We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
Better support for Microsoft's NTFS file-system is coming to the Linux 5.15 kernel, along with some important process and security lessons for developers about how code submissions to the kernel should be made.
OpenWrt 21.02 has been released with exciting new features and higher security with WPA3, HTTPS & TLS enabled by default, as well as initial support for the Distributed Switch Architecture (DSA), the Linux standard for configurable Ethernet switches.
No rest for the wicked! Days after the Linux kernel celebrated its 30th anniversary, Linus Torvalds, its creator and maintainer, put out its latest release with improvements to hardware support and security. “The celebrations will go on for a few more weeks yet, but you all may just need a breather from them. And when that happens, I have just the thing for you - a new kernel release to test and enjoy,” wrote Torvalds as he put out the new release.
The Linux Foundation and allies will pay developers to help secure Linux and open-source software programs. Here's how the process works, and how you can get involved.
The Linux Foundation's InterUSS network remote identification service (NET-RID), built in partnership with AirMap, the Swiss Federal Office Civil Aviation, Swiss U-Space Implementation and Wing, delivers on government requirements two years early.
The Linux kernel's stable branch maintainer Greg Kroah-Hartman discusses the current state of the development process, addresses some security concerns raised recently, and provides a snapshot of the status of the project as seen from the eyes of a deeply-involved and highly-influential insider.
Qualys is the first solution to scan Red Hat Enterprise Linux CoreOS on Red Hat OpenShift to reduce risk.
CloudLinux's TuxCare services are now providing automated security patches and updates for the systems supporting the Atlas V rocket. “Protecting US [and world] national security means having the ability to launch important payloads into space. TuxCare from CloudLinux is proud to do our part to support the [US] Department of Defense and the Space Force by providing critical security patches for ULA’s Atlas V rocket,” said Jim Jackson, president and CRO of CloudLinux.
Rust is creeping into the Linux kernel - which could mean a major step forward for Linux security.
The Rust for Linux project, sponsored by Google, has advanced with use of a beta Rust compiler (as opposed to a nightly build), testing ARM and RISC-V architecture support, new Rust abstractions, and more. Torvalds reckons 'it might be mergeable for 5.14'.
Scorecards 2.0 , Google's new open-source security software program, can quickly tell you just how secure - or insecure - open-source software really is.
Google recognizes that before you can understand something, you need to measure it, and is bringing a way to measure security errors across open-source software programs.
The Internet Security Research Group - backed by Google's financial support - has provided prominent developer Miguel Ojeda with a one-year contract to work on Rust in Linux and other security efforts full-time.
To tackle the growing threat of attacks on the software supply chain, Google has proposed the Supply chain Levels for Software Artifacts framework, or SLSA which is pronounced "salsa". Can Google's 'salsa' make life harder for supply chain attackers? Comment below - we want to hear what you think!
As the Linux Foundation's Zephyr Project celebrates its fifth anniversary, it has become apparent that addressing constrained device security challenges is more critical than ever. Luckily, the Zephyr Project is rising to meet these challenges. Learn how.
Cockpit is a beginner friendly web-based Linux server manager that lets you manage a remote Linux system through a browser window. With Cockpit, you can view system log entries, monitor network activity, start and stop services, and more! Learn more about this useful app and how to install it on Linux.
The Tails amnesic incognito live system (a.k.a. anonymous OS) has been updated to version 4.18, featuring a selection of bug fixes and improvements including Tor Browser 10.0.16 and updated Intel firmware.
A majority of the open source codebases found in commercial applications analyzed by Synopsys contained security vulnerabilities.
The first patches for Rust support in the Linux kernel have been posted and Linus Torvalds says that things are "getting to the point where maybe it might be mergeable for 5.14 or something like that". In Torvalds' opinion, the fact that these are being discussed is much more important than a long post by Google about the language.
Google's Android Team is backing an effort to introduce Rust as a second programming language in the Linux kernel in an effort to improve security.
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
