Language Selection

English French German Italian Portuguese Spanish

Security Leftovers and Proprietary Software

Submitted by Roy Schestowitz on Sunday 20th of June 2021 03:28:53 PM Filed under
Security

  • Security updates for IBM Db2 and AIX close loopholes

    If admins don’t update IBM AIX and Db2, attackers could paralyze the systems via DoS attacks. Security updates are available for download.

  • [Older] Good news for pentesters and network admins: US issues ransomware guidance asking biz to skill up security teams

    The White House has issued a communique to business leaders [PDF] urging them to take the threat of ransomware a bit more seriously.

    The memo, from deputy national security advisor for Cyber and Emerging Technology Anne Neuberger, said the private sector has a “critical responsibility” to protect their businesses against ransomware.

    “All organizations must recognize that no company is safe from being targeted by ransomware, regardless of size or location,” she said.

  • Automakers Race to the IoT and Manufacturing Edge | IT Pro

    Thanks to increased demand for internet-connected cars, autos are driving the manufacturing edge with robotics-driven automation during assembly.

  • Dhanuka Warusadura: GSoC 21: Contributing to Gnome libsecret

    I’m one of the Google Summer of Code (GSoC 2021) interns contributing to the GNOME Foundation. And I'm contributing to the libsecret project.

    [...]

    In simple terms, my goal is to extend current libsecret file database encryption-decryption functionality to work with a TPM. So, the TPM will handle key generation, wrapping-unwrapping of keys and key storage processes. This is very exciting work! Honestly, this was not the case in my early stage of contributing to libsecret. I knew nothing about libsecret, computer security, cryptography or TPMs. Thanks to both my mentors and upstream TSS developers, I'm confidently finding my way around the project. So, thank you Daiki Ueno for guiding me through every step of the way from my initial contribution to making my final project proposal for GSoC. And thank you Anderson Sasaki for helping me out with my questions every single day. Also, I would very much like to thank, upstream TSS developers Peter Huewe, Philip Tricca and Andreas Fuchs for helping me out with all things related to TPMs.

  • What you need to know about ransomware and the future of cyberattacks [iophk: Windows TCO]

    The United States government has already stepped up its response back home. The Biden administration sent a letter to corporations and business leaders with recommendations for how they can better protect themselves from attacks, and a plea that they do so. The DOJ formed a task force dedicated to ransomware, which has already managed to recover part of the ransom Colonial Pipeline paid to its attackers. And FBI director Christopher Wray even compared the ransomware attack epidemic to 9/11.

  • Ransomware highlights the challenges and subtleties of cybersecurity [iophk: Windows TCO]

    But the scale, speed and ease at which that contest can now play out has been transformed. Robert Hanssen, one of the KGB’s most productive agents ever, supplied thousands of pages of classified material to his handlers. But he did so over a period of 20 years, from 1979 to 2001. Vasili Mitrokhin, a disillusioned KGB archivist, pilfered an astonishing 25,000 pages of material between 1972 to 1984, hiding reams of documents under the floor of his dacha, but it took him another eight years to get those secrets to Britain’s MI6.

    By contrast, the Chinese [crackers] who penetrated America’s Office of Personnel Management in 2014 gained access to the records of 21.5m people at a stroke—a haul which, if printed out, would have filled a fleet of lorries. Some see the capacity to steal secrets in such remarkable quantity as qualitatively different from older forms of espionage: not just spying but warfare, or some hybrid of spying and warfare, or something entirely new.

    •      

  • Windows 11: Microsoft Slowly Starts Taking Down Leaked ISO

           

             

    After a leaked copy of Windows 11 began circulating this week, thousands downloaded the ISO file to get an early look at the new operating system. Perhaps surprisingly, Microsoft hasn't yet made much of an effort to contain the leak, but was successful in taking down the ISO from various hosting sites. It also targeted a tech news site, which removed an installation tutorial.

»

More in Tux Machines

digiKam 7.7.0 is released

After three months of active maintenance and another bug triage, the digiKam team is proud to present version 7.7.0 of its open source digital photo manager. See below the list of most important features coming with this release. Read more

Dilution and Misuse of the "Linux" Brand

Samsung, Red Hat to Work on Linux Drivers for Future Tech

The metaverse is expected to uproot system design as we know it, and Samsung is one of many hardware vendors re-imagining data center infrastructure in preparation for a parallel 3D world. Samsung is working on new memory technologies that provide faster bandwidth inside hardware for data to travel between CPUs, storage and other computing resources. The company also announced it was partnering with Red Hat to ensure these technologies have Linux compatibility. Read more

today's howtos

  • How to install go1.19beta on Ubuntu 22.04 – NextGenTips

    In this tutorial, we are going to explore how to install go on Ubuntu 22.04 Golang is an open-source programming language that is easy to learn and use. It is built-in concurrency and has a robust standard library. It is reliable, builds fast, and efficient software that scales fast. Its concurrency mechanisms make it easy to write programs that get the most out of multicore and networked machines, while its novel-type systems enable flexible and modular program constructions. Go compiles quickly to machine code and has the convenience of garbage collection and the power of run-time reflection. In this guide, we are going to learn how to install golang 1.19beta on Ubuntu 22.04. Go 1.19beta1 is not yet released. There is so much work in progress with all the documentation.

  • molecule test: failed to connect to bus in systemd container - openQA bites

    Ansible Molecule is a project to help you test your ansible roles. I’m using molecule for automatically testing the ansible roles of geekoops.

  • How To Install MongoDB on AlmaLinux 9 - idroot

    In this tutorial, we will show you how to install MongoDB on AlmaLinux 9. For those of you who didn’t know, MongoDB is a high-performance, highly scalable document-oriented NoSQL database. Unlike in SQL databases where data is stored in rows and columns inside tables, in MongoDB, data is structured in JSON-like format inside records which are referred to as documents. The open-source attribute of MongoDB as a database software makes it an ideal candidate for almost any database-related project. This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of the MongoDB NoSQL database on AlmaLinux 9. You can follow the same instructions for CentOS and Rocky Linux.

  • An introduction (and how-to) to Plugin Loader for the Steam Deck. - Invidious
  • Self-host a Ghost Blog With Traefik

    Ghost is a very popular open-source content management system. Started as an alternative to WordPress and it went on to become an alternative to Substack by focusing on membership and newsletter. The creators of Ghost offer managed Pro hosting but it may not fit everyone's budget. Alternatively, you can self-host it on your own cloud servers. On Linux handbook, we already have a guide on deploying Ghost with Docker in a reverse proxy setup. Instead of Ngnix reverse proxy, you can also use another software called Traefik with Docker. It is a popular open-source cloud-native application proxy, API Gateway, Edge-router, and more. I use Traefik to secure my websites using an SSL certificate obtained from Let's Encrypt. Once deployed, Traefik can automatically manage your certificates and their renewals. In this tutorial, I'll share the necessary steps for deploying a Ghost blog with Docker and Traefik.

More on Tux Machines: About ● Gallery ● Forum ● Blogs ● Search ● News ● RSS Feed

Part of Bytes Media ● Sister sites below.

TechBytes Techrights button

Powered by Drupal, an open source content management system

Content available under CC-BY-SA CC

© by original authors

Powered by CentOS 6.5 (GNU/Linux), Varnish, and Drupal 6