I’ve been using Drupal, an open source content management system (CMS), for the websites I manage for over four years now. Though there may be some quirks in working with an open source product, I cannot imagine doing it any other way.
The Java and Python runtimes fail to properly validate FTP URLs, which can potentially allow attackers to punch holes through firewalls to access local networks.
On Saturday, security researcher Alexander Klink disclosed an interesting attack where exploiting an XXE (XML External Entity) vulnerability in a Java application can be used to send emails.
Microsoft has no plans to issue updates for two vulnerabilities, one a zero-day and the other being one publicised by Google, before the scheduled date for its next round of updates rolls around in March.
The company did not issue any updates in February, even though it had been scheduled to switch to a new system from this month onwards.
It gave no reason for this, apart from saying: "This month, we discovered a last minute issue that could impact some customers and was not resolved in time for our planned updates today.
"After considering all options, we made the decision to delay this month’s updates. We apologise for any inconvenience caused by this change to the existing plan."
The Google-disclosed bug was made public last week, and is said to be a flaw in the Windows graphic device interface library that can be exploited both locally and remotely to read the contents of a user's memory.
Microsoft has patched "critical" security vulnerabilities in its browsers, but has left at least two zero-day flaws with public exploit code.
The software giant released numerous patches late on Tuesday to fix flaws in Adobe Flash for customers using Internet Explorer on Windows 8.1 and later, as well as Edge for Windows 10.
When software is developed using open source methods, an upstream repository of the code is accessible to all members of the project. Members contribute to the code, test it, write documentation and can create a solution from that code to use or distribute under license. If an organization follows the main stream or branch of the upstream code their solution will receive all the changes and updates created in the upstream repository. Those changes simply “flow down” to the member’s solution. However, if a member organization forks the code — if they create a solution that strays from the main stream — their solution no longer receives updates, fixes and changes from the upstream repository. This organization is now solely responsible for maintaining their solution without the benefit of the upstream community, much like the baby salmon that took a tributary and then have to fend for themselves rather than remain in the main stream and receive the benefit and guidance of the other salmon making their way to the ocean.
Hewlett Packard Enterprise ( NYSE : HPE ) and Red Hat, Inc. ( NYSE : RHT ) announced today they are working together to accelerate the deployment of network functions virtualization (NFV) solutions based on fully open, production-ready, standards-based infrastructures. HPE plans to offer ready-to-use, pre-integrated HPE NFV System solutions and HPE Validated Configurations incorporating Red Hat OpenStack Platform and Red Hat Ceph Storage for communications service providers (CSPs).
As part of our commitment to delivering open technologies across many computing architectures, Red Hat has joined the OpenPOWER Foundation, an open development community based on the POWER microprocessor architecture, at the Platinum level. While we already do build and support open technologies for the POWER architecture, the OpenPOWER Foundation is committed to an open, community-driven technology-creation process – something that we feel is critical to the continued growth of open collaboration around POWER.
XDC 2017, the annual X.Org Developers' Conference, was announced last year for happening in Mountain View, California and hosted by Google but given the current US political climate, the X.Org Foundation was questioning whether to move the event outside of the United States.
The Sharing and Resue Conference 2017 is about modernisation of eGovenment services, and the key role of sharing and reuse of IT solutions. Working together on IT solutions allows public administrations to improve and develop their eGovernment services and boosts government modernisation.
By sharing and reusing IT solutions public sector organisations can build interoperable and standardised services, while lowering costs.
Last year, experts from Uber, Twitter, PayPal, and Hubspot, and many other companies shared how they use Apache Mesos at MesosCon events in North America and Europe. Their talks helped inspire developers to get involved in the project, try out an installation, stay informed on project updates, and generally get pumped to use and participate in Apache Mesos.
With Valve having published a binary-only RADV Radeon Vulkan driver build for their beta of SteamVR on Linux, I did some poking out of curiosity to see the differences to the mainline RADV driver in Mesa. Out of curiosity I also did a comparison to see how the Vulkan capabilities compare to the proprietary AMDGPU-PRO Vulkan driver.
Netflix has released the source code of a web application called Stethoscope for evaluating the security of mobile and desktop computing devices.
The software, covered by the Apache 2.0 license, intended for employees of organizations that use a device management service. Netflix hopes that employees using the toolkit will learn from it and apply the app's recommendations to personal devices that are not under active management.
ReactOS 0.4.4 arrived last week as the latest maintenance update to the stable 0.4 series of the open source Windows-compatible operating system, bringing better rendering for many applications and initial printing support.
In most of the places I have worked there has been a centralized computer and application standard that was more or less mandatory for all employees. There are benefits of such an environment, which I will not go into in this piece, but for me, as an open source and Linux enthusiast, I try to use the tools I'm used to and like.
So, I immediately install my favorite applications when I receive a new standardized Windows-based work computer, something I have been lucky enough to be allowed to do.
Companies will almost certainly face challenges establishing their open source compliance program. In this series of articles, based on The Linux Foundation’s e-book, Open Source Compliance in the Enterprise, we discuss some of the most common challenges, and offer recommendations on how to overcome them.