Blog Section
A new malware for Windows called Keyzetsu Clipper has been reported on the GitHub platform, targeting user cryptocurrency wallets. To deceive users, attackers create fake repositories with names of popular projects, designed to look legitimate, tricking victims into downloading malware that threatens the security of their crypto assets. Image source: Vilkasss / Pixabay Source: 3dnews.ru
On March 25, 2024, the long-awaited Taskwarrior 3.0.0 was released. Taskwarrior is an advanced task and time management tool for the command line (GUI front-ends, libraries, and plugins are also available). Key changes include a complete rewrite of the synchronization code, with taskserver/taskd no longer supported. It is recommended to use cloud synchronization, with taskchampion-sync-server also available. The update is breaking, requiring the database to be exported from 2.x and re-imported […]
An experimental release of the dynamic tracing toolkit DTrace for Linux 2.0.0-1.14 has been introduced, implemented as a user-space process using the eBPF subsystem and built-in tracing mechanisms provided by the Linux kernel. Functionally, the eBPF-based implementation of DTrace is similar to the first implementation of DTrace for Linux, which was made as a kernel module. The project code is distributed under the GPLv2 license. The toolkit can […]
The 4% threshold was first surpassed in February. In March, this level was successfully maintained. According to StatCounter data, the share of Linux on desktops has increased by more than 1.2% over the past year. Here is the monthly Linux desktop share statistics: January 2023 - 2.91% February 2023 - 2.94% March 2023 - 2.85% April 2023 - 2.83% May 2023 - 2.7% June 2023 - 3.07% […]
The OpenZiti 1.0 toolkit has been released, allowing the integration of distributed networking features and service access in an isolated network environment into applications. OpenZiti enables the deployment of an application-specific overlay network that operates over the regular internet and uses mesh routing, where each network point connects through neighboring points. The project code is written in Go and […]
The organization ISRG (Internet Security Research Group), which is the founder of the Let’s Encrypt project and promotes the development of technologies to enhance internet security, has introduced the zlib-rs project to create a secure alternative to the zlib data compression library. The zlib-rs code is written in Rust and is distributed under the Zlib license. Development is conducted with reference to the zlib-ng project, which is advancing a high-performance variant of zlib. The project has developed […]
The release of the I2P 2.5.0 anonymous network and the i2pd 2.51.0 C++ client has taken place. I2P is a multilayer anonymous distributed network that operates over the regular internet, actively utilizing end-to-end encryption to ensure anonymity and isolation. The network is built in a P2P mode and formed through the resources (bandwidth) provided by the network users, which allows it to function without centralized servers (communications within the network […
The developers of the Gentoo distribution have announced the project's transition to the oversight of the non-profit organization SPI (Software in the Public Interest), which is delegated to handle administrative tasks unrelated to technology. This move will eliminate the need to maintain its own legal entity, reduce administrative burden, and increase attractiveness for commercial companies wishing to make donations, as such donations will provide a tax deduction […
Applications that execute scripts in bat and cmd format on the Windows platform using standard process launch functions are vulnerable to an exploit that allows the execution of custom code if arguments are passed without separately escaping special characters. The vulnerability has been dubbed BatBadBut and appears in applications that use standard libraries of languages such as Rust, PHP, Node.js, Python, Ruby, Go, […
The results of the competition among graphic designers, organized to update the branding elements of the distribution, have been summarized. The contest aimed to create a recognizable and modern design that reflects the essence of Kubuntu, appealing to both newcomers and longtime users, and harmoniously integrating with the stylistic design of KDE and Ubuntu. Based on the works submitted in the competition, recommendations have been formulated for modernizing the project's logo, splash screen […
A group of researchers from the Free University of Amsterdam has identified a new attack method called 'Native BHI' (CVE-2024-2201), which allows the content of the Linux kernel memory to be determined on systems with Intel processors when an exploit is executed in user space. When applied to virtualization systems, an attacker from the guest system can determine the memory contents of the host environment or other guest systems. The Native BHI method offers a different […]
After five months of development, the release of library OpenSSL 3.3.0 has been formed with implementations of SSL/TLS protocols and various encryption algorithms. Support for OpenSSL 3.3 will continue until April 2026. Support for the previous branches OpenSSL 3.2, 3.1, and 3.0 LTS will last until November 2025, March 2025, and September 2026, respectively. The project’s code is distributed under the Apache 2.0 license. […]