Incus 0.1 released https://lwn.net/Articles/947136/ #LWN

Ran a full disk threat scan on my Mac with MS Defender ($work requires it), and it found my archive of Linux malware from 1997, and wants to delete it :(

📢 Save the date! The Linux Security Summit North America (LSS-NA) will be held in APRIL 2024, in Seattle, WA, USA.

👉 Note that the CFP is expected to close before the holidays at the end of 2023.

It will be co-located, as usual, with OSS-NA: https://events.linuxfoundation.org/open-source-summit-north-america/

Specific details for LSS-NA to follow soon.

#linuxsecuritysummit #linux #infosec #linuxfoundation cc @linuxfoundation

The conference will start soone. You can follow it here:

https://www.youtube.com/watch?v=PSS9VemnSkg

Enjoy!

The Kernel Recipes Live Blog is going at full steam #kr2023 https://kernel-recipes.org/en/2023/live-blog-day-1-morning/

Uh oh, I forgot never to fly via CDG.

The 2nd and final day of LSS-EU starting with @mjg59 talking about TPMs and per-process secrets. #linuxsecuritysummit #infosec #linux #opensourcesummit cc. @linuxfoundation

Pro tip ?

We recently added a new document to the systemd website focussing on one specific facet of the service manager: the fdstore. A concept that people should really use more to facilitate "seamless" service restarts and various other things. Please have a look:

https://systemd.io/FILE_DESCRIPTOR_STORE/

I'm very excited to announce that you can now try #Incus online!
The new demo environment uses Incus virtual machines running on a remote Incus cluster with full support for both containers and VMs!
https://linuxcontainers.org/incus/try-it/

The #linuxsecuritysummit Europe conference kicks off in Bilbao, Spain. Program chair Elena Reshetova with opening comments.
#opensourcesummit #linux #infosec #security

If you're here at the #OSSummit, I'll be on a panel about Demonstrating OSPO Value at 11:25 in room 3A - join us! https://sched.co/1OGdq

Reminder: we maintain a kernel feature wishlist here as part of the uapi group:

https://github.com/uapi-group/kernel-features

I just added a bunch of new entries to it (at the bottom). If you are looking for something to hack on (and have some kernel expertise, or would like to acquire it), would be more than excellent to work on those!

Saw a lot of Aurora flying over Greenland on the way to Linux Security Summit EU. This is the best I could do with an older iPhone #linux #linuxsecuritysummit #space #spaceweather #hamradio #amateurradio

We quietly released the code a little while ago but this is the official announcement of Capslock, our contribution to the supply-chain security conversation.

https://security.googleblog.com/2023/09/capslock-what-is-your-code-really.html

Capslock is a tool for understanding at high level what a given piece of (Golang) code is capable of and for detecting when an update to a library changes this capability set, to give users a chance to catch supply-chain attacks in progress.

1/2

The “2nd level of hell” starter kit for metalworking.

After many hours, including re-capping the power supply (no dice, but worthwhile in any case), and tracing through most of the upper section, I finally found the issue with this Tektronix spectrum analyzer. A tantalum cap on the horizontal storage board failed and shorted the +15v bus. Replaced it and the SA seems to be working ok so far. #hamradio #amateurradio #electronics

Azure Boost presented by @bluca at this week's All Systems Go! conference.

Includes a bit about #selinux

https://media.ccc.de/v/all-systems-go-2023-187-microsoft-azure-boost-image-based-linux-powering-the-azure-fleet-wait-what-really-yes-

I'm really excited about making Use-After-Free exploits much harder in the #Linux #kernel.

CONFIG_RANDOM_KMALLOC_CACHES has landed:
https://git.kernel.org/linus/3c6152940584

CONFIG_SLAB_VIRTUAL is coming:
https://lore.kernel.org/lkml/20230915105933.495735-15-matteorizzo@google.com/

The excellent CCC VOC people published the AllSystemsGo! videos from this week. Here's the UKI talk I did there:

https://media.ccc.de/v/all-systems-go-2023-185-unified-kernel-images-ukis-

Enjoy!