We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
ProtonVPN has handed over application code to the open source community in a bid to improve transparency and security standards.
Want to help lock down Kubernetes and make some money while you're at it? The Cloud Native Computing Foundation has a new bug bounty program for you.
The recent work by longtime kernel developer Andy Lutomirski on improving Linux's random APIs and introducing a new "GRND_INSECURE" option is now queued into the random dev queue ahead of the Linux 5.6 cycle. Learn more:
Canonical has released the first Linux kernel security update for all of its supported Ubuntu Linux releases to address more than 30 security vulnerabilities. Learn more about this update and its implications for Ubuntu users:
Are you a Python user? As of January 1st, 2020, Python 2.7 has officially reached the end of life and will no longer receive security updates, bug fixes, or other improvements going forward. Learn more:
Back in September was an initial "request for comments" by Google on some kernel work they are doing with Kernel Runtime Security Instrumentation (KRSI) for providing eBPF-powered security helpers, ultimately for creating dynamic MAC and audit policies. Just before Christmas the first official version of this new eBPF-based instrumentation was sent out and is being prepared for deployment within Google. Learn more about Google's work with KRSI in a great Phoronix article:
For years, developers have been working on this new take on the virtual private network, and now it's finally ready to go. Learn more about this in-kernel VPN, which should be released in the next major Linux kernel release, 5.6, in the first or second quarter of 2020:
In GitHub's new 'Security Lab', fourteen companies unite get together to search, find, and fix security flaws in GitHub-hosted open source projects. Learn more in an interesting ZDNet article:
Google plans to add a hacked-password alert system into its browser by the end of year; Firefox aims to do much the same thing this month. Learn more in an informative Computerworld article:
IBMcontinues to push its quantum computing efforts forward and today announced that it will soon make a 53-qubit quantum computer available to clients of itsIBM Q Network. The new system, which is scheduled to go online in the middle of next month, will be the largest universal quantum computer available for external use yet.
Offensive Security has announced the release and general availability of the Kali Linux 2019.03 operating system, a major update to the Kali Linux 2019 series that adds lots of new features, improvements, and updated hacking tools. Learn more in this great Softpedia News article:
Have you heard that Tor Browser 9.0a6 has been released with important security updates to Firefox?
Learn how setting up and running Tor bridges can help defend the open Internet in this great Tor Blog article:
A newConfidential Computing Consortiumwasannounced on Wednesdayby the Linux Foundation to boost the security of processed data. Learn more in an awesome Redmond Magazine article:
A NSA open-source security project will increase security in machines by essentially placing a machine's firmware in a container to isolate it from threat actors. Learn more in an interesting CyberScoop article:
With large corporations' contributions to open-source projects and adoption of open-source programs, your personal data could be kept more securely by big firms.
Have you heard that IBM’s Center for Open-Source Data and AI Technologies (CODAIT) recently unveiled a pair of carefully curated databases designed to provide machine learning developers models and datasets for AI projects?
Are you a Mozilla Firefox user? Did you know that Firefox browser could soon receive a Tor mode add-on that would significantly enhance privacy by connecting to the Tor network? While the final goal is to implement a fully-featuredTORmode in the browser natively, such a project takes time, and members of Mozilla and the Tor team discussed the challenges at a recent meeting. Their proposal was to develop a browser add-on that would enable this Tor mode inFirefox, as this approach could give the two organizations enough time to plan on the engineering work that is needed for this new feature.
Have you been following the JEDI project? The $10 billion project has been full of controversy; however, the Pentagon still hopes to seal the deal with either Amazon or Microsoft next month.
Have you heard that security researchers have been working on security feature for Linux kernels that could protect Linux-based systems against attacks that affect Intel’s Hyper-Threading (HT) feature? Multiple side-channel threats the feature's vulnerable against, including L1TF/Foreshadow and the MDS attacks, have been revealed over the past few months.
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
