today's leftovers

-
Framework Laptop Now Enjoys Open-Source EC Firmware
While just one part of the overall equation for a system with open-source firmware, the Framework Laptop has joined the ranks of the Linux-focused laptops these days being backed by open-source firmware for its embedded controller (EC).
Framework announced last month that as part of "open sourcing our firmware" they have now published the EC firmware.
-
An Entire Computer In ICMP Packets | Hackaday
The earliest stored program computer in the modern sense was not one of the names such as ENIAC or Colossus that you might expect, but the Manchester Baby, an experimental prototype computer built at the University of Manchester in 1948. Its 550 tubes gave it the multi-rack room-filling size common to 1940s machines, but its architecture makes it a comparatively simple processor by the standards of today. So simple in fact, that [Hrvoje Čavrak] has recreated it using ICMP packets as its storage, and a custom packet filter as its processor emulation. It’s a project that’s simultaneously both elegant and gloriously pointless, but as he says, “It’s still better than doing drugs or JavaScript”.
-
This sneaky ransomware is now targeting Linux servers, too | ZDNet [Ed: It's not a Linux issue; ZDNet is a very Linux-hostile site, funded partly by Microsoft]
One of the most prolific families of ransomware now has additional Linux and VMware ESXi variants that have been spotted actively targeting organisations in recent months.
Analysis by cybersecurity researchers at Trend Micro identified LockBit Linux-ESXi Locker version 1.0 being advertised on an underground forum. Previously, LockBit ransomware – which was by far the most active ransomware family at one point last year – was focused on Windows.
-
Vulnerabilities that aren’t. Cross Site Tracing / XST
This is the first of my posts that explain why some common security vulnerabilities are most likely not real threats. They should be treated as security enhancements rather than vulnerabilities. Bearing in mind the number of scanning tools that rate such vulnerabilities as “high” it’s no wonder people make the mistake of reporting them. It’s also a reminder to mistrust the output from something until you’ve verified it.
I’m going to start with the not-a-vulnerability mother of them all, the HTTP TRACE (and TRACK) method. Something that could lead to an attack called Cross Site-Tracing (XST). In 20 years I have never seen a real-world exploit for it.
-

- Login or register to post comments
Printer-friendly version- 2082 reads
PDF version
More in Tux Machines
- Highlights
- Front Page
- Latest Headlines
- Archive
- Recent comments
- All-Time Popular Stories
- Hot Topics
- New Members
digiKam 7.7.0 is released
After three months of active maintenance and another bug triage, the digiKam team is proud to present version 7.7.0 of its open source digital photo manager. See below the list of most important features coming with this release.
|
Dilution and Misuse of the "Linux" Brand
|
Samsung, Red Hat to Work on Linux Drivers for Future Tech
The metaverse is expected to uproot system design as we know it, and Samsung is one of many hardware vendors re-imagining data center infrastructure in preparation for a parallel 3D world.
Samsung is working on new memory technologies that provide faster bandwidth inside hardware for data to travel between CPUs, storage and other computing resources. The company also announced it was partnering with Red Hat to ensure these technologies have Linux compatibility.
|
today's howtos
|








.svg_.png)
Content (where original) is available under CC-BY-SA, copyrighted by original author/s.

Recent comments
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago