overview for KarnaSubarna

Besides, this was the 1st Linux distro I tried back in 2005. After the usual ditro hopping phase was over, I settled on it; somehow (irrespective of snap and other controversies) I feel at home.

45

Multiple CVEs Patched in Latest Git Update (linuxiac.com)

submitted 3 days ago by [email protected] to c/[email protected]

0 comments fedilink

126

Danish Ministry switching from Microsoft Office/365 to LibreOffice - The Document Foundation Blog (blog.documentfoundation.org)

submitted 3 days ago by [email protected] to c/[email protected]

4 comments fedilink

158

GNOME 49 Alpha Released With X11 Support Disabled By Default, Many New Features (www.phoronix.com)

submitted 5 days ago by [email protected] to c/[email protected]

42 comments fedilink

480

Let’s Encrypt Begins Supporting IP Address Certificates (linuxiac.com)

submitted 6 days ago by [email protected] to c/[email protected]

63 comments fedilink

Who benefits from this? Even though Let’s Encrypt stresses that most site operators will do fine sticking with ordinary domain certificates, there are still scenarios where a numeric identifier is the only practical choice:

Infrastructure services such as DNS-over-HTTPS (DoH) – where clients may pin a literal IP address for performance or censorship-evasion reasons.
IoT and home-lab devices – think network-attached storage boxes, for example, living behind static WAN addresses.
Ephemeral cloud workloads – short-lived back-end servers that spin up with public IPs faster than DNS records can propagate.

French City of Lyon Kicks Out Microsoft by KarnaSubarna in c/[email protected]

[-] [email protected] 1 points 6 days ago

It's an open source product, in case you have concern about possibility of malicious code embedded within it.

Fakespot still up? by KarnaSubarna in c/[email protected]

[-] [email protected] 1 points 6 days ago

At least there is no such indication so far from Mozilla :(

182

7-Zip v25 File Archiver Released with Performance Gains (linuxiac.com)

submitted 6 days ago by [email protected] to c/[email protected]

3 comments fedilink

15

Fakespot still up? (www.fakespot.com)

submitted 1 week ago by [email protected] to c/[email protected]

3 comments fedilink

I just checked the site today and found it to be still functional.

Mozilla forgot to pull the plug? /s

492

French City of Lyon Kicks Out Microsoft (news.itsfoss.com)

submitted 1 week ago by [email protected] to c/[email protected]

29 comments fedilink

96

Nginx Proxy Manager 2.12.4 Released with Certbot Enhancements (linuxiac.com)

submitted 1 week ago by [email protected] to c/[email protected]

16 comments fedilink

6

Actively exploited vulnerability gives extraordinary control over server fleets (arstechnica.com)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink

51

Fedora's FESCo To Decide Whether To Replace Upstream X.Org Server With XLibre Fork (www.phoronix.com)

submitted 2 weeks ago by [email protected] to c/[email protected]

11 comments fedilink

79

Disabling Intel Graphics Security Mitigations Can Boost GPU Compute Performance By 20% (www.phoronix.com)

submitted 2 weeks ago by [email protected] to c/[email protected]

2 comments fedilink

Mozilla released a Firefox Nightly test build with vertical tabs - gHacks Tech News by KarnaSubarna in c/[email protected]

[-] [email protected] 53 points 1 year ago

Bad news is that it is not clear at this point whether Mozilla is going to go forward with the implementation. A post on Reddit by one of the project members suggests that the build is a "rough proof-of-concept". Some features tested in the build "did not survive". It is unclear which did not, as they are not mentioned. Mozilla is, however, implementing those that survived the cut into Firefox. Again, the poster does not mention which those are. It is also not verified that the poster is actually a member of the project team, so take this with a grain of salt as well.

XZ Hack - "If this timeline is correct, it’s not the modus operandi of a hobbyist. [...] It wouldn’t be surprising if it was paid for by a state actor." by KarnaSubarna in c/[email protected]

[-] [email protected] 122 points 1 year ago

Careful choice of program to infect the whole Linux ecosystem
Time it took to gain trust
Level of sophistication in introducing backdoor in open source product

All of these are signs of persistent threat actors aka State sponsor hacker. Though the real motive we would never know as it's now a failed project.

XZ Hack - "If this timeline is correct, it’s not the modus operandi of a hobbyist. [...] It wouldn’t be surprising if it was paid for by a state actor." by KarnaSubarna in c/[email protected]

[-] [email protected] 51 points 1 year ago

Source: https://turnoff.us/

XZ Hack - "If this timeline is correct, it’s not the modus operandi of a hobbyist. [...] It wouldn’t be surprising if it was paid for by a state actor." by KarnaSubarna in c/[email protected]

[-] [email protected] 142 points 1 year ago

Source: https://infosec.exchange/@fr0gger/112189232773640259