Security Leftovers
-
Security updates for Wednesday [LWN.net]
Security updates have been issued by Debian (ffmpeg and linux-5.10), Fedora (libksba, openssl, and php), Gentoo (openssl), Mageia (curl, gdk-pixbuf2.0, libksba, nbd, php, and virglrenderer), Red Hat (kernel, kernel-rt, libksba, and openssl), SUSE (gnome-desktop, hdf5, hsqldb, kernel, nodejs10, openssl-3, php7, podofo, python-Flask-Security, python-lxml, and xorg-x11-server), and Ubuntu (backport-iwlwifi-dkms, firefox, ntfs-3g, and openssl).
-
Dropbox confirms serious security breach in which hackers stole code from 130 GitHub repositories
Dropbox has revealed details of a phishing attack to which it fell victim. In the attack, a threat actor was able to steal code from the company after gathering employee credentials to GitHub repositories.
The security breach took place in the middle of last month, with GitHub notifying Dropbox of suspicious account activity on October 14. The cloud storage company says that the code that was accessed "contained some credentials -- primarily, API keys -- used by Dropbox developers" but insists that "no one's content, passwords, or payment information was accessed", and that its core apps and infrastructure were unaffected.
-
[Old] Should hackers destroy communication? | Stop at Zona-M
Last week, the day after the russian invasion of Ukraine, Jaromil remembered that opposition from 1999, asking hackers to keep the networks of communication alive between Russia and the rest of the world.
[...]
No answer for this. Not now, at least. Just the sad awareness that it will become a crucial issue, the next time there will be such a crisis.
-
Better living through software - Ben Hutchings's diary of life and technology
In October I was not assigned additional time by Freexian's Debian LTS initiative, but carried over 9 hours from September and worked all those hours.