Tag: open-source software

  • The Register: Not pretty, not Windows-only: npm phishing attack laces popular packages with malware

    Source URL: https://www.theregister.com/2025/07/24/not_pretty_not_windowsonly_npm/ Source: The Register Title: Not pretty, not Windows-only: npm phishing attack laces popular packages with malware Feedly Summary: The “is" package was infected with cross-platform malware after a scam targeting maintainers The popular npm package "is" was infected with cross-platform malware, around the same time that linting utility packages used with the…

  • Simon Willison’s Weblog: Introducing OSS Rebuild: Open Source, Rebuilt to Last

    Source URL: https://simonwillison.net/2025/Jul/23/oss-rebuild/ Source: Simon Willison’s Weblog Title: Introducing OSS Rebuild: Open Source, Rebuilt to Last Feedly Summary: Introducing OSS Rebuild: Open Source, Rebuilt to Last Major news on the Reproducible Builds front: the Google Security team have announced OSS Rebuild, their project to provide build attestations for open source packages released through the NPM,…

  • Schneier on Security: Google Sues the Badbox Botnet Operators

    Source URL: https://www.schneier.com/blog/archives/2025/07/google-sues-the-badbox-botnet-operators.html Source: Schneier on Security Title: Google Sues the Badbox Botnet Operators Feedly Summary: It will be interesting to watch what will come of this private lawsuit: Google on Thursday announced filing a lawsuit against the operators of the Badbox 2.0 botnet, which has ensnared more than 10 million devices running Android open…

  • Slashdot: Google Launches OSS Rebuild

    Source URL: https://tech.slashdot.org/story/25/07/22/144239/google-launches-oss-rebuild?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google Launches OSS Rebuild Feedly Summary: AI Summary and Description: Yes Summary: Google has launched OSS Rebuild, a project aimed at detecting supply chain attacks in open source software by independently verifying package builds from major repositories. The initiative addresses significant security threats in the open-source ecosystem and highlights…

  • Slashdot: The Open-Source Software Saving the Internet From AI Bot Scrapers

    Source URL: https://news.slashdot.org/story/25/07/07/2146228/the-open-source-software-saving-the-internet-from-ai-bot-scrapers?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: The Open-Source Software Saving the Internet From AI Bot Scrapers Feedly Summary: AI Summary and Description: Yes Summary: The text discusses “Anubis,” a tool designed to combat AI bot scrapers by using browser features to automate CAPTCHA verification through cryptographic math. Its adoption by notable organizations highlights the tool’s…

  • Slashdot: The FSF Faces Active ‘Ongoing and Increasing’ DDoS Attacks

    Source URL: https://news.slashdot.org/story/25/07/06/1737253/the-fsf-faces-active-ongoing-and-increasing-ddos-attacks?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: The FSF Faces Active ‘Ongoing and Increasing’ DDoS Attacks Feedly Summary: AI Summary and Description: Yes **Summary:** The Free Software Foundation (FSF) is grappling with ongoing Distributed Denial of Service (DDoS) attacks, primarily attributed to botnets and potential Large Language Model (LLM) scrapers. Despite these challenges, their critical infrastructure…

  • Slashdot: ‘We’re Done With Teams’: German State Hits Uninstall on Microsoft

    Source URL: https://it.slashdot.org/story/25/06/13/1538236/were-done-with-teams-german-state-hits-uninstall-on-microsoft?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: ‘We’re Done With Teams’: German State Hits Uninstall on Microsoft Feedly Summary: AI Summary and Description: Yes Summary: Schleswig-Holstein is transitioning from Microsoft’s proprietary software to open-source alternatives to gain data control and enhance digital sovereignty. This significant move affects thousands of public servants, including teachers and civil officials,…