FOSS/Linux Events


-
Tizen Developer Summit 2015 Bengaluru – Inaugural Keynote
-
Linaro Connect US '15
One of the items that came out of Linux plumbers for me was discussion on the future of the Ion memory manager for Android. While not as relevant to my day to day work anymore, I still have a lot of background knowledge and input to give. Linaro Connect happened a little over a month after plumbers and I was up there for the week, mostly for Ion and other ARM talks. (Non-technically, being at Linaro Connect also meant I could avoid the chaos in my apartment from an impending move. Yay for convenient excuses!)
-
LinuxCon Europe 2015 in Dublin
The second day was opened by Leigh Honeywell and she was talking about how to secure an Open Future. An interesting case study, she said, was Heartbleed. Researchers found that vulnerability and went through the appropriate vulnerability disclosure channels, but the information leaked although there was an embargo in place. In fact, the bug proofed to be exploited for a couple of months already. Microsoft, her former employer, had about ten years of a head start in developing a secure development life-cycle. The trick is, she said, to have plans in place in case of security vulnerabilities. You throw half of your plan away, anyway, but it’s good to have that practice of knowing who to talk to and all. She gave a few recommendations of which she thinks will enable us to write secure code. Coders should review, learn, and speak up if they feel uncomfortable with a piece of code. Managers could take up on what she called “smells” when people tend to be fearful about their code. Of course, MicroSoft’s SDL also contains many good practices. Her minimal set of practices is to have a self-assessment in place to determine if something needs security review, have an up-front threat modelling that is kept up to date as things evolve, have a security checklist like Mozilla’s or OWASP’s, and have security analysis built into CI process.
-
Second Round of systemd.conf 2015 Sponsors
-
- Login or register to post comments
Printer-friendly version
- 2346 reads
PDF version
More in Tux Machines
- Highlights
- Front Page
- Latest Headlines
- Archive
- Recent comments
- All-Time Popular Stories
- Hot Topics
- New Members
This week in KDE: And now time for some UI polishing
This week we’ve mixed in a lot of user interface polishing with our usual assortment of bugfixes!
15-Minute Bugs Resolved
Current number of bugs: 57, down from 59. 0 added, 1 found to already be fixed, and 1 resolved:
When using screen scaling with the on-by-default Systemd startup in Plasma, the wrong scale factor is no longer sometimes used immediately upon login, which would cause Plasma to be blurry (on Wayland) or everything to be displayed at the wrong size (on X11) (David Edmundson, Plasma 5.25.2)
| ROMA Linux laptop to feature quad-core RISC-V SoC, support Web3, NFT, cryptocurrencies, etc..
ROMA is an upcoming Linux laptop equipped with an unnamed quad-core RISC-V processor with GPU and NPU, up to 16GB RAM, 256GB storage, primarily aimed at software developers, and with Web3 technology integration.
The ROMA laptop will be born out of the collaboration between DeepComputing working on engineering and Xcalibyte taking care of system tuning, plus PW (assembly), ECP (security), XC (crypto), Rexeen (voice), and the LatticeX Foundation (PoS blockchain, NFT).
|
PSPP 1.6.2 has bene released.
I'm very pleased to announce the release of a new version of GNU PSPP. PSPP is a program for statistical analysis of sampled data. It is a free replacement for the proprietary program SPSS.
| Programming Leftovers
|
Recent comments
2 hours 36 min ago
11 hours 42 min ago
12 hours 1 min ago
12 hours 42 min ago
12 hours 56 min ago
13 hours 36 sec ago
15 hours 5 min ago
18 hours 18 min ago
18 hours 43 min ago
18 hours 48 min ago