November 2020 Summaries

The final installment of a three-part blog series on creating a Slack dashboard delves into advanced data visualization techniques, focusing on transforming and representing Slack data to gain deeper insights into channel activity and member interests. The blog demonstrates how to visualize the popularity of Slack channels by using area charts to track message counts over time, employing treemaps to understand channel membership distribution, and leveraging chord diagrams and heatmaps to explore cross-channel interests among members. The post guides users through SQL queries and view creation to prepare data for these visualizations, encouraging experimentation and customization of the dashboard. Additionally, it suggests further enhancements, such as word clouds and distribution charts, to enrich the dashboard's analytical capabilities, and invites feedback and engagement with Preset's community.

A security vulnerability in Apache Superset was recently reported by the Open Source community, prompting Preset to implement its incident response procedures to ensure rapid remediation. As a member of the Apache Software Foundation, Superset adheres to established security guidelines, which include reporting vulnerabilities, creating CVEs, and releasing patches. Upon discovering the vulnerability through a GitHub issue, Preset's internal team quickly verified and escalated the issue, leading to a swift patch deployment across its environments within four hours. A detailed investigation followed, involving senior engineers and security vendors, to assess potential exploitation and ensure no unauthorized access occurred. The vulnerability was found to be limited to user-accessible workspaces, and no breaches were detected. Preset communicated the issue transparently to its customers and the community, collaborating with the Apache PMC to create a CVE and releasing Superset version 0.37.1 with the fix. Additionally, Preset enhanced its security protocols by improving vulnerability reporting channels and reaffirmed its commitment to maintaining a secure platform while encouraging community involvement in identifying potential security issues.