Lutris 0.5.9 Beta Released With Epic Games Store Support, DXVK-NVAPI/DLSS, Gamescope

The Lutris 0.5.9 beta delivers on initial support for the Epic Games Store, support for DXVK-NVAPI and DLSS, FidelityFX Super Resolution is now an exposed option for compatible Wine versions, Valve's Gamescope Wayland game compositor is now an option, Esync usage is now enabled by default, the Dolphin emulator is now available as a game source, improved process monitoring, and other enhancements. It's quite a hearty update for this game manager.

today's leftovers

• What do developers want and need from secure coding training?

  Cybersecurity is increasingly becoming integrated into software development initiatives. As part of this, application security (AppSec) specialists often work closely with software development teams to improve security within the applications they create. However, there is still confusion about the role developers play in software security, and whether responsibility for it should rest solely on their shoulders.

• Securing Access to Your MongoDB Database

  In this article, we will go over some of the most common ways to securing your MongoDB cluster.

• Zulip releases ‘Teach a course’ education product

  Zulip for Education is a new open source team chat product used at university departments around the world, including MIT & University of California San Diego

• U.S. Secretary of Commerce to Headline Open Skills Network’s Inaugural Skills Summit | News | bakersfield.com

  This open source software toolkit will facilitate the creation and maintenance of open skills libraries for use across sectors including education, the workforce, government, and the military.   


• Raspberry Pi OS now has SATA support built-in

  But this month, Raspberry Pi OS finally has built-in support for almost all PCI Express SATA adapters. All you have to do is run sudo apt upgrade and you'll have it.

  That means anyone with a Compute Module 4 can plug in a SATA card, and plug in hard drives or SSDs, and they should just work, assuming you have power to the drives.

• Here are 5 insights you might have missed from Red Hat Summit 2021 [Ed: "TheCUBE is a paid media partner for Red Hat Summit." In other words, IBM pays this 'publishers' to become a puff pieces apparatus]

  It has been approximately two years since IBM finalized its acquisition of Red Hat Inc. for $34 billion, and the Red Hat Summit in April offered an opportunity to assess the state of the open-source world and the key projects brought about by the marriage of two key enterprise computing powers. The two-day virtual event was covered extensively by theCUBE, SiliconANGLE Media’s livestreaming studio, which conducted nearly 20 interviews with Red Hat and IBM executives, customers and partners as part of this year’s online gathering.

• Linux to host open source solution to aid firefighter safety [Ed: Misuse of the brand "Linux"]

• Spectro Cloud raises $20M to improve its product and services for customers

  Spectro Cloud announced the completion of its Series A funding round, amounting to $20M, which is led by Stripes, an investor in software and consumer products.

• Spectro Cloud Announces $20M Completion of Series A Funding to Unleash Full Potential of Kubernetes in Production Environments with Next-Gen Management Platform

Audiocasts/Shows: Missing OBS Features On Arch Linux, Going Linux, and GNU World Order

• Fixing The Missing OBS Features On Arch Linux

  Having access to OBS on Linux is amazing and makes capturing content so much easier but on arch linux for some reason the version in the community repos is missing a bunch of basic features.

• Going Linux #411 · Listener Feedback

  We find out that Ubuntu’s website isn’t accessible before you pass the warning about cookies. We discuss the latest Linux distribution... from Microsoft! Our listeners ask questions and make comments.

• GNU World Order 419

Proprietary Software and Security Issues

• SolarWinds [Attack] Reached 27 U.S. Attorneys’ Offices, Justice Says

  The attack compromised Microsoft 365 accounts of at least 80% of the department’s employees working in offices located in the Eastern, Northern, Southern and Western Districts of New York. Also affected to a lesser degree were employees in U.S. Attorneys’ offices in 14 other states, including California, Florida, Maryland, Texas and Virginia, as well as the District of Columbia.

• Safari isn't protecting the web, it's killing it

  There's been a lot of discussion recently about how "Safari is the new IE" (1, 2, 3, 4, 5).

  I don't want to rehash the basics of that, but I have seen some interesting rebuttals, most commonly: Safari is actually protecting the web, by resisting adding unnecessary and experimental features that create security/privacy/bloat problems.

  That is worth further discussion, because it's widespread, and wrong.

  More specifically, Safari's approach isn't protecting the web from bloat & evil Google influence, because: [...]

• Hasta la Vista Gmail

  I’ve been a Gmail user pretty much since day 1, when it was still an invite-only service in 2004.1 Not anymore. Over the past month I’ve migrated most of my email to Fastmail and I’m extremely happy with the result.

  Why bother? Well, I guess it won’t come to you as a shock that I’ve felt progressively more uncomfortable with how Google (and the like) are handling my personal data. I’ve also been getting quite frustrated with attempts to make email/my inbox “smarter”. I never needed a “priority inbox”, auto-categorization of email, etc. Simple is good. Just put the newest emails on the top and I’ll sort it out from there.

• Google dodges regulation, hits advertisers with “regulatory” charges: What’s the Scam?

  We are not familiar with what draconian regulatory schemes exist for Google in Austria and Turkey, but here in Australia we know what it is – which is not much at all. And they paid no tax on their 2020 revenue of $5.2 billion.

• Storing Encrypted Photos in Google’s Cloud

  Cloud photo services are widely used for persistent, convenient, and often free photo storage, which is especially useful for mobile devices. As users store more and more photos in the cloud, significant privacy concerns arise because even a single compromise of a user’s credentials give attackers unfettered access to all of the user’s photos. We have created Easy Secure Photos (ESP) to enable users to protect their photos on cloud photo services such as Google Photos. [...]

• Spyware revelations are a crucial moment for Indian democracy

• Joint Open Letter: States Must Implement Moratorium on Surveillance Technology - PEN America

  We the undersigned civil society organizations and independent experts are alarmed at the media revelations that NSO Group’s spyware has been used to facilitate human rights violations around the world on a massive scale. These revelations are a result of the Pegasus Project and are based on the leak of 50,000 phone numbers of potential surveillance targets. The project is a collaboration of more than 80 journalists from 16 media organizations in 10 countries coordinated by Forbidden Stories, a Paris-based media non-profit, with the technical support of Amnesty International, who conducted forensic tests on mobile phones to identify traces of the Pegasus spyware.

• Canonicalization Attacks Against MACs and Signatures

  Canonicalization Attacks occur when a protocol that feeds data into a hash function used in a Message Authentication Code (MAC) or Digital Signature calculation fails to ensure some property that’s expected of the overall protocol.

  The textbook example of a canonicalization attack is the length-extension attack against hash functions such as MD5–which famously broke the security of Flickr’s API signatures.

  But there’s a more interesting attack to think about, which affects the design of security token/envelope formats (PASETO, DSSE, etc.) and comes up often when folks try to extend basic notions of authenticated encryption (AE) to include additional authenticated (but unencrypted) data (thus yielding an AEAD mode).