Security Leftovers

• How the NAME:WRECK Bugs Impact Consumers, Businesses [Ed: Now they go ALL CAPS to increase the SHOCK FACTOR]

  How this class of vulnerabilities will impact millions connected devices and potentially wreck the day of IT security professionals.

• Linux Foundation sigstore finds ‘origins’ in software supply chains [Ed: Companies connected to the Pentagon trying to centralise "trust" and over time control what people can and cannot install and run on their own GNU/Linux systems]

  The Linux Foundation announced the sigstore project this spring. Designed to improves the security of the software supply chain, sigstore is said to enable the adoption of cryptographic software signing backed by transparency log technologies. Software application development professionals will be able to securely sign software artifacts such as release files, container images and binaries. Signing materials are then stored in a tamper-proof public log. The service will be free to use for all developers and software providers, with the sigstore code and operation tooling developed by the sigstore community.

• NSA uncovers new "critical" flaws in Microsoft Exchange Server [Ed: It sort of misses the point that there are NSA back doors in everything from Microsoft]

  Microsoft released three new patches for its Exchange Server software on Tuesday after the National Security Agency (NSA) alerted the company to a fresh batch of critical vulnerabilities. The new fixes are for three versions of Exchange Server - 2013, 2016 and 2019 - and the flaws are said to be different vulnerabilities to the ones disclosed in March. However, US agencies continue to find and remove vulnerabilities in their systems a month after the previous flaws were first discovered.

• Not even the best antivirus could have shielded you from this Linux and macOS malware [Ed: Misinformation. It neglects to say that Microsoft delivers this malware. Instead it blames the recipients of Microsoft (NPM)]

  Researchers have identified a new strain of Linux and macOS malware capable of eluding even the most reputable antivirus services. According to security company Sonatype, the malicious program was discovered on the npm registry, a developer resource that catalogues various open source JavaScript packages.

Top 6 Web Server Performance Testing Tools

Web server benchmarking is a way of determining the performance of a web server with the aim of establishing how well it copes under a sufficiently high workload. Performance testing is important to help maintain continuous system performance. The performance of a web server can be expressed in a number of different ways including the number of requests served within a certain time, the latency response time for each new connection or request, or the throughput. The open source Linux benchmarking tools featured in this article enable the performance of a web server to be tested prior to releasing it in a production environment. Accurately testing a web server is quite a challenging activity. This is, in part, because a web system is a distributed system. Further, Hypertext Transfer Protocol, the application protocol for hypermedia information systems, can cause connection usage patterns that the Transmission Control Protocol was not designed for. Moreover, problems are generated in testing the performance because of the sheer dynamism of a web server.

reTerminal – A Raspberry Pi CM4 based 5-inch HMI Terminal

Seeed Studio has just unveiled reTerminal HMI terminal that reminds me of the company’s Wio Terminal based on Microchip SAMD51 Arm Cortex-M4F microcontroller with a 2.4-inch display. But as we’ll look into the details, reTerminal is quite a different beast as a Linux-capable device powered by a Raspberry Pi CM4 module with up to 8GB RAM, equipped with a 5-inch capacitive touchscreen display, and supporting plenty of connectivity options from GIgabit Ethernet to WiFi to LoRaWAN.