Hírolvasó

[$] The things nobody wants to pay for

1 év 7 hónap óta
The free-software community has managed to build a body of software that is worth, by most estimates, many billions of dollars; all of this code is freely available to anybody who wants to use or modify it. It is an unparalleled example of independent actors working cooperatively on a common resource. Free software is certainly a success story, but all is not perfect. One of the community's greatest strengths — convincing companies to contribute to this common resource — is also part of one of its biggest weaknesses.
corbet

GCC security features from AdaCore

1 év 7 hónap óta
The AdaCore blog describes some hardening features contributed to GCC for the GCC 14 release.

With -fharden-control-flow-redundancy, the compiler now verifies, at the end of functions, whether the traversed basic blocks align with a legitimate execution path. The purpose of this protective measure is to detect and thwart attacks attempting to infiltrate the middle of functions, thereby enhancing the overall security posture of the compiled code.

corbet

Security updates for Thursday

1 év 7 hónap óta
Security updates have been issued by Debian (chromium, firefox-esr, php-phpseclib, phpseclib, thunderbird, and zabbix), Fedora (dotnet7.0, firefox, fonttools, and python-jinja2), Mageia (avahi and chromium-browser-stable), Oracle (java-1.8.0-openjdk, java-11-openjdk, LibRaw, openssl, and python-pillow), Red Hat (gnutls, kpatch-patch, php:8.1, and squid:4), SUSE (apache-parent, apache-sshd, bluez, cacti, cacti-spine, erlang, firefox, java-11-openjdk, opera, python-Pillow, tomcat, tomcat10, and xwayland), and Ubuntu (paramiko and puma).
jake

KMS for Apple silicon machines

1 év 7 hónap óta

Mark Kettenis (kettenis@) committed support for Kernel Mode-Setting (KMS) on Apple silicon (arm64) machines:

CVSROOT: /cvs Module name: src Changes by: kettenis@cvs.openbsd.org 2024/01/22 11:54:01 Modified files: sys/arch/arm64/conf: GENERIC sys/dev/pci/drm: files.drm sys/dev/pci/drm/include/generated: autoconf.h Added files: sys/dev/pci/drm/apple: afk.c afk.h apldcp.c apldrm.c apple_drv.c dcp-internal.h dcp.c dcp.h dcp_backlight.c dptxep.c dptxep.h ibootep.c iomfb.c iomfb.h iomfb_internal.h iomfb_template.c iomfb_template.h iomfb_v12_3.c iomfb_v12_3.h iomfb_v13_3.c iomfb_v13_3.h parser.c parser.h systemep.c trace.c trace.h version_utils.h sys/dev/pci/drm/include/linux: apple-mailbox.h args.h sys/dev/pci/drm/include/linux/soc/apple: rtkit.h Log message: Add apldcp(4) and apldrm(4). Together these drivers provide KMS functionality on Apple Silicom machines. At this point the drivers provide significant power savings when the display is blanked (and during suspend) and backlight control. Some support for HDMI output is also included, but for now only when HDMI is used as the primary output. In the future this should also provide displayport support. This is a port of the the Asahi Linux drivers which can be found at https://github.com/AsahiLinux/linux/tree/asahi-wip Note that this branch gets rebased from time to time. These drivers do *not* bring us GPU accelerated graphics. But there are reports that things run "smoother". There are some known bugs with backlight control: the backlight level may not be restored properly after the display has been blanked, and changing the backlight quickly un succession may break the backlight control. ok jsg@

Read more…

[$] Python, packaging, and pip—again

1 év 7 hónap óta
Python packaging discussions seem like they often just go around and around, ending up where they started and recapitulating many of the points that have come up before. A recent discussion revolves around the pip package installer, as they often do. The central role that is occupied by pip has both good points and bad. There is a clear need for something that can install from the Python Package Index (PyPI) immediately after Python itself is installed. Whether there should be additional features, including project management, that come "inside the box", as well, is much less clear—not unlike the question of which project management "style" should be chosen.
jake