Due to the increasing cases of repository hijacking in major projects and the promotion of malicious code through the compromise of developer accounts, GitHub is implementing universal enhanced account verification. Mandatory two-factor authentication will be introduced separately for maintainers and administrators of the 500 most popular NPM packages at the beginning of next year. From December 7, 2021, to January 4, 2022, […]
Roskomnadzor has officially amended the unified register of prohibited sites, blocking access to www.torproject.org. All IPv4 and IPv6 addresses of the project's main site have been included in the register, but additional sites not associated with the distribution of Tor Browser, such as blog.torproject.org, forum.torproject.net, and gitlab.torproject.org, remain accessible. The block also does not affect official mirrors such as tor.eff.org, gettor.torproject.org, and tb-manual.torproject.org. The version for […]
The FreeBSD 12.3 release has been presented, published for the architectures amd64, i386, powerpc, powerpc64, powerpcspe, sparc64, and armv6, armv7, and aarch64. Additionally, images for virtualization systems (QCOW2, VHD, VMDK, raw) and cloud environments such as Amazon EC2 have been prepared. The release of FreeBSD 13.1 is expected in the spring of 2022. Key innovations include: a script /etc/rc.final has been added, which is executed at the final stage of operation after all […]
The release of the Firefox 95 web browser has occurred. Additionally, an update to the long-term support branch — 91.4.0 — has been formed. The Firefox 96 branch will soon enter beta testing, with the release scheduled for January 11. Key innovations: An additional level of isolation has been implemented for all supported platforms, based on RLBox technology. The proposed isolation layer blocks security issues […]
The release of the Nzyme 1.2.0 toolkit has been announced, designed for monitoring wireless network traffic to identify malicious activity, deployment of rogue access points, unauthorized connections, and execution of standard attacks. The project code is written in Java and is distributed under the SSPL (Server Side Public License), which is based on AGPLv3 but is not open due to discriminatory usage requirements regarding […]
Miguel Ojeda, the author of the Rust-for-Linux project, has proposed a third option for device driver development components in the Rust language for consideration by Linux kernel developers. Rust support is considered experimental but has already been approved for inclusion in the linux-next branch. Development is funded by Google and the ISRG (Internet Security Research Group), which is the founding organization of the Let’s Encrypt project and promotes […]
Quad9 has released a court ruling regarding the appeal filed in response to a court order blocking pirate sites at the level of public DNS resolvers of Quad9. The court denied the appeal and did not support the request to suspend the court injunction previously issued in a case initiated by Sony Music. Quad9 representatives stated that they will not stop and will attempt to appeal the decision in court […]
The Document Foundation has announced the release of corrective updates for the free office suite LibreOffice versions 7.2.4 and 7.1.8, which have updated the bundled cryptographic library NSS to version 3.73.0. This update addresses a critical vulnerability in NSS (CVE-2021-43527) that could be exploited through LibreOffice. The vulnerability allows for the execution of arbitrary code when validating a specially crafted digital signature of a document. […]
After eight months of development, the release of the free hypervisor Xen 4.16 has been published. Companies such as Amazon, Arm, Bitdefender, Citrix, and EPAM Systems participated in the development of the new release. Updates for the Xen 4.16 branch will continue until June 2, 2023, and vulnerability patches will be published until December 2, 2024. Key changes in Xen 4.16: In TPM Manager, […]
Steinar H. Gunderson, one of the authors of the Snappy compression library and a participant in the development of IPv6, announced his return to Google, where he previously worked on image search services and offline maps, but will now be involved in the development of the Chrome browser. Prior to this, Steinar worked for five years at Oracle on modernizing the optimizer […]
After a year of development, the release of VeraCrypt 1.25.4, a fork of the TrueCrypt disk encryption system, has been published. The code developed by the VeraCrypt project is distributed under the Apache 2.0 license, while borrowings from TrueCrypt continue to be provided under the TrueCrypt License 3.0. Ready builds are available for Linux, FreeBSD, Windows, and macOS. VeraCrypt is notable for replacing the RIPEMD-160 algorithm used in TrueCrypt […]
The EPEL (Extra Packages for Enterprise Linux) project, which maintains a repository of additional packages for RHEL and CentOS, has announced the creation of a repository variant for Red Hat Enterprise Linux 9-beta and CentOS Stream 9 distributions. Binary builds are created for x86_64, aarch64, ppc64le, and s390x architectures. At this stage of the repository's development, only a few additional packages supported by the Fedora community have been published […]