Language Selection

English French German Italian Portuguese Spanish

Security Leftovers

Filed under
Security
  • 6 top OSINT tools: Find sensitive public info before hackers do

    The same OSINT tactics used for spycraft can now be applied to cybersecurity. Most organizations have vast, public-facing infrastructures that span many networks, technologies, hosting services and namespaces. Information can be stored on employee desktops, in legacy on-prem servers, with employee-owned BYOD devices, in the cloud, embedded inside devices like webcams, or even hidden in the source code of active apps and programs.

  • 3 steps toward improving container security

    As developers increasingly make use of containers, securing them becomes more and more important. Gartner has named container security one of its top 10 concerns for this year in this report, which isn’t surprising given their popularity in producing lightweight and reusable code and lowering app dev costs.

    In this article, I’ll look at the three basic steps involved in container security: securing the build environment, securing the underlying container hosts, and securing the actual content that runs inside each container. To be successful at mastering container security means paying attention to all three of these elements.

    If you step back a moment, container security isn’t all that different from ordinary application security. If you replace the appropriate words in the above paragraph, you could have written this post 10, 20, or even 30 years ago with a few other modifications. But containers do have a few oddities and new twists that are worth highlighting. To get started, I suggest you listen to the recorded talk by Red Hat’s Dan Walsh about general container security considerations.

  • Good guy, Microsoft: Multi-factor auth outage gives cloudy Office, Azure users a surprise three-day weekend

    Microsoft is battling to fix its knackered multi-factor authentication system that today blocked customers from logging into their Microsoft 365 and Azure services.

    The Redmond giant confirmed on Friday an unspecified glitch prevented customers in North America from receiving the multi-factor auth (MFA) codes they need to sign into their cloud-based accounts. Obviously, those not using MFA are not affected.

    Though Azure and Microsoft 365 MFA users initially were locked out, by mid-day US Pacific Time, Azure was said to be working again, leaving 365 subscribers trying to log in high and dry.

    "We've taken multiple actions to mitigate impact and are working to validate service restoration," Microsoft told Microsoft 365 aka Office 365 customers. "In parallel, we're continuing to review system logs and service telemetry to better understand the underlying root cause."

  • Update Warning Issued For Millions Of Microsoft Windows 10 Users

    At this stage, it isn’t clear what is the cause with users citing BSOD failures with cldflt.sys, Affinity applications and more but all have found that uninstalling KB4517389 fixes the problem, which pins the source squarely on this already troubled update. Needless to say, the problem with a BSOD bug is you may not be lucky enough to get back to your desktop to do this.

    If you are, then navigate to Control Panel > Programs > Programs and Features > Installed updates > KB4517389 > Uninstall

    KB4517389 has already rolled out to millions of users but for hundreds of millions who have not received it yet, use Microsoft’s Show or Hide updates tool to block it from installing on your PC.

More in Tux Machines

Games: We Happy Few, Helvetii, Starcom: Nexus and More

  • We Happy Few for Linux and Mac being refunded, to get an "unofficial" beta

    After a long road, the waiting on We Happy Few for both Linux and Mac is about to come to an end. Not the happiest of endings either. Originally funded on Kickstarter back in 2015 for $334,754 CA, Linux and Mac support was then announced for We Happy Few after the campaign had started. In 2017, it was announced that Compulsion Games teamed up with Gearbox Publishing to complete it.

  • Tremendous looking 2D action game Helvetii confirmed to be coming to Linux

    After a successful Kickstarter campaign, the supremely stylish 2D action game Helvetii has now been confirmed to be launching with Linux support next year. While their crowdfunding campaign didn't initially confirm Linux support, after it finished they announced that after evaluating it they've decided to do it and they "had actually quite a lot of demand" for it too. They said supporting Linux is "actually little work on our end (and we do have the ability to test it), we thought that we might as well do it".

  • Wx3 Labs looking into Linux support for Starcom: Nexus

    Starcom: Nexus from Wx3 Labs is a striking looking open-world space action adventure and they've been looking into getting it running on Linux. In a post on Steam, one of the team noted they're using Unity making it possible but "some testing and fixes are expected". They went over attempting to test with a live Linux USB stick which has enabled them to see it running, and they mentioned to reply to post if you have the game and want to test the Linux version.

  • Linux Gaming News Punch - Episode 21

    Prepare for a fistful of news, as the Linux Gaming News Punch - Episode 21 has arrived to go over some recent interesting topics to allow you to keep up with all the news. For those just joining, this is a quick take roundup on recent Linux gaming news. Meant for those who struggle to keep up or just want a little Linux gaming news on the go. Audio-only files and feed links below the video.

  • Interrogation: You will be deceived to arrive on Linux on December 5

    Critique Gaming and Mixtvision have announced that their immersive noir-styled psychological detective-thiller with conversational puzzles, Interrogation: You will be deceived, is going to release on December 5. Previously covered here on GamingOnLinux back in August, after it caught my eye with the incredible rotoscoped almost-monochrome art. You are tasked with saving the city from a terrorist plot by interrogating suspects as the clock ticks down. To do so, you have to mix between interrogations and managing your team's reputation with time running out.

Growing the Linux app Ecosystem at LAS 2019

The third Linux Application Summit (LAS) kicks off this week in Barcelona, Spain. Formerly organised under the GNOME project, known as Libre Application Summit, the new LAS is a joint effort between the KDE and GNOME projects. The aim of the conference is to encourage the growth of a vibrant Linux application ecosystem. Canonical are proud sponsors of LAS 2019, and are sending along a team to represent Ubuntu and Snapcraft. The volunteers on the organising committee each have a long history in the Linux application community. They’ve all worked on platforms and infrastructure to enable new software development for Linux. I took some time to chat with some of the team, and what LAS means for them. Aleix Pol, representing KDE, has worked on Linux applications for a while, and is hopeful for increased collaboration between application developers and platform maintainers. Aleix told me; “While we [GNOME and KDE] are sizeable organisations, we have massive tasks at hand. We need to create an environment where people can come and create their solutions for all of us.” This applies both for application developers and those who work primarily on the platforms themselves. He continued; “With GNOME, we share pieces of software, we share users and we even share some of our dreams. Meeting, talking and collaborating can only be beneficial”. Aleix also highlighted the benefits of meeting in person at events like LAS, “There’s a very different kinds of visitor. The ones who have been around will be putting faces to nicknames and having these discussions that IRC and mailing lists can’t sustain”. Read more

Kdenlive 19.08.3 is out

The last minor release of the 19.08 series is out with a fair amount of usability fixes while preparations are underway for the next major version. The highlights include an audio mixer, improved effects UI and some performance optimizations. Grab the nightly AppImage builds, give it a spin and report any issues. Read more

Today in Techrights