More stories

  • in

    Patch now: This serious Linux vulnerability affects nearly all distributions

    <!–> Qualys As security holes go, CVE-2023-4911, aka “Looney Tunables,” isn’t horrid. It has a Common Vulnerability Scoring System (CVSS) score of 7.8, which is ranked as important, not critical.  On the other hand, this GNU C Library’s (glibc) dynamic loader vulnerability is a buffer overflow, which is always big trouble, and it’s in pretty […] More

  • in

    New cryptographic protocol aims to bolster open-source software security

    <!–> matejmo/Getty Images BastionZero‘s OpenPubkey, which is a new cryptographic protocol that’s designed to fortify the open-source software ecosystem, is now a Linux Foundation open-source project. Docker is also integrating OpenPubkey, so that you can use it for container signing. This innovative cryptographic technology promises enhanced security through zero-trust passwordless authentication. OpenPubkey provides this authentication […] More

  • in

    Hurtling toward generative AI adoption? Why skepticism is your best protection

    <!–> zf L/Getty Images With some organizations moving ahead to adopt generative artificial intelligence (AI), it is critical they do so while mitigating potential risks and with some level of skepticism.  As it is, 45% of businesses are currently piloting generative AI, while 10% already have such tools in production, revealed a Gartner study released […] More

  • in

    Google, Yahoo to battle spam with new rules for bulk emails

    <!–> Tim Robberts/Getty Images Google and Yahoo are upping their efforts in the fight against bulk email spam. Starting in early 2024, both companies will kick off new and stricter requirements for bulk senders who use their platforms to send mass emails. On Tuesday, Google and Yahoo both published blog posts outlining the new rules […] More

  • in

    Linux tries to dump Windows’ notoriously insecure RNDIS protocol

    <!–> JanRoode/Getty Images Microsoft’s proprietary protocol, Remote Network Driver Interface Specification (RNDIS), started with a good idea. It would enable hardware vendors to add networking support to USB devices without having to build them from scratch. There was only one little problem. RNDIS has no security to speak of.  As Greg Kroah-Hartman, the Linux Foundation […] More

  • in

    OK, so ChatGPT just debugged my code. For real

    David Gewirtz/ZDNET Programming is a constant game of mental Jenga: one line of code stacked upon another, building a tower of code you hope is robust enough not to come crashing down. But it always does, as code never works the first time it’s run. So, one of the key skills for any programmer is […] More