はてなブックマーク

New SSL/TLS certs to each live no longer than 47 days by 2029 CA/Browser Forum – a central body of web browser makers, security certificate issuers, and friends – has voted to cut the maximum lifespan of new SSL/TLS certs to just 47 days by March 15, 2029. Today the certificates, which underpin things like encrypted HTTPS connections between browsers and websites, are good for up to 398 days befor

The rise of LLM-powered code generation tools is reshaping how developers write software - and introducing new risks to the software supply chain in the process. These AI coding assistants, like large language models in general, have a habit of hallucinating. They suggest code that incorporates software packages that don't exist. As we noted in March and September last year, security and academic

Bjarne Stroustrup wants standards body to respond to memory-safety push as Rust monsters lurk at the door Bjarne Stroustrup, creator of C++, has issued a call for the C++ community to defend the programming language, which has been shunned by cybersecurity agencies and technical experts in recent years for its memory safety shortcomings. C and C++ are built around manual memory management, which c

Crooks stole AWS credentials from misconfigured sites then kept them in open S3 bucket Exclusive A massive online heist targeting AWS customers during which digital crooks abused misconfigurations in public websites and stole source code, thousands of credentials, and other secrets remains "ongoing to this day," according to security researchers. Breach hunters Noam Rotem and Ran Locar identified

Cloud behemoth AWS says it is facing stiff competition from on-premises infrastructure, which is a turnaround from its once-proud boast that all workloads would eventually move to the cloud. In a summary of evidence given to UK watchdog, the Competition and Markets Authority (CMA), AWS denies that customers face any difficulty in switching from its platform. And to demonstrate this, AWS lists exam

Who needs GitHub Copilot when you can roll your own AI code assistant at home Hands on Code assistants have gained considerable attention as an early use case for generative AI – especially following the launch of Microsoft's GitHub Copilot. But, if you don't relish the idea of letting Microsoft loose on your code or paying $10/month for the privilege, you can always build your own. While Microsof

The polyfill.io domain is being used to infect more than 100,000 websites with malicious code after what's said to be a Chinese organization bought the domain earlier this year, researchers have said. Multiple security firms sounded the alarm on Tuesday, warning organizations whose websites use any JavaScript code from the polyfill.io domain to immediately remove it. The site offered polyfills – u

Code shines up nicely in production, says Chocolate Factory's Bergstrom Echoing the past two years of Rust evangelism and C/C++ ennui, Google reports that Rust shines in production, to the point that its developers are twice as productive using the language compared to C++. Speaking at the Rust Nation UK Conference in London this week, Lars Bergstrom, director of engineering at Google, who works o

The 'Azure RTOS' used in millions of Raspberry Pis is now FOSS Microsoft is open sourcing the realtime operating system that it acquired with Express Logic, donating it to the Eclipse Foundation. The vendor has made its ThreadX RTOS, and the Azure RTOS development suite that includes it, open source. The company has contributed Azure RTOS to the stewardship of the Eclipse Foundation, where it will

A changed RMS appeared at the GNU 40th anniversary event in Switzerland Richard Stallman has revealed he is undergoing treatment for non-Hodgkin lymphoma, a form of cancer of the white blood cells, but says that his prognosis is good. The 70-year-old Stallman appeared at the GNU Project's 40th anniversary celebration in Switzerland on Wednesday a very changed figure. The GNU project is currently c

On AWS Firecracker – but there are other new micro-VM engines around, too Replacing a sort algorithm in the FreeBSD kernel has improved its boot speed by a factor of 100 or more… and although it's aimed at a micro-VM, the gains should benefit everyone. MicroVMs are a hot area of technology R&D in the last half decade or so. The core idea is a re-invention of some of concepts and technology that IB

This week the Slackware Linux project is celebrating its 30th anniversary. It is the oldest Linux distribution that is still in active maintenance and development. Version 1.0 of Slackware was announced on the July 16, 1993, and project lead Patrick Volkerding, who still maintains the distribution today, celebrated with a modest announcement: Hey folks! It's time to acknowledge another one of thos

After using Azure Linux internally for two years and running it in public preview since October 2022, Microsoft this week finally made its distribution generally available. Azure Linux is an open-source container host OS for the Azure Kubernetes Service (AKS) that is optimized for Azure and aimed at making it easier for developers to use Microsoft's tools to deploy and manage container workloads.

Microsoft is rewriting core Windows libraries in the Rust programming language, and the more memory-safe code is already reaching developers. David "dwizzle" Weston, director of OS security for Windows, announced the arrival of Rust in the operating system's kernel at BlueHat IL 2023 in Tel Aviv, Israel, last month. "You will actually have Windows booting with Rust in the kernel in probably the ne

Google Cloud slips over in Europe amid water leak, fire Google Cloud stopped operating in Paris early on Wednesday morning local time due to "water intrusion," said the off-prem biz, which a day earlier reported profitability for the first time. Coincidentally, the Paris metro area experienced light rain today. Google declined to clarify whether the "water intrusion" was related to the weather, st

If you've wanted to create your own specialized Xeon, now's your chance Analysis Intel has shed some light on how it hopes customers will create single-package processors in which x86, Arm and RISC-V cores work together. For that, Intel will license its most important asset, the x86 architecture, to those who want to make custom silicon. Depending on the application, customers will be able to mix

Python is among the one of the most popular programming languages, yet it's generally not the first choice when speed is required. While it can be optimized for better performance, Python is prized for qualities other than speed, such as readability, a manageable learning curve, an expansive ecosystem, and utility in both academia and business. MIT computer scientists and their colleagues, however

Those billions just may have dissuaded iPhone giant from building rival search, beefing up Safari Exclusive Google has been paying Apple a portion of search revenue generated by people using Google Chrome on iOS, according to a source familiar with the matter. This is one of the aspects of the relationship between the two tech goliaths that currently concerns the UK's Competition and Markets Autho

Nothing good – the recent layoffs hit its best and brightest leaders hard Opinion Remember when Google's motto was "Don't be Evil"? I do. Even though Google dumped that phrase from its code of conduct in 2018, many of us still thought Google was a bit better than other companies. We were wrong. Those who were fired last week found out from emails, discovering they no longer had corporate access an

Don't expect to see any more big AIX news. What does that leave us with? Comment It's the end of an era. As The Reg covered last week, IBM has transferred development of AIX to India. Why should IBM pay for an expensive US-based team to maintain its own proprietary flavor of official Unix when it paid 34 billion bucks for its own FOSS flavor in Red Hat? Here at The Reg FOSS desk, we've felt this w

One version to bind them all, and in the darkness rock them Opinion If you're not a musician, you may never think of MIDI, the Musical Instrument Digital Interface standard that links up keyboards and other electronic noise boxes. Firefox has, adding the super-niche Web MIDI API in its latest version. That's one of those "uh, OK" decisions which gets weirder the longer you look at it – but then, M

C/C++ on the bench, as US snoop HQ puts its trust in Rust, C#, Go, Java, Ruby, Swift The NSA has released guidance encouraging organizations to shift programming languages from the likes of C and C++ to memory-safe alternatives – namely C#, Rust, Go, Java, Ruby or Swift. "NSA recommends that organizations use memory safe languages when possible and bolster protection through code-hardening defense

RIP: Kathleen Booth, the inventor of assembly language Obituary Professor Kathleen Booth, one of the last of the early British computing pioneers, has died. She was 100. Kathleen Hylda Valerie Britten was born in Worcestershire, England, on July 9, 1922. During the Second World War, she studied at Royal Holloway, University of London, where she got a BSc in mathematics in 1944. After graduating, s

Linux kernel boss Linus Torvalds has released the first release candidate for version 6.1 of the project and added an appeal for developers to make his life easier by adding code earlier in the development cycle. Work on each new cut of the kernel commences with a two week "merge window" during which developers are encouraged to add whatever it is they want included in the next version. In his wee

Column A few years ago developers knew eBPF as a handy way to build firewalls yet now it's used everywhere for everything. Get ready for io_uring to do the same. Most people don't know the first thing about Linux under the hood. Why should they? Linux, more so than most operating systems, just works. There's no need to poke inside it. But beneath the surface, there are programs such as eBPF that a

After 31 years, a second programming language will be allowed in Open Source Summit Both Linus Torvalds' Open Source Summit keynote and Jonathan Corbet's "Kernel Report" discussed efforts to allow Rust modules in Linux. The next version of the kernel will be 6.0, but as ever, the change of major version number doesn't denote any major technical changes. Torvalds acknowledged that it might have bee