What Is the Most Secure VPN Protocol?

Security researcher finds Bitmain S15 miner exploit

A developer has discovered vulnerability in Bitmain’s Antminer S15, which has subsequently been turned into an exploit by an anonymous security researcher, according to reports.

Anonymous Security Researcher Uncovers Exploit in Bitmain’s Bitcoin Miner S15

Will This Vulnerability Finally Compel Bitmain to Open Source Its Firmware?

As if Bitmain's year hasn't been rough enough, having posted big losses and laying off entire departments, its flagship product now has a firmware vulnerability.

Linux Kernel To Better Fend Off Exploits That Disable SMAP / SMEP / UMIP Protections

A change made courtesy of Google engineers to the Linux kernel will make it so exploits on Linux have a tougher time trying to disable SMAP and SMEP protections as part of their exploit path. Supervisor Mode Execution Protection (SMEP) and Supervisor Mode Access Prevention (SMAP) are security features of recent generations of Intel CPUs to prevent the kernel from accessing unintended user-space memory and in turn helping fend off various exploits. But some exploits have been calling the Linux kernel's native_write_cr4 function to disable SMEP/SMAP, since the status of these security options are controlled through bits in the CR4 control register.

Unexpected Ubuntu 16.04.6 LTS Coming Due To APT Security Issue

No further point releases to Ubuntu 16.04 LTS had been planned, but in light of the recent APT vulnerability, Canonical has decided to issue an Ubuntu 16.04.6 update that will be hitting the mirrors soon. Last month an APT package manage vulnerability was exposed that could make Debian-based distributions open to man-in-the-middle attacks and end up installing rogue packages. Debian and Ubuntu have been quick to address this issue and now Ubuntu 16.04.6 is on the way to help tighten up those running the Xenial Xerus.

NetBSD Virtual Machine Monitor

NVMM provides hardware-accelerated virtualization support for NetBSD. It is made of an ~MI frontend, to which MD backends can be plugged. A virtualization API is shipped via libnvmm, that allows to easily create and manage virtual machines via NVMM. Two additional components are shipped as demonstrators, toyvirt and smallkern: the former is a toy virtualizer, that executes in a VM the 64bit ELF binary given as argument, the latter is an example of such binary.

NetBSD Gains Hardware Accelerated Virtualization

NetBSD, the highly portable Unix-like Open Source operating system known for its platform diversity, has gained hardware-accelerated virtualization support via an improved NetBSD Virtual Machine Monitor (NVMM).

mailutils Version 3.6

Version 3.6 is available for download. For the list of changes in this version, please see the NEWS file entry.

GNU cflow Version 1.6

Version 1.6 is available for download.

tar @ Savannah: Version 1.32

GNU tar version 1.32 is available for download.

GNU Parallel 20190222 ('Baghuz') released

GNU Parallel 20190222 ('Baghuz') has been released. It is available for download at: http://ftpmirror.gnu.org/parallel/

We need Arm64 systems for developers. Again.

Getting AArch64 hardware for developers is important. When it happen? One day. Maybe even before people forget that such architecture existed. We talk about it during each Linaro Connect. So far nothing serious came from it. We had some failed attempts like Cello or Husky. There is Synquacer with own set of issues. Some people use MACCHIATObin. Some still use Applied Micro Mustangs which should get a place in computer museums. It is chicken and egg issue. No one makes affordable AArch64 systems because no one buys them. Because no one makes them. Hardware vendors concentrate on server market — no chips to choose for developer systems.

Siemens PLM Software announces enterprise Mentor Embedded Linux (MEL) solution

Siemens PLM Software announced an enterprise Mentor Embedded Linux (MEL) solution that provides electronics manufacturers secure, scalable and configurable distributions for industrial, medical, aerospace and defense applications. This MEL technology is a configurable distribution that provides an operating system platform for embedded systems development and is a result of the continued integration of the recently acquired embedded systems design capabilities from Mentor Graphics. The solution is based on Debian, an enterprise class, open source Linux operating system.

Siemens launches new enterprise class embedded Linux solution for embedded systems development

With the growth of internet of things (IoT) and other smart devices, it is becoming increasingly complex and expensive for manufacturers to develop embedded distributions and applications for these devices based on the Linux® operating system. Siemens PLM Software today announced a new enterprise Mentor® Embedded Linux® (MEL) solution that provides electronics manufacturers secure, scalable and configurable distributions for industrial, medical, aerospace and defense applications. This new MEL technology is a configurable distribution that provides a robust operating system platform for embedded systems development and is a result of the continued integration of the recently acquired embedded systems design capabilities from Mentor Graphics. The solution is based on Debian, a broadly utilized, enterprise class, open source Linux operating system.

Raspberry Pi Begins Rolling Out The Linux 4.19 Kernel

The Raspberry Pi folks have been working the past few months on upgrading their kernel in moving from Linux 4.14 to 4.19. That roll-out has now begun. Linux 4.19 has been the target of the Raspberry Pi Foundation due to this newer kernel being a Long-Term Support (LTS) release and thus will be maintained for the long-term. That large jump in the standard kernel version for Raspberry Pi ultimately means less work too for the developers involved: between 4.14 and 4,19, a lot of Raspberry Pi patches and other Broadcom improvements were upstreamed.

Raspberry Pi Updates Devices to Linux 4.19

Xiaomi’s 2019 goal is to release kernel source code more quickly for all its devices

Just before MWC 2019, Xiaomi took to the stage at an event in China to launch the new Xiaomi Mi 9 and Mi 9 SE. Both the devices represent the best of what OEM has to offer, bringing in a high value device at a fraction of the cost of a premium flagship. While this approach lets them appeal to the average consumer, Xiaomi has also been quite developer-friendly, which makes them a good purchase even for those who are looking for a device with a very good third party development community. Xiaomi does not void the warranty of devices (in India at least) if you unlock the bootloader, and they have worked on significantly bringing down the waiting times for bootloader unlock requests too.