Internet News Section
Correction releases of the Samba package versions 4.15.2, 4.14.10, and 4.13.14 have been published, addressing 8 vulnerabilities, most of which could lead to complete compromise of the Active Directory domain. Notably, one of the issues had been fixed since 2016, and five since 2020; however, one fix resulted in an inability to start winbindd when the "allow trusted domains" setting was enabled […]
Following the Trojan Source attack method, which utilizes Unicode characters to alter the display order of bidirectional text, another technique for injecting hidden actions applicable to JavaScript code has been published. This new method is based on the use of the unicode character "ㅤ" (code 0x3164, "HANGUL FILLER"), which is categorized as a letter but has no visible content. The Unicode category that includes this character, […]
The release of the JavaScript platform Deno 1.16 has taken place, designed for the isolated execution (without using a browser) of applications written in JavaScript and TypeScript. The project is being developed by Node.js creator Ryan Dahl. The platform's code is written in the Rust programming language and is distributed under the MIT license. Pre-built binaries are available for Linux, Windows, and macOS. The project is similar to the Node.js platform and, like it, […]
Functionality has been added to the Chromium codebase to block the opening of the built-in browser interface for viewing the source code of the current page. Blocking occurs at the level of local policies set by the administrator, by adding a mask "view-source:*" to the list of prohibited URLs, configured using the URLBlocklist parameter. This change complements the existing DeveloperToolsDisabled option, which allows closing access to web developer tools. The need to disable the interface […]
Researchers from Claroty and JFrog have published the results of a security audit of the BusyBox package, widely used in embedded devices and offering a set of standard UNIX utilities packaged as a single executable file. During the review, 14 vulnerabilities were identified, which have already been fixed in the August release of BusyBox 1.34. Almost all issues are non-critical and questionable in terms of their real-world application […]
After a year and a half of development, the release of the ncurses 6.3 library has been announced, designed for creating cross-platform interactive console user interfaces and supporting the emulation of the curses API from System V Release 4.0 (SVr4). The ncurses 6.3 release is source-level compatible with the ncurses 5.x and 6.0 branches but expands the ABI. Among the popular applications built using ncurses are […]
A significant release of the specialized browser Tor Browser 11.0 has been made, which has transitioned to the ESR branch of Firefox 91. The browser focuses on ensuring anonymity, security, and privacy, with all traffic being routed exclusively through the Tor network. Direct access through the current system's standard network connection is not possible, which prevents tracking of the user's real IP address (in the event of a browser hack, attackers could access […]
The developers of the Raspberry Pi project have released the autumn update of the Raspberry Pi OS (Raspbian) distribution, based on the Debian package base. Three builds are prepared for download— a slim version (463 MB) for server systems, a desktop version (1.1 GB), and a full version with an additional set of applications (3 GB). The distribution comes with the PIXEL user environment (a fork of LXDE). For installation from repositories […]
Microsoft has unveiled a significant new release of the open-source .NET 6 platform, developed through the unification of the .NET Framework, .NET Core, and Mono products. .NET 6 allows for the creation of cross-platform applications for browsers, cloud systems, desktops, IoT devices, and mobile platforms, using a unified library and a common build process that is independent of the application type. The .NET SDK 6 builds, .NET […]
After six months of development, the free game engine Godot 3.4 has been released, suitable for creating 2D and 3D games. The engine supports an easy-to-learn language for game logic scripting, a graphical environment for game design, a one-click deployment system, extensive animation capabilities, and physics simulation, along with a built-in debugger and performance profiling system. Game code […]
Michael Aaron Murphy, the lead developer of the Pop!_OS distribution and a contributor to the development of the Redox operating system, confirmed information regarding System76's development of a new desktop environment that is not based on GNOME Shell and is written in Rust. System76 specializes in manufacturing laptops, PCs, and servers pre-installed with Linux. A custom version of Ubuntu Linux is being developed for pre-installation — […]
The release of project Snoop 1.3.1 has been announced, enhancing a forensic OSINT tool that searches for user accounts in public data (open-source intelligence). The program analyzes various websites, forums, and social networks for the presence of the requested username, allowing users to determine where a person with the specified nickname is present. The project is developed based on research materials in the field of scraping […]