Proprietary Software and Security Leftovers

-
IoT devices have serious security deficiencies due to bad random number generation [Ed: One way to craft bug doors is to lower the entropy and make room for doubt as to whether it was intentional or not]
The confidentiality and integrity assurances of modern communication protocols rely on algorithms that generate secret tokens that attackers cannot guess. These are used for authentication, encryption, access control and many other aspects of modern security and they all require cryptographically secure random numbers -- sequences of numbers or symbols that are chosen in a way that's unpredictable by an attacker.
-
SolarWinds urges US judge to toss out crap infosec sueball: We got pwned by actual Russia, give us a break
SolarWinds is urging a US federal judge to throw out a lawsuit brought against it by aggrieved shareholders who say they were misled about its security posture in advance of the infamous Russian attack on the business.
Insisting that it was "the victim of the most sophisticated cyberattack in history" in a court filing, SolarWinds described a lawsuit from some of its smaller shareholders as an attempt to "convert this sophisticated cyber-crime" into an unrelated securities fraud court case.
-
grommunio, formerly grammm: New release of the free Exchange alternative [Ed: Automated translation]
The new version should be available from August 17th and expands the supported Linux distributions and available repositories: SUSE Linux Enterprise Server 15 and Red Hat Enterprise Linux 8 as well as derivatives are now on board. A few weeks after the release, Debian 11 and Ubuntu 20.04 will also follow.
In the future, grommunio will also run on ARM64, PowerPC (ppc64le) and IBM’s zSeries systems (s390x). Installation images for VMware (OVA), Docker and the Raspberry Pi 4+ are also added. Migration tools from Exchange (PST), Kopano (DB / Attachments) and generic mail systems (IMAP / CalDAV / CardDAV) are available for those switching.
-
New Anti Anti-Money Laundering Services for Crooks
A new dark web service is marketing to cybercriminals who are curious to see how their various cryptocurrency holdings and transactions may be linked to known criminal activity. Dubbed “Antinalysis,” the service purports to offer a glimpse into how one’s payment activity might be flagged by law enforcement agencies and private companies that try to link suspicious cryptocurrency transactions to real people.
-

- Login or register to post comments
Printer-friendly version- 3285 reads
PDF version
More in Tux Machines
- Highlights
- Front Page
- Latest Headlines
- Archive
- Recent comments
- All-Time Popular Stories
- Hot Topics
- New Members
digiKam 7.7.0 is released
After three months of active maintenance and another bug triage, the digiKam team is proud to present version 7.7.0 of its open source digital photo manager. See below the list of most important features coming with this release.
|
Dilution and Misuse of the "Linux" Brand
|
Samsung, Red Hat to Work on Linux Drivers for Future Tech
The metaverse is expected to uproot system design as we know it, and Samsung is one of many hardware vendors re-imagining data center infrastructure in preparation for a parallel 3D world.
Samsung is working on new memory technologies that provide faster bandwidth inside hardware for data to travel between CPUs, storage and other computing resources. The company also announced it was partnering with Red Hat to ensure these technologies have Linux compatibility.
|
today's howtos
|








.svg_.png)
Content (where original) is available under CC-BY-SA, copyrighted by original author/s.

Recent comments
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago