More than 11 Million HTTPS Websites Imperiled by New Decryption Attack

By

-

March 1, 2016

drown-explainer Low-cost DROWN attack decrypts data in hours, works against TLS e-mail servers, too.

More than 11 million websites and e-mail services protected by the transport layer security protocol are vulnerable to a newly discovered, low-cost attack that decrypts sensitive communications in a matter of hours and in some cases almost immediately, an international team of researchers warned Tuesday. More than 81,000 of the top 1 million most popular Web properties are among the vulnerable HTTPS-protected sites.

The attack works against TLS-protected communications that rely on the RSA cryptosystem when the key is exposed even indirectly through SSLv2, a TLS precursor that was retired almost two decades ago because of crippling weaknesses. The vulnerability allows an attacker to decrypt an intercepted TLS connection by repeatedly using SSLv2 to make connections to a server.

Viper, the Python IoT Development Suite, Is Now Zerynth

By

The Linux Foundation

-

March 1, 2016

The startup that launched the tools to develop embedded solutions in Python language announced the brand change along with the first official release. Exactly one year after the Kickstarter launch of the suite for developing Internet of Things solutions in Python language, Viper becomes Zerynth.

It is definitely a big day for the startup that created a radically new way to approach the world of microcontrollers and connected devices, making professionals and makers able to design interactive solutions with reduced efforts and shorter time…. Now Zerynth celebrates its new name launching the first official release of the toolkit.

6 Essential Non-Coding Careers in Open Source

By

OpenSource.com

-

March 1, 2016

A sign of the maturation of a movement is when careers in it become a possibility. This seems to be the case with open source software.

… Today we’ve reached a point where open source software is in almost every area of technology. And while we often still think of it as code and developers, a whole ecosystem has evolved around open sourceâ€”one that includes many full-time careers. These roles are much needed as open source matures, and they allow more of us who believe in the power of collaborative development to get involved.

To help those looking to get involved in open source professionally, here’s a look at some of the most popular and emerging roles.

Node.js 5.7 Released Ahead of Impending OpenSSL Updates

By

IT World

-

March 1, 2016

Once again, OpenSSL fixes must be evaluated by keepers of the popular server-side JavaScript platform.

The Node.js Foundation is gearing up this week for fixes to OpenSSL that could mean updates to Node.js itself. Releases to OpenSSL due on Tuesday will fix defects deemed to be of “high” severity, Rod Vagg, foundation technical steering committee director, said in a blog post on Monday. Within a day of the OpenSSL releases, the Node.js crypto team will assess their impacts, saying, “Please be prepared for the possibility of important updates to Node.js v0.10, v0.12, v4 and v5 soon after Tuesday, the 1st of March.”

The latest OpenSSL developments follow the release of Node.js 5.7.0, which is clearing a path for the upcoming Node.js 6.

OpenSSH 7.2 Out Now with Support for RSA Signatures Using SHA-256/512 Algorithms

By

Softpedia

-

March 1, 2016

openssh-7-2 The OpenBSD project had the great pleasure of announcing the release and immediate availability for download of OpenSSH 7.2 for all supported platforms.

According to the internal release notes, also attached at the end of the article for reference, OpenSSH 7.2 is primarily a bugfix release, fixing most of the issues reported by users or discovered by the development team since the release of OpenSSH 7.1p2, but we can see several new features as well. Among these, we can mention support for RSA signatures using SHA-256 or SHA-256 512 hash algorithms, the addition of an AddKeysToAgent client option to add private keys used for authentication to the ssh-agent,…

Brocade G620 Gen 6 Fibre Channel Switch Released

By

The Linux Foundation

-

March 1, 2016

Brocade has announced the release of their Gen 6 Fibre Channel switch for storage networking, the Brocade G620, indicating that the new high-density SAN switch will boast unprecedented performance and scalability designed to support data growth and demanding workloads from mission-critical applications.

Brocade adds that their Gen 6 Fibre Channel technology will allow organizations to address performance, reliability and scalability requirements for hyper scale virtualization, new data center architectures and next-generation storage technologies. …the Brocade G620 switch provides storage networking with improve performance across both 32 and 128 Gbps links with up to a whopping 100 million IOPS.

openSUSE Becomes Mentoring Organization

By

openSUSE

-

March 1, 2016

openSUSE-101 Google announced yesterday (Leap Day) that the openSUSE Project has been accepted as a mentoring organization for this year’s Google Summer of Code. University students can spend their summer break writing code and learning about open source development with openSUSE while earning money through Google’s 12-year old, annual international program.

“Mentoring is a big part of the openSUSE culture,” said Richard Brown, the chairman of the openSUSE Board. “To be selected as a mentoring organization for this year’s Google Summer of Code is an immense honor. The value GSoC brings is immeasurable because it does more than just support students learning and contributing to open source; it teaches them to build interpersonal skills while doing something technically challenging and gives them an opportunity to use their theoretical knowledge from university studies to solve real-world problems.”

A list of available projects and points of contacts for students interested in openSUSE can be found at 101.opensuse.org.

Chromium OS Coming Soon to All SBCs, Including the New Raspberry Pi 3 and Zero

By

Softpedia

-

March 1, 2016

We’ve been covering the Chromium OS for Raspberry Pi 2 project for quite some time now, and just a few days ago, we exclusively reported on its fourth release, which brought huge performance improvements and a redesigned kernel.

However, starting today, February 29, 2016, the Chromium OS for Raspberry Pi 2 project has a new home, which you can find at http://www.chromiumosforsbc.org, as well as a new name and a new goal. So, from now on, Chromium OS for Raspberry Pi 2 will be renamed to “Chromium OS for SBC.” Earlier today, we’ve had a quick chat with one of the project’s founders, and he has revealed for Softpedia that their project is extending. Moreover, he says that its main goal from now on will be to bring the Chromium OS operating system to any other single-board computer out there, including the well-known Raspberry Pi Zero, C.H.I.P., and PINE64.

Distribution Release: OpenELEC 6.0.2

By

DistroWatch

-

March 1, 2016

Christian Hewitt has announced the release of OpenELEC 6.0.2, the latest stable version of the specialist distribution featuring Kodi, an open-source media entertainment software:

“The OpenELEC 6.0.2 release has been published. Users running OpenELEC 5.95.1 thru 6.0.1 with auto-update enabled will be prompted on-screen to reboot and apply the update once it has been downloaded. Users running older OpenELEC releases or with auto-update disabled will need to manually update.

Idea – Is There A TV Gaming Potential For The Raspberry Pi 3 Under Kodi?

By

Per Lindholm

-

March 1, 2016

It just seems so natural. Could the Raspberry Pi 3 also be a platform for gaming on the TV. As a device to promote programming. I believe you could have tutorials for creating games that could have many possibilities for personal configurations. Since you could alter a webpage with HTML/CSS why can’t you have something like Linux Gaming CSS where you could customize the game to your own liking. Add your own assets and so on. Then if you could share that game with others and run it under Kodi. Then with the smartphone as a readily available Wifi-controller you would have a seriously fun platform. / peroglyfer.se