ML) into web applications with minimal code. It simplifies common ML tasks and provides resources like guides and web demos to facilitate learning and implementation. Developers are advised not to bundle ML models within their apps to maintain lightweight performance, but rather to store them in the cloud and use caching for efficiency. Early task initialization and resource cleanup using methods like .close() are recommended to optimize performance and memory usage. MediaPipe Studio serves as a valuable tool for testing and customizing ML solutions across different devices and models, ensuring that developers can balance speed, size, and accuracy according to their specific needs. The platform encourages experimentation with model settings to better understand performance outcomes without extensive coding. Developers are also encouraged to reach out for advice, share projects, and connect with the community for collaborative learning and problem-solving.

Creators from diverse backgrounds and regions are using their expertise to develop innovative apps and games on Google Play, each addressing unique societal needs. In Nigeria, Solape and Yomi launched HerVest, a financial app aimed at empowering women farmers and business owners with financial education and credit options, aiming to reach a million women by 2024. Juliana from Brazil developed BLW Meals, a baby-led weaning app available in multiple languages, to help parents transition their babies to solid foods, with plans to integrate direct chat features with nutritionists. In the UK, Harry, affected by long Covid, created a health monitoring app, Visible, to aid those with energy-limiting conditions and contribute data to medical research, with the broader goal of influencing health policy. Meanwhile, in Chile, brothers Ilan and Edison, along with Nastassja, developed PleIQ, an augmented reality educational platform, to enhance early learning for children, expanding their reach across Latin America to promote educational equality.

Google has launched "Build with Google AI," a video series designed to assist developers in creating AI-powered applications without requiring extensive knowledge of artificial intelligence or significant development resources. The series showcases practical projects using AI models, such as Google's PaLM 2, and covers applications in content search, writing, and coding assistance. By focusing on open-source projects that are easy to implement and extend, Google aims to empower developers to create personalized solutions while adhering to responsible AI principles. The series also includes insights from development teams to help viewers understand the rationale behind projects and offers guidance on customizing and building upon the provided code. Additionally, Google highlights various resources available for developers interested in working with AI, including its language models, TensorFlow, and Google Cloud Vertex AI, encouraging exploration and further development in AI technologies.

AI is transforming the way developers operate and democratizing the ability to build applications, with MakerSuite playing a pivotal role by allowing easy interaction with large language models (LLMs) through plain language prompts. In the second part of the series, the new Tuning feature in MakerSuite is introduced, which enables users to customize models to specific needs swiftly and efficiently. This tuning leverages Parameter Efficient Tuning (PET), a method that produces high-quality, task-specific models using a minimal amount of data, thereby simplifying the traditionally complex process of fine-tuning. Users can create, select data for, view, and run their tuned models with straightforward steps, utilizing data from various sources like Google Sheets or CSV files. MakerSuite thus serves as a potent and user-friendly tool, allowing developers to explore and enhance the capabilities of models like PaLM 2, fostering the creation of more relevant and effective applications in a matter of minutes.

Google is enhancing user security by restricting the use of OAuth 2.0 Custom URI schemes, known to be vulnerable to app impersonation attacks. This change affects new Chrome extensions and Android apps, requiring them to adopt more secure methods for authorization. New Chrome extensions must now use the Chrome Identity API for OAuth, while Android apps are encouraged to utilize the Google Identity Services for Android SDK. Existing configurations remain unaffected, but migration to these new methods is strongly encouraged. Users may encounter "invalid request" errors if unauthorized apps attempt to use the deprecated method, with error details available to both users and developers for troubleshooting.