Author: Yuri Gagarin

Release of OpenSSH 9.6 with vulnerability fixes

The release of OpenSSH 9.6 has been published, an open-source implementation of a client and server for working with SSH 2.0 and SFTP protocols. The new version addresses three security issues: a vulnerability in the SSH protocol (CVE-2023-48795, the 'Terrapin' attack) that allows a MitM attack to downgrade the connection to use less secure authentication algorithms and disable protection against attacks through side channels that recreate input via […]

Terrapin — a vulnerability in the SSH protocol that can reduce the security of the connection.

A group of researchers from Ruhr University Bochum (Germany) has introduced a new technique for a MitM attack on SSH — Terrapin, which exploits a vulnerability (CVE-2023-48795) in the protocol. An attacker capable of conducting a MitM attack can block the transmission of a message setting protocol extensions during the connection negotiation phase to reduce the security level of the connection. A prototype toolkit for performing the attack has been published on GitHub. In the context of OpenSSH, the vulnerability […]

The Linux kernel 6.8 is set to include the first network driver written in Rust.

Changes have been added to the net-next branch, which develops changes for the Linux kernel 6.8, incorporating an initial Rust wrapper over the phylib abstraction layer and using this wrapper for the ax88796b_rust driver, which provides support for the PHY interface of the Asix AX88772A Ethernet controller (100MBit). The driver consists of 135 lines of code and is positioned as a simple working example for creating network drivers in Rust, ready […]

postmarketOS 23.12 is now available, a Linux distribution for smartphones and mobile devices.

After 6 months of development, the postmarketOS 23.12 release has been presented, which develops a Linux distribution for smartphones based on the Alpine Linux package base, the standard C library Musl, and the BusyBox utility set. The objective of the project is to provide a Linux distribution for smartphones that is independent of the life cycle of support for official firmware and is not tied to typical solutions from major industry players dictating the direction of development. The builds […]

Release of Radix cross Linux distribution 1.9.300

The next version of the Radix cross Linux distribution 1.9.300 is available, built using the proprietary Radix.pro build system, which simplifies the creation of distributions for embedded systems. The distribution builds are available for devices based on ARM/ARM64, MIPS, and x86/x86_64 architectures. The boot images, prepared according to the instructions in the Platform Download section, contain a local package repository and therefore do not require an Internet connection for system installation. […]

SSH3 has been introduced, a variant of the SSH protocol that uses HTTP/3

The first official release of the experimental implementation of the server and client for the SSH3 protocol is available. This is designed as an extension over the HTTP/3 protocol, utilizing QUIC (based on UDP) and TLS 1.3 to establish a secure communication channel and employ HTTP mechanisms for user authentication. The project is being developed by François Michel, a PhD student at the Catholic University of Leuven (Belgium), with the participation of Olivier Bonaventure, […]

Hacking MongoDB infrastructure

In the infrastructure of the company MongoDB, which develops the eponymous document-oriented DBMS and the cloud service MongoDB Atlas, traces of a breach were found. According to a notification sent to the company's clients, the attackers managed to gain access to some corporate systems, which included, among other things, information about customer accounts and user contact details. Evidence indicates that the attackers accessed the data, […]

Mining cards AMD BC-250 with defective chips from Sony PlayStation 5 have appeared on eBay

The AMD BC-250 graphics card was a sort of Frankenstein's monster — it was equipped with defective chips for the Sony PlayStation 5 and was intended for cryptocurrency mining. While mining with graphics cards was profitable, some companies produced such equipment on a large scale using any chips, but now it is more of a museum exhibit, and it has been spotted on eBay, albeit at a high price. […]

People have chosen the new OpenSUSE logo.

The main logo of OpenSUSE became the following option: https://www.opennet.ru/opennews/pics_base/CFD0C5CECEC5D4_1702624501.png For the Tumbleweed project, three options were chosen: https://en.opensuse.org/images/thumb/8/84/Tumbleweed_ALT2.svg/180px-Tumblewee… https://en.opensuse.org/images/e/e0/Thumbleweed_logo_concept.png https://en.opensuse.org/images/d/d0/OpenSUSE-Tumbleweed_Logo_scrub1701.png For Leap: https://www.opennet.ru/opennews/pics_base/CFD0C5CECEC5D4_1702624739.png For openSUSE Slowroll: https://www.opennet.ru/opennews/pics_base/CFD0C5CECEC5D4_1702624763.png And finally, for openSUSE Kalpa: https://www.opennet.ru/opennews/pics_base/CFD0C5CECEC5D4_1702624800.png The election of OpenSUSE logos was conducted as part of the initiative to separate the branding of OpenSUSE and SUSE. Until now, the SUSE and OpenSUSE logos were similar to such an extent […]

Release of Manjaro Linux 23.1 Distribution

The release of Manjaro Linux 23.1 has taken place, built on the basis of Arch Linux and aimed at beginner users. The distribution is notable for its simplified and user-friendly installation process, support for automatic hardware detection, and installation of the necessary drivers for its operation. Manjaro is available in live builds with graphical environments KDE (3.7 GB), GNOME (3.5 GB), and Xfce (3.5 GB). During […]

The openSUSE project has announced an additional vote for logo selection.

Douglas DeMaio, the SUSE manager responsible for marketing and community engagement for openSUSE, announced a decision to hold an additional vote on the logo selection in response to criticism from project participants regarding the voting process and the lack of an option to retain the current logo. The logo competition was conducted considering votes from all interested parties, regardless of their involvement in development, including […]

Evaluation of IPv6 popularity in Cloudflare traffic

Cloudflare analyzed the implementation of the IPv6 protocol in the global network using data traffic from its services as a source. In the content delivery network traffic, the number of users supporting IPv6 is estimated at 35.9% (the share of IPv6 support among bots is 24%, while among humans it is 46%). For comparison, according to the internet registry APNIC, the global level of IPv6 implementation […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster