Published 8 minutes ago:

Stallmans article: (attribution and link at the bottom)

A quotation circulates on the Internet, attributed to me, but it wasnt written by me.

Heres the text that is circulating. Most of it was copied from statements I have made, but the part italicized here is not from me. It makes points that are mistaken or confused.

Id just like to interject for a moment. What youre referring to as Linux, is in fact, GNU/Linux, or as Ive recently taken to calling it, GNU plus Linux. Linux is not an operating system unto itself, but rather another free component of a fully functioning GNU system made useful by the GNU corelibs, shell utilities and vital system components comprising a full OS as defined by POSIX. Many computer users run a widely used today is often called Linux, and many of its users are not aware that it is basically the GNU system, developed by the GNU Project. There really is a Linux, and these people are using it, but it is just a part of the system they use.

Linux is the kernel: the program in the system that allocates the machines resources to the other programs that you run. The kernel is an essential part of an operating system, but useless by itself; it can only function in the context of a complete operating system. Linux is normally used in combination with the GNU operating system: the whole system is basically GNU with Linux added, or GNU/Linux. All the so-called Linux distributions are really distributions of GNU/Linux.

The main error is that Linux is not strictly speaking part of the GNU systemwhose kernel is GNU Hurd. The version with Linux, we call GNU/Linux. It is OK to call it GNU when you want to be really short, but it is better to call it GNU/Linux so as to give Torvalds some credit.

We dont use the term corelibs, and I am not sure what that would mean, but GNU is much more than the specific packages we developed for it. I set out in 1983 to develop an operating system, calling it GNU, and that job required developing whichever important packages we could not find elsewhere.

See Linux and GNU and GNU/Linux FAQ, plus the history in The GNU Project.

Original...

hubie writes:

The decline of science at the FDA has become unmanageable:

Before 1962, US federal law did not require pre-marketing proof of effectiveness for drugs. But senate hearings revealing widespread false advertising of drugsalong with the thalidomide safety disasterspurred Congress into action. From then on, approval of a New Drug Application (NDA) by the US Food and Drug Administration required proof of "substantial evidence" of effectiveness. This proof was defined as results from "adequate and well-controlled investigations, including clinical investigations," with such evidence also required to advertise claims of safety and effectiveness. A National Academy of Sciences review underscored the need for these mandates, finding over 30% of pre-1962 marketed drugs to be ineffective.

The FDA's legally enforceable regulations detail what "substantial evidence" and "adequate and well-controlled investigations" mean in greater depth, supplemented by guidelines to industry which, although not legally binding, explain the FDA's current interpretation of drug manufacturers' legal obligations. However imperfect, the FDA's enforcement of these provisions assures prescribers, patients, and payers that effectiveness claims are based on science, not science fiction. A published FDA review showed efficacy deficiencies, in whole or in part, underlying initial rejection of 89 of 151 NDAs (59%), highlighting the continuing need for vigilance on this front.

However, as Peter Doshi reports in The BMJ, the FDA subverted the legal standard for effectiveness in its 2019 approval of Recarbrio, a fixed dose combination of imipenem, cilastatin, and relebactam. While the FDA has previously approved products with marginal evidence of effectiveness, approval of the Recarbrio NDA was shocking given its lack of substantial evidence of effectiveness and the complete absence of adequate and well controlled clinical investigations on the actual indication of interest.

[...] What accounts for this descent into cargo cult science? Much of the blame must go to the FDA's reliance on industry paid user fees. Over the past three decades the proportion of the FDA's annual drug budget made up of such fees has risen from less than 10% (fiscal year 1994) to more than two thirds (fiscal year 2023). In addition, the alluring "regulatory flexibilities" provided by the FDA Modernization Act of 1997 and the 21st Century Cures Act have become habit forming, enabling the FDA's leadership and managers to deny scientific reality by defining effectiveness downward. In its quest to avoid difficult choices and hard decisions the FDA has increasingly embraced non-inferiority trials (or vice versa), ignoring the serious regulatory, clinical, and ethical problems caused by their misuse.

The BPF virtual machine in the kernel has been steadily gaining new features for years, many of which add capabilities that C programmers do not ordinarily have. So, from one point of view, it was only a matter of time before BPF gained support for exceptions. As it turns out, though, this "exceptions" feature is aimed at a specific use case, and its use in most programs will be truly exceptional.

IGEL has announced the appointment of Klaus Oestermann as CEO. A proven leader in growing global software businesses, Oestermann succeeds Jed Ayres who will continue on as IGEL Company Advisor. Oestermann, who brings a track record for scaling global software businesses while building market positions and brand value, was selected by the IGEL Board to take the top executive position after being named Executive Chair of the Board earlier this year. His expertise in balancing More

The post IGEL appoints Klaus Oestermann as CEO appeared first on Help Net Security.

Hackaday has been online in some form or another since 2004, which for the Internet, makes us pretty damn old. But while that makes us one of the oldest surviving web resources for hacker types, weve got nothing on 2600 theyve been publishing their quarterly zine since 1984.

Security updates have been issued by Fedora (golang, nodejs16, nodejs18, and R-jsonlite), Red Hat (java-1.8.0-openjdk and java-17-openjdk), SUSE (container-suseconnect, redis, and redis7), and Ubuntu (wkhtmltopdf).

Deloitte has expanded their MXDR cybersecurity solution to help support some of the unique challenges for enterprise, cloud, and operational technology (OT) security operations center (SOC) delivery, by developing two new modules for identity security and mission-critical OT. As the threat landscape continues to change rapidly, we want to offer Deloittes existing and future clients access to what we call the next generation MXDR, enhancing security for our clients most important assets, says Emily Mossburg, More

The post Deloitte expands MXDR solution with new operational technology and identity modules appeared first on Help Net Security.

Contents

• GNU/Linux
  • Applications
  • Instructionals/Technical
  • Games
  • Desktop Environments/WMs
    • K Desktop Environment/KDE SC/Qt
• Distributions and Operating Systems
  • SUSE/OpenSUSE
  • Fedora Family / IBM
  • Debian Family
  • Canonical/Ubuntu Family
  • Devices/Embedded
  • Open Hardware/Modding
  • Mobile Systems/Mobile Applications
• Free, Libre, and Open Source Software
  • FSF
  • Programming/Development
• Leftovers
  • Science
  • Education
  • Hardware
  • Health/Nutrition/Agriculture
  • Proprietary/Artificial Intelligence (AI)
  • Security
    • Privacy/Surveillance
  • Defence/Aggression
  • Transparency/Investigative Reporting
  • Environment
    • Energy/Transportation
    • Overpopulation
  • Finance
  • AstroTurf/Lobbying/Poli...

Up first this week is a report from vpnMentor, covering the unsecured database backing a set of dating apps, including 419 Dating. The report is a bit light on the technical details, like what sort of database this was, or how exactly it was accessed. But the result is 2.3 million exposed records, containing email address, photos sometimes explicit, and more. Apparently also exposed were server backups and logs.

The good news here is that once [Jeremiah Fowler] discovered the database door unlocked and hanging open, he made a disclosure, and the database was secured. We can only hope that it wasnt discovered by any bad actors in the meantime. The app has now disappeared from the Google Play store, and had just a bit of a sketchy air about it.

WooCommerce Under Siege

Back in March, CVE-2023-28121 was fixed in the WooCommerce plugin for WordPress. The issue here is an authentication bypass that allows an unauthenticated user to commandeer other user accounts.

Within a few months, working exploits had been derived from the details of the patch plugging the hole. It wasnt hard. A functio...

AppViewX has joined the Amazon Web Services (AWS) Independent Software Vendor (ISV) Accelerate Program, a co-sell program for AWS Partners who provide software solutions that run or integrate with AWS. The program will help AppViewX drive new business and accelerate sales cycles by connecting the participating ISVs with the AWS Sales organization. As a MIM vendor, working with the AWS Sales organization allows AppViewX to vet and identify the best solutions available to customers. We More

The post AppViewX joins AWS ISV Accelerate Program to offer a certificate lifecycle management appeared first on Help Net Security.

Vulkan 1.3.258 was published today as the newest revision to this high performance graphics and compute API. There's many fixes with the last Vulkan spec update having been in early July but making this release more notable are two new extensions...

Via: CTV News: Less than a quarter (23 per cent) of Canadians think the federal government is properly spending money on the most important issues facing the country, according to new survey data from Ipsos. The survey, conducted on behalf of the Montreal Economic Institute, also found 64 per cent of people think the government []

• Gemini* and Gopher

  • Personal/Opinions

    • SpellBinding: APEFLMC Wordo: BUILD

  • Politics and World Events

    • Neoliberalism, Co-Production, and the Social Factory

      Understanding the problems around care requires us to look back and more nationally than just Maine. Many of the other elders I interviewed seemed to agree with Emma [pseudonym] about the importance of community and care networks, sharing a nostalgia for times when local communities and extended families cared for each other over and above both state welfare and corporate market consumption. 69-year-old Lucy (pseudonym), a core organizer in the Hour Exchange project and one of my interviewees, spoke to me about how society used to work very much on this kind of basis of mutual aid but since modern capitalism and especially globalization, people are more isolated from one another. Similarly, 64-year-old Peter (pseudonym), a long-time member of Hour Exchange I also interviewed, outlined how

  • Technology and Free Software

    • Automatically checking for new iris messages on ^C 2023-07-21

      One of the unique features of ^C is iris, the message base written by calamitous. Its relatively low-traffic, and while I could keep it open in interactive mode and issue the f or freshen command occasionally to check for new messages, I dont want to.

    • Using AI to Generate Images for Articles

      Lets start with the basics. You might be asking yourself what is a meta image?. Its the image that shows up on LinkedIn, Facebook and other sites when you post a URL. Its usually accompanied by the title and a summary of the website being posted. Th...

First up the belated Mesa 23.1.4 is now available as the latest stable point release in the Mesa 23.1 series...

G-71 launched an extensive integration of its LeaksID solution with all major mail servers. This integration aims to ensure the utmost security of sensitive email attachments and heralds a new era in safeguarding valuable corporate information. In addition to serving as a trusted secure data room for document storage and exchange, LeaksID now empowers users with advanced integration capabilities, enabling them to label email attachments containing sensitive information. This crucial update addresses the prevalent global More

The post G-71 launches integration with mail servers to secure email attachments appeared first on Help Net Security.

North Korean state-sponsored hackers have been linked to two recent cyberattack campaigns: one involving a spear-phishing attack on JumpCloud and the other targeting tech employees on GitHub through a social engineering campaign. The JumpCloud intrusion On June 27, JumpCloud an enterprise software company that offers a cloud-based directory as a service platform noticed some unusual activity on an internal orchestration system and traced it back to a spear-phishing attack that occurred on June More

The post North Korean hackers targeted tech companies through JumpCloud and GitHub appeared first on Help Net Security.

Timeline of traffic (reverse-chronological):

Tux Machines quit Twitter at the start of June

Summary: Now that Twitter has erected the walled gardens (once again) an account with a trove of over 150,000 tweets about GNU/Linux gets barely a thousand views per month; it used to be over a thousand a day and years ago 3,000-6,000 per day (the slow death of Twitter or its gradually-accelerating demise predates Musk)

Posted by Qualys Security Advisory on Jul 21

A new malware strain known as BundleBot has been stealthily operating under the radar by taking advantage of .NET single-file deployment techniques, enabling threat actors to capture sensitive information from compromised hosts. "BundleBot is abusing the dotnet bundle (single-file), self-contained format that results in very low or no static detection at all," Check Point said in a report

Operating a pirate site is not without risk. Those who get caught risk millions of dollars in damages, multi-year prison sentences, or even both.

To avoid that fate, many sites prefer not to poke the proverbial bear. With dozens of high-profile shutdowns in recent years, the Alliance for Creativity and Entertainment (ACE) is the biggest bear there is in the piracy landscape.

DonTorrent Stands Out

ACE is well aware of all large pirate sites, so hiding isnt really an option. Instead, most sites simply try to stand out less than the rest, a strategy that doesnt apply to one of Spains most popular torrent sites, DonTorrent.

With millions of visitors, DonTorrent is one of the larger pirate sites in the region but getting users to the site isnt always easy. Spanish ISPs are required to block DonTorrent, so the site regularly rotates to fresh domains.

DonTorrent currently has over 100 registered domains and also offers a censorship-free Tor version. To inform followers about its most recent new home, it uses a dedicated Telegram channel, which pops up for all new visitors.

Taunting the Anti-Piracy Don

The photo that accompanies the Telegram invite link may not immediately ring a bell with everyone, but those in the know recognize Jan Van Voorns likeness. Van Voorn is the head of ACE and MPAs Chief of Global Content Protection.

Van Voorns photo, with an added pirate hat and crossbones, is also present in the sites official logo now. Apparently, the site is not afraid of drawing attention, even though this type of mockery is likely to make ACE even more determined to find its operators.

This isnt the first time that DonTorrent has openly featured the ACE chief. The torrent site previously listed Van Voorn as the sites owner and is now upping the ante.

Needless to say, ACE is working behind the scenes to find those responsible for the site. For exampl...

Regardless of the country, local government is essential in most citizens' lives. It provides many day-to-day services and handles various issues. Therefore, their effects can be far-reaching and deeply felt when security failures occur. In early 2023, Oakland, California, fell victim to a ransomware attack. Although city officials have not disclosed how the attack occurred, experts suspect a

Triple-negative breast cancer is a combative cancer type with a highly inflated histological grade that leads to poor theragnostic value. Gene, protein, and receptor-specific targets have shown effective clinical outcomes in patients with TNBC. Cells are frequently exposed to DNA-damaging agents. DNA damage is repaired by multiple pathways; accumulations of mutations occur due to damage to one or more pathways and lead to alterations in normal cellular mechanisms, which lead to development of tumors. Advances in target-specific cancer therapies have shown significant momentum; most treatment options cause off-target toxicity and side effects on healthy tissues.

<p><img src= "https://lifeboat.com/blog.images/jermonica-boardley-joseph-scrocco-novel-harm-reduction-strategies-for-the-opioid-epidemic2.jpg" style="display: none;"></p> <p>Novel Harm Reduction Strategies For The Opioid Epidemic Harmguard FX Jermonica Boardley & Joseph Scrocco Sivad Group LLC / Diagnostic Solutions Group</p> <hr> <p>Jermonica Boardley is President and CEO of SIVAD Diagnostic Medical Group LLC (<a href= "https://sivadppe.com/),">https://sivadppe.com/),</a> a minority-owned company dedicated to addressing the unique needs of underserved and unserved communities in the United States and globally, which most recently announced the launch of HarmGuard FX (<a href= "https://www.harmstopper.com/),">https://www.harmstopper.com/),</a> a single, low-cost strip that provides an affordable, reliable way for people to test substances for fentanyl and xylazine (popularly known as tranq), two dangerous adulterants that are exacerbating the already critical opioid epidemic.</p> <p>Ms. Boardley is a graduate of Delaware State University, brings over 20 years of diverse corporate leadership experience to her role as President and CEO and her expertise spans Accounting, Finance, Human Resources, Communications, and Diversity, Equity & Inclusion (DE&I).</p> <p>Joseph Scrocco, is President & CEO, Diagnostic Solutions Group (https://www.diagnosticsolutionsgroup.com/), the developer of HarmGuardFX, and their company has developed custom diagnostic solutions for over 25 years ranging from complex mass screening for blood banks to individual point-of-care testing with a focus on large-scale, global diagnostic needs, including antibody, molecular, and antigen tests in traditional and non-traditional settings. Their clients include Johnson & Johnson; Pfizer; Novo Nordisk; Abbott Labs; Ortho Clinical Diagnostics; the Red Cross; the governments of Nigeria, Ivory Coast, Bangladesh, Liberia, Jamaica, India, Mali; numerous Broadway companies; plus, hundreds of hospitals, urgent care centers, and long-term care facilities.</p> <p>Mr. Scrocco has a MS in Neurophysiology from University of Medicine and Dentistry of New Jersey, and an MA in Information Systems from New York University.</p> <div style="clear: both;"><a href= "https://www.youtube.com/watch?v=WU3xL4BQ1U0">Read more</a></div>

Alexs lemonade stand foundation fighting childhood cancer, one cup at a time! liz scott, co-executive director, alexs lemonade stand foundation.

Liz Scott is Co-Executive Director, of Alexs Lemonade Stand Foundation for Childhood Cancer (ALSF https://www.alexslemonade.org/), an organization which emerged from the front yard lemonade stand of her daughter, Alexandra Alex Scott (19962004).

In 2000, at the age of four, Alex announced that she wanted to hold a lemonade stand to raise money to help find a cure for other children with cancer, herself already bravely fighting neuroblastoma, which she was diagnosed with at age one.

Over her lifetime, Alex would raise over $1 million before she passed away in 2004 at the age of 8. Since then, Liz and her husband Jay have worked alongside thousands of supporters across the country to carry on Alexs legacy of hope.

To date, ALSF has raised more than $250 Million toward fulfilling Alexs dream of finding a cure, funding over 1,000 pediatric cancer research projects nationally.

Alexs story has inspired lemonade stands in all 50 states across America and in more than 10 countries across the world, including places as far away as Japan, Brazil and Australia.

The book Alex and the Amazing Lemonade Stand, written by Alexs parents about her journey, can be found on all major book sellers.

Posted by Demi Marie Obenour on Jul 21

Sci-fi writers and AI researchers worry: What happens if technology, specifically artificial intelligence, reaches singularity?

In March 2020, an experiment in science philanthropy was hatched in the span of a five-minute call.

Patrick Collison, the now 34-year-old billionaire CEO of the online payments company Stripe, and economist Tyler Cowen were chewing over a shared concern: Scientific progress seemed to be slowing down. As the first pandemic lockdowns went into effect, researchers were in a holding pattern, waiting to hear if they could redirect their federal grants to COVID-related work. Collison and Cowen worried that the National Institutes of Health wasnt moving quickly enough, so they launched Fast Grants to get emergency research dollars to virologists, coronavirus experts, and other scientists rapidly.

We thought: Lets just do this, Cowen recalls. It was a bit like put up or shut up.

Elon Musk, the omnipotent ruler of the Twitterverse, has chimed in and has decreed that the actual physical universe is possibly twice as old as we think it is.

Make of that what you will.

Musk was responding to noted misinformation peddler and comedian Joe Rogan, who linked to a press release about a controversial new paper that indeed suggests the universe could be 26.7 billion years old, almost twice as the general consensus among scientists.

Elon Musk confirmed that Tesla is currently in early discussions to license its self-driving technology with a major automaker.

At the end of his opening remarks for Teslas Q2 2022 earnings call following the release of the automakers financial results, CEO Elon Musk said that he wanted to strongly emphasize that Tesla is open to licensing its self-driving technology to other automakers.

Thats something that the CEO has been frequently mentioning as of late.

James Cameron has no intention of using artificial intelligence to write a film script. In a new interview with CTV News, the Oscar winner expressed doubt over AI bots being able to write a good story.

According to Cameron: I just dont personally believe that a disembodied mind thats just regurgitating what other embodied minds have said about the life that theyve had, about love, about lying, about fear, about mortality and just put it all together into a word salad and then regurgitate itI dont believe thats ever going to have something thats going to move an audience. You have to be human to write that. I dont know anyone thats even thinking about having AI write a screenplay.

Gene editing insects could help reduce reliance on pesticidesand help protect billion-dollar industries.

The exploitation of the Citrix NetScaler ADC zero-day vulnerability (CVE-2023-3519) was first spotted by a critical infrastructure organization, who reported it to the Cybersecurity and Infrastructure Security Agency (CISA). In June 2023, threat actors exploited this vulnerability as a zero-day to drop a webshell on a critical infrastructure organizations non-production environment NetScaler ADC appliance. The webshell enabled the actors to perform discovery on the victims active directory (AD) and collect and exfiltrate AD data. The More

The post Citrix ADC zero-day exploitatation: CISA releases details about attack on CI organization (CVE-2023-3519) appeared first on Help Net Security.

If youre looking for a 1-second time reference, youd probably just grab a GPS module off the shelf and use the 1PPS output. As demonstrated by [InazumaDenki], though, an old quartz clock module can also do the job with just a little work.

The module was harvested fro...

Future AMD CPUs will be having larger microcode patches and thus the Linux kernel is now being adapted to better handle that increased microcode payload...

If we ever thought it would be easy to tell whether a planet was habitable or not, Stephen Dole quickly put the idea to rest when he considered all the factors involved in his study Habitable Planets for Man (1964). In this second part of his essay on habitability, Dave Moore returns to Doles work and weighs these factors in light of our present knowledge. What I particularly appreciate about this essay in addition to Daves numerous insights is the fact that he has brought Doles work back into focus. The original Habitable Planets for Man was a key factor in firing my interest in writing about interstellar issues. And Centauri Dreams reader Mark Olson has just let me know that Dole appears as a major character in a novel by Harry Turtledove called Three Miles Down. Its now in my reading stack.

by Dave Moore

In Part I of this essay, I listed the requirements for human habitability in Stephen Doles report, Habitable Planets for Man. Now Ill go over what weve subsequently learned and see how this has changed our perspective.

Dole, in calculating the likelihood of a star having a habitable planet, produced his own Drake equation.

Image: Doles Drake Equation.

Dole assigns the following probabilities to his equation: P_HP=Nsub>S P_p P_i P_D P_M P_e P_B P_R P_A P_L:

P_p = 1.0, P_i = 0.81, P_M = 0.19, P_e = 0.94, P_R = 0.9, P_L = 1.0, P_B = 0.95 for a star taken at random, 1.0 if there is no interference with the other star in a binary system. He calculates that for stars around solar mass there is a 5.4% chance of having a habitable planet.

Ill only summarize his calculations as this is not the primary thrust of this essay. Some of his estimates such as P_p = 1.0, the number of stars with planets, have held up well. Others need adjusting, but by far the biggest factors that determine the likelihood of a planet being habitable for humans are those he didnt consider in depth.

Since Doles report, we...

Freeman writes:

https://arstechnica.com/gadgets/2023/07/to-defeat-hackers-google-wants-employees-to-work-without-internet-access/

The Internet is dangerous, so what if you just didn't use it? That's the somewhat ironic recommendation Google, one of the world's largest Internet companies, is making to its employees. CNBC's Jennifer Elias reports that Google is "starting a new pilot program where some employees will be restricted to Internet-free desktop PCs" while they work. An internal memo seen by CNBC notes that "Googlers are frequent targets of attacks" by criminals, and a great way to combat that is to not be on the Internet.

Employees of major tech companies are a much richer target for criminals compared to normal people. Tech company employees have all sorts of access to sensitive data, and compromising a single employee could lead to exploiting sensitive infrastructure. Just last week, Microsoft was targeted by a Chinese espionage hacking group that somehow stole a cryptographic key to bypass Microsoft's authentication systems, giving it access to 25 organizations, including multiple government agencies.

Original Submission

Read more of this story at SoylentNews.

Prior to LLVM/Clang becoming so popular within organizations and it maturing well on x86_64, AArch64, and other architectures, Open64 was once quite popular in areas now dominated by LLVM and GCC. Open64 had been popular with academic researchers, AMD even maintained their Open64 optimized compiler a decade prior to the LLVM-based AOCC, and was quite popular in the HPC space. Surprisingly there's been some recent activity on the Open64 compiler code...

SentinelOne researchers attribute the recent supply chain attacks on JumpCloud to North Korea-linked threat actors.

JumpCloud is a cloud-based directory service platform designed to manage user identities, devices, and applications in a seamless and secure manner. It allows IT administrators to centralize and simplify their identity and access management tasks across various systems and applications.

The company revealed it was hit by a nation-state cyberattack that targeted specific customers.

In response to the attack, JumpCloud has invalidated existing API keys to protect its customers operations.

Out of an abundance of caution relating to an ongoing incident, JumpCloud has decided to invalidate all API Keys for JumpCloud Admins, explained the company through the support page.

The investigation confirmed that the attack was extremely targeted and aimed at specific customers.

The attackers were able to inject data into JumpClouds commands framework.

The company created and shared a list of IOCs (Indicators of Compromise) for this attack.

These are sophisticated and persistent adversaries with advanced capabilities. states the Security Update.

While JumpCloud did not attribute the attack to a specific threat actor,

SentinelOne researchers analyzed the indicators of compromise associated with the attack and attributed it to North Korea-linked APT groups.

Reviewing the newly released indicators of compromise, we associate the cluster of threat activity to a North Korean state sponsored APT. The IOCs are linked to a wide variety of activity we attribute to DPRK, overall centric to the supply chain targeting approach seen in previous campaigns. states SentinelOne.

SentinelOne analyzed the attack infrastructure and found attack patterns that overlap the activity of North Korea-linked APT groups. SentinelOne experts discovered that the IP address 144.217.92[.]197, linked to the JumpCloud attack, resolves to npmaudit[.]com, one of the domains listed by GitHub because was used to fetch the second-stage malwar...

New patches posted to the Linux kernel mailing list prepare the AMD Error Detection and Correction (EDAC) driver for the upcoming AMD Instinct MI300 APUs...

The release candidate for Mageia 9 is now available for this Linux distribution that's an offshoot long ago from Mandrake/Mandriva lineage...

If youre fighting cancer, a healthy lifestyle can help you stay well during and after treatment. Research suggests that good nutrition, exercise and other healthy behaviors may improve your quality of life during treatment.

Taking charge of your health by developing healthy habits empowers you to cope better with your treatment and any side effects you may have, says Lonny Yarmus, D.O., a board certified interventional pulmonologist at the Lung Cancer Program at the Sidney Kimmel Comprehensive Cancer Center.

Several distributed denial-of-service (DDoS) botnets have been observed exploiting a critical flaw in Zyxel devices that came to light in April 2023 to gain remote control of vulnerable systems. "Through the capture of exploit traffic, the attacker's IP address was identified, and it was determined that the attacks were occurring in multiple regions, including Central America, North America,

The undertaker from South Africa:

Summary: Twitter keeps accelerating its very own death; then again, the sooner or quicker it dies, the less money Elon Musk and his fellow financiers will lose (Twitter is deep in debt, pays a fortune in interest on the loan, and it operates at a massive loss, so this debt is growing over time)

Give Gemini a go, theres no platform and no central point/s

THE TWITTER WALLED GARDENS ARE BACK!

Summary: Manipulative social control mechanisms (falsely disguised as media^*) e.g. YouTube, Reddit, Facebook and Twitter are having a rough time; it moreover seems apparent that their ability to keep eyeballs (user retention) has eroded, as we noted 1.5 years ago

JUDGING by what goes on at Reddit right now, the masters are desperate for profitability. They deny people access to stuff thats already there and has long been there. How long before YouTube starts taking old videos offline unless you pay to keep them online? And what about Twitter? How long before you must pay to use it? Or to access some features? No, Twitter Blue is nothing compared to this. The way things are going, maybe Twitter will go offline this year, maybe next year. Theres no business model (with most of the revenue wiped in less than a year profitability is more elusive than ever) and now people cannot view a tweet without logging in. Its back to the way it was at the start of this month. That being the case, Google should just delist the Twitter.com domain. ALL OF IT. Dont make bait for people to create an account for no good reason. At the moment theres not even a teaser, it just looks like a paywall (with free sign-up). How many people will create an account just to read 50-200 characters of text? Were checked among us to be sure its not a UK- or browser-specific thing, replicating the same behaviour from different parts of the world and it seems like universally (no matter which page is requested) Twitter.com is behind walled gardens again. ALL of it. One theory is that theyre not being targeted by DDoS or Hey Hi but are just eager to boast about many new sign-ups. But at what cost? Is Elon Musk preparing to blame something other than himself for the death of Twitter, BOTH as a site AND as a business?

At the moment theres not even a teaser, it just looks like a paywall (with free sign-up).It seems to be the case that even with JavaScript enabled it requires login before displaying any tweets,...

When you think of an MMU a memory management unit you probably think of a modern 32-bit computer. But [Jeff Truck] has a surprise. His new RCA 1802 computer has bank switching, allowing the plucky little processor to address 256K of RAM. This isnt just the usual bank-switching design, either.

The machine has several unique features. For example, an Arduino onboard can control the CPU so that you can remotely control the bus. It does not, apparently, stand in for any of the microprocessor support chips. It also doesnt add additional memory or control its access.

The 256K of memory is under the control of the MMU board. This board generates two extra address bits by snooping the executing instruction and figures out what register is involved in any memory access. Memory in the MMU stores a table that lets you set different memory pages for each register. This works even if the register is not explicit and also for the machines DMA and instruction fetch cycles. If you know about the RCA standard call and return technique, which also needed a little patching for the MMU. [Jeff] covers that at the end of the video below.

Patrick Schleizer has announced the release of Whonix 17, a major update of the project's Debian-based distribution designed for advanced security and privacy via its fail-safe, automatic and desktop-wide use of the Tor network. Whonix uses a heavily reconfigured Debian base inside multiple virtual machines, thus providing a....

Posted by Marcus Meissner on Jul 21

Cybernews research team discovered that two Suzuki-authorized dealer websites were leaking customers sensitive information.

Suzuki or otherwise, buying a new vehicle is an intense experience with complicated credit, insurance, documentation, and contracts. Think of all the data that you leave in a dealership, including the fact that you now own a brand-new car which itself may be a potential target for criminals. Insecure dealership systems pose a risk to customers.

In the latest discovery by the Cybernews research team, two Suzuki-authorized dealer websites were found to be leaking sensitive information. Files that should be secure and kept private were left publicly accessible.

Anyone could have retrieved passwords and secret tokens for accessing user data, business management tools, or managing websites.

Weve grown to trust our local car sellers. Rarely do car manufacturers sell their cars directly. But these leaks are significant in showing that regional dealers are yet to catch up to a changing threat environment. More stringent cybersecurity practices are needed, our researchers said.

The first dealership is operating in Brazil, a market of 214.3 million people that are already exposed to an elevated crime rate. The second auto dealer is located in Bahrain, an island country in the Middle East with a population of 1.46 million.

This isnt the first-time that car dealers have struggled with cybersecurity. Ransomware breached the UKs second-largest car dealer with 160 showrooms last year.

Databases and credentials exposed

Suzuki Motor Corporation is the tenth largest car manufacturer worldwide, with a net worth of $17.6 billion. The affected Brazilian dealer, Suzukiveiculos.com.br, is owned by Hpe Automatores Do Brasil, which also controls a factory producing 120,000 vehicles per year, mainly Mitsubishi and Suzuki models. They claim to have more than 2,500 direct and indirect employees.

The Brazilian Suzuki website contained sensitive information which had been accidentally left exposed, allowing various attacks to be carried out with relative ease.

Among the data, researchers found the endpoint and secret for the content delivery network (CDN) GoChache, MySQL database, SMTP credentials, and various secret keys for both the application itself and external third party services.

The second website belongs to Suzuki Bahrain. This is the only Suzuki vehicle dealer in the country, operated by Mohammed Jalal & Sons, founded in 1973. The website left the companys Laravel app key, database, and SMTP credentials unprotected.

So, what does it all mean? According to Cyb...

Kennedy (Matsagas) Schaal, CEO of Rejuve Biotech, joins our Biotech/Medical Board.

Also available via the Gemini protocol at:

• gemini://gemini.techrights.org/irc-gmi/irc-log-techrights-200723.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-200723.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-social-200723.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-techbytes-200723.gmi

Over HTTP: