Linux Fixes 5 Gaping Holes in Wi-Fi - Security Boulevard

Penguinistas’ Premier Panned: Linux’s Wi-Fi code has some nasty bugs, which can be exploited simply by being near an attacker. Remote code execution is a possibility—no need to actually connect to a malicious Wi-Fi network.

Some say it’s the fault of @Linus_Torvalds himself (pictured).

In today’s #SBBlogwatch, we decline to point the finger.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/GnJqX0C6Xm

— @Richi 🤓 Jennings (@RiCHi) October 14, 2022

Kill the Password: Google on Board | 4-Day Week Proves Worthy - DevOps.com

The moral of the story: I am not bound to please thee with my answer

In this week’s #TheLongView:
1⃣ #Passkeys is getting another big-tech supporter, and
2⃣ the @4DayWeek_Global train picks up speed.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/2mZSqgmWaJ #DevOps

— @Richi 🤓 Jennings (@RiCHi) October 13, 2022

DevOps lessons from Toyota FAIL: Crash test secrets - ReversingLabs

Do: Detect daft devs defying doctrine
Toyota stands accused of lax DevOps standards, as the company reveals it stored prod database credentials in a public GitHub repo. That’s bad enough, but it also took five years to detect and fix.

3/ It’s not the first time this has happened. In this week’s #SSBlogwatch we know it won’t be the last.

For @ReversingLabs’ @SecuredSoftware: https://t.co/StM8TAr1x3

— @Richi 🤓 Jennings (@RiCHi) October 12, 2022

LEAKED: Intel’s BIOS Source Code — All 6GB of It - Security Boulevard

Hackers’ Happy Hunting Ground: Source code for the Intel Alder Lake processor EUFI BIOS has gone walkies. 6 GB of build image is floating ’round the net like a genie freed from its bottle.

3/ #4chan is said to be involved. In today’s #SBBlogwatch, we try to sound surprised.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/0G08dvxa3x @insydesw @github @lenovo

— @Richi 🤓 Jennings (@RiCHi) October 11, 2022

Hacker Paige Thompson is FREE (‘Because Transgender Status and Mental Health Issues’) - Security Boulevard

‘Not What Justice Looks Like,’ whines DoJ: Capital One hacker Paige A. Thompson is still guilty, but her sentence is “time served and probation.” The judge went easy “because of her mental health and transgender status,” according to the sore losers at the Department of Justice.

3/ It’s fair to say #erratic was an #EthicalHacker. She could have gone about it better, but imprisoning a #whistleblower is never a good look—regardless of #GenderIdentity.

In today’s #SBBlogwatch, we are v. fair.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/60o69IgjV0

— @Richi 🤓 Jennings (@RiCHi) October 7, 2022