Security and Proprietary Software Leftovers
-
KeePassXC now builtin to EasyOS
I posted about compiling KeePassXC in OE:
https://bkhome.org/news/202306/keepassxc-275-compiled-in-oe.html
Have decided to have both KeePassXC and Symphytum builtin.
I have configured KeePassXC so that it appears in the tray at startup:
Click on the tray icon and it pops up. I pre-created a database, in /files/database/keepassxc, with password "woofwoof". Snapshot:
-
Security updates for Friday [LWN.net]
Security updates have been issued by Debian (asterisk, lua5.3, and trafficserver), Fedora (tang and trafficserver), Oracle (.NET 7.0, c-ares, firefox, openssl, postgresql, python3, texlive, and thunderbird), Red Hat (python27:2.7 and python39:3.9 and python39-devel:3.9), Scientific Linux (c-ares), Slackware (cups), SUSE (cups, dav1d, google-cloud-sap-agent, java-1_8_0-openjdk, libX11, openssl-1_0_0, openssl-1_1, openssl-3, openvswitch, and python-sqlparse), and Ubuntu (cups, dotnet6, dotnet7, and openssl).
-
[Cr]acker responsible for 2020 Twitter breach sentenced to prison
Three years after one of the most visible hacks in recent history played out in real-time in front of millions of Twitter users, one of the hackers responsible for the breach will now serve time in federal prison.
Joseph James O’Connor, 24, was sentenced Friday in a New York federal court to five years in prison after pleading guilty in May to four counts of computer hacking, wire fraud and cyberstalking. O’Connor also agreed to forfeit at least $794,000 to the victims of his crimes.
-
New laptops are riddled with 'bloatware' [Ed: No, with Windows]
Pre-installed software - known as bloatware - is rife on new laptops. We reveal the most common brands featured on the latest laptops and explain how to get rid of them
-
OpenAI Responds to ChatGPT User Account Credentials Found on Dark Web
Over 100,000 ChatGPT user credentials have been dumped on the dark web's markets since June 2022, something that poses a significant risk considering what can be contained within a single chat session.
-
To pay or not to pay? Ransomware attacks are the new kidnapping [Ed: This is primarily a Microsoft Windows problem. Don't pay for Windows, don't use it either.]
From our vantage point in the UK, it’s hard not to be envious of the rigorous public debate taking place in Australia on the future legality of ransomware payments.
-
Sanctions Issued in Case Where Lawyers Cited ChatGPT-Hallucinated Precedents
From today's opinion in Mata v. Avianca, Inc., by Judge Kevin Castel (S.D.N.Y.), which stems from an incident blogged about here last month (and see this follow-up): In researching and drafting court submissions, good lawyers appropriately obtain assistance from junior lawyers, law students, contract lawyers, legal encyclopedias and databases such as Westlaw and LexisNexis.
-
MosaicML releases open-source 30B parameter AI model for enterprise applications
MosaicML Inc., a generative artificial intelligence startup that provides infrastructure for companies to run machine learning services, announced the open-source availability of MPT-30B, the company’s most advanced MosaicML Pretrained Model foundation series for commercially licensed AI applications.