Language Selection

English French German Italian Portuguese Spanish

Security Leftovers

Filed under
Security
  • To mitigate major Edge printing bug, use a Xerox copier, baffled user advises

    Beyond being breathtakingly bizarre, the bug could potentially have serious consequences for architects, engineers, lawyers, and other professionals who rely on Edge to print drawings, blueprints, legal briefs, and similarly sensitive documents. Edge is the default application for viewing PDFs on Windows 10 computers. While the errors demonstrated above happened using the "Microsoft Print to PDF" option, multiple users report similar alterations when using regular printing settings. (And besides, the print-to-PDF option is the default printing method for the Microsoft browser.) The alterations depend on several variables, including the printer selected, the settings used, and computer being used. It's not clear how long this flaw has been active or whether it has already affected legal cases or other sensitive proceedings that use documents printed from the Internet.

  • Keylogger Found in Audio Driver of HP Laptops
  • Criminals are Now Exploiting SS7 Flaws to Hack Smartphone Two-Factor Authentication Systems
  • A Vicious Microsoft Bug Left a Billion PCs Exposed [iophk: "people are gullible: Windows was never secure in the 22 years since it added TCP/IP; for those that remember, it was not secure even before that and was plagued with malware spread by disk and NAS (then called file servers)."
  • Microsoft finally bans SHA-1 certificates in Internet Explorer, Edge [Ed: Quit pretending that Microsoft cares about security in browsers that have a baked-in back door]

    The Tuesday updates for Internet Explorer and Microsoft Edge force those browsers to flag SSL/TLS certificates signed with the aging SHA-1 hashing function as insecure. The move follows similar actions by Google Chrome and Mozilla Firefox earlier this year.

    Browser vendors and certificate authorities have been engaged in a coordinated effort to phase out the use of SHA-1 certificates on the web for the past few years, because the hashing function no longer provides sufficient security against spoofing.

More in Tux Machines

CentOS Linux 7 and 6 Users Receive New Microcode Updates for Intel and AMD CPUs

CentOS Linux is an open-source, free, enterprise-class, and community-supported operating system based on and compatible with Red Hat Enterprise Linux. As such, it regularly receives new important security updates as soon as they are released upstream by Red Hat. About two weeks ago, CentOS Linux 7 and 6 users received kernel and microcode updates that mitigated the Meltdown and Spectre security vulnerabilities unearthed earlier this month. However, after some thorough testing, Red Hat discovered that these updated microcode firmware developed by Intel and AMD caused hardware issues. Read more

Google moves to Debian for in-house Linux desktop

Google has officially confirmed the company is shifting its in-house Linux desktop from the Ubuntu-based Goobuntu to a new Linux distro, the DebianTesting-based gLinux. Margarita Manterola, a Google Engineer, quietly announced Google would move from Ubuntu to Debian-testing for its desktop Linux at DebConf17 in a lightning talk. Manterola explained that Google was moving to gLinux, a rolling release based on Debian Testing. Read more

Android Support Removed from Intel Graphics Driver Debugging Tool for Linux

For those unfamiliar with intel-gpu-tools, it's a collection of tools for GNU/Linux distribution that allows the debugging the official Intel graphics driver for Intel GPUs. Tools include a GPU hang dumping program, performance microbenchmarks for regression testing the DRM, as well as a performance monitor. The latest release, intel-gpu-tools 1.21, adds quite a bunch of changes, including automatic loading of DRM modules when opening a DRM device, much-improved GPU quiescing code to more thoroughly flush pending work and old data, as well as production support for the Meson build system while automake is still kept around. Read more

Educational-Oriented Escuelas Linux 5.6 Distro Released with LibreOffice 6.0

Based on the latest release of the Ubuntu-based and Enlightenment-focused Bodhi Linux operating system, Escuelas Linux 5.6 is powered by the Linux 4.14.13 kernel, which includes patches against the Meltdown and Spectre security vulnerabilities, and comes with a bunch of up-to-date educational apps. These include the OnlyOffice 4.8.6 office suite (only for the 64-bit edition), Vivaldi 1.13, Chromium 63, Google Chrome 63, and Mozilla Firefox 57 "Quantum" web browsers, Geogebra 5.0.414 geometry, algebra, statistics, and calculus app, latest Adobe Flash Player 28 plugin, and the upcoming LibreOffice 6.0 open-source office suite. Read more