Blog Section
Google is working on providing full builds of the Chrome browser for Fuchsia OS. Fuchsia already offers a browser engine based on the Chromium codebase for running isolated web applications, but the browser as a standalone full product for Fuchsia has not been available, and the platform has primarily been developed for IoT and consumer devices like the Nest Hub. The latest […]
After two years of development, the release of Latte Dock 0.10 has been presented, offering an elegant and simple solution for managing tasks and plasmoids. It also supports a parabolic zoom effect for icons similar to macOS or the Plank dock. The Latte dock is built on the KDE Frameworks and Qt libraries. Integration with the KDE Plasma desktop is supported. The project's code is distributed […]
Web systems where the front end receives connections via HTTP/2 and transmits to the backend over HTTP/1.1 have been vulnerable to a new variant of the "HTTP Request Smuggling" attack. This allows attackers to inject specially crafted client requests into the content of requests from other users being handled in the same stream between the front end and backend. The attack can be used to inject malicious JavaScript code into a session with a legitimate […]
Winners of the annual Pwnie Awards 2021 have been announced, highlighting the most significant vulnerabilities and absurd failures in computer security. The Pwnie Awards are considered the equivalent of the Oscars and Golden Raspberries in the field of computer security. Main winners (list of nominees): Best vulnerability leading to privilege escalation. The award goes to Qualys for identifying the CVE-2021-3156 vulnerability in the sudo utility, which allows obtaining root privileges. […]
The release of EdgeX 2.0 has been announced, an open modular platform designed for interoperability between IoT devices, applications, and services. The platform is hardware- and operating system-agnostic and is developed by an independent working group under the auspices of the Linux Foundation. The platform's components are written in Go and distributed under the Apache 2.0 license. EdgeX enables the creation of gateways that integrate existing IoT devices and […]
The release of PipeWire 0.3.33 has been published, which is developing a next-generation multimedia server intended to replace PulseAudio. PipeWire extends the capabilities of PulseAudio by providing tools for handling video streams, enabling audio processing with minimal latency, and introducing a new security model for access control at the level of individual devices and streams. The project is supported in GNOME and is already applied by default in Fedora Linux. […]
Kees Cook, former chief system administrator at kernel.org and leader of the Ubuntu Security Team, now working at Google on securing Android and ChromeOS, expressed concern about the current process of fixing bugs in stable kernel branches. Approximately one hundred fixes are included in stable branches each week, and after the closure of the change acceptance window, the next release approaches one thousand […]
Osterman Research has published results from a study on the usage of open components with unpatched vulnerabilities in custom proprietary software (COTS). The study examined five categories of applications — web browsers, email clients, file transfer programs, messaging apps, and platforms for online meetings. The results were alarming — the use of open code with […]
Testing of a new installer began in the nightly builds of Ubuntu Desktop 21.10. This installer is implemented as an extension of the low-level installer curtin, which is already used in the Subiquity installer, the default for Ubuntu Server. The new installer for Ubuntu Desktop is written in Dart and uses the Flutter framework to build the user interface. The design of the new installer is crafted with modern style in mind […]
The InitWare project, developing an experimental fork of the system manager systemd, has implemented support for the OpenBSD operating system at the level of user service management (user manager — the "iwctl —user" mode allows users to manage their own services). PID1 and system services are currently not supported. Previously, similar support was provided for DragonFly BSD, and the ability to manage system services and user login for NetBSD […]
CodeWeavers has released version 21.0 of Crossover, a package based on Wine code designed to run programs and games written for the Windows platform. CodeWeavers is among the key contributors to the Wine project, sponsoring its development and integrating innovations made for its commercial products back into the project. The source code for the open components of CrossOver 21.0 can be downloaded on this page. […]
The release of Chrome OS 92 has been published, based on the Linux kernel, using the upstart system manager, ebuild/portage build tools, open components, and the Chrome 92 web browser. The user environment of Chrome OS is limited to a web browser, and standard applications are replaced with web applications. Nevertheless, Chrome OS includes a full multi-window interface, desktop, and taskbar. The build of Chrome OS 92 […]