Security: Patches, NSA, VPN, Fake Security, and 'Free' Certificates
-
Security updates for Tuesday [LWN.net]
Security updates have been issued by Debian (spip), Mageia (libtiff and logrotate), Oracle (java-1.8.0-openjdk and java-11-openjdk), SUSE (gpg2, logrotate, and phpPgAdmin), and Ubuntu (python-bottle).
-
What Are the NSA K8s Guidelines and Why Should You Care? - Container Journal [Ed: Will you trust a project created by Google and which takes security advice from the most notorious back door proponent (NSA)?]
The NSA's Kubernetes hardening guidelines are extensive and can feel overwhelming. Here's how you can comply with them.
-
Why You Should Use a VPN On Your Linux Machine - LinuxTechLab
Linux is an operating system used for many different purposes, including programming, ethical hacking, and simply studying. These activities require constant internet connection and security to protect critical data like code or client information.
Since VPNs are often touted as a go-to tool for securing your internet connections, let’s explore exactly why you should use one on your Linux machine.
-
OSS Security Highlights from the 2022 Open Source Summit North America
Last month, we just concluded the Linux Foundation’s 2022 Open Source Summit North America (OSS NA), when developers, technologists, and community leaders from industry, academia, and government converged in Austin, Texas, from June 21-24 to talk about all things open source. Participants and speakers highlighted open source innovation and efforts to ensure a sustainable open source ecosystem.
What did the summit tell us about the state of OSS security? Several parts of the conference addressed different aspects of this issue – OpenSSF Day, Critical Software Summit, SupplyChainSecurityCon, and the Global Security Vulnerability Summit. Overall, the summit demonstrated an increased emphasis on open source security as a community effort with various stakeholders. More ambitious and innovative approaches to handling the open source security problem – including collaboration, tools, and training – were also introduced. Finally, the summit highlighted the importance for open source users to give back to the community and contribute upstream to the projects they depend on.
-
How to Get a Free SSL Certificate for Your WordPress Website - Make Tech Easier
Imagine if a customer lands on your website to make a purchase but is greeted with a safety warning instead? Not having an SSL certificate can not only result in a serious loss of traffic, but it can also affect your website’s rankings.
However, an SSL certificate costs anywhere from $5/year to $1000/year and can add to the cost of running your small blogs. Luckily, there are several ways to obtain an SSL certificate for your website for free. In this article, we will go over some of the best methods to get an SSL certificate for your WordPress website.