Security Leftovers

• Thoughts on bootstrapping GHC

  I am returning from the reproducible builds summit 2018 in Paris. The latest hottest thing within the reproducible-builds project seems to be bootstrapping: How can we build a whole operating system from just and only source code, using very little, or even no, binary seeds or auto-generated files. This is actually concern that is somewhat orthogonal to reproducibility: Bootstrappable builds help me in trusting programs that I built, while reproducible builds help me in trusting programs that others built. And while they make good progress bootstrapping a full system from just a C compiler written in Scheme, and a Scheme interpreter written in C, that can build each other (Janneke’s mes project), and there are plans to build that on top of stage0, which starts with a 280 bytes of binary, the situation looks pretty bad when it comes to Haskell.

• No, You Don’t Need Antivirus on a Chromebook

• Security updates for Friday

• Inception Attackers Target Europe with Year-old Office Vulnerability

• Brute Force Attacks Conducted by Cyber Actors

• IBM protects your cloud container data running under Kubernetes with encryption

  Protecting your stored data on the cloud is a concern, but it's easy enough with encryption. Thanks to SSL, it's simple to protect data in motion on the network. But protecting your data when it's being used on the cloud is not so simple. Enter IBM, which, in partnership with Fortanix, is now providing data-in-use protection for your container workloads running on the IBM Cloud Kubernetes Service with IBM Cloud Data Shield. Jason McGee, IBM Cloud Platform VP and CTO, explained the process at KubeCon in Seattle: Data Shield uses Intel Software Guard Extensions (SGX) technology to run code and data in CPU-hardened Trusted Execution Environment (TEE) or enclave. This is a trusted area of memory, where critical aspects of the application functionality are protected by encryption. This helps keep both your code and data private and shielded from would-be hackers.

• GNOME Security Internship - The Beginning

• GNOME Security Internship - Update 1

• Kubernetes Security Authentication Moving Forward With SIG-Auth

  The basic units of organization within the Kubernetes community are the Special Interest Groups that help define and implement new features and capabilities. For security, one of the primary SIGs within Kubernetes is SIG-Auth. Kubernetes is a widely used container orchestration platform that is supported on all the major public cloud providers and is also deployed on-premises. In a session at the KubeCon + CloudNativeCon NA 2018 here, the leaders of SIG-Auth outlined how the group works and what the current and future priorities are for the Kubernetes project.

today's howtos

• How To Install Rust Programming Language In Linux

• 4 Ways to View the Partition Table in Linux

• How to install LEMP Stack on Ubuntu 18.04

• How to secure Apache with Let’s Encrypt Certificates on RHEL 8

• Bash check if string starts with character such as #

• How To Change The Default Display Manager (Switch To GDM, LightDM, SDDM, Or LXDM) In Debian, Ubuntu Or Linux Mint

• How To Install Lubuntu 18.10 LXQt Edition

• Getting started with ham radio repeaters

• How To Find Out Public IP Address From Command Line On Linux

Slimbook & Kubuntu - Combat Report 3

And we're done. I am not sure what kind of message you're getting - or you think you're supposed to be getting from my articles. Overall, I am quite pleased with my Slimbook & Kubuntu experience. But if I had to choose, I wouldn't abandon my Windows. I simply cannot. The games, the office stuff, even simple image manipulation and text editing. All these are currently not the killer features of any which Linux desktop. That said, Kubuntu purrs nicely. Runs fast and true, and there are no crashes or errors. The desktop is extremely flexible and extensible, it's pleasing to use, and I'm having fun discovering things, even if they sometimes turn out to be bugs or annoyances. In general, it's the application side that needs to be refined, and then, the system can just become a background for you to be productive and enjoy yourselves. Until the next report.

Tux Machines is proud to be hosted by