Emmanuel Di Fede

Exoscale and Adfinis Collaborate to Enhance Linux Package Accessibility ✅ We are glad to announce our joint initiative with Adfinis: the availability of a public Linux mirror server hosted in Geneva. This server underscores our shared commitment to Open Source and significantly improves the global availability of Linux packages in the Swiss region. "Aligned in our shared ethos of Open Source, it was only natural for us to work together to expand access to free software for the broader community. As a donation to the free software community, Exoscale provides the infrastructure on which the service operates", comments Maxime GERARD from Exoscale. Mirror Highlights: • Supports 12 Linux distributions, with official repos from Ubuntu, CentOS Stream, Fedora and others. • High performance with +10Gbps bandwidth and +50TB of storage, supported by Exoscale’s block storage. Managed by Adfinis. Powered by Exoscale. Find the mirror here: https://lnkd.in/d_uHiyAN . . . #Linux #OpenSource #CloudComputing #Exoscale #Adfinis

23

1 Kommentar

Last week was so busy with the Open Source Summit Europe and Linux Plumbers Conference that we didn't publish our usual post about our recent open-source contributions. So let's catch up and look at contributions from Bootlin engineers over the past two weeks: 🟠 Miquèl Raynal sent a series "Add imx8mp video support" to U-Boot which allows to display pictures on a display panel on the NXP Semiconductors i.MX8MP processor, directly from the bootloader (typically for a splash screen): https://lnkd.in/eKX72s-E 🟠 Now that his work on Ethernet PHY topology has been merged Maxime Chevallier has sent the next step of his work that allows to control PHY loopback and isolate mode in the Linux kernel: https://lnkd.in/eceYAD75 🟠 Köry Maincent has continued to work on PoE support in the Linux kernel. As support for more advanced features has been merged in kernel, he posted a series adding the corresponding code in the user-space ethtool project: https://lnkd.in/evW27XdD 🟠 Luca Ceresoli posted a v4 of his patch series adding support for a hot-pluggable connector, which uses Device Tree overlay: https://lnkd.in/efcx8C32. 🟠 Thomas Richard posted a v2 of his drivers to support the board controller found on x86 boards from congatec: https://lnkd.in/enMM8gUE 🟠 Jérémie Dautheribes contributed an improvement to the bmap-tools utility, used for more efficient flashing: https://lnkd.in/ekx6_qmw 🟠 Thomas Perrot contributed a fix to the NXP Semiconductors oftad_tool used for encryption: https://lnkd.in/eHyqdvWi 🟠 Louis Chauvet continued his work on the VKMS DRM driver in the kernel, with a v3 of "drm/vkms: Switch all vkms object to DRM managed objects", a new series "drm/vkms: Switch to allocated for drm objects", and a fix "drm/vkms: Suppress context imbalance sparse warning". In addition, he volunteered to become a maintainer for this driver: https://lnkd.in/eQ4Ny9ZA 🟠 Alexis Lothoré continued his work on the eBPF tests in the kernel, and converted the test_xdp_features.sh test to the test_progs infrastructure: https://lnkd.in/evxJtqyf 🟠 Thomas Richard sent a small patch series to OpenWrt to fix the installation of Linux kernel module packages from a feed: https://lnkd.in/exzNzgxw 🟠 The same Thomas Richard posted a v2 of his patch adding suspend/resume support to the kernel mux mmio driver 🟠 Thomas Petazzoni participated to the Buildroot hackathon, and reviewed/merged many patches And a bunch of fixes as well!

35

The “cryptoprocrastination” excuses to prepare for the transition to quantum-safe cryptography are over after NIST’s publication of the new standards on #PostQuantumCryptography. How to discover and take control of your organization’s cryptography? Start with our #SanExperts 👉 Jaime Gómez García, Head of Quantum at Santander, has prepared a quick guide to inventory your TLS cryptography with minimal code and tools 🧙‍♂️✨ Article on our #BeTech blog 👉 https://lnkd.in/dBs5mJBr #BeTechwithSantander #SanExperts #Cryptography

27

2 Kommentare

🎶 It's not unusual... to see innovation bridging the gap between platforms! The latest cross-platform project involving the Linux Vector Packet Processor (VPP) being ported to FreeBSD is a perfect example of how open-source communities are pushing the boundaries of what's possible in networking. This informative article from The New Stack dives deep into the technical details and implications of porting VPP to FreeBSD. For networking professionals and enthusiasts alike, this game-changer could reshape how we think about performance and flexibility in network processing. Whether you're deeply embedded in the Linux ecosystem, a FreeBSD advocate, or just interested in the future of networking, this read is packed with insights on how these technologies are converging to create powerful, scalable solutions. 🔗 Explore the full article here: https://hubs.li/Q02MqdH60 #VPP #FreeBSD #Linux #Networking #OpenSource #TechInnovation #CrossPlatform

38

In Nozomi Networks' state-of-the-art lab in Switzerland, the next ransomware attack on hospitals is being simulated by our Labs team. In this lab, we test all sorts of equipment for exploitable weaknesses – even refrigerator temperature monitors. Read this piece in POLITICO to learn more about our Labs team's research and our work in safeguarding medical devices 👉 https://ow.ly/ItIq50Spls6 #cybersecurity #OTSecurity #HealthcareSecurity

44

2 Kommentare

Did You Know? #ELASTIC is enhancing #6G networks by integrating technologies like #WebAssembly and #ConfidentialComputing to improve both performance and security across different infrastructures. What is #ELASTIC? #ELASTIC focuses on advancing #6G networks using #technologies such as WebAssembly, eBPF/XDP, edge computing, and Federated Machine Learning. Its goal is to improve how services are delivered and how networks function. Security Focus #ELASTIC puts a strong emphasis on security, using Trusted Execution Environments (TEEs) to protect sensitive #data and ensure secure, private operations for all #network stakeholders. Project Objectives 1. Improve executable isolation for better efficiency and security. 2. Design secure serverless systems for handling various workloads. 3. Develop confidential and privacy-preserving environments for safer data use. 4. Orchestrate 6G and IoT workloads efficiently and securely. 5. Support 6G technology standardization and future deployment. Why #ELASTIC Matters #ELASTIC is helping to shape the future of #6G by making networks more adaptable, efficient, and secure, ensuring they meet growing connectivity demands. Follow for more as ELASTIC continues to shape the future of 6G networks! #ELASTICProject #6G #Network #Security Technical University of Crete Ericsson Telefónica Innovación Digital THALES SIX GTS FRANCE SAS Thales Digital Identity and Security imec Ultraviolet Aalto University Lund University Abstract Machines Zentrix Lab Politecnico di Torino

20

👨‍💻Research & Monitoring The Cyber-Defence Campus has identified several vulnerabilities in the product HaloITSM, and the following CVEs have been assigned by the National Cyber Security Centre Switzerland NCSC to them CVE-2024-6200, CVE-2024-6201, CVE-2024-6202 and CVE-2024-6203. #vulnerabilities #research #securityvulnerabilities #cybersecurity

36

🚨 APT spotlight: Gelsemium targets Linux systems Researchers have uncovered #WolfsBane, a stealthy Linux backdoor developed by the #Gelsemium APT group, marking a significant evolution in their targeting. Historically focused on Windows systems, Gelsemium is now adapting its tooling to effectively compromise Linux environments. This new Linux backdoor is likely used in cyber attacks targeting East and Southeast Asia. The researchers discovered another Linux backdoor, #FireWood, which is not certainly attributed to Gelsemium and could be used by multiple APT groups. Key insights: ➡️ Advanced techniques: both malware uses a combination of sophisticated techniques that enable persistent access and stealthy command execution, while evading detection. WolfsBane includes a dropper, launcher, and backdoor, along with a modified open-source userland rootkit to conceal its activities. Firewood appears to operate as a kernel-level rootkit to hide processes. ➡️ Shift in focus: this discovery highlights a broader trend of adversaries increasingly targeting Linux systems. This surge in Linux threats reflects attackers’ intent to maximise their reach across platforms and exploit the growing use of Linux in enterprise and cloud environments. To mitigate threats like WolfsBane and FireWood: 📌 Regularly update and patch your systems to address known vulnerabilities that attackers could exploit. 📌 Continuously monitor your Linux environments for unusual activities, such as unauthorised changes, unexpected process modifications, or dynamic library hijacking. 📌 Deploy advanced threat detection solutions designed to expose sophisticated and evasive malware, with capabilities such as kernel integrity monitoring and defence evasion tactics detection. Read the news: https://lnkd.in/eanTCTU5 For more technical details, see ESET research: https://lnkd.in/dsF7Kwgb #Cybersecurity #APT #LinuxSecurity

11

#Cryptography paper On Multiple Encryption for Public-Key Cryptography by Tudor Soroceanu, @Nicolas Buchmann and @Marian Margraf from Secure Systems Engineering, #Fraunhofer AISEC open access, read full paper via: https://lnkd.in/gf_m4cpd multiple #encryption; #hybrid encryption; #combiners; public-#key #cryptography; post-#quantum cryptography; #quantum #resistance

3

I posted two informational posts referring to "Post Quantum Cryptography" (PQC), but do we know what PQC is? For those who are far from the subject but interested, the Technical University of Munich's one-page information will be very useful. Publications that will help us understand what kind of threat the Public Key Infrastructure (PKI) (which enables secure communication in many critical infrastructures such as bank transactions, e-commerce sites, citizenship transactions on public sites, telecom, transportation, energy, health, etc.) is under and possible solutions were also shared on the same site. #pqc #pki https://lnkd.in/d3XatgKd

15

🔐 We've kicked off "The future of cybersecurity, today: Free and #opensource tools for #CRA compliance for SMEs" at #OCX24, presented by Mikael Barbero (Eclipse Foundation) and Philippe Ombredanne (AboutCode)!

61

6 Kommentare

🔒 Are you looking for the ultimate solution to safeguard your digital infrastructure against sophisticated cyber threats? Discover our Product of the Week: MedusaTower QuantumSentinel equipped with Post Quantum Cryptography Kyber-1024 (NIST Security Level 5). In an era where cyber threats are becoming increasingly sophisticated, protecting your servers is more critical than ever. MedusaTower is designed to obfuscate the real endpoint IP address of your landing server, making your digital assets virtually invisible to external scans and cyber attacks. It acts as a traffic redirector, creating encrypted tunnels over private IP schemes and rerouting traffic securely to your destination IP platform. Key features of MedusaTower include: • Obfuscated Endpoints: Conceals the real IP address of your destination server, blending seamlessly with cyberspace noise. • Quantum-Resistant Security: Utilizes Kyber-1024, providing cutting-edge post-quantum cryptography protection. • Minimal Exposure: Only two open ports visible to outside cyber scans, reducing vulnerability. • No Proprietary Signatures: Appears as a generic web server, enhancing anonymity. By employing MedusaTower , your servers not only become non-routable objects within the cyber ecosystem but also benefit from the highest level of encryption available. Embrace the future of cyber defense and ensure your infrastructure remains secure against even the most advanced threats. #CyberSecurity #QuantumEncryption #MedusaTower #TechInnovation #NetworkSecurity

3

Cilium, eBPF, WireGuard: Can We Tame the Network Encryption Performance Gap?   🎯 Key Innovations:   - Integration of WireGuard with Cilium for simplified network encryption.   - Utilization of eBPF for enhanced traffic management and optimization.   - Focus on reducing performance overhead associated with network encryption.   💡 Notable Features:   - Transparent encryption: Allows cluster-wide encryption with minimal configuration.   - Automatic key rotation in WireGuard for improved security.   - Support for varying encryption protocols to meet diverse performance needs.   🛠️ Perfect for:   - Cloud operators looking to secure traffic efficiently.   - Security teams assessing encryption impact on performance.   - Kubernetes users in need of transparent encryption solutions.   ⚡️ Impact:   - Enhanced security for cloud and hybrid cloud deployments without significant performance trade-offs.   - Clarification on the practical implications of network encryption.   - Empowered operators with the knowledge to optimize encryption settings.   🔍 Preview of the Talk:   In this insightful session, Daniel Borkmann and Anton Protopopov delve into the challenges and solutions related to network encryption performance using Cilium and WireGuard. They discuss the importance of securing data in transit with minimal overhead, the advantages of integrating these technologies, and practical benchmarks that reveal how encryption can coexist with high performance. Attendees gained valuable insights into best practices for minimizing encryption costs while ensuring data security. Watch the full talk: https://lnkd.in/g9dpc5zp

7

Due to the Embedded Linux Conference, we are a bit late on our posts related to our open-source contributions. Here is a recap of our contributions for the week of April 8 to April 13: - Köry Maincent posted a 10th iteration of his patch series that makes PTP timestamp offloading selectable: https://lnkd.in/eWXyhFbQ - Louis Chauvet contributed a small improvement to the b4 patch management tool: https://lnkd.in/eVs856wg - Romain Gantois posted a 2nd iteration of his patch series adding support for the GMAC1 Ethernet controller of the Renesas Electronics RZN1 processor: https://lnkd.in/eubhGKNU - Louis Chauvet proposed some improvements to the Linux kernel DRM documentation: https://lnkd.in/eNeh3ip3 - Maxime Chevallier submitted the next stage of his work on complex PHY topology support, called "Allow targeting specific PHYs through netlink", https://lnkd.in/egCNYDUe - Louis Chauvet submitted the 6th iteration of his patch series improving the VKMS driver, in particular adding support for YUV pixel formats: https://lnkd.in/eii-GEQX - Köry Maincent posted the v7 of his patch series adding support for Power over Ethernet in Linux: https://lnkd.in/eezEw-HT - Louis Chauvet posted another fix for the TI OMAP2 SPI controller driver: https://lnkd.in/e_5gWkWj - Alexis Lothoré submitted a small patch series switching the WILC wireless driver from using RCU to using SRCU: https://lnkd.in/ewV86HJR - João Marcos Costa contributed to the release notes of the upcoming Yocto 5.0 release: https://lnkd.in/eSF2hUTf - Bastien Curutchet proposed some improvement to the pps-gpio Linux driver: https://lnkd.in/eDPtWPJG - Théo Lebrun submitted a new series for the Mobileye EyeQ system controller: https://lnkd.in/esFQvtH6 - Alexis Lothoré submitted a patch fixing issues with pppd in Buildroot: https://lnkd.in/ekd8e9kk - Michael Opdenacker submitted a 3rd iteration of his patch series improving bitbake's prserv to support having an upstream server: https://lnkd.in/exBcCjz6 - Michael Opdenacker also submitted an initial version of a test case for OpenEmbedded that tests upgradability using binary packages: https://lnkd.in/echQvTEc

11

In a recent interview Gabriele Columbro, General Manager of Linux Foundation Europe, highlights the vital role LF Europe plays in helping the open source community navigate increasingly complex policies and regulations. With the growing presence in Brussels, LF Europe is actively engaged in understanding the impact of regulations like the CRA and AI Act on the community. "It's been a learning experience for the whole open source community... developers, who usually focus on coding, are now having to tackle legal compliance." Watch the full interview to explore how LF Europe is shaping the future of open source collaboration and policy in Europe. https://lnkd.in/e5gimaTC

36