72 posts
GitHub Actions is a free CI/CD service, and it's now being abused to mine cryptocurrency. I introduce what GitHub Actions is in another post, so I won't repeat it here — see "First look at GitHub Actions Workflows".
Last week Alibaba Cloud announced a product update: it has joined the Cloudflare Bandwidth Alliance, offering Alibaba Cloud users highly competitive storage pricing — including free traffic from Cloudflare CDN back to OSS origin.
Three days ago, two malicious commits were pushed into the php-src repository maintained by the PHP team on its git.php.net server. Both commits faked signatures — his own, and that of PHP creator Rasmus Lerdorf.
Red Hat has long been a donor and contributor to projects led by the Free Software Foundation (FSF), with hundreds of contributors and millions of lines of code donated. Given the circumstances of Richard Stallman's original resignation in 2019, Red Hat was alarmed to learn he has rejoined the FSF board.
Linux 5.12-rc5, released today, carries more than the average amount of change for this stage of kernel development. If that pace holds, it could add an extra week of testing and an -rc8 before Linux 5.12 final ships — though it's too early to say for certain.
The IETF announced that TLS 1.0 (RFC 2246) and TLS 1.1 (RFC 4346) are formally deprecated. These versions lack support for current and recommended cryptographic algorithms and mechanisms.
Firefox announced that Firefox 87 introduces a stricter, more privacy-preserving default referrer policy. From now on, Firefox will trim path and query string information from the Referer header by default, preventing sites from accidentally leaking sensitive user data.
On March 18, 2021, GitLab — the world's second-largest open source software company — announced that JiHu Information Technology (Hubei) Co., Ltd. has officially registered in Wuhan, China.
This is a decade-old vulnerability in the sudo tool that can grant any local user root access on Unix-based systems, including macOS Big Sur and earlier. Improper operation grants root privileges to arbitrary local users. To trigger it, a user only needs to rewrite argv[0] or create a symbolic link.
Baidu quietly launched another tool: Baidu ZhenZhan, offering site diagnostics including a "Baidu search heat score", browser behavior, site certificate information, site security scanning, and site company information lookups.
