Language Selection

English French German Italian Portuguese Spanish

Security Leftovers

Filed under
Security
  • Security updates for Thursday
  • SHA-1 Deprecation: Pro, Con, or Extend?

    I read Ryan's article about why SHA-1 should be deprecated faster and why we should veto the proposed extensions. It is an excellent explanation of what's going on. I highly recommend it (and look forward to the complete series when he publishes it):

  • Legacy Verified: Legacy Solutions

    While the previous post explored the historical context in which the SHA-1 deprecation fits, and in the many failures to respond adequately to known risks, it didn’t really address the actual Legacy Verified proposal made by CloudFlare and Facebook, and subsequently endorsed by Twitter, nor how it attempts to mitigate the concerns with continuing SHA-1 allocation.

  • Let’s Encrypt Now Being Abused By Malvertisers

    Encrypting all HTTP traffic has long been considered a key security goal, but there have been two key obstacles to this. First, certificates are not free and many owners are unwilling to pay; secondly the certificates themselves are not always something that could be set up by a site owner.

  • Security Guide: How to Protect Your Infrastructure Against the Basic Attacker
  • Linux.Encoder Authors Couldn’t Correctly Disguise Encryption Key

    Renowned Security Software Company in Russia named Doctor Web happened to be first to detect as well as report one wholly working ransomware Trojan created to infect Linux computers. A sample named Linux.Encoder.1 recently showed quite resembling activity with the notorious CryptoWall ransomware. Fifty percent of the widely used AV engines of VirusTotal could not recognize the sample which broke new ground during the Linux domain. The malware chiefly concentrated on hijacking computers using Web servers as also encrypted critical folders utilized during Web-hosting as well as within Web-development ambience.

More in Tux Machines

Red Hat News

Samsung Z4 gets WiFi Certified with Tizen 3.0 onboard, Launching soon

Today, the next Tizen smartphone, which should be the named the Samsung Z4, has received its WiFi certification (certification ID: WFA70348) – Model number SM-Z400F/DS with firmware Z400F.001 on the 2.4Ghz band. WiFi certification is usually one of the last steps before a mobile device gets released and means a launch is coming real soon as we have already seen the Z4 make its debut appearance at the FCC. For the previous model, the Samsung Z2, we saw it get WIFi certified on 7 July and then launched on 23 August, a mere 6 weeks. Read more

Linux 4.10.6

I'm announcing the release of the 4.10.6 kernel. All users of the 4.10 kernel series must upgrade. The updated 4.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.10.y and can be browsed at the normal kernel.org git web browser: http://git.kernel.org/?p=linux/kernel/git/stable/linux-st... Read more Also: Linux 4.9.18 Linux 4.4.57

Kernel Space: Linux, Graphics

  • Mux Controller Subsystem Proposed For Linux 4.12
    A new subsystem has been proposed for staging in the Linux 4.12 kernel. Peter Rosin has requested Greg KH pull in the mux controller subsystem for the Linux 4.12 kernel. He explained of this new subsystem, "This adds a new mux controller subsystem with an interface for accessing mux controllers, along with two drivers providing the interface (gpio and adg792) and two consumers (iio and i2c). This is done in such a way that several consumers can independently access the same mux controller if one controller controls several multiplexers, thus allowing sharing."
  • Marek Looking To Tackle Large RadeonSI Performance Bottleneck
    Prolific Mesa developer Marek Olšák is looking to tackle what he thinks is the "biggest performance bottleneck at the moment" for the RadeonSI Gallium3D driver.
  • Shader Variants Support For Etnaviv Gallium3D