Security Leftovers

Submitted by Roy Schestowitz on Sunday 7th of July 2019 07:19:39 AM Filed under

Security

Feitian MultiPass recall highlights need to use multiple security keys

You may remember that I picked up a couple of different security keys last year and wrote about Firefox, Security Keys, U2F, and Google Advanced Protection. One of the keys that I got, the Feitian MultiPass FIDO Security Key, was recalled in May 2019 over a security issue.

The product (shown above) was featured in a photo accompanying the article, but I didn’t recommend it. The Feitian MultiPass uses Bluetooth, and I’m not a fan of the Bluetooth user experience.
The 5 Top Best Practices for Open Source Cybersecurity

What is open source cybersecurity? How can your enterprise deploy it for maximum efficiency? Here are 5 best practices to get you started.
Personalized medicine software vulnerability uncovered

A weakness in one common open source software for genomic analysis left DNA-based medical diagnostics vulnerable to cyberattacks. Researchers identified the weakness and notified the software developers, who issued a patch to fix the problem. The issue has also been fixed in the latest release of the software, and no attack from this vulnerability is known.
State of the Software Supply Chain: Secure Coding Takes Spotlight [Ed: They never speak of back doors and severe, unaddressed (if not intentional) bugs in proprietary software and it's not hard to see what their goals are]
The Truth About Your Software Supply Chain [Ed: This FUD is intended to help sell proprietary software and it comes from partners of Microsoft (which likes to attack FOSS by proxy)]
5 Ways DevSecOps Can Manage Software Supply Chains [Ed: Promotion of buzzwords by a site named after these very same buzzwords]
Denim Group and WhiteSource to help customers manage their open source vulnerabilities [Ed: Microsoft-connected WhiteSource to help scare the public about FOSS while selling blobs]
Yes, It Is Legal To Use Cryptographic Signature on Amateur Radio. And That’s Important!

This is actually REALLY important for modern Amateur radio. With new digital satellites, we will be able to use digital signature to authenticate that all of the users are actually hams, and we’ll be able to keep the non-hams off of the satellite. This is already in development at Open Research Institute, and elsewhere.
Cryptomining Campaign Targets Linux Servers with Go Malware [iophk: "default passwords at fault, again"]

When targeting Redis databases, the malware first attempts to connect to the default port without credentials, then attempts to enumerate seven common passwords, namely admin, redis, root, 123456, password, user, and test.

When discovering SSH ports, the malware attempts to enumerate four usernames (root, admins, user, and test) and tries each with seven passwords (admins, root, test (appears twice), user, 123456, and password).
Top software failures in recent history

We've taken a look back at the worst software failures in recent history.

Login or register to post comments
Printer-friendly version
2605 reads
PDF version

More in Tux Machines

digiKam 7.7.0 is released

After three months of active maintenance and another bug triage, the digiKam team is proud to present version 7.7.0 of its open source digital photo manager. See below the list of most important features coming with this release.

Dilution and Misuse of the "Linux" Brand

Linux Foundation Rewards StepSecurity’s Impact on CI/CD Pipeline Security Fixes for Critical Open Source Projects [Ed: Having just participated in a FUD attack together with a Microsoft proxy, not to mention issued a report with it]
Cardano Roundup: Lace Wallet Announcement, Hoskinson Proposes Self-Regulation, and Linux Foundation Membership [Ed: The "Linux" Foundation misuses or sells the Linux brand, diluting the name and the project's identity]
Can SONiC be the Linux of Networking? [Ed: The Register now abuses the Linux brand to describe something of Microsoft, which is attacking Linux]
Kuro: An Unofficial Microsoft To-Do Desktop Client

Microsoft says that they love Linux and open-source, but we still do not have native support for a lot of its products on Linux.

Samsung, Red Hat to Work on Linux Drivers for Future Tech

The metaverse is expected to uproot system design as we know it, and Samsung is one of many hardware vendors re-imagining data center infrastructure in preparation for a parallel 3D world. Samsung is working on new memory technologies that provide faster bandwidth inside hardware for data to travel between CPUs, storage and other computing resources. The company also announced it was partnering with Red Hat to ensure these technologies have Linux compatibility.

today's howtos

How to install go1.19beta on Ubuntu 22.04 – NextGenTips

In this tutorial, we are going to explore how to install go on Ubuntu 22.04 Golang is an open-source programming language that is easy to learn and use. It is built-in concurrency and has a robust standard library. It is reliable, builds fast, and efficient software that scales fast. Its concurrency mechanisms make it easy to write programs that get the most out of multicore and networked machines, while its novel-type systems enable flexible and modular program constructions. Go compiles quickly to machine code and has the convenience of garbage collection and the power of run-time reflection. In this guide, we are going to learn how to install golang 1.19beta on Ubuntu 22.04. Go 1.19beta1 is not yet released. There is so much work in progress with all the documentation.
molecule test: failed to connect to bus in systemd container - openQA bites

Ansible Molecule is a project to help you test your ansible roles. I’m using molecule for automatically testing the ansible roles of geekoops.
How To Install MongoDB on AlmaLinux 9 - idroot

In this tutorial, we will show you how to install MongoDB on AlmaLinux 9. For those of you who didn’t know, MongoDB is a high-performance, highly scalable document-oriented NoSQL database. Unlike in SQL databases where data is stored in rows and columns inside tables, in MongoDB, data is structured in JSON-like format inside records which are referred to as documents. The open-source attribute of MongoDB as a database software makes it an ideal candidate for almost any database-related project. This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of the MongoDB NoSQL database on AlmaLinux 9. You can follow the same instructions for CentOS and Rocky Linux.
An introduction (and how-to) to Plugin Loader for the Steam Deck. - Invidious
Self-host a Ghost Blog With Traefik

Ghost is a very popular open-source content management system. Started as an alternative to WordPress and it went on to become an alternative to Substack by focusing on membership and newsletter. The creators of Ghost offer managed Pro hosting but it may not fit everyone's budget. Alternatively, you can self-host it on your own cloud servers. On Linux handbook, we already have a guide on deploying Ghost with Docker in a reverse proxy setup. Instead of Ngnix reverse proxy, you can also use another software called Traefik with Docker. It is a popular open-source cloud-native application proxy, API Gateway, Edge-router, and more. I use Traefik to secure my websites using an SSL certificate obtained from Let's Encrypt. Once deployed, Traefik can automatically manage your certificates and their renewals. In this tutorial, I'll share the necessary steps for deploying a Ghost blog with Docker and Traefik.

Best Features in Ubuntu 23.04 “Lunar Lobster”

Ubuntu 23.04, codenamed Lunar Lobster, is the latest version of the popular open-source operating system to be released on 20th April. It comes with a host of new features and upgrades designed to enhance the user experience and improve the system’s overall performance.

Top 7 Linux Window Managers

Linux is known for its open-source nature and flexibility. One of the essential components of a Linux system is the window manager. A window manager is responsible for the appearance and management of windows on the screen.

Navigation

Language Selection

Search

Tux Machines Section/s

Authors Information

LWN

Active forum topics

Collabora

9to5Linux

Gnu Planet

FOSS Force

FOSSLinux

Phoronix

OpenSource.com

Kde Planet

Fedora Magazine

Mozilla

Security Leftovers

State of the Software Supply Chain: Secure Coding Takes Spotlight [Ed: They never speak of back doors and severe, unaddressed (if not intentional) bugs in proprietary software and it's not hard to see what their goals are]

The Truth About Your Software Supply Chain [Ed: This FUD is intended to help sell proprietary software and it comes from partners of Microsoft (which likes to attack FOSS by proxy)]

5 Ways DevSecOps Can Manage Software Supply Chains [Ed: Promotion of buzzwords by a site named after these very same buzzwords]

Denim Group and WhiteSource to help customers manage their open source vulnerabilities [Ed: Microsoft-connected WhiteSource to help scare the public about FOSS while selling blobs]

Cryptomining Campaign Targets Linux Servers with Go Malware [iophk: "default passwords at fault, again"]

More in Tux Machines

digiKam 7.7.0 is released

Dilution and Misuse of the "Linux" Brand

Linux Foundation Rewards StepSecurity’s Impact on CI/CD Pipeline Security Fixes for Critical Open Source Projects [Ed: Having just participated in a FUD attack together with a Microsoft proxy, not to mention issued a report with it]

Cardano Roundup: Lace Wallet Announcement, Hoskinson Proposes Self-Regulation, and Linux Foundation Membership [Ed: The "Linux" Foundation misuses or sells the Linux brand, diluting the name and the project's identity]

Can SONiC be the Linux of Networking? [Ed: The Register now abuses the Linux brand to describe something of Microsoft, which is attacking Linux]

Samsung, Red Hat to Work on Linux Drivers for Future Tech

today's howtos

Latest News

Best Features in Ubuntu 23.04 “Lunar Lobster”

Top 7 Linux Window Managers

Tux Machines IRC Logs 2021 Archive

2021

Syndication & Social Media

Support Tux Machines

Recent comments

Who's online

Gizmoz

FOSSMint

Debug Point

LXer

UbuntuBuzz

SparkyLinux

Linux Journal

Linux Today

System 76

Kernel Planet

Purism

LinuxSecurity.com Advisories

Debian

It's FOSS

OMG! Ubuntu!

GamingOnLinux

Slashdot

DW Latest Releases

DistroWatch

FSF

Ubuntu Buzz

LinuxLinks