LWN.net's Journal
 
 [Most Recent Entries] [Calendar View]

Friday, August 30th, 2019

    Time Event
    12:56p
    Security updates for Friday
    Security updates have been issued by Arch Linux (dovecot, gettext, go, go-pie, libnghttp2, and pigeonhole), Debian (djvulibre, dovecot, and subversion), Fedora (sleuthkit and wireshark), openSUSE (containerd, docker, docker-runc, and qbittorrent), Oracle (pango), SUSE (kernel, nodejs10, and python-SQLAlchemy), and Ubuntu (apache2).
    3:59p
    A very deep dive into iOS Exploit chains found in the wild (Project Zero)
    It's not Linux but is worth a read: Google's Project Zero blog has a
    highly detailed analysis     of several iOS exploits and how they were used
    to compromise large numbers of devices. "There's something thus far which is conspicuous only by its absence: is any of this encrypted? The short answer is no: they really do POST everything via HTTP (not HTTPS) and there is no asymmetric (or even symmetric) encryption applied to the data which is uploaded. Everything is in the clear. If you're connected to an unencrypted WiFi network this information is being broadcast to everyone around you, to your network operator and any intermediate network hops to the command and control server.

    This means that not only is the end-point of the end-to-end encryption
    offered by messaging apps compromised; the attackers then send all the
    contents of the end-to-end encrypted messages in plain text over the
    network to their server.    "
    6:43p
    [$] Examining exFAT
    Linux kernel developers like to get support for new features — such as
    filesystem types — merged quickly. In the case of the exFAT
    filesystem, that didn't happen; exFAT was created by Microsoft in 2006 for
    use in larger flash-storage cards, but there has never been support in the
    kernel for this filesystem. Microsoft's recent announcement
    that it wanted to get exFAT support into the mainline kernel would appear
    to have removed the largest obstacle to Linux exFAT support. But, as is so
    often the case, it seems that some challenges remain.

    << Previous Day 2019/08/30
    [Calendar]     		Next Day >>

LWN.net   About LJ.Rossia.org