Category: Blog

Hertzbleed — a new family of side-channel attacks affecting modern CPUs

A group of researchers from the University of Texas, the University of Illinois, and the University of Washington has revealed information about a new family of side-channel attacks (CVE-2022-23823, CVE-2022-24436) dubbed Hertzbleed. The proposed attack method is based on the features of dynamic frequency management in modern processors and affects all current Intel and AMD CPUs. The issue may also manifest in processors from other manufacturers that support dynamic frequency scaling […]

Release of the EuroLinux 9.0 distribution, compatible with Red Hat Enterprise Linux

The release of the EuroLinux 9.0 distribution has been published, prepared by recompiling the source texts of the Red Hat Enterprise Linux 9.0 packages and is fully binary compatible with it. Installation images of 6.5 GB (appstream) and 1.4 GB are available for download. The distribution is functionally analogous to RHEL 9.0 with the added innovations. EuroLinux builds are available both through a paid subscription and for free. […]

Valve has released Proton 7.0-3, a package for running Windows games on Linux

Valve has released Proton 7.0-3, which is based on the Wine project’s codebase and aims to enable the launch of Windows-created gaming applications on Linux that are listed in the Steam catalog. The project’s developments are distributed under the BSD license. Proton allows Windows-only games to be run directly in the Linux Steam client. The package includes […]

Release of the free CAD software FreeCAD 0.20

After over a year of development, the release of the open source parametric 3D modeling system FreeCAD 0.20 has been published, featuring flexible customization options and increased functionality through the addition of plugins. The interface is built using the Qt library. Plugins can be created in Python. It supports saving and loading models in various formats, including STEP, IGES, and STL. The FreeCAD code is distributed under […]

In Firefox, full Cookie isolation mode is enabled by default.

Mozilla has announced the default inclusion of Total Cookie Protection for all users. Previously, this mode was only enabled when opening websites in private browsing mode and when selecting strict blocking for unwanted content. The proposed protection method implies the use of an isolated storage for cookies for each site, preventing […]

RubyGems is transitioning to mandatory two-factor authentication for popular packages.

To protect against account takeover attacks aimed at gaining control over dependencies, the RubyGems package repository has announced the implementation of mandatory two-factor authentication for accounts maintaining the 100 most popular packages (by download count), as well as packages with more than 165 million downloads. The use of two-factor authentication will significantly complicate access in case of compromise […]

Oracle Linux 9 Preview Release

Oracle has introduced the preview release of Oracle Linux 9, built on the package base of Red Hat Enterprise Linux 9 and fully binary-compatible with it. An unrestricted installation ISO image, sized at 8 GB, is available for download, prepared for x86_64 and ARM64 (aarch64) architectures. Oracle Linux 9 provides unrestricted and free access to the yum repository with binary […]

The browser-linux project develops a Linux distribution for running in a web browser

A distribution called browser-linux has been proposed, designed to run a console Linux environment in a web browser. This project can be used for a quick introduction to Linux without the need to run virtual machines or boot from external media. A streamlined Linux environment is created using the Buildroot toolset. An emulator called v86 is used to run the resulting build in the browser, translating machine code into WebAssembly representation. The repository management is implemented […]

The Merger of Thunderbird and K-9 Mail Projects

The developers of Thunderbird and K-9 Mail have announced the merger of their projects. The K-9 Mail client will be renamed "Thunderbird for Android" and will start to be supplied under the new brand. The Thunderbird project has long considered the possibility of creating a version for mobile devices, but during discussions, it concluded that there was no point in scattering efforts and doing double work when they could combine […]

Around 73,000 tokens and passwords of open projects were discovered in the public logs of Travis CI.

Aqua Security has published the results of a study on the presence of sensitive data in assembly logs publicly available in the Travis CI continuous integration system. Researchers found a way to extract 770 million logs from various projects. In a test upload of 8 million logs, approximately 73 thousand tokens, credentials, and access keys related to various popular services were identified in the obtained data, including […]

Release of postmarketOS 22.06, a Linux distribution for smartphones and mobile devices

The release of postmarketOS 22.06 has been announced, promoting a Linux distribution for smartphones based on the Alpine Linux package base, the standard C library Musl, and the BusyBox utility suite. The goal of the project is to provide a Linux distribution for smartphones that is independent of the support lifecycle of official firmware and not tied to the typical solutions of the major industry players that set the development vector. Builds have been prepared for the PINE64 PinePhone, […]

Failure in the GitLab infrastructure of FreeDesktop, affecting the repositories of many projects.

The community-supported FreeDesktop development infrastructure based on the GitLab platform (gitlab.freedesktop.org) has become unavailable due to the failure of two SSD drives in the distributed storage based on the Ceph filesystem. There are currently no forecasts regarding whether it will be possible to recover all relevant data from GitLab's internal services (mirrors operated for git repositories, but the data for bug tracking and code review may […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster