Week Ending October 15 2023
Week Ending October 15, 2023 http://lwkd.info/2023/20231018
Suggested Reads
1_r/devopsish
Signal shoots down zero-day rumors, finds 'no evidence'
Looks to be related to critical libwebp bug found — and fixed — last month
Israel to boycott Europe’s biggest tech conference after founder accuses country of ‘war crimes’ | Dozens of companies pull out of Lisbon event following a wave of protest
Dozens of companies pull out of Lisbon event following a wave of protest from tech bosses
Dozens of companies pull out of Lisbon event following a wave of protest from tech bosses
Prashanth Chandrasekar, CEO Stack Overflow - “We have made the extremely difficult decision to reduce the company’s headcount by approximately 28%”
we have made the extremely difficult decision to reduce the company’s headcount by approximately 28%
Unplugging Logitech USB Receivers Has Been Causing The Linux Kernel To Crash
Queued up this week as part of the HID subsystem fixes ahead of today's Linux 6.6-rc6 kernel test release has been a rather embarrassing bug: unplugging Logitech USB receivers has for the past several months been causing the Linux kernel to crash
Bandcamp lays off 50% of staff after Songtradr takes over
Epic redundancies all round
LinkedIn laying off nearly 700 staff, mostly engineers
Time to update that resume on, er ... oh.
Curl is seen everywhere except your SBOM, why is it missing even though you use it?, Zebra Cat Zebra
What is curl? curl is an open source command line tool and embeddable library for transferring data over a network.
Scaling a side project: The story of daily.dev
How we scaled daily.dev from its first moments to hundreds of thousands of users. Technical decisions, hiring the first engineers and more.
Organizing multiple Git identities | Garrit's Notes
Generalist developer writing about fullstack development, system administration and free software.
How the VA closed a 66% pay gap between public and private IT jobs
The agency moved to raise pay using a “people first, mission always” approach, according to Veterans Affairs Office CIO and CPO Nathan Tierney.
TSMC: Importance of Open Innovation Platform Is Growing, Collaboration Needed for Next-Gen Chips
After hackers distribute malware in-game updates, Steam adds SMS-based security check for developers
Valve, the company behind the Steam video game platform, has announced
[https://steamcommunity.
Microsoft tops CISA’s list of exploited CVEs used in ransomware attacks
CISA updated its Known Exploited Vulnerabilities Catalog to alert organizations to CVEs linked to ransomware.
A New Protocol Vulnerability Will Haunt the Web for Years
Dubbed “HTTP/2 Rapid Reset,” the flaw requires issuing patches to virtually every web server around the world before the problem can be eradicated.
The death of NTLM could not happen fast enough | The evolution of Windows authentication
Discover how we’re securing authentication and reducing NTLM usage in Windows.
AI Images Detectors Are Being Used to Discredit the Real Horrors of War
Online AI image detecting tools that may or may not work are labeling real photographs from the war in Israel and Palestine as fake, creating what a world leading expert called a “second level of disinformation.”
This is another one of those bookmark for later things | Which version of Go was used to compile this binary? · Jamie Tanna
How to use a few means to work out what version of Go a given binary was compiled with.
23andMe sued after Ashkenazi Jews’ user data is stolen
The hacker from the initial leak offered to sell data profiles in bulk for $1 to $10 per account.
An Intelligent Wikipedia
Wikipedia's top five accounts (by number of edits) are all bots. There’s MalnadachBot (11 million edits), WP 1.0 bot(10 million), Cydebot (6.8 million), ClueBot NG (6.3 million), and AnomieBOT (5.9 million.). These bots range in functionality from migrating tables, formats, and markup as Wikipedia changes to automatically detecting and reverting vandalism. Others tag content with labels, archive old discussions, recommend edits, or create new content. The website couldn’t function without them.
How I learned to stop worrying and love the CoreOS
Here’s a blog post to answer the question: Why do you write so much about CoreOS? 📦
I wish Rust were easier to pick up | How Linkerd became resilient to CVE-2023-44487, a HTTP/2 DDOS vulnerability, six months prior to its disclosure
Yesterday, CVE-2023-44487, a DDOS vulnerability in many HTTP/2 implementations, was disclosed. This is a very interesting attack involving the specifics of how HTTP/2 multiplexes concurrent requests on the same TCP connection, and there are several great writeups on how it works—see e.g. Cloudflare’s HTTP/2 Rapid Reset: deconstructing the record-breaking attack and Google’s How it works: The novel HTTP/2 ‘Rapid Reset’ DDoS attack for details of how this attack works and the consequences.
Ubuntu Desktop 23.10 ISOs Recalled Due To Malicious User Translations
Hours after the release of Ubuntu 23.10, Canonical has pulled the ISOs and is re-spinning them after user-submitted translations for the Ubuntu installer turned out to contain hate speech.
iamadamdev/bypass-paywalls-chrome: Bypass Paywalls web browser extension for Chrome and Firefox.
Bypass Paywalls web browser extension for Chrome and Firefox. - iamadamdev/bypass-paywalls-chrome: Bypass Paywalls web browser extension for Chrome and Firefox.
jinyus/related_post_gen: Data Processing benchmark featuring Rust, Go, Swift, Zig, Julia etc.
Data Processing benchmark featuring Rust, Go, Swift, Zig, Julia etc. - jinyus/related_post_gen: Data Processing benchmark featuring Rust, Go, Swift, Zig, Julia etc.
Microsoft documents how to install Linux
You may need it – Windows 10 is no longer a free upgrade