GitHub launches Arctic Code Vault to preserve open source software for 1,000 years

By

-

November 14, 2019

GitHub has shared plans to open the Arctic Code Vault, an effort to store and preserve open source software like Flutter and TensorFlow. Code for all open source projects will be stored here on film with frames that include 8.8 million pixels each, designed to last 1,000 years.

The code will be housed in a decommissioned coal mine in Svalbard, Norway, the same city chosen to host a global seed vault. One of the northernmost cities on Earth, in Svalbard permafrost can extend hundreds of meters below the surface. Archivists believe the cold and near-constant conditions can help in preservation.

[Source: VentureBeat]

Debian Project Releases Linux Security Updates to Patch Latest Intel CPU Flaws

By

Swapnil Bhartiya

-

November 14, 2019

The Debian Project released new Linux kernel security updates for its supported Debian GNU/Linux releases to address the latest vulnerabilities affecting Intel CPU microarchitectures. As reported earlier this week, four new security vulnerabilities have been discovered in the Linux kernel and with an impact on Intel CPUs, namely CVE-2019-11135, CVE-2018-12207, CVE-2019-0154 and CVE-2019-0155, which may lead to privilege escalation, information leak, as well as denial of service.

The Debian Project recommends all users of the Debian GNU/Linux 9 “Stretch” and Debian GNU/Linux 10 “Buster” operating systems to update their installations as soon as possible to the new Linux kernel versions, namely 4.9.189-3+deb9u2 for Debian Stretch and 4.19.67-2+deb10u2 for Debian Buster.

[Source: Softpedia]

Intel launches DevCloud for edge AI prototyping with OpenVINO

By

Swapnil Bhartiya

-

November 13, 2019

Intel today announced the launch of the Edge AI DevCloud, a way to prototype and test AI with the OpenVINO toolkit for edge devices like drones and cameras. Developers can use existing tools and frameworks to test and optimize models in OpenVINO for Intel hardware like CPUs or FPGAs for free.

OpenVINO supports a range of machine learning accelerators from CPUs, GPUs, and FPGAs to the Intel Movidius Neural Compute Stick. The toolkit was updated earlier this year to extend beyond computer vision applications and support voice and NLP models.

[Source: VentureBeat]

Big believer in government open source? Help with an open task on code.gov

By

Swapnil Bhartiya

-

November 13, 2019

Want to collaborate on government open source code projects? Don’t forget about code.gov. Technologists who want to support the various missions of the federal government need not take on a full-time role to contribute. The General Services Administration‘s lead for code.gov, Karen Trebon, gave a shoutout to the site’s “open tasks” tab during a panel at the Red Hat Government Summit on Tuesday.

Code.gov currently lists 48 open tasks at agencies as divergent as the Consumer Financial Protection Bureau, Department of Defense, GSA and more.

[Source: FedScoop]

Sonatype Delivers Premium Open Source Controls to GitHub Users

By

Swapnil Bhartiya

-

November 13, 2019

Sonatype, the company that scales DevOps through open source governance and software supply chain automation, today announced new integrations that strengthen GitHub with premium open source governance and dependency management controls.

Nexus Lifecycle customers can now automatically enforce their policies and view expert remediation guidance directly in GitHub Actions. Sonatypes unparalleled open source data enables developers to know with extreme confidence, if a component is vulnerable without leaving their environment. Nexus now supports 42 programming languages and package formats.

[Source: DevOps.com]

Canonical Announces Ubuntu Updates to Mitigate Latest Intel Vulnerabilities

By

Swapnil Bhartiya

-

November 13, 2019

Following on the footsteps of Red Hat, Canonical also announced today that it has prepared updates for all of its supported Ubuntu Linux releases to mitigate the latest Intel CPU security vulnerabilities.

As we reported earlier, Intel announced today that several new security vulnerabilities are affecting various of its Intel CPU microarchitectures, as well as associated GPUs. These vulnerabilities are known as TSX Asynchronous Abort (CVE-2019-11135), Intel Processor Machine Check Error (CVE-2018-12207), and Intel i915 graphics hardware vulnerabilities (CVE-2019-0155, CVE-2019-0154).

[Source: Softpedia]

Redis Labs Leverages Kubernetes to Automate Database Recovery

By

Swapnil Bhartiya

-

November 13, 2019

Redis Labs today announced it has enhanced the Operator software for deploying its database on Kubernetes clusters to include an automatic cluster recovery that enables customers to manage a stateful service as if it were stateless. Announced at Redis Day, the latest version of Kubernetes Operator for Redis Enterprise makes it possible to spin up a new instance of a Redis database in minutes.

Howard Ting, chief marketing officer for Redis Labs, says as Kubernetes has continued to gain traction, it became apparent that IT organizations need tools to provision Redis Enterprise for Kubernetes clusters.

[Source: Container Journal]

Mirantis Acquires Docker Enterprise Business

By

Swapnil Bhartiya

-

November 13, 2019

In an expected move Mirantis today announced that it’s acquiring the enterprise business unit of Docker, one of the most lucrative pieces of Docker Inc. While Docker technologies have been pivotal to the digital transformation of companies and also disrupted the IT industry, as a company it didn’t enjoy the same success. The company tried to bring in new CEOs to turn it profitable, but it didn’t work out as expected.
Source: TFiR

Red Hat Responds to ZombieLoad v2 Security Vulnerabilities Affecting Intel CPUs

By

Swapnil Bhartiya

-

November 12, 2019

Red Hat has reported a series of three new security vulnerabilities affecting the Intel CPU microarchitecture, but which have been already patched in the Linux kernel. The three new security vulnerabilities are CVE-2018-12207 (Machine Check Error on Page Size Change), CVE-2019-11135 (TSX Asynchronous Abort), as well as CVE-2019-0155 and CVE-2019-0154 (i915 graphics driver-related vulnerabilities). These are marked by Red Hat Security team as having an important and moderate security impact, which could allow attacker to gain read access to sensitive data, and which affects all supported Red Hat Enterprise Linux systems.
[Source: Softpedia]

Mozilla partners with Intel, Red Hat and Fastly to take WebAssembly beyond the browser

By

Swapnil Bhartiya

-

November 12, 2019

Mozilla, Intel, Red Hat and Fastly today announced the launch of the Bytecode Alliance, a new open-source group that focuses on “creating new software foundations, building on standards such as WebAssembly and WebAssembly System Interface (WASI).”

Mozilla has long championed WebAssembly, the open standard that allows browsers to execute compiled programs in the browser. This allows developers to write their applications in languages like C, C++ and Rust and have those programs execute at native speed, all without having to rely on JavaScript, which would take much longer to parse and execute, especially on mobile devices.

[Source: TechCrunch]