Language Selection

English French German Italian Portuguese Spanish

Security: Updates, Kodi Abused on Microsoft GitHub, Lockdown Mode on the Librem 5

Filed under
Security
  • Security updates for Monday
  • Fake Kodi Repos ‘Hijack’ Original GitHub Accounts To Push Updates

    Developers of Kodi add-ons usually host their tools on GitHub. While the popular code repository platform is perfect for development, it has one loophole which has been exploited for quite some time.

  • Lockdown Mode on the Librem 5: Beyond Hardware Kill Switches

    When I tell people I work for Purism and I’m asked what Purism does, the explanation I give to the average person is along the lines of: “we make privacy and security respecting hardware that runs free software.” Immediately after that, I almost always point to our hardware kill switches to demonstrate how we take a different approach from most other hardware out there. To me it’s a great example of a simple, easy-to-understand security measure that provides a tangible benefit to everyone.

More on Purism’s Librem 5 smartphone’s Lockdown Mode

  • Purism’s Librem 5 smartphone’s Lockdown Mode will shut off all sensors

    In other words, it’s a phone aimed at folks who are interested in software freedom and/or privacy.

    But Purism notes that there are other things you might want to shut off, like the phone’s GPS capability, proximity sensor, compass, and accelerometer. So rather than cover the Librem 5 in kill switches, the company is introducing a new feature called Lockdown Mode.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

More in Tux Machines

New features in OpenStack Neutron

OpenStack is the open source cloud infrastructure software project that provides compute, storage, and networking services for bare-metal, container, and VM workloads. To get a sense of the core functionality and additional services, check out the OpenStack map. The platform has a modular architecture that works across industry segments because infrastructure operators can choose the components they need to manage their infrastructure in the way that best supports their application workloads. The modules are also pluggable to provide further flexibility and make sure they can be used with a specific storage backend or software-defined networking (SDN) controller. Neutron is an OpenStack project to provide a de-facto standard REST API to manage and configure networking services and make them available to other components such as Nova. Read more

today's leftovers

  • Full Circle Weekly News #125
  • Why Open19 Designs Matter for Edge Computing [Ed: Openwashing Microsoft without even any source code]
    On the opening day of this year's Data Center World in Phoenix, Yuval Bachar, LinkedIn's principal engineer of data center architecture, was on hand to explain why the social network's Open19 Project will be an important part of data centers' move to the edge.
  • Course Review: Applied Hardware Attacks: Rapid Prototying & Hardware Implants
    Everyone learns in different ways. While Joe is happy to provide as much help as a student needs, his general approach probably caters most to those who learn by doing. Lecture is light and most of the learning happens during the lab segments. He gives enough space that you will make mistakes and fail, but not so badly that you never accomplish your objective. If you read the lab manual carefully, you will find adequate hints to get you in the right direction. On the other hand, if you’re a student that wants to site in a classroom and listen to an instructor lecture for the entire time, you are definitely in the wrong place. If you do not work on the labs, you will get very, very, little out of the course. The rapid prototyping course is a good introduction to using the 3D printer and pcb mill for hardware purposes, and would be valuable even for those building hardware instead of breaking it. It really opened my eyes to the possibilities of these technologies. On the other hand, I suspect that the hardware implants course has limited application. It’s useful to learn what is possible, but unless you work in secure hardware design or offensive security that would use hardware implants, it’s probably not something directly applicable to your day to day.
  • Nulloy – Music Player with Waveform Progress Bar
    I’ve written a lot about multimedia software including a wide range of music players, some built with web-technologies, others using popular widget toolkits like Qt and GTK. I want to look at another music player today. You may not have heard of this one, as development stalled for a few years. But it’s still under development, and it offers some interesting features. It’s called Nulloy. The software is written in the C++ programming language, with the user interface using the Qt widget toolkit. It’s first release was back in 2011.
  • A Complete List of Google Drive Clients for Linux

Security Leftovers

SmartArt and Contributors to LibreOffice

  • SmartArt improvements in LibreOffice, part 4
    I recently dived into the SmartArt support of LibreOffice, which is the component responsible for displaying complex diagrams from PPTX. I focus on the case when only the document model and the layout constraints are given, not a pre-rendered result. First, thanks to our partner SUSE for working with Collabora to make this possible.
  • Things to know if you are a new contributor to LibreOffice code
    When I began contributing code to LibreOffice, I faced some issues because I didn't know several facts that the other active contributors knew. This blog post summarizes some of those facts, and I hope it will be useful for other new contributors!