Security and FUD

• Security updates for Tuesday

  Security updates have been issued by Debian (sqlite3), Fedora (libarchive and netdata), openSUSE (dom4j, dovecot23, gcc9, and memcached), Red Hat (devtoolset-9-gcc, httpd24-httpd and httpd24-mod_md, ipmitool, kernel, kpatch-patch, openvswitch, openvswitch2.11, openvswitch2.13, rh-haproxy18-haproxy, and ruby), and SUSE (freetds, jasper, libxslt, and sysstat).

• Patterns of Compromise: The EasyJet Data Breach

  It has been a withering time for the airlines, whose unused planes moulder in a gruelling waiting game of survival. The receivers are smacking their lips; administration has become a reality for many. Governments across the globe dispute what measures to ease in response to the coronavirus pandemic; travel has been largely suspended; and the hope is that some viable form will resume at some point soon.

• Google Authenticator enables device-transfers, no back up/export options

  You’ve probably seen calls to “secure your account” with a second-factor authentication (2FA) app all over the web. Online services promote it as a way to improve the security of your online account. After you’ve enabled 2FA, you need to know your username and password as well as a one-time use token (a four–six digit code) generated by your 2FA app. When you enable 2FA with an online service, it “installs” a secret into your 2FA app — often by scanning a QR-variety matrix barcode. The client app can then generate a one-time use login token derived from the shared secret. You type in that token when you log in to the service. The service can generate its own token following the same process and compare the two login tokens. If a bad actor intercepts the token, it can only be used once and will be worthless in the future.

• Smart cars vulnerable to hack that could enable 'remote control'

• New fuzzing tool finds 26 USB bugs in Linux, Windows, macOS, and FreeBSD [Ed: It's clear that ZDNet is still hyping up and propping up this false narrative wherein Linux is worst at security and Microsoft has no back doors.]

  This allowed the research team to test USBFuzz not only on Linux, where most fuzzer programs work, but also other operating systems.

Screencasts and Audiocasts: Redcore Linux 2004 KDE Run Through, LINUX Unplugged and Linux in the Ham Shack

• Redcore Linux 2004 KDE Run Through

  In this video, we are looking at Redcore Linux 2004 KDE. Enjoy!

• Chris’ Data Crisis | LINUX Unplugged 355

  Chris’ tale of woe after a recent data loss, and Wes’ adventure after he finds a rouge device on his network.

• LHS Episode #347: Space Zombies

  Hello and welcome to the 347th installment of Linux in the Ham Shack.

Red Hat and IBM: fabric8 Maven, Cheesy Marketing and Java/Quarkus

• How the fabric8 Maven plug-in deploys Java applications to OpenShift

  The fabric8 Maven plug-in, often abbreviated FMP, can be added to a Maven Java project and takes care of the administrative tasks involved in deploying the application to a Red Hat OpenShift cluster.

• EMEA: Asiakastieto Unlocks Open Banking Innovation with Red Hat

• COVID-19, climate change, and the urgent need for innovation

  We are facing a time of unprecedented crisis. While the COVID-19 pandemic puts lives and livelihoods at immediate risk, climate change is an existential threat for humanity. Global challenges such as these are colossal tests of leadership and demand global answers. As the UN Secretary General put it, “We are in this together — we will get through this together.” To effectively address these unfolding human crises, we must put human rights at the heart of the response. We need to reaffirm our common values of humanity and solidarity. And we need to think outside the box. To that extent, leveraging technology for good is essential, as it now allows us to adapt at levels previously unthinkable. Innovation in key areas of technology including cloud computing, AI, and open source means it is now easier than ever to quickly pivot towards addressing the most pressing issues we face. A great example is the Call for Code challenge, which quickly pivoted to take on COVID-19 when the global impact of this pandemic became apparent. Within six weeks, the solutions that emerged addressed everything from how we can keep a physical distance when queuing at stores to helping small businesses re-emerge stronger after a crisis. Many of these are already being considered for deployment opportunities.

• Bringing Java into the Kubernetes-native future with Quarkus

  By now, you may have seen this funny word floating around the Java development community: Quarkus. And, you may have seen the latest Red Hat news around it, that we are excited to welcome Quarkus as an official Red Hat Runtime. But, what does this mean, and why should you be excited about Quarkus? This post will dive into what it means to take Java into the modern, distributed, Kubernetes-first, cloud-native application development world we are in today, and why it is so important.