Dozens of NGOs hit by hack on US fundraising database

A major ransomware attack has affected dozens of international NGOs and their records of private donations, but details of the hit on a US fundraising platform are scarce, and two weeks after being warned some aid groups are yet to notify their donors or the public. International aid groups – and their private donors – are among those whose data was hacked in a security breach at online service provider Blackbaud. Names, addresses, and records of individual donations were compromised by hackers, who were paid an undisclosed ransom to return the data and delete any copies.  World Vision, Save the Children, and Human Rights Watch are among the large nonprofits impacted by the breach, and media reports suggest at least 200 customers of US-based Blackbaud were involved, although the company has not provided a list of affected clients. Alan Bryce, an official at the Charity Commission – the legal regulator in England and Wales – told The New Humanitarian that, as of 4 August, 63 UK-based charities had notified them after being affected by the ransomware attack. Bryce suggested NGOs were likely to tighten up procedures following the incident, in which hackers gained control of client data on Blackbaud’s systems and locked the company out until payment was made. “Charities who have suffered cybercrime go on to revise their IT security, their training programmes, or their website security,” he said. “Do not wait until it is too late for your charity.”

The fixes to the Linux BootHole fixes are in

The first release of patches to the Linux BootHole came with a show-stopping problem. The fixed machines wouldn't boot. For the most part, that problem has been solved.

GRUB2 Boot Failure Issues Fixed in Debian and Ubuntu, Update Now

The recent GRUB2 updates that patched some serious security vulnerabilities also caused boot failure issues for some users, so fixes for these regressions have started appearing for some distros, including Debian and Ubuntu. Last week, I was reporting on the BootHole vulnerability (and some other seven flaws) found in the GRUB2 bootloader, which is used by almost all GNU/Linux distributions out there. The issues opened up systems using Secure Boot to attacks, allowing local attackers to bypass UEFI Secure Boot restrictions and execute arbitrary code. Due to a highly coordinated effort between the security researchers who discovered the vulnerability and Linux OS maintainers, most GNU/Linux distributions were able to provide patches for their users. However, for some, these patches broke the Secure Boot implementation and left people with unbootable systems.

IoT Security Vulnerabilities are Ubiquitous: How To Secure Your Router and Your Linux System Now

Luckily, there are various measures that Linux users can take to secure their wireless routers and protect their systems - most notably, conducting a Linux firmware replacement. This article will explore the benefits of “flashing” your wireless router with alternative open-source firmware, and will introduce some great alternative firmwares and single-purpose OSes that you may wish to look into. [...] Recent security research has made it clear that router manufacturers are dropping the ball on security - a discouraging trend in the industry that needs to change. However, given this unfortunate reality, it is imperative that users assume responsibility for securing their wireless routers.

LunarG releases new Vulkan SDK with DirectX Shader Compiler for Linux and more

LunarG have today, August 4 2020, released a new and enhanced version of their Vulkan SDK (software development kit). What exactly is it? The Vulkan SDK is a collection of essential tools used by developers to assist in development and debugging of Vulkan applications. LunarG works with the Vulkan Working Group over at The Khronos Group to keep it open source, and provide ongoing upgrades to it.

Littlewood is a seriously peaceful town-building RPG out now

After a successful Kickstarter campaign in the beginning of 2019 and an Early Access release later that same year, Littlewood has grown into a wonderful town-building RPG. In a world where the evil has already been defeated, it asks the question: what now? The answer, of course, is to rebuild everything and attempt to live out the rest of your lives in peace and perhaps find a little love along the way. Easily comparable to the likes of Stardew Valley and Animal Crossing, it offers up a similar experience of letting you do what you want at your own pace and just relax.

GOverlay makes Linux gaming overlay MangoHud even easier to use

MangoHud has become the go-to way to get a decent readout of game performance with an overlay on Linux, and now with the latest improvements the GOverlay interface has made it much easier to use.

Free to play collectible card game 'Doomtrooper' enters Early Access

Reviving the collectible card game from the 90s, developer Secret Cow Level has now launched Doomtrooper CCG into Steam's Early Access program. "Get ready for demonic aliens, cyber-mechanical vehicles, and interplanetary chainsaw warfare! Doomtrooper is a digital adaptation of the physical card game by the same name. Play Warrior cards to form your squad and earn victory points by eliminating the enemy's forces."

Ecosystem building sim 'Terra Nil' now gives you a whole continent to restore

A building sim that's as relaxing as it is challenging, Terra Nil has a truly wonderful idea and I absolute love following it along in development with a new big update out now. In Terra Nil, you're tasked with turning a barren wasteland into an ecological paradise complete with different flora and fauna, then clean up after yourself to leave the environment pristine. Quite clever mechanically, giving you a certain percentage you need to hit on each map with your greenery. Originally it just gave you random maps to play through but now the progress is evolving. As for Terra Nil 0.4, it gives you a whole continent to restore with different biomes across the areas you're trying to restore. When you do complete a level, the menu map then covers that area in greenery and it's actually quite slick.

Award-winning strategy game The Battle of Polytopia is now on Linux PC

After winning awards and gaining popularity in the mobile space, Midjiwan AB have ported over The Battle of Polytopia to PC (Linux, macOS, Windows) and it's out now. They're calling the PC version The Battle of Polytopia: Moonrise, although the Steam page still has the original name, in an attempt to differentiate it from the mobile version. The PC release does come with some enhancements like larger maps, better map generation, map customization options, random multiplayer matchmaking, player avatars, a Russian translation, the ability for more than one player to play with the same tribe and they sat it gives them room to develop new features more quickly.

The structure of KDE, or how anarchy sometimes works

KDE is a funny beast. In a lot of ways, it’s an anarchic society that actually works! Engineers and designers work on KDE software and websites, but none of them are paid by KDE itself. Most are volunteers but some (myself included) are paid by 3rd-party companies. These people work on what they want or what they are sponsored by their company to work on, not what anyone in KDE tells them to work on. KDE has a board of directors, but they are elected by KDE’s membership rather than stockholders (there is no stock lol), and do not control KDE’s strategic direction the way the board of directors does in a corporation. Rather, they mostly take care of financial and legal matters, sort out copyright claims, help to organize the yearly Akademy conference, and so on. There is no formal “upper management” or even “middle management” layer. We have the “gardening team” whose members constitute volunteer managers, but we mostly do things like triaging bugs, following up on stuck merge requests, perform QA on unreleased software, and so on. We support the people doing the work, rather than telling them what to do.

Announcing Krita’s Scripting School!

In 2018, we reintroducted scripting to Krita. Unlike our previous attempts to provide scripting, this time it took off! People are making all kinds of useful and fun extensions for Krita. Like a new color picker and mixer, a plugin to modify the way Krita’s subwindows are handled, new toolboxes, integration with other applications like Autodesk Shotgun, But what was missing was a good overview of the various areas that could be scripted. Tutorials and example code on how to use the scripting API in bite-size chunks. The regular API documentation is generated automatically from the APIDOX comments. It is a good reference but can be difficult to understand since it is generated from the C++ code that provides the scripting bindings.

Plasma Browser Integration 1.7.6

I’m pleased to announce the immediate availability of Plasma Browser Integration version 1.7.6 on the Chrome Web Store as well as Firefox Add-Ons page. This release comes with a few bug fixes, performance improvements, and translation updates. [...] As usual, this release brings some improvements to media controls. Short sounds and videos are currently ignored to avoid trying to control e.g. a “new message” sound or short hover video previews. However, some live stream implementations don’t report the correct duration of Infinity but gradually fill up their time bucket every few seconds. Previously, the extension only checked duration once to determine whether to provide media controls. With this update duration is continuously checked and media controls would become available eventually. Furthermore, for websites that do not set album art through Media Session API, the video player’s poster is now used as album cover. This is the cover image that is often shown when the video isn’t playing.

Multiple File/Image Upload with Django 3, Angular 10 and FormData

In the previous tutorial we have seen how to implement file uploading in Django and Angular 10. In this tutorial, we'll see how to implement multiple file uploading with FormData. It's recommended that you start from the previous tutorial to see detailed steps of how to create a django project, how to install Angular CLI and generate a new Angular 10 project along with services and components as we won't cover those basics in this part.

Python Projects for Beginners (Massive 2020 Update)

Learning Python can be difficult. You can spend time reading a textbook or watching videos, but then struggle to actually put what you've learned into practice. Or you might spend a ton of time learning syntax and get bored or lose motivation. How can you increase your chances of success? By building Python projects. That way you're learning by actually doing what you want to do! When I was learning Python, building projects helped me bring together everything I was learning. Once I started building projects, I immediately felt like I was making more progress. Project-based learning is also the philosophy behind our teaching method at Dataquest, where we teach data science skills using Python. Why? Because time and time again, we’ve seen that it works!

Practical Recipes for Working With Files in Python

Python has several built-in modules and functions for handling files. These functions are spread out over several modules such as os, os.path, shutil, and pathlib, to name a few. This course gathers in one place many of the functions you need to know in order to perform the most common operations on files in Python.

Introduction to scheduled tasks helper scripts

For all PythonAnywhere users who like to automate their workflow using scripts there’s already the pythonanywhere package which provides an interface for some PythonAnywhere API features. If you’re one of them, you might be interested in some recent additions for programmatic management of Scheduled Tasks.

Mike Driscoll: Python Malware May be Coming to a Computer Near You

Cyborg Security reported recently that malware is starting to appear that has been written using the Python programming language. Traditionally, most malware has been written in compiled languages, such as C or C++. The reason is simple. Compiled languages let the attacker create smaller, harder to detect, executables. However, Python’s popularity and ease of use has made it more appealing to malware authors. The biggest problem with Python for malware is that it tends to use considerably more RAM and CPU than malware written in C or C++. Of course, with PCs being as powerful as they are now, this is no longer an issue. Especially when you consider that there are so many applications being written with Electron. Your web browser is now a huge resource hog! As the Cyborg Security website points out, you can use PyInstaller or py2exe to create an executable of your Python code. What that article doesn’t mention is that someone will need to digitally sign that software as well to get it to run on Windows 10. One thing the article mentions that was interesting to me is that you can use Nuitka to basically transpile your Python code to C and you’ll end up with a much smaller executable than you would with either PyInstaller or py2exe.

PyCoder’s Weekly: Issue #432 (Aug. 4, 2020)

PSF GSoC students blogs: Weekly Check-in #10

Python 3.6.9 : My colab tutorials - parts 008.