re

"There are already thousands of people alive, right now, in Texas who would have been aborted."

Ross Douthat says that this fact is the heart of the abortion issue, and I agree. Our tolerance, acceptance, and promotion of at-will abortion is a shame and humiliation for our generation and civilization. Our descendants will look back on this era with horror and disgust, much like we view slavery and the Holocaust. They will ask, how could any people kill a million of their own children every year? How did they talk themselves into accepting the slaughter of the weakest and most vulnerable among them? How did they dehumanize the unborn, to be exterminated like insect infestations?

As is often the case, the solution to abortion -- and the general mistreatment of children and other vulnerable people -- won't be found in laws or courts. The solution is for each of us to honor the divine spark in each other. To recognize that we are each made in God's image, and each uniquely valuable because of that likeness.

Deuteronomy 27:19 -- 'Cursed be anyone who perverts the justice due to the sojourner, the fatherless, and the widow.' And all the people shall say, 'Amen.'

Exodus 22:22 -- You shall not mistreat any widow or fatherless child. If you do mistreat them, and they cry out to me, I will surely hear their cry.

Psalm 68:5 -- Father of the fatherless and protector of widows is God in his holy habitation.




re

"Sex must be taken seriously. Men and women are different."


Louise Perry writes that she was betrayed by the lies of the sexual revolution. As a father of daughters this is heartbreaking to read.

It's precisely because I'm a feminist that I've changed my mind on sexual liberalism. It's an ideology premised on the false belief that the physical and psychological differences between men and women are trivial, and that any restrictions placed on sexual behavior must therefore have been motivated by malice, stupidity or ignorance.

The problem is the differences aren't trivial. Sexual asymmetry is profoundly important: One half of the population is smaller and weaker than the other half, making it much more vulnerable to violence. This half of the population also carries all of the risks associated with pregnancy. It is also much less interested in enjoying all of the delights now on offer in the post-sexual revolution era. ...

The new sexual culture isn't so much about the liberation of women, as so many feminists would have us believe, but the adaptation of women to the expectations of a familiar character: Don Juan, Casanova, or, more recently, Hugh Hefner.

It's almost as if our ancestors were wiser than we realized.



  • Society & Culture

re

Boston University scientists create 80%-lethal COVID variant

This seems insane. Why create a more transmissable and lethal version of COVID?

DailyMail.com revealed the team had made a hybrid virus -- combining Omicron and the original Wuhan strain -- that killed 80 per cent of mice in a study.

The revelation exposes how dangerous virus manipulation research continues to go on even in the US, despite fears similar practices may have started the pandemic.

Professor Shmuel Shapira, a leading scientist in the Israeli Government, said: 'This should be totally forbidden, it's playing with fire.'

Gain of function research - when viruses are purposefully manipulated to be more infectious or deadly - is thought to be at the center of Covid's origin.

We may never know the origin of COVID-19 with certainty, but gain-of-function research needs to stop.




re

Election Results Should Be Known Within 24 Hours


I don't have a lot to say about the recent midterm election results.

  • I was surprised by how poorly the Republicans did
  • The American right needs to think long and hard about its political positions -- what they are, and how to communicate them to Americans in a persuasive way
  • Candidate quality matters, and Trump has terrible judgement on this
  • It's embarrassing that the results of the election aren't fully known almost a week later.

It seems like elections should be a lot easier. We've made them harder than they need to be.

  • In-person voting on a single day, except for deployed military or invalids.
  • Paper ballots, counted at the precinct. Properly maintain chain-of-custody records for ballots.
  • Show identification to vote.
  • Dip your thumb in purple ink after you've voted.

This isn't rocket science. All the fancy machines and alternate voting methods have made elections too complicated to administer in a transparent and credible manner.




re

Why Are Men Checking Out?


Alice Evans writes that working-age men in America aren't working.

7 million men aged 25-54 in the USA are not working

What are they doing?

Volunteering? Worship? Care-work?

"Playing Call of Duty stoned"

They report 2000 hours a year of screen time (w/ pain meds)

This phenomenon is far less severe in Western Europe

She has many charts and graphs that dig into the details.

My opinion is that we're beginning to see human workers displaced by automation in a way that doesn't create new jobs for the displaced humans. Men are more affected than women because women dominate "caring professions" that are harder to automate.



  • Business & Economics

re

I Want More Raucous in the Caucus


Many people say that the Republican infighting over Kevin McCarthy's election as Speaker of the House is embarrassing and demonstrates a lack of governing ability. I say: more squabbling please!

The House should be raucous. Why should everything be politely settled behind closed doors? No! We need more public fighting among our elected officials, not less. Americans have major disagreements with each other, and the best way to sort them out is through politics. Let's have them yell and scream and argue with each other in public until someone wins.




re

SplineTech JavaScript Debugger PRO update boosts unique new features

Spline Technologies Corporation announces a major update to SplineTech JavaScript Debugger PRO, an independent standalone Web development tool that enables Web developers to easily edit and debug JavaScript and VBScript inside HTML and AJAX pages, without the need for any add-ons, plugins or changes of their code to handle the debugging process. Client-side JavaScript, JScript and client-side VBScript debugging languages are fully supported for simple and complex HTML, DHTML and AJAX debugging scenarios.

 SplineTech JavaScript Debugger PRO offers following main features to address the most common Web development issues:

 - Advanced form debugging for JavaScript form validation - Programmers to cause order forms to validate in clients' browser windows before they are submitted.
 - JavaScript pop-up debugging
 - Debug DHTML menus and JavaScript menus
 - Debug JavaScript and VBScript events: Debug JavaScript Pop-ups, onclick, onmouseover, onfocus and any
 other event.
 - Debug DHTML behavior
 - Debug client-side JavaScript controls: Debug calendars and any other control
 - Multi-Functional VBScript and JavaScript script editor for HTML and AJAX
 - Full Support for native VBScript and JavaScript syntax (color-coded)
 - Explicit JavaScript runtime error information
 - Execution line highlighting: Display the current line of the code to be executed

 Aside from a vast array of main features, this major update of SplineTech JavaScript Debugger PRO includes these new and unique features:
 - Pause code execution in 3, 5 or more seconds (user adjustable)
 - Reformat unreadable JavaScript and AJAX scripts (turns large one-line AJAX scripts into properly formatted readable multi-line code)
 - Step Through multiple lines of code at once (user adjustable)
 - Go back (and forth) to any step within your code
 - Call Stack enables developers to view all function names taken from function lists (since IE reports most of them as anonymous)
 - View all current variables in a dedicated Current Variables panel

 Without requiring any manual configuration or network configuration, SplineTech JavaScript Debugger PRO runs on the Windows 7/2008/2000/2003/XP and Windows Server 2008 platforms (both x86 and x64) with Microsoft Internet Explorer 6.0 or better.

 SplineTech JavaScript Debugger PRO is priced at $90 per single-user license, and is available for purchase at
 http://www.RemoteDebugger.com/javascript_debugger/javascript_debugger.asp

 Immediate online product delivery and full support is included with all Spline Technologies products.

 ABOUT:
 Spline Technologies Corporation is a growing dynamic international software development company, specializing in web development tools, with headquarters in beautiful downtown Montreal, Canada, since 1999.




re

Cancelled pay rises for managers among proposed NHS reforms

League tables revealing failing NHS trusts and cancelled pay rises or dismissal for managers who don't turn things around are part of plans to improve the health service.




re

Changes to our lives are certain if PM meets bold climate target - but a key ingredient is missing for success

Keir Starmer's arrival at COP29, with a promise to drastically cut the UK's carbon emissions by 81%, will be a small ray of sunshine in an otherwise gloomy start to the climate talks.




re

The anti-aircraft units in Ukraine trying to down Russian drones as record numbers hit

Headlights illuminate a group of soldiers smoking and drinking steaming cups of coffee on the side of a road in northeastern Ukraine.




re

Serving police officer arrested on suspicion of terrorism offence

A serving Gloucestershire police officer has been arrested on suspicion of a terrorism offence.




re

Man jailed for loading illegal streaming services on to Amazon Fire Sticks

A 29-year-old man has been jailed for more than three years for loading illicit TV streaming services onto Amazon Fire Sticks.




re

Social media bosses could face £10,000 fine for failing to remove knife adverts

Fines of £10,000 for social media bosses who don't remove illegal knife adverts are being considered by the government.




re

Trump's cabinet picks suggest China is front and centre of his mind - it could be a bumpy ride

The announcements should not be a surprise. Donald Trump said he'd do things differently this time. And yet they still prompt a double take.




re

Watch: Drone footage captures Kentucky explosion damage

An "unknown" explosion at factory in Louisville, Kentucky injured 11 people on Tuesday.




re

Retailers warn Reeves of inflation and job losses after budget tax hikes

Some of Britain's biggest retailers have warned the chancellor that last month's budget will stoke inflation in the economy and spark job losses as tax hikes add nearly £2.5bn to the industry's annual tax bill.




re

Band Aid's Do They Know It's Christmas? - 40th anniversary track revealed

An "ultimate" version of Band Aid's famous festive hit Do They Know It's Christmas? is set to be released to mark the song's 40th anniversary, featuring the voices of original singers as well as younger artists.




re

Nearly £50m spent on P&O firing and replacing 800 British workers

P&O Ferries spent more than £47m summarily sacking hundreds of seafarers in 2022, helping it cut losses by more than £125m and putting it on a path to profitability, according to accounts due to be published in the coming days.




re

Post Office faces backlash over job cuts - with 115 branches at risk of closure

A union representing Post Office staff has lashed out at proposals that could result in 115 branch closures and significantly more than 1,000 workers losing their jobs, by describing them as "immoral".




re

The Range closes in on chunk of Homebase in pre-pack sale

The Range, the privately owned general merchandise retailer, is closing in on a deal to snap up a large chunk of Homebase which will save close to 1,500 jobs but raise doubts about at least 1,700 more.




re

Cars 'covered in plastic wrap' in Spain as residents brace for another storm

Some people in Spain appear to have covered their cars in plastic wrap ahead of another approaching storm.




re

Train companies to face review over how they prosecute rail fare evasion

Train companies are set to face a review over how they prosecute and enforce rail fare evasion after reports of disproportionate action taken against passengers.




re

Church of England 'not a safe institution' and others may need to resign, bishop says

The Church of England's deputy lead bishop for safeguarding has said it is "not a safe institution" in some ways - and that others may need to step down following the Archbishop of Canterbury's resignation.




re

Mystery of US warship's final resting place solved... by accident

An American warship that was sunk by Japanese dive bombers during the Second World War has finally been found, more than 80 years later.




re

Sara Sharif's father tells court he beat her and 'takes full responsibility' for her death

Sara Sharif's murder-accused father has told jurors he "takes full responsibility" for the death of his daughter.




re

Picnic cottage enjoyed by Queen Victoria restored to former glory

A picnic cottage enjoyed by Queen Victoria during her visits to Balmoral has been restored to its former glory by the National Trust for Scotland.




re

Israeli construction along buffer zone with Syria violates ceasefire, UN says

New trenches and berms are being constructed along the frontier in the occupied Golan Heights.




re

French headteacher describes spiral of events that led to teacher's beheading

Audrey F tells a court how a 13-year-old student's lie to her parents led to Samuel Paty's murder.




re

Several injured after crash involving bus carrying school children

Several people have been injured after a bus carrying school children collided with a lorry in Leicestershire.




re

OSNews fundraising goal reached in less than a week

It’s been less than a week, and late Friday night we reached the fundraiser goal of €2500 (it sat at 102% when I closed it) on Ko-Fi! I’m incredibly grateful for each and every donation, big or small, and every new Patreon that joined our ranks. It’s incredible how many of you are willing to support OSNews to keep it going, and it means the absolute world to me. Hopefully we’ll eventually reach a point where monthly Patreon income is high enough so we can turn off ads for everyone, and be fully free from any outside dependencies. Of course, it’s not just those that choose to support us financially – every reader matters, and I’m very thankful for each and every one of you, donor/Patreon or not. The weekend’s almost over, so back to regular posting business tomorrow. I wish y’all an awesome Sunday evening.




re

From Proxmox to FreeBSD: story of a migration

It’s the start of the work week, so for the IT administrators among us, I have another great article by friend of the website, Stefano Marinelli. This article covers migrating a Proxmox-based setup to FreeBSD with bhyve. The load is not particularly high, and the machines have good performance. Suddenly, however, I received a notification: one of the NVMe drives died abruptly, and the server rebooted. ZFS did its job, and everything remained sufficiently secure, but since it’s a leased server and already several years old, I spoke with the client and proposed getting more recent hardware and redoing the setup based on a FreeBSD host. ↫ Stefano Marinelli If you’re interested in moving one of your own setups, or one of your clients’ setups, from Linux to FreeBSD, this is a great place to start and get some ideas, tips, and tricks. Like I said, it’s Monday, and you need to get to work.




re

Windows Server 2025 released

Microsoft has confirmed the general availability of Windows Server 2025, which, as a long-term servicing channel (LTSC) release, will be supported for almost ten years. This article describes some of the newest developments in Windows Server 2025, which boasts advanced features that improve security, performance, and flexibility. With faster storage options and the ability to integrate with hybrid cloud environments, managing your infrastructure is now more streamlined. Windows Server 2025 builds on the strong foundation of its predecessor while introducing a range of innovative enhancements to adapt to your needs. ↫ What’s new in Windows Server 2025 article It should come as no surprise that Windows Server 2025 comes loaded with a ton of new features and improvements. I already covered some of those, such as DTrace by default, NVMe and storage improvements, hotpatching, and more. Other new features we haven’t discussed yet are a massive list of changes and improvements to Active Directory, a feature-on-demand feature for Azure Arc, support for Bluetooth keyboards, mice, and other peripherals, and tons of Hyper-V improvements. SMB is also seeing so many improvements it’s hard to pick just a few to highlight, and software-defined networking is also touted as a major aspect of Server 2025. With SDN you can separate the network control plane from the data plane, giving administrators more flexibility in managing their network. I can just keep going listing all of the changes, but you get the idea – there’s a lot here. You can try Windows Server 2025 for free for 180 days, as a VM in Azure, a local virtual machine image, or installed locally through an ISO image.




re

Redox runs on RISC-V, boots to GUI login on Raspberry Pi 4

Another month lies behind us, so another monthly update from Redox is upon us. The biggest piece of news this time is undoubtedly that Redox now runs on RISC-V – a major achievement. Andrey Turkin has done extensive work on RISC-V support in the kernel, toolchain and elsewhere. Thanks very much Andrey for the excellent work! Jeremy Soller has incorporated RISC-V support into the toolchain and build process, has begun some refactoring of the kernel and device drivers to better handle all the supported architectures, and has gotten the Orbital Desktop working when running in QEMU. ↫ Ribbon and Ron Williams That’s not all, though. Redox on the Raspberry Pi 4 boots to the GUI login screen, but needs more work on especially USB support to become a fully usable target. The application store from the COSMIC desktop environment has been ported, and as part of this effort, Redox also adopted FreeDesktop standards to make package installation easier – and it just makes sense to do so, with more and more of COSMIC making its way to Redox. Of course, there’s also a slew of smaller improvements to the kernel, various drivers including the ACPI driver, RedoxFS, Relibc, and a lot more. The progress Redox is making is astounding, and while that’s partly because it’s easier to make progress when there’s a lot of low-hanging fruit as there inevitably will be in a relatively new operating system, it’s still quite an achievement. I feel very positive about the future of Redox, and I can’t wait until it reaches a point where more general purpose use becomes viable.




re

Windows Server IoT 2025 released

Today, Microsoft announced the general availability of Windows Server IoT 2025. This new release includes several improvements, including advanced multilayer security, hybrid cloud agility, AI, performance enhancements, and more. Microsoft claims that Windows Server IoT 2025 will be able to handle the most demanding workloads, including AI and machine learning. It now has built-in support for GPU partitioning and the ability to process large datasets across distributed environments. With Live Migration and High Availability, it also offers a high-performance platform for both traditional applications and advanced AI workloads. ↫ Pradeep Viswanathan at Neowin Windows Server IoT 2025 brings the same benefits, new features, and improvements as the just-released regular Windows Server 2025. I must admit I’m a little unclear as to what Windows Server IoT has to offer over the regular edition, and reading the various Microsoft marketing materials and documents don’t really make it any clearer for me either, since I’m not particularly well-versed in all that enterprise networking lingo.




re

iPod fans evade Apple’s DRM to preserve 54 lost clickwheel-era games

Old-school Apple fans probably remember a time, just before the iPhone became a massive gaming platform in its own right, when Apple released a wide range of games designed for late-model clickwheel iPods. While those clickwheel-controlled titles didn’t exactly set the gaming world on fire, they represent an important historical stepping stone in Apple’s long journey through the game industry. Today, though, these clickwheel iPod games are on the verge of becoming lost media—impossible to buy or redownload from iTunes and protected on existing devices by incredibly strong Apple DRM. Now, the classic iPod community is engaged in a quest to preserve these games in a way that will let enthusiasts enjoy these titles on real hardware for years to come. ↫ Kyle Orland at Ars Technica A nice effort, of course, and I’m glad someone is putting time and energy into preserving these games and making them accessible to a wider audience. As is usual with Apple, these small games were heavily encumbered with DRM, being locked to both the the original iTunes account that bought them, but also to the specific hardware identifier of the iPod they were initially synchronised to using iTunes. A clever way around this DRM exists, and it involves collectors and enthusiasts creating reauthorising their iTunes accounts to the same iTunes installation, and thus adding their respective iPod games to that single iTunes installation. Any other iPods can then be synced to that master account. The iPod Clickwheel Games Preservation Project takes this approach to the next level, by setting up a Windows virtual machine with iTunes installed in it, which can then be shared freely around the web for people to the games to their collection. This is a rather remarkably clever method of ensuring these games remain accessible, but obviously does require knowledge of setting up Qemu and USB passthrough. I personally never owned an iPod – I was a MiniDisc fanatic until my Android phone took over the role of music player – so I also had no clue these games even existed. I assume most of them weren’t exactly great to control with the limited input method of the iPod, but that doesn’t mean there won’t be huge numbers of people who have fond memories of playing these games when they were younger – and thus, they are worth preserving. We can only hope that one day, someone will create a virtual machine that can run the actual iPod operating system, called Pixo OS.




re

QNX becomes free for non-commercial use, releases Raspberry Pi 4 image

A long, long time ago, back when running BeOS as my main operating system had finally become impossible, I had a short stint running QNX as my one and only operating system. In 2004, before I joined OSNews and became its managing editor, I also wrote and published an article about QNX on OSNews, which is cringe-inducing to read over two decades later (although I was only 20 when I wrote that – I should be kind to my young self). Sadly, the included screenshots have not survived the several transitions OSNews has gone through since 2004. Anyway, back in those days, it was entirely possible to use QNX as a general purpose desktop operating system, mostly because of two things. First, the incredible Photon MicroGUI, an excellent and unique graphical environment that was a joy to use, and two, because of a small but dedicated community of enthousiasts, some of which QNX employees, who ported a ton of open source applications, from basic open source tools to behemoths like Thunderbird, the Mozilla Suite, and Firefox, to QNX. It even came with an easy-to-use package manager and associated GUI to install all of these applications without much hassle. Using QNX like this was a joy. It really felt like a tightly controlled, carefully crafted user experience, despite desktop use being so low on the priority list for the company that it might as well have not been on there at all. Not long after, I think a few of the people inside QNX involved with the QNX desktop community left the company, and the entire thing just fizzled out afterwards when the company was acquired by Harman Kardon. Not long after, it became clear the company lost all interest, a feeling only solidified once Blackberry acquired the company. Somewhere in between the company released some of its code under some not-quite-open-source license, accompanied by a rather lacklustre push to get the community interested again. This, too, fizzled out. Well, it seems the company is trying to reverse course, and has started courting the enthusiast community once again. This time, it’s called QNX Everywhere, and it involves making QNX available for non-commercial use for anyone who wants it. No, it’s not open source, and yes, it requires some hoops to jump through still, but it’s better than nothing. In addition, QNX also put a bunch of open source demos, applications, frameworks, and libraries on GitLab. One of the most welcome new efforts is a bootable QNX image for the Raspberry Pi 4 (and only the 4, sadly, which I don’t own). It comes with a basic set of demo application you can run from the command line, including a graphical web browser, but sadly, it does not seem to come with Photon microGUI or any modern equivalent. I’m guessing Photon hasn’t seen a ton of work since its golden days two decades ago, which might explain why it’s not here. There’s also a list of current open source ports, which includes chunks of toolkits like GTK and Qt, and a whole bunch of other stuff. Honestly, as cool as this is, it seems it’s mostly aimed at embedded developers instead of weird people who want to use QNX as a general purpose operating system, which makes total sense from QNX’ perspective. I hope Photon microGUI will make a return at some point, and it would be awesome – but I expect unlikely – if QNX could be released as open source, so that it would be more likely a community of enthusiasts could spring up around it. For now, without much for a non-developer like me to do with it, it’s not making me run out to buy a Raspberry Pi 4 just yet.




re

LXQt 2.1.0 released with optional Wayland session

LXQt, the desktop environment that is to KDE what Xfce is to GNOME, has released version 2.1.0, and while the version number change seems average, it’s got a big ace up its sleeve: you can now run LXQt in a Wayland session, and they claim it works quite well, too, and it supports a wide variety of compositors. Through its new component lxqt-wayland-session, LXQt 2.1.0 supports 7 Wayland sessions (with Labwc, KWin, Wayfire, Hyprland, Sway, River and Niri), has two Wayland back-ends in lxqt-panel (one for kwin_wayland and the other general), and will add more later. All LXQt components that are not limited to X11 — i.e., most components — work fine on Wayland. The sessions are available in the new section Wayland Settings inside LXQt Session Settings. At least one supported Wayland compositor should be installed in addition to lxqt-wayland-session for it to be used. There is still hard work to do, but all of the current LXQt Wayland sessions are quite usable; their differences are about what the supported Wayland compositors provide. ↫ LXQt 2.1.0 release announcement This is great news for LXQt, as it ensures the desktop environment is ready to keep up with what modern Linux distributions provide. Crucially and in line with what we’ve come to expect from LXQt, X11 support is a core part of the project, and they even go so far as to say “the X11 session will be supported indefinitely”, which should set people preferring to stay on X11 at ease. I personally may have gleefully left X11 in the dustbin of history, but many among us haven’t, and it’s welcome to see LXQt’s clear promise here. Many of the other improvements in this release are tied to Wayland, making sure the various components work and Wayland settings can be adjusted. On top of that, there’s the usual list of bug fixes and smaller changes, too.




re

Mozilla Foundation lays off 30% of its employees, ends advocacy for open web, privacy, and more

More bad news from Mozilla. The Mozilla Foundation, the nonprofit arm of the Firefox browser maker Mozilla, has laid off 30% of its employees as the organization says it faces a “relentless onslaught of change.” Announcing the layoffs in an email to all employees on October 30, the Mozilla Foundation’s executive director Nabiha Syed confirmed that two of the foundation’s major divisions — advocacy and global programs — are “no longer a part of our structure.” ↫ Zack Whittaker at TechCrunch This means Mozilla will no longer be advocating for an open web, privacy, and related ideals, which fits right in with the organisation’s steady decline into an ad-driven effort that also happens to be making a web browser used by, I’m sorry to say, effectively nobody. I just don’t know how many more signs people need to see before realising that the future of Firefox is very much at stake, and that we’re probably only a few years away from losing the only non-big tech browser out there. This should be a much bigger concern than it seems to be to especially the Linux and BSD world, who rely heavily on Firefox, without a valid alternative to shift to once the browser’s no longer compatible with the various open source requirements enforced by Linux distributions and the BSDs. What this could also signal is that the sword of Damocles dangling above Mozilla’s head is about to come down, and that the people involved know more than we do. Google is effectively bankrolling Mozilla – for about 80% of its revenue – but that deal has come under increasing scrutiny from regulars, and Google itself, too, must be wondering why they’re wasting money supporting a browser nobody’s using. We’re very close to a web ruled by Google and Apple. If that prospect doesn’t utterly terrify you, I honestly wonder what you’re doing here, reading this.




re

Improving Steam Client stability on Linux: setenv and multithreaded environments

Speaking of Steam, the Linux version of Valve’s gaming platform has just received a pretty substantial set of fixes for crashes, and Timothee “TTimo” Besset, who works for Valve on Linux support, has published a blog post with more details about what kind of crashes they’ve been fixing. The Steam client update on November 5th mentions “Fixed some miscellaneous common crashes.” in the Linux notes, which I wanted to give a bit of background on. There’s more than one fix that made it in under the somewhat generic header, but the one change that made the most significant impact to Steam client stability on Linux has been a revamping of how we are approaching the setenv and getenv functions. One of my colleagues rightly dubbed setenv “the worst Linux API”. It’s such a simple, common API, available on all platforms that it was a little difficult to convince ourselves just how bad it is. I highly encourage anyone who writes software that will run on Linux at some point to read through “RachelByTheBay”‘s very engaging post on the subject. ↫ Timothee “TTimo” Besset This indeed seems to be a specific Linux problem, and due to the variability in Linux systems – different distributions, extensive user customisation, and so on – debugging information was more difficult to parse than on Windows and macOS. After a lot of work grouping the debug information to try and make sense of it all, it turned out that the two functions in question were causing issues in threads other than those that used them. They had to resort to several solutions, from reducing the reliance setenv and refactoring it with exevpe, to reducing the reliance on getenv through caching, to introducing “an ‘environment manager’ that pre-allocates large enough value buffers at startup for fixed environment variable names, before any threading has started”. It was especially this last one that had a major impact on reducing the number of crashes with Steam on Linux. Besset does note that these functions are still used far too often, but that at this point it’s out of their control because that usage comes from the libraries of the operating system, like x11, xcb, dbus, and so on. Besset also mentions that it would be much better if this issue can be addressed in glibc, and in the comments, a user by the name of Adhemerval reports that this is indeed something the glibc team is working on.




re

Nowa kampania reklamowa “ad hijacking” za pośrednictwem Google Ads.

Ostrzegamy - fałszywe reklamy w serwisie Google Search wykorzystywane do propagacji szkodliwego oprogramowania.




re

Nigeryjski przekręt

Nigeryjski przekręt jest jednym z najstarszych oszustw. Schemat z wiadomości przesyłanych listownie przeszedł na wiadomości mailowe w latach 80 XX wieku. W początkowych scenariuszach nadawca wiadomości oferował transfer bardzo dużej kwoty pieniędzy, które miały najczęściej pochodzić z Nigerii.




re

Dwudziesta szósta edycja Secure za nami

Dwudziesta szósta edycja Secure za nami. „Bezpieczeństwo w dobie zmian” – to hasło przewodnie zakończonej właśnie konferencji.




re

Podatność w oprogramowaniu Apereo CAS

W oprogramowaniu Apereo Central Authentication Service wykryto podatność pozwalającą na ominięcie wieloskładnikowego uwierzytelnienia (CVE-2023-4612).




re

Secure 2024 - znamy datę!

Secure to dwudniowa konferencja poświęcona strategicznym wyzwaniom w cyberprzestrzeni. Wydarzenie odbędzie się w dniach 16-17 kwietnia w Muzeum Historii Polski w Warszawie. Tegoroczna edycja odbywa się pod hasłem "Horyzont cyberwyzwań".




re

Podatność w oprogramowaniu PrestaShop Google Integrator

W oprogramowaniu PrestaShop Google Integrator firmy PrestaShow wykryto podatność typu SQL injection (CVE-2023-6921).




re

Podatność w oprogramowaniu Kofax Capture

W oprogramowaniu Kofax Capture wykryto podatność typu Stored XSS (CVE-2023-5118).




re

Cyberbezpieczeństwo ponad granicami: Projekt FETTA czyli pogłębienie współpracy w zakresie rozpoznania zagrożeń cyberprzestrzeni EU

Jednym z kluczowych wyzwań związanych z europejskim cyberbezpieczeństwem jest zależność od danych pochodzących z krajów spoza UE. Projekt FETTA (Federated European Team for Threat Analysis, pol. Europejski Zespół Analizy Zagrożeń) ma na celu rozwiązanie tego problemu poprzez utworzenie międzynarodowego zespołu opracowującego produkty i narzędzia z zakresu Cyber Threat Intelligence (CTI).




re

Kampania Balada Injector infekuje strony WordPress wykorzystując popularne wtyczki

W ostatnich tygodniach zespół CERT Polska obserwuje wzmożoną kampanię ataków z użyciem szkodliwego oprogramowania Balada Injector, które infekuje strony oparte na WordPressie korzystając z podatności w niektórych popularnych wtyczkach.




re

Podatność we wtyczce Apaczka do platformy PrestaShop

We wtyczce Apaczka do platformy PrestaShop wykryto podatność typu Files or Directories Accessible to External Parties (CVE-2024-2759).




re

27. edycja konferencji Secure

Za nami 27. edycja konferencji Secure. Były to dwa dni wypełnione wiedzą i ważnymi dyskusjami, ale także znakomita okazja do nawiązania kontaktów z innymi specjalistami z dziedziny cyberbezpieczeństwa. Przestrzeń naszej konferencji to miejsce, w którym mogą się spotkać różne spojrzenia, podejścia i aspekty (cyber)bezpieczeństwa.