Internet News Section
Mozilla has announced the default inclusion of Total Cookie Protection for all users. Previously, this mode was only enabled when opening websites in private browsing mode and when selecting strict blocking for unwanted content. The proposed protection method implies the use of an isolated storage for cookies for each site, preventing […]
To protect against account takeover attacks aimed at gaining control over dependencies, the RubyGems package repository has announced the implementation of mandatory two-factor authentication for accounts maintaining the 100 most popular packages (by download count), as well as packages with more than 165 million downloads. The use of two-factor authentication will significantly complicate access in case of compromise […]
Oracle has introduced the preview release of Oracle Linux 9, built on the package base of Red Hat Enterprise Linux 9 and fully binary-compatible with it. An unrestricted installation ISO image, sized at 8 GB, is available for download, prepared for x86_64 and ARM64 (aarch64) architectures. Oracle Linux 9 provides unrestricted and free access to the yum repository with binary […]
A distribution called browser-linux has been proposed, designed to run a console Linux environment in a web browser. This project can be used for a quick introduction to Linux without the need to run virtual machines or boot from external media. A streamlined Linux environment is created using the Buildroot toolset. An emulator called v86 is used to run the resulting build in the browser, translating machine code into WebAssembly representation. The repository management is implemented […]
The developers of Thunderbird and K-9 Mail have announced the merger of their projects. The K-9 Mail client will be renamed "Thunderbird for Android" and will start to be supplied under the new brand. The Thunderbird project has long considered the possibility of creating a version for mobile devices, but during discussions, it concluded that there was no point in scattering efforts and doing double work when they could combine […]
Aqua Security has published the results of a study on the presence of sensitive data in assembly logs publicly available in the Travis CI continuous integration system. Researchers found a way to extract 770 million logs from various projects. In a test upload of 8 million logs, approximately 73 thousand tokens, credentials, and access keys related to various popular services were identified in the obtained data, including […]
The release of postmarketOS 22.06 has been announced, promoting a Linux distribution for smartphones based on the Alpine Linux package base, the standard C library Musl, and the BusyBox utility suite. The goal of the project is to provide a Linux distribution for smartphones that is independent of the support lifecycle of official firmware and not tied to the typical solutions of the major industry players that set the development vector. Builds have been prepared for the PINE64 PinePhone, […]
The community-supported FreeDesktop development infrastructure based on the GitLab platform (gitlab.freedesktop.org) has become unavailable due to the failure of two SSD drives in the distributed storage based on the Ceph filesystem. There are currently no forecasts regarding whether it will be possible to recover all relevant data from GitLab's internal services (mirrors operated for git repositories, but the data for bug tracking and code review may […]
The first alpha release of the new branch of the PHP programming language 8.2 has been announced. The release is scheduled for November 24. Major innovations already available for testing or planned for implementation in PHP 8.2 include: the addition of distinct types "false" and "null," which can be used, for example, to return a function's error completion indication or an empty value. Previously, "false" and "null" could only be used in […]
A vulnerability (CVE-2022-31214) has been identified in the Firejail application sandboxing utility, allowing a local user to gain root privileges on the host system. A working exploit is publicly available, tested on current releases of openSUSE, Debian, Arch, Gentoo, and Fedora with the firejail utility installed. The issue has been fixed in firejail release 0.9.70. As a workaround, configuration settings can be adjusted in (/etc/firejail/firejail.config) […]
The release of the Linux distribution Bottlerocket 1.8.0 has been announced, developed with participation from Amazon for the effective and secure deployment of isolated containers. The distribution's tooling and management components are written in Rust and released under MIT and Apache 2.0 licenses. Bottlerocket supports deployment in Amazon ECS clusters, VMware, and AWS EKS Kubernetes, as well as the creation of custom builds and editions allowing for […]
Barry Kauler, the founder of the Puppy Linux project, has published an experimental distribution EasyOS 4.0, combining Puppy Linux technologies with container isolation for running system components. The distribution is managed through a set of graphical configurators developed by the project. The size of the boot image is 773 MB. Features of the distribution: Each application, as well as the desktop itself, can be launched in separate containers for isolation […]