Solidot | 奇客

OpenSSL 3 Vulnerability Patch Released, Vulnerability Level Slightly Lowered

A patch for the high-profile OpenSSL 3 vulnerability has been released, downgrading the vulnerability to “high” from “high”, which was previously considered equivalent to the Heartbleed vulnerability. The latest release of OpenSSL version 3.0.7 fixes two buffer overflow vulnerabilities CVE-2022-37786 and CVE-2022-3602 that affect all OpenSSL 3.x series versions but are unlikely to lead to […]

OpenSSL 3 Vulnerability Patch Released, Vulnerability Level Slightly Lowered Read More »

It’s time to rethink browsers

Darin Fisher has been involved in building various browsers, and early in his career he worked as a software engineer at Netscape, developing Navigator, which helped turn it into the open source Firefox. He then went to Google for 16 years, helping build Chrome and ChromeOS. Last year he left Google for Neeva, and this

It’s time to rethink browsers Read More »

Google Chrome releases emergency update to fix a 0day

Google has released an emergency update that fixes an exploited zero-day for the Chrome desktop browser. The high-risk vulnerability, numbered CVE-2022-3723, is located in the Chrome V8 Javascript engine and is a type confusion vulnerability. Security researchers at Avast reported the vulnerability to Google. Google did not disclose details of the vulnerability, and it advised

Google Chrome releases emergency update to fix a 0day Read More »

U.S. indicts a Ukrainian man who ran a malicious program-as-a-service

U.S. federal prosecutors indicted Mark Sokolovsky, a 26-year-old Ukrainian man who ran a malicious program-as-a-service. He ran Raccoon, a malicious program that steals sensitive information, offered to customers for a monthly fee equivalent to $200 in cryptocurrency, and Sokolovsky and his associates provided the malicious program, infrastructure and technical support to customers. Customers use the

U.S. indicts a Ukrainian man who ran a malicious program-as-a-service Read More »

Gitea project established company

The Gitea Project, which provides a self-hosted Git version control platform, announced the formation of a company, Gitea Limited, to provide better support for the project. The Gitea project will continue to open source and continue to adopt a community governance model. By setting up a company project, it will be able to provide part-time

Gitea project established company Read More »