Important Security Notice – MPS 3.4.4 fixes a security issue with local storage

One additional improvement to MPS 3.4 has been released – MPS 3.4.4 is now available for download. In addition to the usual dose of fixes, which you can check out in the release notes, this version fixes a security vulnerability.

What happened

On February 1, 2017, we discovered a security vulnerability in the MPS dialog for submitting exceptions to YouTrack. The dialog allows you to submit problems that occur in a running MPS application directly from within MPS, either anonymously or with your YouTrack or JetBrains Account credentials. When submitting issues using credentials (anonymous submissions are not affected by this), the supplied credentials are stored in an unencrypted file in the MPS configuration folder. While this does not pose an imminent security risk as the user folder is accessible only by the specific user, those that would be able to access this file could see the credentials exposed.

What actions we have taken

MPS 3.4.4 (and MPS 2017.1 EAP2) resolve this issue. These versions will upon first run, delete the file containing unencrypted data and will prompt the user for a password to protect the credentials in a new encrypted data storage.

What actions you should take

Please download MPS 3.4.4 available from https://www.jetbrains.com/mps/download/, install and launch the application.
If you believe that someone may have accessed your local home folder and potentially seen your credentials, we’d recommend changing these.

Products written using MPS are most likely affected by this vulnerability. If your product redistributes MPS code without modification, the class “jetbrains.mps.ide.blame.CharismaReporter” is responsible for logging an exception to the YouTrack bug tracker of the MPS project. In this case, similar issues with unencrypted YouTrack credentials storage may affect users of your product. We do recommend updating the MPS platform and shipping a new version of your product to end-users, and taking the necessary steps to notify them.
If you have replaced or plan on replacing the CharismaReporter class with another one, reporting possible exceptions directly to the proprietary bug tracking system of your product, or if your product contains code, which saves sensitive data using the IntelliJ’s platform PersistentStateComponent API (unencrypted), we suggest you replace these with the new encrypted storage API available on the IntelliJ platform.

If you need any further assistance, please contact our Support Engineers.

The Drive to Develop
-JetBrains MPS Team

Posted in Announcement | Tagged , , , | 3 Comments

MPS 2017.1 EAP 3 released

A third EAP release – MPS 2017.1 EAP3 – has been made available for download. This is another important step towards 2017.1., which applies further polish to the new features introduced in the previous EAP releases. You can find out more details on these in the What’s new in MPS 2017.1 page.

The Drive to Develop
-JetBrains MPS Team

Posted in Announcement | Tagged , , | Leave a comment

MPS 2017.1 EAP 2 is ready

We’re now one step closer to 2017.1. A second EAP release – MPS 2017.1 EAP2 – has been released. It further improves the features already contained in the EAP 1 release, so you can now test them in a more stable settings.

To recap the most important features:

  • Migrations updating local history
  • Migrations for the various conceptNode-related constructs in the smodel language
  • Highly refactored generator of the editor language to ease extension of the language
  • HTTP support plugin to simplify integration with build and continuous integration systems
  • Fully compiled languages

In addition to that, as has been advertised since the 3.4 release, the substitute and side transform actions from the actions aspect are no longer supported this EAP release and have been completely removed.

See the continuously evolving What’s new in MPS 2017.1 page for full details.

The Drive to Develop
-JetBrains MPS Team

Posted in Announcement | Tagged , , | Leave a comment

The EAP started for MPS 2017.1

Starting today you can peek at what we’ve been working on for the next version of MPS – the first EAP release of MPS 2017.1 has just been made available.

MPS has adopted the versioning scheme of all JetBrains products, which implies that you’ll be receiving regular major MPS updates three times a year, shortly after the regular updates of the IntelliJ platform, on top of which MPS is built.

There are numerous changes and improvements waiting for you to try out and comment on in the new release. The key ones to mention are:

  • Migrations updating local history
  • Migrations for the various conceptNode-related constructs in the smodel language
  • Highly refactored generator of the editor language to ease extension of the language
  • HTTP support plugin to simplify integration with build and continuous integration systems
  • Fully compiled languages

We’ve documented the key areas of improvements in the What’s new in MPS 2017.1 page. The document as well as the features themselves are still under development, so please be ready for some adventure when exploring the new territories.

We hope that you’ll enjoy this new release.

The Drive to Develop
-JetBrains MPS Team

Posted in Announcement | Tagged , , , | Leave a comment

MPS 3.4.3 released

Today we’re releasing another gradual improvement to MPS – MPS 3.4.3 is now available for download. It contains several important fixes that will make your life a bit easier. For details, please check out the release notes.

The Drive to Develop
-JetBrains MPS Team

Posted in Announcement | Tagged , , , | Leave a comment

MPS 3.4.2 bug fix release is available for download

A fresh bug fix release has been issued – MPS 3.4.2 is ready for you to download. Get it today and enjoy its better stability. You may check out the release notes for details on the problems fixed in this release.

The Drive to Develop
-JetBrains MPS Team

Posted in Announcement | Tagged , , | Leave a comment

MPS 3.4.1 has been released

We’re releasing the first bug fix release MPS 3.4.1 today. If you have migrated to MPS 3.4 already, there should be no surprises for you when you switch to 3.4.1. If you haven’t migrated to 3.4 yet, then now is a good time to do so.

You can download MPS 3.4.1 from the usual place.

The Drive to Develop
-JetBrains MPS Team

Posted in Announcement | Tagged , , , | Leave a comment

MPS competes at Language Workbench Competition 2016

The LWC event, which this year is organized as a workshop at the SPLASH conference, is getting closer. We’re happy to inform you that MPS will be represented by a team of four brave MPS enthusiasts, who will compete against the other workbenches with an MPS-based system.

Correction: As indicated in the comments, LWC stands for Language Workbench Challenge, not competition. Sorry for the mistake.

Their solution leverages the mbeddr documentation language to take care of the presentation side of the system and relies heavily on the core MPS capabilities to solve the project challenges:

  • The ability to use different notations
  • Extensibility and embeddability of languages
  • Language management (such as migration and versioning).

Let’s introduce the individual members of the crew:

Eugen and Klemens Schindler

Two brothers, who have both followed the same career path, earning an MSc degree in computer science and a PDEng postmaster degree in Software Technology, employing Model Driven Engineering for years in their professional jobs, and using MPS since 2012. They significantly contributed to MPS solutions for the last three Language Workbench Competition workshops.

Eugen currently works as a model interoperability architect at Océ Technologies B.V., a division of Canon Inc. which constructs heavy duty high-performance print systems.

Klemens currently works at Sioux Embedded systems, doing consulting for various clients in the domain of embedded and cyberphysical systems development.

They both contribute to MPS plugins at DSLFoundry (check out also the github page).

Federico Tomassetti

Federico is a DSL enthusiast doing consulting on MPS. He got a PhD in Polyglot Software Development and worked in Italy, Germany, Ireland and France, for companies like TripAdvisor and Groupon. He is now focusing on building tools and languages to empower people. You can find out more on Federico’s website.

Ana Maria Sutii

Ana a PhD student at the Eindhoven University of Technology. She has a keen interest in software engineering, and, in particular, in technologies for domain-specific languages.  Check out Ana’s publication page.

What these guys think about MPS

Ana says: It was surprising how quickly people in the team came up with examples to address the challenges of the LWC this year. This says a lot about the power of MPS.

Klemens and Eugen say: we like to apply MPS and mbeddr to real-life projects in our work. The notational flexibility that MPS gives, enables us to encode various (often company-specific) domains, which opens up these domains not only to software-developers, but to developers from different disciplines. Being forced by MPS to explicitly specify each of the aspects that make up a language, shapes your way of reasoning about languages, the usefulness of which extends even outside MPS.

The team would also like to thank mbeddr team, in particular to Markus Völter and Kolja Dummann, for their input in designing building the solution. Moreover, thanks go also out to Remi Bosman from Sioux for helping us to set up the design for the MPS solution.

If you are coming to the conference, consider joining the workshop and cheering up for the team representing MPS. We all wish them good luck!

The Drive to Develop
-JetBrains MPS Team

Posted in Events | Tagged , , | 2 Comments

MPS 3.4 released

Today we’re releasing MPS 3.4 with improvements in editor usability and cross-model generation. The fresh 3.4 release of MPS comes with several important improvements that we believe will give the MPS users new possibilities when designing languages. The three most prominent new features are:

  • A newly designed Transformation Menu Language provides a unified way to specify editor transformations, substitutions and contextual assistance. It naturally supports re-use, explicit editor-cell location as well as multiple projections.
  • New editor usability tools – Context Assistant and Context Actions Tool, help the DSL users easily discover and invoke the most relevant actions in the given editor context.
  • Generation plans have been integrated with DevKits to simplify configuration and checkpoint models can hold pointers to the preserved nodes to help users gain insight into the generation process, especially during cross-model generation scenarios.

The full list of what you can enjoy with the new release is ready at the What’s new page.
Now might be the best time for you to grab MPS 3.4 from the download page and experience the new version yourself. With the automatic migrations included in MPS 3.4 upgrading your projects will be a breeze.

The Drive to Develop
-JetBrains MPS Team

 

Posted in Announcement | Tagged , , , | Leave a comment

MPS 3.4 release candidate 1

The release train for final MPS 3.4 has set off. Having incorporated your feedback to the EAP releases, we’ve just made the first release candidate available for download. Please grab MPS 3.4 RC1, try it out and tell us, how satisfied you are with it.

As usual, the What’s new page sums up briefly the things new in MPS 3.4 with respect to version 3.3. You might also like to look over the few recent posts on the MPS blog to read about the new most noteworthy features in more detail.

The Drive to Develop
-JetBrains MPS Team

Posted in Announcement | Tagged , , , | Leave a comment