Internet News Section
A change has been made to the OpenBSD codebase that defaults the tar utility to use the PAX format for creating archives. This change will be included in the OpenBSD 7.6 release. The use of the PAX format allows for longer file names, the handling of links, the use of more precise timestamps, and the archiving of very large files. Among the drawbacks of switching to […]
The OpenSSF (Open Source Security Foundation), established under the auspices of the Linux Foundation to enhance the security of open source software, has warned the community about detected activities related to attempts to gain control over popular open projects, reminiscent of the tactics used by attackers in preparation for embedding a backdoor into the xz project. Similar to the attack on xz, dubious individuals previously deep in […]
Oracle has released a patch for the VirtualBox virtualization system version 7.0.16, which includes 15 fixes. In addition to these changes, the new version addresses 13 vulnerabilities, 7 of which are labeled as critical (with four issues rated 8.8 out of 10, and three at 7.8 out of 10). Details about the vulnerabilities are not disclosed, but judging by the assigned severity level, […]
The governing council of the Gentoo Linux distribution has approved rules that prohibit the acceptance of any content created using AI tools that process natural language requests, such as ChatGPT, Bard, and GitHub Copilot. Such tools should not be used when writing Gentoo components' code, creating ebuilds, preparing documentation, and submitting bug reports. The main concerns leading to the ban on AI tools […]
The release of the main branch nginx 1.25.5 has been completed, continuing the development of new features. Only changes related to fixing serious bugs and vulnerabilities are made in the concurrently maintained stable branch 1.24.x. The stable branch 1.26 will be formed based on the main branch 1.25.x in the future. The project code is written in C and is distributed under the BSD license. Changes include: In […]
The release of the Firefox 125 web browser has occurred, and an update to the long-term support branch 115.10.0 has been formed. Due to issues identified at a late stage, the 125.0 build was canceled, and the release 125.0.1 has been announced instead. The Firefox 126 branch has entered beta testing, with a release scheduled for May 14. Key new features in Firefox 125 include: The built-in PDF viewer has included […]
Sberbank, according to RBC, is developing its own ERP system that will serve as an alternative to the German products of SAP, which has exited the Russian market. The investment amount in the Sberbank project has not been disclosed, but market participants indicate that it could be in the billions of rubles. In 2022, SAP announced its departure from Russia. On March 20, 2024, the company closed access to its cloud services for Russian users […]
A dangerous vulnerability (CVE-2024-31497) has been identified in PuTTY, a popular SSH protocol client for the Windows platform. This vulnerability allows for the reconstruction of a user’s private key generated using the ECDSA algorithm with the NIST P-521 elliptic curve (ecdsa-sha2-nistp521). To derive the private key, it is sufficient to analyze about 60 digital signatures generated by the problematic key. The vulnerability is present starting from PuTTY version 0.68 and has also affected products […]
After a year and a half of development, the GNU project has released version 0.10 of the free electronic payment system GNU Taler, which provides anonymity to buyers while maintaining the ability to identify sellers to ensure transparency in tax reporting. The system does not allow tracking of where a user spends their money but provides means to track incoming funds (the sender remains anonymous), addressing the issues inherent to BitCoin […]
The number of non-buffered drives capable of delivering over 7 GB/s is steadily increasing. Adata Legend 900 is another such solution built on the Chinese Maxiotech controller and the Chinese YMTC flash memory.Source: 3dnews.ru
The developers behind the Servo browser engine have introduced an initiative to enhance modularity and move away from using the low-level APIs of the JavaScript engine SpiderMonkey, developed by Mozilla and utilized in Servo to support JavaScript and WebAssembly. In the future, Servo plans to transition to a higher-level API and abstraction layer for interacting with JavaScript engines, allowing them to eliminate unsafe direct calls to […]
GitLab has blocked the repository of the BPC (Bypass Paywalls Clean) project, which is developing a browser extension for accessing materials distributed through paid subscriptions (Paywall). The deletion was prompted by a complaint to GitLab regarding the extension's violation of the U.S. Digital Millennium Copyright Act (DMCA). Currently, the developers of the extension are considering migrating the project to another Git hosting platform. […]