Sifting through crates.io for malware with OSSF Package Analysis
Dev News: A 'Nue' Frontend Dev Tool; Panda and Bun Updates
There's a new frontend development toolset in town. Also, Panda and Node.js update, Bun bugs, and a prompt engineering course for web devs.
New files shed light on ExxonMobil’s efforts to undermine climate science
Executives privately sought to downplay link between fossil fuels and climate change despite public pronouncements, WSJ reports
As a beta tester for this and still a user, what point Community Notes have now is moot based on the hardline stance from Twitter’s new owner | X's crowdsourced fact-checking system will now let contributors consider opposing viewpoints | TechCrunch
X (formerly Twitter) this week changed how its crowdsourced fact-checking Community Notes feature works. In the new design, users will be able to review
These new names that Microsoft created really suck | Peach Sandstorm password spray campaigns enable intelligence collection at high-value targets | Microsoft Security Blog
Since February 2023, Microsoft has observed a high volume of password spray attacks attributed to Peach Sandstorm, an Iranian nation-state group. In a small number of cases, Peach Sandstorm successfully authenticated to an account and used a combination of publicly available and custom tools for persistence, lateral movement, and exfiltration.
Bye CentOS & cPanel
CentOS is going away and cPanel prices continue to go up - both of which means retirement for me.
Europol Spotlight Cyber-attacks: the Apex of Crime-as-a-Service
Critical Firewall Flaw on Upcoming macOS 14 Sonoma Exposes VPN Traffic
A critical firewall flaw on Apple's upcoming major release macOS 14, 'Sonoma' exposes VPN traffic and is a security risk.
TSMC tells vendors to delay chip equipment deliveries, sources say
Taiwan's TSMC has told its major suppliers to delay the delivery of high-end chipmaking equipment, as the world's top contract chipmaker grows increasingly nervous about customer demand, two sources familiar with the matter said.
This is one of those save for later Kubernetes articles | How to monitor Kubelet – Povilas Versockas #Kubernetes
The spectacular downfall of a common, useless cold medicine
This week's unanimous vote on phenylephrine's ineffectiveness was decades in the making.
jedi4ever/learning-llms-and-genai-for-dev-sec-ops
Contribute to jedi4ever/learning-llms-and-genai-for-dev-sec-ops development by creating an account on GitHub.
World’s Biggest Data Breaches & Hacks — Information is Beautiful
Data visualization of the world biggest data breaches, leaks and hacks. Constantly updated. Powered by @VizSweet.
Source Code Management Platform Configuration Best Practices
The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.
Dev Hunt – The best new Dev Tools every day
A launchpad for dev tools, built by developers for developers, open source, and fair.
Google hid evidence by training workers to avoid words monopolists use, DOJ says
"We don't 'lock up'... our customers," and "we do not 'leverage' anything."
Unity shuts two offices, citing threats after controversial pricing changes [Updated]
San Francisco police report threat came from an out-of-state employee.
dimdenGD/OldTweetDeck: Returns old TweetDeck, for free!
Returns old TweetDeck, for free! Contribute to dimdenGD/OldTweetDeck development by creating an account on GitHub.
X agrees to return to negotiating table over severance pay
Will Elon actually pay this bill?
Huawei and Xiaomi announce global patent licensing agreement · TechNode
On Wednesday, Huawei and Xiaomi announced a global patent cross-licensing agreement encompassing multiple communications technologies, including 5G.
Update NOW: OpenSSL 1.1.1's Shelf-Life Has Ended
The OpenSSL Project has announced that the long-term support version of OpenSSL 1.1.1 has come to the end of its lifecycle except for paying customers.
XDP ate my packets, and how I debugged it
This guide explores essential steps for debugging XDP (Express Data Path) issues. It covers strategies like using tcpdump for packet inspection, leveraging bpf_printk for parameter analysis, and employing tools like "xdpdump" and ethtool to diagnose and resolve common XDP problems. The guide emphasizes the importance of thorough debugging to uncover the root causes of XDP-related challenges.
Announcing Coder 2.0: Keep Developers In Flow
Coder moves developer workspaces off local machines and into your cloud infrastructure, centralizing their management and safeguarding your code and data.
WASI support in Go - The Go Programming Language
Go 1.21 adds a new port targeting the WASI preview 1 syscall API
Firefly is mind blowing | Adobe releases Firefly AI commercially and announces pricing moves ahead of earnings
Adobe shares rose higher Wednesday after the company announced ahead of earnings that it will implement a credit system to charge users when they use Firefly...
MGM Resorts says cyberattack could have material effect on company
MGM Resorts filed a report with the SEC acknowledging the three-day outage but is continuing to refer to it as a cybersecurity issue.
When It Comes to Compensation, More Equity Isn’t Always Better
The authors research found that people often overestimate the value of stock options when assessing a startup job offers. They incorrectly believe that a higher number of shares translates into superior compensation even when it doesn’t. Five steps can help you avoid this mistake.
Password-stealing Linux malware served for 3 years and no one noticed
It's not too late to check if a Linux device you use was targeted.
Ubuntu updates, releases and repositories explained | Ubuntu
Since we launched Ubuntu Pro’s Expanded Security Maintenance for additional packages, and we now integrate more closely with public cloud update management tools, more people have been asking us about the Ubuntu archive and how this is divided and security patched. In this blog we will therefore explain Ubuntu releases, how the Ubuntu arc […]
Disability as a Source of Competitive Advantage
Many companies realize the value of diversity, equity, and inclusion. But most focus on gender and ethnicity, paying less attention to people with disabilities. Employing people with disabilities is usually seen as a social cause—one best suited to nonprofits or the public sector. That is a mistake—and more important, a missed opportunity. In many industries innovative companies are demonstrating that including people with disabilities can lead to real competitive advantage, in four ways: (1) Disabilities often confer unique talents that make people better at particular jobs. (2) The presence of employees with disabilities elevates the culture of the entire organization, making it more collaborative and boosting productivity. (3) A reputation for inclusiveness enhances a firm’s value proposition with customers, who become more willing to build long-term relationships with the company. And (4) being recognized as socially responsible gives a firm an edge in the competition for capital and talent. There is nothing wrong with wanting to do good in the world, but there is also nothing wrong with wanting to do well, and the latter is enough reason to employ people with disabilities.